last executing test programs: 5m39.426438362s ago: executing program 32 (id=39): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x1227, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)='d', 0x1}], 0x1, 0x25405, 0x0, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) 5m36.757879058s ago: executing program 33 (id=110): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000040)=0x9, 0x4) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@quota}, {@inlinecrypt}]}, 0xfe, 0x470, &(0x7f0000000580)="$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") r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x196) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x97b0, 0xfffffffffffffffb, 0x7f, 0x4, 0x9}) 5m26.141915539s ago: executing program 34 (id=279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f0000000700)) 5m12.929742983s ago: executing program 35 (id=581): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000940)=""/161, 0xa1}], 0x2}, 0x9}], 0x1, 0x10002, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 4m36.086057627s ago: executing program 36 (id=1293): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="664282"], 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r2, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) 4m15.128804591s ago: executing program 37 (id=1380): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x100000}, 0x20) openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x40, 0x0, 0x11}, 0x18) 4m10.308088676s ago: executing program 38 (id=1539): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4c100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x1000, 0xfff}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x6}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x62) 3m46.124510373s ago: executing program 39 (id=1959): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)=':', 0x1, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='^', 0xfe6b}], 0x1) 3m42.920832626s ago: executing program 40 (id=2005): r0 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x7fffffff, 0x33c}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}, 0x1c) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x40011}, 0x88c5) close_range(r0, 0xffffffffffffffff, 0x0) 3m0.132454191s ago: executing program 41 (id=2742): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1m56.125232348s ago: executing program 42 (id=3878): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1m54.365305765s ago: executing program 4 (id=3901): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c603, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x74}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) unshare(0x2c020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m54.19869266s ago: executing program 4 (id=3903): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x40) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) 1m53.946266728s ago: executing program 4 (id=3905): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3, 0x242, &(0x7f0000000300)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 1m52.620933861s ago: executing program 4 (id=3926): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m52.32195803s ago: executing program 4 (id=3914): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010027bd7000000000000a00004000000000000000001400030068737230000000000000000000000000140011007e"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 1m52.253939493s ago: executing program 4 (id=3917): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000440)=0x8000000000000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) 1m52.234832513s ago: executing program 43 (id=3917): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000440)=0x8000000000000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) 1m21.761785623s ago: executing program 7 (id=4515): syz_emit_ethernet(0x4c8, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4ba, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a6, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "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"}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 1m20.933893359s ago: executing program 7 (id=4522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) write(r0, &(0x7f00000000c0)="182eb9", 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) shutdown(r0, 0x1) 1m20.91669305s ago: executing program 7 (id=4523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000340)={0x7f, 0x4, 0x100, 0xba01, 0x14}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0xc82) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m20.053460097s ago: executing program 7 (id=4545): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m19.98594651s ago: executing program 7 (id=4546): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) 1m19.545175754s ago: executing program 7 (id=4553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000ae000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x4680, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0x42}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m19.544874714s ago: executing program 44 (id=4553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000ae000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x4680, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0x42}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m19.327479871s ago: executing program 5 (id=4559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1m19.000081952s ago: executing program 5 (id=4568): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="ca0e", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 1m18.892405755s ago: executing program 5 (id=4570): r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x8000003b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000034) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) close(r2) 1m18.822513587s ago: executing program 5 (id=4573): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 1m18.783058148s ago: executing program 5 (id=4574): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) process_madvise(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1, 0x3, 0x0) 1m17.673889874s ago: executing program 5 (id=4587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) unshare(0x6020400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000780)}, 0x20) 1m17.649074485s ago: executing program 45 (id=4587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) unshare(0x6020400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000780)}, 0x20) 49.746011562s ago: executing program 9 (id=5171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000000c0)=0x7fffffff, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) 49.712205952s ago: executing program 9 (id=5172): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) 48.749947924s ago: executing program 9 (id=5184): mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[], 0x5, 0x1215, &(0x7f0000001840)="$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") r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r1, r1, 0x0, 0x7a680000) fallocate(r0, 0x0, 0x0, 0x1000f4) 48.123581314s ago: executing program 9 (id=5198): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x260, &(0x7f0000000840)="$eJzs3T1oJGUcBvBnZneNuVvk1EYQP0BENBDOTtDibBQCchwiggonIjbKnXDeYXdrZWOhtcpVNofYeVrKNcFGEayipoiNoMHCaKHFyu5szCbZoGbXHcn8fjCZeTMf/3eYed6ZZpIAjXUiyakkrSRLSTpJivEN7q6mE6PmlcXVs0m//+TPxXC7ql3Z3u94kl6Sh5JcL4u83E4uXXt247e1x+9762Ln3g+uPbM415Mc2dxYf2Lr/dNvfrzy4KUvv/7xdJFT6e46r9krJvyuXSS3/BfF/ieKdt094J848/pH3wxyf2uSe4b576RMdfHevnDD9U4eeO+gfd/56avb59lXYPb6/c7gGdjrA41TJummKJeTVMtlubxcvcN/2zpWvnL+wmtLL52/eO7FukcqYFa6yfpjny58cnxP/n9oVfkHjq5B/p86c/W7wfJWq+7eAHNxRzUb5H/p+cv3R/7h6Hvk111N+Yfmkn9oLvmH5pJ/aC75h+Y6KP/dGvsEzEhne6E3cfUsnv8Lh+0bUCvv/9Bc8g/NNZ5/AKBZ+gt1f4EM1KXu8QcAAAAAAAAAAAAAAAAAANjvyuLq2e1pXjU/fzfZfDRJe1L91vD/ESc3Dn8e+6UYbPaXotptKs/dNeUBpvRhzV9f3/R9vfW/uLPe+pfPJb03kpxst/fff8Xo/ju8m/9mfeeFKQv8S8We9sNPz7d+Zeem/+NqHfV3rKwlnw3Gn5Pj48/K6PqXuW04nzz+dMf/xPIhvfr7lAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbv4MAAD//xdSb5I=") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sync_file_range(r0, 0x776, 0x44, 0x3) 47.955936529s ago: executing program 9 (id=5204): socket$packet(0x11, 0x2, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47.457627415s ago: executing program 9 (id=5223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 47.457492545s ago: executing program 46 (id=5223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 21.136702871s ago: executing program 3 (id=5781): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 20.506064091s ago: executing program 3 (id=5804): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r2, 0x0}]) 20.313568677s ago: executing program 3 (id=5807): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x472, &(0x7f0000000540)="$eJzs3M9vFFUcAPDvzLZFfrbiTxC1SoyNP1paUDl40WjiAaOJHvBmbQshFGpoTYQQqcbgxcSQ6Fk9mvgXePNi1JOJV70bEqJcQE81MztTdpfutoVlt7CfTzLsezNv9r1v59ebebME0LOGs3+SiG0R8UdEDFaz9QWGqx9XL5+d+vfy2akklpbe+jvJy125fHaqLFqut7XIjKQR6adJUUm9+dNnjk/Ozs6cKvJjCyfeH5s/febZYycmj84cnTk5cfDggf3jLzw/8Vxb4sziurL7o7k9u15758LrU4cvvPfL91l7txXLa+NosKnhc82Gs8D/Wcotz0yrH0+sO4KNbXtNOunrYkNYl0pEZJurPz/+B6MS1zbeYLz6SVcbB9xS2bWpxYVtcQm4gyXR7RYA3VFe6LP733LqUNdjQ7j0UvUGKIv7ajFVl/SVt+r5vdH2W1T/cEQcXvzv62yK1s8hAADa4vOprw7FMyv1/9K4v6bcjmIMZSgi7o6InRFxTzEocl9EXvaBiHhw9SrT2kzj0ND1/Z/04g0HtwZZ/+/FYmyrvv+33MyhSpHbnsffnxw5Njuzr/ibjET/piw/3qKOH1/5/Ytmy2r7f9mU1V/2BYt2XOxreEA3PbkwmXdK2+DSxxG7+1aKP1keCUgiYldE7F7fV+8oE8ee+m5Ps0Krx99CG8aZlr6NeLK6/RejIf5S0np8cuyumJ3ZN1buFdf79bfzbzar/6bib4Ns+2+p3/8biwwlteO18+uv4/yfnzW9p7nR/X8geTtfd6CY9+HkwsKp8YiB5FCer5s/cW3dMl+Wz+If2bvy8b+zWCeL/6GIyHbihyPikYh4tGj7YxHxeETsbRH/zy83X1Yf/+Zt3dj+0w3nv835kuX9v2H7rz9ROf7TDyvX/s27a9v+B/LUSDEnP/+tYq0NvMk/HwAAANwW0vwd+CQdXU6n6eho9R3+e2NLOjs3v/D0kbkPTk5X35Ufiv60fNI1WPM8dDxZLL6xmp8onhWXy/cXz42/rGzO86NTc7PTXY4det3WJsd/5q9Kt1sH3HIrjaNNDHShIUDHNR7/aX323BudbAzQUU3fo9nS2XYAnbfKe3Rpp9oBdJ7/rwV610rH/7mGvLEAuDO5/kPvcvxD7+oLJwHoVQ596Emr/Ui+cpO//Ze47RLJ2gpH2v2mboxEf0S05QsHNkQ4RaLbZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+D8AAP//sYTqKA==") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 20.101232144s ago: executing program 3 (id=5811): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 20.034986777s ago: executing program 3 (id=5812): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000f80)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f00000008c0)=0x3) 19.28580883s ago: executing program 3 (id=5823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 19.28549761s ago: executing program 47 (id=5823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 1.941256378s ago: executing program 8 (id=6103): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) io_uring_setup(0x2771, &(0x7f0000000000)={0x0, 0x5b2a, 0xe, 0x1, 0x25}) 1.743170564s ago: executing program 2 (id=6121): r0 = epoll_create(0x7) r1 = epoll_create1(0x80000) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x9}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000001c0)={0x1008}) 1.081342656s ago: executing program 2 (id=6123): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x39}, 0x10040, 0x0, 0x0, 0x4, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @remote}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet_SIOCADDRT(r1, 0x891b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x4e21, @local}, {0x2, 0x4e22, @private=0xa010101}, 0x10c, 0x0, 0x0, 0xfdffffffffffffff, 0x0, 0x0, 0x0, 0xa00, 0x1000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) 1.078034866s ago: executing program 8 (id=6113): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r1, 0x0, 0x0, 0x8800000) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c13}], 0x75, 0x5000, 0x0, 0x3) 1.064918586s ago: executing program 6 (id=6114): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 974.902539ms ago: executing program 2 (id=6115): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x40001}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}, 0x1}}, 0x10) 902.581922ms ago: executing program 6 (id=6117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b"], 0x0, 0x0, 0x5c, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) 889.199981ms ago: executing program 8 (id=6118): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0xffffffffffff0000}, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 796.870804ms ago: executing program 6 (id=6125): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) write$selinux_create(r0, &(0x7f0000000440)=@access={'system_u:object_r:mail_spool_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x1ff}, 0x4e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 766.273506ms ago: executing program 8 (id=6127): r0 = open(&(0x7f0000000340)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x13f) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) flock(r2, 0x1) close(0x3) 535.844003ms ago: executing program 8 (id=6130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000f2000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) 484.352045ms ago: executing program 8 (id=6132): r0 = socket$tipc(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) poll(&(0x7f0000000040)=[{r0, 0x120}], 0x1, 0x2) 460.555896ms ago: executing program 6 (id=6133): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x824, 0x1224, 0x0, 0x5, 0x7d6f, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 339.883129ms ago: executing program 2 (id=6135): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000002c40)=[{&(0x7f00000006c0)='@', 0x1}, {0x0}, {&(0x7f00000019c0)}, {0x0}, {&(0x7f0000001b40)="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", 0x910}, {&(0x7f0000002b40)}], 0x6, &(0x7f0000002cc0)=[{0x18, 0x84, 0x0, "35bc8351"}], 0x18}, 0x41) 339.562669ms ago: executing program 1 (id=6137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000440)=""/237, 0xed}], 0x1}, 0xfb}], 0x1, 0x40012062, 0x0) 319.27229ms ago: executing program 6 (id=6138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="00140000000000003000128008000100736974002400028006000f00026773"], 0x50}}, 0x0) 279.461441ms ago: executing program 1 (id=6141): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x3) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r2, &(0x7f0000000040)=""/4109, 0x100d) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000200000001000000090000007c00038008000100"], 0x90}}, 0x0) 257.199672ms ago: executing program 6 (id=6142): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000c00), 0x0, 0x254, &(0x7f0000000980)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x5f25, 0x99ff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 205.724864ms ago: executing program 0 (id=6143): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xdffe, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bind$inet6(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) open(0x0, 0x20000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) 193.018774ms ago: executing program 1 (id=6144): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x36b}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 89.931187ms ago: executing program 1 (id=6145): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/54, 0x36, 0x10120, 0x0, 0x0) 88.437797ms ago: executing program 2 (id=6146): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x408007}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 84.685718ms ago: executing program 0 (id=6147): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0) 84.362027ms ago: executing program 1 (id=6148): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040854) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "f1"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb28}}]}, 0x80}, 0x1, 0x7}, 0x0) socket(0x2a, 0x6, 0x1) 66.674878ms ago: executing program 1 (id=6149): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 44.140729ms ago: executing program 0 (id=6150): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x83) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049363, 0x0) 43.772159ms ago: executing program 0 (id=6151): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) prlimit64(0x0, 0x7, &(0x7f00000002c0)={0x5, 0x1f1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) 554.47µs ago: executing program 2 (id=6152): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 266.79µs ago: executing program 0 (id=6153): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000043000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 0s ago: executing program 0 (id=6154): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 311.420020][T19247] loop8: detected capacity change from 0 to 256 [ 311.439176][T19247] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.477181][T12685] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 311.564849][T19254] vlan2: entered allmulticast mode [ 311.578742][T19254] veth0_to_bond: entered allmulticast mode [ 311.744708][T19273] loop8: detected capacity change from 0 to 512 [ 311.804620][T19273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.893861][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.979272][T19281] SELinux: policydb version 0 does not match my version range 15-35 [ 312.016807][T19281] SELinux: failed to load policy [ 312.185730][T19295] loop3: detected capacity change from 0 to 512 [ 312.220173][T19295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.241838][T19295] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.496555][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.533794][T19300] loop3: detected capacity change from 0 to 512 [ 312.552960][T19300] EXT4-fs: Ignoring removed bh option [ 312.572350][T19300] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 312.582848][T19300] EXT4-fs (loop3): 1 truncate cleaned up [ 312.591073][T19300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.716982][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.160499][T19324] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 313.191910][T19334] loop3: detected capacity change from 0 to 1024 [ 313.210787][T19334] EXT4-fs: Ignoring removed bh option [ 313.264266][T19334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.378302][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.407482][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4918'. [ 313.435097][T19352] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4918'. [ 313.457183][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4918'. [ 313.491923][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 313.491939][ T28] audit: type=1400 audit(1781612774.382:3109): avc: denied { shutdown } for pid=19361 comm="syz.8.4920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.635452][T19374] Invalid argument reading file caps for ./file0 [ 313.976676][ T28] audit: type=1400 audit(1781612774.862:3110): avc: denied { add_name } for pid=19393 comm="syz.3.4933" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.997660][ T28] audit: type=1400 audit(1781612774.862:3111): avc: denied { create } for pid=19393 comm="syz.3.4933" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 314.307368][ T2297] Bluetooth: hci0: Frame reassembly failed (-84) [ 314.733268][T19490] loop8: detected capacity change from 0 to 512 [ 314.753813][T19490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.766621][T19490] ext4 filesystem being mounted at /854/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.810047][ T28] audit: type=1400 audit(1781612775.692:3112): avc: denied { create } for pid=19500 comm="syz.9.4951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 314.810103][ T28] audit: type=1400 audit(1781612775.692:3113): avc: denied { write } for pid=19500 comm="syz.9.4951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 315.012594][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.307506][ T28] audit: type=1400 audit(1781612776.192:3114): avc: denied { lock } for pid=19561 comm="syz.3.4961" path="socket:[56153]" dev="sockfs" ino=56153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 315.670558][T19575] loop9: detected capacity change from 0 to 512 [ 315.693445][T19575] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 315.733237][T19575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 315.757763][T19575] System zones: 1-12 [ 315.769978][T19575] EXT4-fs (loop9): 1 truncate cleaned up [ 315.782321][T19575] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.837710][ T28] audit: type=1400 audit(1781612776.722:3115): avc: denied { write } for pid=19574 comm="syz.9.4966" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.939336][T15796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.999320][ T28] audit: type=1400 audit(1781612776.882:3116): avc: denied { read } for pid=19583 comm="syz.3.4970" lport=40153 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 316.054231][ T28] audit: type=1400 audit(1781612776.942:3117): avc: denied { getattr } for pid=19583 comm="syz.3.4970" path="socket:[56193]" dev="sockfs" ino=56193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 316.229022][T19599] loop9: detected capacity change from 0 to 1024 [ 316.268923][T19599] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.319539][ T28] audit: type=1400 audit(1781612777.202:3118): avc: denied { write } for pid=19598 comm="syz.9.4977" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.381031][ T3741] Bluetooth: hci0: command 0x1003 tx timeout [ 316.388268][ T4459] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 316.547036][ T9] IPVS: starting estimator thread 0... [ 316.570849][T19614] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 316.594992][T19614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.640627][T19615] IPVS: using max 2304 ests per chain, 115200 per kthread [ 316.672137][T19619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.680609][T19619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.689083][T19619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.697524][T19619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.705923][T19619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.714273][T19619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.722597][T19619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.731014][T19619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.803411][T15796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.032009][T19626] syzkaller1: entered promiscuous mode [ 317.055583][T19626] syzkaller1: entered allmulticast mode [ 317.502310][ T7655] IPVS: starting estimator thread 0... [ 317.567937][T19649] loop6: detected capacity change from 0 to 128 [ 317.589704][T19649] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 317.610172][T19645] IPVS: using max 2304 ests per chain, 115200 per kthread [ 317.651512][T19649] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.696164][T19649] EXT4-fs (loop6): shut down requested (2) [ 317.709573][T19662] __nla_validate_parse: 1 callbacks suppressed [ 317.709587][T19662] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5003'. [ 317.742740][T12685] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 317.790375][T19668] bridge0: entered promiscuous mode [ 317.799416][T19665] loop9: detected capacity change from 0 to 512 [ 317.802650][T19669] loop6: detected capacity change from 0 to 512 [ 317.807885][T19668] bridge0: entered allmulticast mode [ 317.831355][T19665] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.5004: error while reading EA inode 32 err=-116 [ 317.850037][T19665] loop9: lost filesystem error report for type 5 error -117 [ 317.853120][T19665] EXT4-fs (loop9): 1 orphan inode deleted [ 317.860462][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 317.860486][ C0] EXT4-fs (loop9): initial error at time 1781612778: ext4_xattr_inode_iget:446 [ 317.860514][ C0] EXT4-fs (loop9): last error at time 1781612778: ext4_xattr_inode_iget:446 [ 317.891080][T19665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.904756][T19669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.922905][T19669] ext4 filesystem being mounted at /433/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.928029][T19665] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.9.5004: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 317.978864][T19665] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.9.5004: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 318.062905][T15796] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.127834][T19682] netlink: 'syz.9.5008': attribute type 10 has an invalid length. [ 318.151582][T19682] team0: Failed to send options change via netlink (err -105) [ 318.169916][T12685] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.177308][T19682] team0: Port device dummy0 added [ 318.194670][T19684] netlink: 'syz.9.5008': attribute type 10 has an invalid length. [ 318.222322][T19684] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 318.253976][T19684] team0: Failed to send options change via netlink (err -105) [ 318.262569][T19686] SELinux: failed to load policy [ 318.269708][T19684] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 318.286458][T19684] team0: Port device dummy0 removed [ 318.293502][T19684] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 318.373430][T19698] loop3: detected capacity change from 0 to 512 [ 318.387148][T19698] EXT4-fs: Ignoring removed i_version option [ 318.399289][T19704] loop8: detected capacity change from 0 to 512 [ 318.430460][T19704] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.5019: error while reading EA inode 32 err=-116 [ 318.446638][T19704] loop8: lost filesystem error report for type 5 error -117 [ 318.448004][T19698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.448044][T19704] EXT4-fs (loop8): 1 orphan inode deleted [ 318.455373][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 318.455393][ C1] EXT4-fs (loop8): initial error at time 1781612779: ext4_xattr_inode_iget:446 [ 318.455418][ C1] EXT4-fs (loop8): last error at time 1781612779: ext4_xattr_inode_iget:446 [ 318.544564][T19698] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.554150][T19704] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.585385][T19704] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.5019: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 318.611311][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 318.611381][ T28] audit: type=1326 audit(1781612779.452:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19708 comm="syz.6.5021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac7cb2ce59 code=0x0 [ 318.652968][T19704] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.5019: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 318.684339][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.714347][T19719] loop9: detected capacity change from 0 to 512 [ 318.718708][T19720] loop3: detected capacity change from 0 to 1024 [ 318.724417][T19719] EXT4-fs: Invalid want_extra_isize 1969 [ 318.818290][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.841620][T19720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.896377][ T28] audit: type=1400 audit(1781612779.782:3123): avc: denied { write } for pid=19718 comm="syz.3.5023" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.939034][T19731] netlink: 'syz.2.5028': attribute type 1 has an invalid length. [ 318.946960][T19731] netlink: 'syz.2.5028': attribute type 4 has an invalid length. [ 318.954969][T19731] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5028'. [ 319.054664][ T28] audit: type=1400 audit(1781612779.942:3124): avc: denied { setattr } for pid=19742 comm="syz.2.5033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 319.185955][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.362256][T19763] loop6: detected capacity change from 0 to 1024 [ 319.371366][T19764] loop9: detected capacity change from 0 to 512 [ 319.378504][T19763] EXT4-fs: Ignoring removed bh option [ 319.405934][T19764] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.420253][ T28] audit: type=1400 audit(1781612780.302:3125): avc: denied { write } for pid=19762 comm="syz.6.5042" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.475558][ T28] audit: type=1400 audit(1781612780.332:3126): avc: denied { write } for pid=19761 comm="syz.9.5041" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.497824][ T28] audit: type=1400 audit(1781612780.342:3127): avc: denied { write } for pid=19761 comm="syz.9.5041" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.710726][T19780] program syz.3.5046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.751853][T19783] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.788567][T19783] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.795672][T19783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.806786][T19783] bridge0: entered promiscuous mode [ 319.812250][T19783] bridge0: entered allmulticast mode [ 319.885522][T19793] tipc: Started in network mode [ 319.907927][T19793] tipc: Node identity ac14140f, cluster identity 4711 [ 319.933807][T19793] tipc: New replicast peer: 172.30.0.3 [ 319.940032][T19793] tipc: Enabled bearer , priority 10 [ 319.971030][T19800] gretap2: entered promiscuous mode [ 319.982333][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5053'. [ 320.009296][T19798] tipc: Disabling bearer [ 320.028635][T19804] IPVS: Error connecting to the multicast addr [ 320.036744][ T28] audit: type=1400 audit(1781612780.922:3128): avc: denied { getopt } for pid=19803 comm="syz.8.5058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 320.145374][T19818] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5064'. [ 320.155104][T19818] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.162402][T19818] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.174404][T19818] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5064'. [ 320.427211][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5073'. [ 320.617684][ T28] audit: type=1400 audit(1781612781.502:3129): avc: denied { write } for pid=19853 comm="syz.2.5080" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 320.673567][T19861] loop9: detected capacity change from 0 to 512 [ 320.693514][ T28] audit: type=1400 audit(1781612781.582:3130): avc: denied { mount } for pid=19862 comm="syz.6.5082" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 320.738454][T19861] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 320.895615][T19861] EXT4-fs (loop9): 1 truncate cleaned up [ 320.905789][T19872] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5085'. [ 321.015468][ T28] audit: type=1400 audit(1781612781.902:3131): avc: denied { write } for pid=19850 comm="syz.9.5078" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.991688][ T9] net_ratelimit: 144 callbacks suppressed [ 321.991733][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.205139][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5107'. [ 322.214883][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5107'. [ 322.992412][T19965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5124'. [ 323.002815][T19965] netlink: 'syz.3.5124': attribute type 7 has an invalid length. [ 323.013699][T19965] netlink: 'syz.3.5124': attribute type 8 has an invalid length. [ 323.021458][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5124'. [ 323.076805][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.259506][T19981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.279518][T19981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.301898][ T7655] IPVS: starting estimator thread 0... [ 323.309375][T19979] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 323.374802][T19987] syzkaller1: entered promiscuous mode [ 323.387611][T19987] syzkaller1: entered allmulticast mode [ 323.410905][T19984] IPVS: using max 2400 ests per chain, 120000 per kthread [ 323.612517][T20014] loop6: detected capacity change from 0 to 1024 [ 323.636755][T20014] EXT4-fs mount: 6 callbacks suppressed [ 323.636793][T20014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.660382][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 323.660395][ T28] audit: type=1400 audit(1781612784.542:3135): avc: denied { write } for pid=20013 comm="syz.6.5147" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.660584][T20014] EXT4-fs error (device loop6): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.6.5147: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 323.673762][ T28] audit: type=1400 audit(1781612784.552:3136): avc: denied { write } for pid=20013 comm="syz.6.5147" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.717354][T20014] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 323.800837][T20029] pim6reg: entered allmulticast mode [ 323.808045][T20029] pim6reg: left allmulticast mode [ 323.808467][T12685] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.168126][T20046] loop3: detected capacity change from 0 to 4096 [ 324.181757][T20046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.212356][ T28] audit: type=1400 audit(1781612785.092:3137): avc: denied { write } for pid=20045 comm="syz.3.5161" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.315228][T20060] netlink: 'syz.2.5165': attribute type 30 has an invalid length. [ 324.323252][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5165'. [ 324.336616][ T4287] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.336658][T20060] netlink: 'syz.2.5165': attribute type 30 has an invalid length. [ 324.345871][ T4287] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.353569][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5165'. [ 324.363659][ T4287] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.379734][ T4287] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.425481][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.480732][ T28] audit: type=1400 audit(1781612785.372:3138): avc: denied { remount } for pid=20061 comm="syz.2.5166" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 324.496293][T20065] loop3: detected capacity change from 0 to 2048 [ 324.533748][T20065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.564136][ T28] audit: type=1400 audit(1781612785.452:3139): avc: denied { write } for pid=20064 comm="syz.3.5167" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.268118][T20093] netlink: 'syz.2.5179': attribute type 4 has an invalid length. [ 325.277553][T20093] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5179'. [ 325.313876][T20093] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 325.484626][T20102] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 325.507896][ T28] audit: type=1400 audit(1781612786.392:3140): avc: denied { relabelto } for pid=20100 comm="syz.2.5182" name="cpuset.effective_mems" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 325.542316][ T28] audit: type=1400 audit(1781612786.392:3141): avc: denied { associate } for pid=20100 comm="syz.2.5182" name="cpuset.effective_mems" dev="tmpfs" ino=646 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_cron_spool_t:s0" [ 325.543258][ T30] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 325.586559][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 578 with error 28 [ 325.599014][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 325.599014][ T30] [ 325.608732][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 325.614955][ T30] EXT4-fs (loop3): Free/Dirty block details [ 325.622433][ T30] EXT4-fs (loop3): free_blocks=4096 [ 325.627761][ T30] EXT4-fs (loop3): dirty_blocks=608 [ 325.634577][ T30] EXT4-fs (loop3): Block reservation details [ 325.655869][ T30] EXT4-fs (loop3): i_reserved_data_blocks=38 [ 325.666373][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 325.679307][T18219] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 325.713453][ T28] audit: type=1400 audit(1781612786.602:3142): avc: denied { append } for pid=20100 comm="syz.2.5182" path="/121/cpuset.effective_mems" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 325.780010][T20105] loop9: detected capacity change from 0 to 8192 [ 325.790565][T20109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5185'. [ 325.813855][ T28] audit: type=1400 audit(1781612786.682:3143): avc: denied { unlink } for pid=18062 comm="syz-executor" name="cpuset.effective_mems" dev="tmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_cron_spool_t:s0" [ 325.871793][T20105] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.887376][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 325.906934][T20105] FAT-fs (loop9): Filesystem has been set read-only [ 325.913793][T20115] loop6: detected capacity change from 0 to 256 [ 325.940018][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 325.948829][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 325.957676][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 325.966465][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 325.975255][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 325.984094][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 326.002631][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 326.011456][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 326.020545][T20105] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 326.227645][T20132] netlink: 'syz.2.5195': attribute type 1 has an invalid length. [ 326.250736][T20132] gretap1: entered allmulticast mode [ 326.261164][T20132] bond1: (slave gretap1): making interface the new active one [ 326.271392][T20132] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 326.317161][T20142] loop9: detected capacity change from 0 to 128 [ 326.347645][T20142] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.362875][T20142] ext4 filesystem being mounted at /232/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 326.397731][ T28] audit: type=1400 audit(1781612787.282:3144): avc: denied { write } for pid=20141 comm="syz.9.5198" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.437226][T15796] EXT4-fs error (device loop9): ext4_lookup:1785: inode #11: comm syz-executor: iget: checksum invalid [ 326.449184][T15796] EXT4-fs error (device loop9): ext4_lookup:1785: inode #11: comm syz-executor: iget: checksum invalid [ 326.740853][T20177] veth0_to_team: entered promiscuous mode [ 326.773690][T20177] veth0_to_team: left promiscuous mode [ 326.802125][T19383] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.907729][T20197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5222'. [ 326.921702][T20197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5222'. [ 327.212722][T20236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5235'. [ 327.221914][T20236] netlink: 'syz.3.5235': attribute type 12 has an invalid length. [ 327.235619][ T30] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.235651][T20236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5235'. [ 327.235675][T20236] netlink: 'syz.3.5235': attribute type 12 has an invalid length. [ 327.266496][ T30] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.278524][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.287321][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.347530][T20205] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.375830][T20205] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.398257][T20205] bridge_slave_0: entered allmulticast mode [ 327.408903][T20205] bridge_slave_0: entered promiscuous mode [ 327.429840][T20205] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.448901][T20205] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.461979][T20205] bridge_slave_1: entered allmulticast mode [ 327.468799][T20205] bridge_slave_1: entered promiscuous mode [ 327.489789][T20205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.500466][T20205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.524790][T20205] team0: Port device team_slave_0 added [ 327.538310][T20205] team0: Port device team_slave_1 added [ 327.555341][T20205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.562423][T20205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.588534][T20205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.600541][T20205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.607547][T20205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.633619][T20205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.663498][T20205] hsr_slave_0: entered promiscuous mode [ 327.669758][T20205] hsr_slave_1: entered promiscuous mode [ 327.675723][T20205] debugfs: 'hsr0' already exists in 'hsr' [ 327.681517][T20205] Cannot create hsr debugfs directory [ 327.767640][T20258] loop3: detected capacity change from 0 to 512 [ 327.776653][T20259] sctp: [Deprecated]: syz.6.5240 (pid 20259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.776653][T20259] Use struct sctp_sack_info instead [ 327.790847][T20258] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 327.820854][T20258] EXT4-fs (loop3): 1 truncate cleaned up [ 327.828887][T20258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.887203][T20268] loop8: detected capacity change from 0 to 256 [ 327.921699][T20268] FAT-fs (loop8): codepage cp874 not found [ 327.956710][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.042409][T20285] loop3: detected capacity change from 0 to 512 [ 328.057479][T20285] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.5247: inode #2147418112: comm syz.3.5247: iget: illegal inode # [ 328.080289][T20285] loop3: lost filesystem error report for type 5 error -117 [ 328.083367][T20285] EXT4-fs (loop3): no journal found [ 328.090725][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 328.090744][ C0] EXT4-fs (loop3): initial error at time 1781612788: ext4_get_journal_inode:5896 [ 328.090779][ C0] EXT4-fs (loop3): last error at time 1781612788: ext4_get_journal_inode:5896 [ 328.116020][T20205] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.123223][T20285] EXT4-fs (loop3): can't get journal size [ 328.139460][T20285] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 328.139868][T20205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.172173][T20205] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.176163][T20285] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 328.190260][T20205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.198344][T20205] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.206211][T20285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.220771][T20205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.228658][T20205] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.258397][T20205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.260019][T20301] netlink: 136 bytes leftover after parsing attributes in process `syz.8.5249'. [ 328.306125][T20205] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.313296][T20205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.322636][T20301] netlink: 136 bytes leftover after parsing attributes in process `syz.8.5249'. [ 328.537279][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.572667][T20205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.590906][T20205] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.614697][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.621829][ T5088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.638055][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.645180][ T5088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.653413][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.790035][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 328.790049][ T28] audit: type=1400 audit(1781612789.672:3288): avc: denied { write } for pid=20344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.820938][T20360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5255'. [ 328.845208][ T28] audit: type=1400 audit(1781612789.732:3289): avc: denied { write } for pid=20374 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.882326][T20205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.890009][T20377] loop6: detected capacity change from 0 to 256 [ 328.905273][T20377] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 328.931039][T20377] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.970359][ T28] audit: type=1400 audit(1781612789.822:3290): avc: denied { connect } for pid=20386 comm="syz.3.5259" lport=60585 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 329.043747][ T28] audit: type=1400 audit(1781612789.822:3291): avc: denied { name_connect } for pid=20386 comm="syz.3.5259" dest=20002 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 329.084471][ T28] audit: type=1400 audit(1781612789.932:3292): avc: denied { write } for pid=20379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.123485][ T28] audit: type=1400 audit(1781612790.002:3293): avc: denied { write } for pid=20404 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.133132][T20205] veth0_vlan: entered promiscuous mode [ 329.171602][T20205] veth1_vlan: entered promiscuous mode [ 329.194725][T20205] veth0_macvtap: entered promiscuous mode [ 329.202495][T20205] veth1_macvtap: entered promiscuous mode [ 329.259504][T20205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.320581][T20205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.328220][ T28] audit: type=1400 audit(1781612790.192:3294): avc: denied { write } for pid=20412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.381997][ T28] audit: type=1400 audit(1781612790.252:3295): avc: denied { write } for pid=20434 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.409892][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.419139][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.464851][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.465618][T20443] netlink: 'syz.6.5273': attribute type 3 has an invalid length. [ 329.481635][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.482412][T20443] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5273'. [ 329.571371][T20456] bridge0: port 3(vlan2) entered blocking state [ 329.587680][T20456] bridge0: port 3(vlan2) entered disabled state [ 329.595697][T20456] vlan2: entered allmulticast mode [ 329.602128][T20456] geneve0: entered allmulticast mode [ 329.608282][T20456] vlan2: entered promiscuous mode [ 329.616746][T20456] geneve0: entered promiscuous mode [ 329.667497][ T28] audit: type=1400 audit(1781612790.552:3296): avc: denied { write } for pid=20448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.715888][ T28] audit: type=1400 audit(1781612790.602:3297): avc: denied { write } for pid=20474 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.190043][T20509] syzkaller0: entered promiscuous mode [ 330.207033][T20509] syzkaller0: entered allmulticast mode [ 330.539358][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5291'. [ 330.696353][T20568] loop3: detected capacity change from 0 to 8192 [ 330.724731][T20568] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.741278][T20568] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 330.751205][T20568] FAT-fs (loop3): Filesystem has been set read-only [ 330.757847][T20568] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 330.777906][T20568] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 330.793747][T20568] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 331.020004][T20597] netlink: 'syz.8.5303': attribute type 11 has an invalid length. [ 331.176044][T20614] loop8: detected capacity change from 0 to 512 [ 331.207904][T20614] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5309: invalid indirect mapped block 4294967295 (level 1) [ 331.223729][T20614] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 331.223935][T20614] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5309: invalid indirect mapped block 4294967295 (level 1) [ 331.233128][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 331.233152][ C1] EXT4-fs (loop8): initial error at time 1781612792: ext4_free_branches:1023: inode 11 [ 331.233188][ C1] EXT4-fs (loop8): last error at time 1781612792: ext4_free_branches:1023: inode 11 [ 331.273522][T20614] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 331.275256][T20614] EXT4-fs (loop8): 2 truncates cleaned up [ 331.296125][T20614] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.352746][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.554565][T20638] loop3: detected capacity change from 0 to 1024 [ 331.581549][T20638] EXT4-fs: inline encryption not supported [ 331.589718][ T7887] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 331.602369][ T7887] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.658498][T20638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.819334][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.997317][T20641] loop8: detected capacity change from 0 to 1024 [ 332.022838][T20641] ext4: Bad value for 'resgid' [ 332.037821][T20641] ext4: Bad value for 'resgid' [ 332.379917][T20666] loop8: detected capacity change from 0 to 512 [ 332.411740][T20666] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.5327: inode has both inline data and extents flags [ 332.503615][T20666] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 332.503747][T20666] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5327: couldn't read orphan inode 15 (err -117) [ 332.513064][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 332.513093][ C0] EXT4-fs (loop8): initial error at time 1781612793: ext4_orphan_get:1399: inode 15 [ 332.513123][ C0] EXT4-fs (loop8): last error at time 1781612793: ext4_orphan_get:1399: inode 15 [ 332.574875][T20666] loop8: lost filesystem error report for type 5 error -117 [ 332.575497][T20666] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.740470][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.899496][T20685] loop8: detected capacity change from 0 to 128 [ 333.147095][T20688] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.396362][T20688] bridge_slave_0 (unregistering): left allmulticast mode [ 333.404173][T20688] bridge_slave_0 (unregistering): left promiscuous mode [ 333.412311][T20688] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.468283][T20693] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5337'. [ 333.564003][T20705] loop0: detected capacity change from 0 to 128 [ 333.572460][T20705] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 333.584926][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5339'. [ 333.616609][T20706] team1: entered promiscuous mode [ 333.628298][T20706] team1: entered allmulticast mode [ 333.633833][T20706] 8021q: adding VLAN 0 to HW filter on device team1 [ 333.668420][T20705] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 333.677156][T20705] FAT-fs (loop0): Filesystem has been set read-only [ 333.708767][T20205] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 333.755296][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5348'. [ 333.764647][T20717] netlink: 'syz.2.5348': attribute type 5 has an invalid length. [ 333.772639][T20717] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5348'. [ 333.791230][T20717] geneve2: entered promiscuous mode [ 333.800321][T20717] geneve2: entered allmulticast mode [ 333.814142][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5351'. [ 334.149023][T20734] loop3: detected capacity change from 0 to 256 [ 334.211508][T20736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5355'. [ 334.234020][T20738] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 334.234020][T20738] program syz.3.5357 not setting count and/or reply_len properly [ 334.252067][T20738] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 334.252067][T20738] program syz.3.5357 not setting count and/or reply_len properly [ 334.270122][T20738] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 334.270122][T20738] program syz.3.5357 not setting count and/or reply_len properly [ 334.472426][T20747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5361'. [ 334.584578][T20755] policy can only be matched on NF_INET_PRE_ROUTING [ 334.584591][T20755] unable to load match [ 334.700740][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 334.700753][ T28] audit: type=1326 audit(1781612795.582:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 334.771221][ T28] audit: type=1326 audit(1781612795.582:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 334.824206][ T28] audit: type=1326 audit(1781612795.592:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 334.855863][T20767] loop6: detected capacity change from 0 to 4096 [ 334.864955][ T28] audit: type=1326 audit(1781612795.592:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 334.895788][ T28] audit: type=1326 audit(1781612795.592:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 334.900889][T20767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.921404][ T28] audit: type=1326 audit(1781612795.592:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 334.989068][ T28] audit: type=1326 audit(1781612795.592:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 335.014885][ T28] audit: type=1326 audit(1781612795.652:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 335.040667][ T28] audit: type=1326 audit(1781612795.652:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20761 comm="syz.3.5367" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe77144ce59 code=0x7ffc0000 [ 335.068114][ T28] audit: type=1400 audit(1781612795.872:3328): avc: denied { write } for pid=20766 comm="syz.6.5369" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 335.095832][T20778] syz_tun: entered allmulticast mode [ 335.101824][T20777] syz_tun: left allmulticast mode [ 335.116649][T12685] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.161521][T20785] team0: entered allmulticast mode [ 335.167699][T20785] team_slave_0: entered allmulticast mode [ 335.173839][T20785] team_slave_1: entered allmulticast mode [ 335.182368][T20785] team0: left allmulticast mode [ 335.187324][T20785] team_slave_0: left allmulticast mode [ 335.193115][T20785] team_slave_1: left allmulticast mode [ 335.459582][T20805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5383'. [ 335.510317][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5387'. [ 336.177245][T20881] tipc: Started in network mode [ 336.182683][T20881] tipc: Node identity ac14140f, cluster identity 4711 [ 336.189913][T20881] tipc: New replicast peer: 255.255.255.255 [ 336.196606][T20881] tipc: Enabled bearer , priority 10 [ 336.731554][T20909] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5431'. [ 337.030280][ T4276] bond0: (slave bond_slave_0): interface is now down [ 337.045229][ T4276] bond0: (slave bond_slave_1): interface is now down [ 337.056098][ T4276] bond0: now running without any active interface! [ 337.144008][T20935] netlink: 'syz.8.5440': attribute type 1 has an invalid length. [ 337.144614][T20925] infiniband syz1: set down [ 337.156571][T20925] infiniband syz1: added bond0 [ 337.171006][T20935] bond7: entered promiscuous mode [ 337.173620][T20925] RDS/IB: syz1: added [ 337.180618][T20925] smc: adding ib device syz1 with port count 1 [ 337.182225][T20935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.186827][T20925] smc: ib device syz1 port 1 has no pnetid [ 337.224230][T20935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.245138][T20935] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 337.255753][T20935] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 337.267862][T20935] bond7: (slave ip6gre2): making interface the new active one [ 337.275551][T20935] ip6gre2: entered promiscuous mode [ 337.282936][T20935] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 337.311315][ T7655] tipc: Node number set to 2886997007 [ 339.184519][T21047] __nla_validate_parse: 2 callbacks suppressed [ 339.184535][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5484'. [ 339.243099][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5484'. [ 339.253410][ T4276] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.263182][ T4276] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.272888][ T4276] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.291219][ T4276] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.703702][T21102] loop8: detected capacity change from 0 to 512 [ 339.722535][T21102] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 339.731905][T21102] EXT4-fs (loop8): 1 truncate cleaned up [ 339.751280][T21102] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.767705][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 339.767719][ T28] audit: type=1400 audit(1781612800.652:3354): avc: denied { mounton } for pid=21101 comm="syz.8.5508" path="/961/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 339.807451][T21102] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.883539][T21111] bridge_slave_0: left allmulticast mode [ 339.892086][T21111] bridge_slave_0: left promiscuous mode [ 339.897893][T21111] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.916162][T21111] bridge_slave_1: left allmulticast mode [ 339.927408][T21111] bridge_slave_1: left promiscuous mode [ 339.963703][T21111] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.996646][T21111] bond0: (slave bond_slave_0): Releasing backup interface [ 340.013520][T21111] bond0: (slave bond_slave_1): Releasing backup interface [ 340.031001][T21111] team0: Port device team_slave_0 removed [ 340.047567][T21111] team0: Port device team_slave_1 removed [ 340.064197][T21111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.075472][T21111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.087071][T21111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.094723][T21111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.105479][T21111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.129713][T21121] team0: Mode changed to "loadbalance" [ 340.139240][T21137] loop6: detected capacity change from 0 to 512 [ 340.153396][T21137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.254823][ T28] audit: type=1400 audit(1781612801.142:3355): avc: denied { write } for pid=21136 comm="syz.6.5520" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.567023][T21147] loop3: detected capacity change from 0 to 512 [ 340.579008][T21147] EXT4-fs (loop3): filesystem is read-only [ 340.589232][T21147] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 340.625522][T21147] EXT4-fs (loop3): failed to initialize system zone (-117) [ 340.642312][T12685] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.653840][T21147] EXT4-fs (loop3): mount failed [ 340.775823][T21156] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 340.803825][T21156] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 340.820852][T21160] loop0: detected capacity change from 0 to 512 [ 340.827606][T21158] loop3: detected capacity change from 0 to 4096 [ 340.847569][T21160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.870161][T21158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.903743][ T28] audit: type=1400 audit(1781612801.782:3356): avc: denied { write } for pid=21159 comm="syz.0.5528" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 340.919173][T21158] EXT4-fs (loop3): shut down requested (0) [ 340.946694][T21167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5530'. [ 340.973635][T21158] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 341.008686][T21158] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 341.091769][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.246948][T21189] loop3: detected capacity change from 0 to 256 [ 341.290390][T21189] FAT-fs (loop3): codepage cp862 not found [ 341.299500][ T28] audit: type=1326 audit(1781612802.182:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21193 comm="syz.2.5540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5a87426bd7 code=0x0 [ 341.406840][T21202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21202 comm=syz.8.5543 [ 341.438430][T21202] netlink: 'syz.8.5543': attribute type 1 has an invalid length. [ 341.526763][T21202] bond8: (slave bridge2): making interface the new active one [ 341.549394][T21202] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 341.650483][T20205] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.751940][T21219] futex_wake_op: syz.3.5550 tries to shift op by 32; fix this program [ 341.878199][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 341.886177][ T1036] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.926526][T21235] loop3: detected capacity change from 0 to 4096 [ 341.941698][T21235] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 342.100467][T21249] loop3: detected capacity change from 0 to 4096 [ 342.109439][T21249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.124811][ T28] audit: type=1400 audit(1781612803.012:3358): avc: denied { write } for pid=21248 comm="syz.3.5564" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.441181][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.572187][T21271] netem: change failed [ 342.617545][T21273] netlink: 'syz.8.5576': attribute type 1 has an invalid length. [ 342.664694][T21273] bond9: entered promiscuous mode [ 342.669867][T21273] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.780368][T21281] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.808433][T21281] bond9: (slave vti1): The slave device specified does not support setting the MAC address [ 342.868181][T21281] bond9: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 342.899520][T21294] netlink: 'syz.0.5584': attribute type 1 has an invalid length. [ 342.918388][T21281] bond9: (slave vti1): making interface the new active one [ 342.928959][T21281] vti1: entered promiscuous mode [ 342.936175][T21281] bond9: (slave vti1): Enslaving as an active interface with an up link [ 343.024472][T21299] bond1: (slave geneve2): making interface the new active one [ 343.036101][T21299] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 343.071672][ T30] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.081324][ T30] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.115399][ T30] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.137457][ T30] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.181730][T21310] netlink: 'syz.6.5588': attribute type 1 has an invalid length. [ 343.249258][T21310] bond1: entered promiscuous mode [ 343.254937][T21310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.259581][T21321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5591'. [ 343.306316][T21321] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5591'. [ 343.344983][T21310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.359216][T21310] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 343.389671][T21310] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 343.419292][T21310] bond1: (slave ip6gre1): making interface the new active one [ 343.434677][T21310] ip6gre1: entered promiscuous mode [ 343.456219][T21310] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 343.720706][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5597'. [ 343.745068][T21342] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 343.751489][T21342] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 343.761292][T21338] netlink: 'syz.6.5597': attribute type 30 has an invalid length. [ 343.783611][T21338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5597'. [ 343.804520][T21345] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21345 comm=syz.2.5602 [ 343.883920][T21350] syzkaller0: entered promiscuous mode [ 343.894490][T21350] syzkaller0: entered allmulticast mode [ 344.425526][T21392] loop0: detected capacity change from 0 to 512 [ 344.446227][T21392] EXT4-fs: inline encryption not supported [ 344.459464][T21392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.476644][T21392] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.519071][T21392] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 1 [ 344.528759][T21392] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 344.538489][T21392] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.5623: Failed to acquire dquot type 1 [ 344.549944][T21392] loop0: lost filesystem error report for type 5 error -5 [ 344.558016][T21392] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 344.579351][T21392] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.5623: corrupted inode contents [ 344.591139][T21392] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 344.591471][T21392] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #12: comm syz.0.5623: mark_inode_dirty error [ 344.612374][T21392] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 344.612708][T21392] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.5623: corrupted inode contents [ 344.618485][ C0] EXT4-fs (loop0): error count since last fsck: 4 [ 344.625931][T21392] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 344.633701][ C0] EXT4-fs (loop0): initial error at time 1781612805: ext4_acquire_dquot:7032 [ 344.633731][ C0] EXT4-fs (loop0): last error at time 1781612805: ext4_dirty_inode:6587 [ 344.640536][T21392] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.5623: mark_inode_dirty error [ 344.649234][ C0] : inode 12 [ 344.657986][T21392] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 344.658315][T21392] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.5623: corrupted inode contents [ 344.666335][ C0] [ 344.677496][T21392] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 344.704120][T21392] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 344.721732][T21392] loop0: lost filesystem error report for type 5 error -117 [ 344.721917][T21392] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.5623: corrupted inode contents [ 344.746966][T21392] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 344.747926][T21392] EXT4-fs error (device loop0): ext4_truncate:4690: inode #12: comm syz.0.5623: mark_inode_dirty error [ 344.771761][T21392] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 344.772602][T21392] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 344.792116][T21392] loop0: lost filesystem error report for type 5 error -117 [ 344.793976][T21392] EXT4-fs (loop0): 1 truncate cleaned up [ 344.820295][T21392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.864711][ T28] audit: type=1400 audit(1781612805.752:3359): avc: denied { write } for pid=21391 comm="syz.0.5623" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 344.866939][T21392] Quota error (device loop0): do_check_range: Getting dqdh_entries 16 out of range 0-14 [ 344.897178][T21392] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 344.907732][T21392] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.5623: Failed to acquire dquot type 1 [ 344.974944][T20205] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.989767][T21411] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5631'. [ 345.118314][T21416] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5632'. [ 345.226352][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5634'. [ 345.348916][T21408] Set syz1 is full, maxelem 65536 reached [ 345.466311][T21438] loop6: detected capacity change from 0 to 512 [ 345.494868][T21438] EXT4-fs: inline encryption not supported [ 345.512801][T21438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.514747][T21441] loop8: detected capacity change from 0 to 512 [ 345.521304][T21438] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.549280][T21441] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 345.560275][T21441] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 345.573363][T21441] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 345.582147][T21441] System zones: 1-12 [ 345.586834][T21441] EXT4-fs (loop8): orphan cleanup on readonly fs [ 345.598922][T21438] Quota error (device loop6): do_insert_tree: Free block already used in tree: block 1 [ 345.609997][T21441] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.5643: Block bitmap for bg 0 marked uninitialized [ 345.625244][T21441] loop8: lost filesystem error report for type 5 error -117 [ 345.625913][T21441] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.5643: Block bitmap for bg 0 marked uninitialized [ 345.633368][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 345.633428][ C1] EXT4-fs (loop8): initial error at time 1781612806: ext4_read_block_bitmap_nowait:517 [ 345.633478][ C1] EXT4-fs (loop8): last error at time 1781612806: ext4_read_block_bitmap_nowait:517 [ 345.638080][T21438] Quota error (device loop6): qtree_write_dquot: Error -5 occurred while creating quota [ 345.648150][T21441] loop8: lost filesystem error report for type 5 error -117 [ 345.675335][T21438] EXT4-fs error (device loop6): ext4_acquire_dquot:7032: comm syz.6.5641: Failed to acquire dquot type 1 [ 345.707890][T21441] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.5643: Block bitmap for bg 0 marked uninitialized [ 345.708794][T21438] loop6: lost filesystem error report for type 5 error -5 [ 345.730140][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 345.737590][T21441] loop8: lost filesystem error report for type 5 error -117 [ 345.743730][ C0] EXT4-fs (loop6): initial error at time 1781612806: ext4_acquire_dquot:7032 [ 345.743756][ C0] EXT4-fs (loop6): last error at time 1781612806: ext4_acquire_dquot:7032 [ 345.761335][T21438] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 345.786746][T21441] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.5643: Block bitmap for bg 0 marked uninitialized [ 345.790106][T21438] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.5641: corrupted inode contents [ 345.812235][T21438] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 345.812906][T21441] loop8: lost filesystem error report for type 5 error -117 [ 345.822857][T21438] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #12: comm syz.6.5641: mark_inode_dirty error [ 345.822887][T21438] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 345.823076][T21438] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.5641: corrupted inode contents [ 345.823130][T21438] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 345.823296][T21438] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.5641: mark_inode_dirty error [ 345.823463][T21438] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.5641: corrupted inode contents [ 345.823670][T21438] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 345.823688][T21438] loop6: lost filesystem error report for type 5 error -117 [ 345.823871][T21438] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #12: comm syz.6.5641: corrupted inode contents [ 345.824062][T21438] EXT4-fs error (device loop6): ext4_truncate:4690: inode #12: comm syz.6.5641: mark_inode_dirty error [ 345.824246][T21438] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 345.824265][T21438] loop6: lost filesystem error report for type 5 error -117 [ 345.824542][T21438] EXT4-fs (loop6): 1 truncate cleaned up [ 345.824959][T21438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.925736][ T28] audit: type=1400 audit(1781612806.802:3360): avc: denied { write } for pid=21436 comm="syz.6.5641" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.998914][T21438] Quota error (device loop6): do_check_range: Getting dqdh_entries 16 out of range 0-14 [ 346.011775][T21441] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.5643: Block bitmap for bg 0 marked uninitialized [ 346.028157][T21441] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.5643: Block bitmap for bg 0 marked uninitialized [ 346.032094][T21438] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 346.063892][T21441] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 346.073509][T21438] EXT4-fs error (device loop6): ext4_acquire_dquot:7032: comm syz.6.5641: Failed to acquire dquot type 1 [ 346.096435][T21441] EXT4-fs (loop8): 1 truncate cleaned up [ 346.132210][T21441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.148146][T12685] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.201981][T21468] loop3: detected capacity change from 0 to 1024 [ 346.228796][T21468] EXT4-fs: inline encryption not supported [ 346.248422][T21468] EXT4-fs: Ignoring removed bh option [ 346.260525][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.270574][T21468] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 346.316360][T21468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.357430][ T28] audit: type=1400 audit(1781612807.242:3361): avc: denied { write } for pid=21467 comm="syz.3.5653" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 346.397204][ T28] audit: type=1400 audit(1781612807.282:3362): avc: denied { ioctl } for pid=21481 comm="syz.6.5657" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 346.424408][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.526412][T21489] loop3: detected capacity change from 0 to 512 [ 346.557528][T21489] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 346.571921][T21489] EXT4-fs (loop3): 1 truncate cleaned up [ 346.578358][T21489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.607733][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.649588][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5662'. [ 346.658782][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5662'. [ 346.720304][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5662'. [ 346.731588][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5662'. [ 346.962945][T21512] loop0: detected capacity change from 0 to 256 [ 347.118811][T21520] loop3: detected capacity change from 0 to 256 [ 347.140931][T21520] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.253287][T21520] FAT-fs (loop3): Directory bread(block 64) failed [ 347.259836][T21520] FAT-fs (loop3): Directory bread(block 65) failed [ 347.266430][T21520] FAT-fs (loop3): Directory bread(block 66) failed [ 347.282918][T21520] FAT-fs (loop3): Directory bread(block 67) failed [ 347.296358][T21520] FAT-fs (loop3): Directory bread(block 68) failed [ 347.311913][T21520] FAT-fs (loop3): Directory bread(block 69) failed [ 347.324822][T21520] FAT-fs (loop3): Directory bread(block 70) failed [ 347.343101][T21520] FAT-fs (loop3): Directory bread(block 71) failed [ 347.349774][T21520] FAT-fs (loop3): Directory bread(block 72) failed [ 347.356337][T21520] FAT-fs (loop3): Directory bread(block 73) failed [ 350.179834][T21545] loop6: detected capacity change from 0 to 128 [ 350.238001][T21545] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 350.251687][T21545] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.265609][ T28] audit: type=1400 audit(1781612811.152:3363): avc: denied { write } for pid=21544 comm="syz.6.5686" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.362184][T12685] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.426834][T21556] bridge3: entered promiscuous mode [ 350.432229][T21556] bridge3: entered allmulticast mode [ 350.439196][T21556] team0: Port device bridge3 added [ 350.451012][T21556] bridge0: port 3(team0) entered blocking state [ 350.457331][T21556] bridge0: port 3(team0) entered disabled state [ 350.463958][T21556] team0: entered allmulticast mode [ 350.469127][T21556] team_slave_0: entered allmulticast mode [ 350.474873][T21556] team_slave_1: entered allmulticast mode [ 350.481304][T21556] team0: entered promiscuous mode [ 350.486367][T21556] team_slave_0: entered promiscuous mode [ 350.492071][T21556] team_slave_1: entered promiscuous mode [ 350.514698][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5689'. [ 350.543303][T21562] bond2: entered promiscuous mode [ 350.548977][T21562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.581593][T21562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 350.592905][T21562] bond2: (slave sit2): The slave device specified does not support setting the MAC address [ 350.613797][T21562] bond2: (slave sit2): Error -95 calling set_mac_address [ 350.785580][T21590] bridge2: entered promiscuous mode [ 350.791230][T21590] bridge2: entered allmulticast mode [ 350.798907][T21590] team0: Port device bridge2 added [ 350.816361][T21590] bridge0: port 1(team0) entered blocking state [ 350.823227][T21590] bridge0: port 1(team0) entered disabled state [ 350.829767][T21590] team0: entered allmulticast mode [ 350.836384][T21590] team0: entered promiscuous mode [ 350.958874][ T28] audit: type=1326 audit(1781612811.842:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 350.966611][T21602] loop8: detected capacity change from 0 to 1024 [ 350.996991][T21602] EXT4-fs: Ignoring removed orlov option [ 351.009805][ T28] audit: type=1326 audit(1781612811.842:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 351.038099][ T28] audit: type=1326 audit(1781612811.842:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 351.068949][T21605] loop0: detected capacity change from 0 to 1024 [ 351.076986][ T28] audit: type=1326 audit(1781612811.842:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 351.119431][ T28] audit: type=1326 audit(1781612811.842:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 351.154079][ T28] audit: type=1326 audit(1781612811.842:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 351.155110][T21602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.179762][ T28] audit: type=1326 audit(1781612811.842:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 351.202201][T21605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.217147][ T28] audit: type=1326 audit(1781612811.842:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 351.254673][ T28] audit: type=1326 audit(1781612811.842:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.8.5708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbd6e69ce59 code=0x7ffc0000 [ 351.361971][T20205] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.408111][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.643570][T21639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 351.708194][T21641] loop8: detected capacity change from 0 to 1024 [ 351.734227][T21641] EXT4-fs: Ignoring removed oldalloc option [ 351.762210][T21641] EXT4-fs: Ignoring removed oldalloc option [ 351.800570][T21641] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 351.834284][T21641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.918782][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.020968][T21686] loop8: detected capacity change from 0 to 512 [ 352.034767][T21686] EXT4-fs: Ignoring removed oldalloc option [ 352.061697][T21686] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 352.100205][T21686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.122503][T21686] ext4 filesystem being mounted at /992/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.289069][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.367627][T21704] loop3: detected capacity change from 0 to 1024 [ 352.384417][T21704] EXT4-fs: Ignoring removed oldalloc option [ 352.399218][T21704] EXT4-fs: Ignoring removed oldalloc option [ 352.419523][T21704] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 352.443466][T21704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.520197][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.536013][T21726] loop8: detected capacity change from 0 to 128 [ 352.538590][T21727] loop0: detected capacity change from 0 to 128 [ 352.571002][T21727] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.603507][T21727] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 352.690744][T20205] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.741150][T21745] serio: Serial port ptm1 [ 352.897173][T21745] serio: Serial port ptm1 [ 352.901398][T21758] xt_hashlimit: size too large, truncated to 1048576 [ 353.101010][T21768] loop0: detected capacity change from 0 to 128 [ 353.276238][T21775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.301200][T21775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.528184][T21797] loop0: detected capacity change from 0 to 512 [ 353.548916][T21797] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 353.563417][T21797] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 353.578826][T21797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 353.586811][T21797] System zones: 1-12 [ 353.590945][T21797] EXT4-fs (loop0): orphan cleanup on readonly fs [ 353.646820][T21797] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.5790: Block bitmap for bg 0 marked uninitialized [ 353.727300][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5798'. [ 353.746726][T21797] fserror_report: 2 callbacks suppressed [ 353.746829][T21797] loop0: lost filesystem error report for type 5 error -117 [ 353.768951][T21797] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.5790: Block bitmap for bg 0 marked uninitialized [ 353.776670][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 353.776729][ C1] EXT4-fs (loop0): initial error at time 1781612814: ext4_read_block_bitmap_nowait:517 [ 353.776969][ C1] EXT4-fs (loop0): last error at time 1781612814: ext4_read_block_bitmap_nowait:517 [ 353.822180][T21797] loop0: lost filesystem error report for type 5 error -117 [ 353.823011][T21797] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.5790: Block bitmap for bg 0 marked uninitialized [ 353.844868][T21797] loop0: lost filesystem error report for type 5 error -117 [ 353.845352][T21797] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.5790: Block bitmap for bg 0 marked uninitialized [ 353.860707][T21823] pimreg: entered allmulticast mode [ 353.875171][T21797] loop0: lost filesystem error report for type 5 error -117 [ 353.875756][T21797] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.5790: Block bitmap for bg 0 marked uninitialized [ 353.886182][T21823] pimreg: left allmulticast mode [ 353.899334][T21797] loop0: lost filesystem error report for type 5 error -117 [ 353.907410][T21797] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.5790: Block bitmap for bg 0 marked uninitialized [ 353.935654][T21797] loop0: lost filesystem error report for type 5 error -117 [ 353.936887][T21797] EXT4-fs (loop0): 1 truncate cleaned up [ 353.975780][T21797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.009774][T21833] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 354.084659][T21835] loop3: detected capacity change from 0 to 512 [ 354.097126][T21835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 354.105733][T21835] System zones: 1-12 [ 354.113629][T21835] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5807: error while reading EA inode 32 err=-116 [ 354.126281][T21835] loop3: lost filesystem error report for type 5 error -117 [ 354.128233][T20205] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.140117][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 354.150999][ C0] EXT4-fs (loop3): initial error at time 1781612815: ext4_xattr_inode_iget:446 [ 354.159997][ C0] EXT4-fs (loop3): last error at time 1781612815: ext4_xattr_inode_iget:446 [ 354.169198][T21835] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 354.182485][T21835] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.5807: error while reading EA inode 32 err=-116 [ 354.196236][T21835] loop3: lost filesystem error report for type 5 error -117 [ 354.198284][T21835] EXT4-fs (loop3): 1 orphan inode deleted [ 354.223153][T21835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.262663][T21835] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5807'. [ 354.296656][T18219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.604625][T21847] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.635731][T21847] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.862665][T21864] EXT4-fs: Ignoring removed nobh option [ 354.879123][T21864] EXT4-fs: Ignoring removed i_version option [ 354.962777][T21847] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.988333][T21847] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.022243][T21864] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.110418][T21864] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 355.152362][T21864] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 440 with error 28 [ 355.188492][T21864] EXT4-fs (loop8): This should not happen!! Data will be lost [ 355.188492][T21864] [ 355.213270][T21847] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.220037][T21864] EXT4-fs (loop8): Total free blocks count 0 [ 355.231848][T21847] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.243314][T21864] EXT4-fs (loop8): Free/Dirty block details [ 355.255354][T21864] EXT4-fs (loop8): free_blocks=20480 [ 355.277249][T21864] EXT4-fs (loop8): dirty_blocks=448 [ 355.300749][T21864] EXT4-fs (loop8): Block reservation details [ 355.325311][T21864] EXT4-fs (loop8): i_reserved_data_blocks=28 [ 355.347852][T21847] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.378946][T21847] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.420424][ T4276] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 440 with error 28 [ 355.435843][ T5557] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 355.461401][ T4276] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.469643][ T4276] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.519864][ T4276] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.532490][ T4276] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.541330][ T4276] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.561274][ T4276] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.573985][ T4276] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.592758][ T4276] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.791329][T21916] netlink: 'syz.6.5836': attribute type 1 has an invalid length. [ 355.836279][T21916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.839439][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 355.839501][ T28] audit: type=1400 audit(1781612816.722:3399): avc: denied { append } for pid=21918 comm="syz.2.5837" name="icmp6" dev="proc" ino=4026533091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 355.860376][T21925] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5841'. [ 355.901179][T21916] bond3: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 355.914913][T21925] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5841'. [ 355.924189][T21874] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.931427][T21874] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.938698][T21874] bridge_slave_0: entered allmulticast mode [ 355.945390][T21874] bridge_slave_0: entered promiscuous mode [ 355.952229][T21874] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.959364][T21874] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.967658][T21874] bridge_slave_1: entered allmulticast mode [ 355.974319][T21874] bridge_slave_1: entered promiscuous mode [ 356.003326][T21930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.013788][T21930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.044137][T21874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.055152][T21874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.107313][T21930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.117913][T21930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.136972][T21874] team0: Port device team_slave_0 added [ 356.144032][T21874] team0: Port device team_slave_1 added [ 356.160789][T21874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.167761][T21874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.193702][T21874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.210045][T21930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.221184][T21930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.241775][T21874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.248854][T21874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.275024][T21874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.313809][T21874] hsr_slave_0: entered promiscuous mode [ 356.319984][T21874] hsr_slave_1: entered promiscuous mode [ 356.326142][T21874] debugfs: 'hsr0' already exists in 'hsr' [ 356.331948][T21874] Cannot create hsr debugfs directory [ 356.345823][T21930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.356403][T21930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.431095][T21874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.441562][T21874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.456174][ T2297] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.464456][ T2297] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.474967][ T2297] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.483237][ T2297] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.494387][ T2297] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.502612][ T2297] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.513789][ T2297] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.522127][ T2297] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.582135][T21874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.592559][T21874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.662207][T21874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.672553][T21874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.722140][T21874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.732474][T21874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.785338][T21874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.794295][T21874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.802181][T21874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.811055][T21874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.818663][T21874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.827416][T21874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 356.835265][T21874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.844022][T21874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 356.880534][T21874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.893775][T21874] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.903807][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.910884][ T4287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.921982][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.929072][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.029913][T21874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.089469][T21874] veth0_vlan: entered promiscuous mode [ 357.097139][T21874] veth1_vlan: entered promiscuous mode [ 357.111712][T21874] veth0_macvtap: entered promiscuous mode [ 357.118952][T21874] veth1_macvtap: entered promiscuous mode [ 357.129526][T21874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.140493][T21874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.151373][ T4287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.160223][ T4287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.169386][ T4287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.178263][ T4287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.371212][T21981] bridge1: entered promiscuous mode [ 357.729527][T22016] set_capacity_and_notify: 1 callbacks suppressed [ 357.729542][T22016] loop5: detected capacity change from 0 to 7 [ 357.756383][T22016] loop5: [ 357.869460][ T28] audit: type=1400 audit(1781612818.752:3400): avc: denied { relabelfrom } for pid=22022 comm="syz.1.5873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 357.889970][ T28] audit: type=1400 audit(1781612818.752:3401): avc: denied { relabelto } for pid=22022 comm="syz.1.5873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 357.917692][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5873'. [ 358.066584][T22036] loop1: detected capacity change from 0 to 128 [ 358.181592][T22036] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.206950][T22036] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.242524][T22044] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5880'. [ 358.278698][ T5088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.303371][ T5088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.327907][ T28] audit: type=1400 audit(1781612819.212:3402): avc: denied { write } for pid=22034 comm="syz.1.5878" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.352298][ T5088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.404989][T21874] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.423893][ T5088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.434697][ T5088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.464609][ T5088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.596751][T22060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5886'. [ 358.636570][ T5088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.636679][ T5088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.636709][ T5088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.738202][ T5088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.738385][ T5088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.738413][ T5088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 358.945013][T22076] pimreg: entered allmulticast mode [ 358.986294][ T5088] bridge_slave_1: left allmulticast mode [ 359.006092][ T5088] bridge_slave_1: left promiscuous mode [ 359.020820][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.125357][ T28] audit: type=1400 audit(1781612820.012:3403): avc: denied { write } for pid=22081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.171964][ T28] audit: type=1400 audit(1781612820.052:3404): avc: denied { write } for pid=22099 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.210827][ T5088] bond1 (unregistering): (slave geneve2): Releasing active interface [ 359.263061][ T5088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.273234][ T5088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.282916][ T5088] bond0 (unregistering): Released all slaves [ 359.290608][ T5088] bond1 (unregistering): Released all slaves [ 359.298662][T22076] pimreg: left allmulticast mode [ 359.312692][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 359.340555][T22090] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.350388][T22090] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.405819][ T5088] hsr_slave_0: left promiscuous mode [ 359.411460][ T5088] hsr_slave_1: left promiscuous mode [ 359.417152][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.424548][ T5088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.432009][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.439407][ T5088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.451301][T22106] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 359.464528][ T5088] veth1_macvtap: left promiscuous mode [ 359.476104][ T5088] veth0_macvtap: left promiscuous mode [ 359.483041][ T5088] veth1_vlan: left promiscuous mode [ 359.488306][ T5088] veth0_vlan: left promiscuous mode [ 359.656412][ T28] audit: type=1400 audit(1781612820.542:3405): avc: denied { mount } for pid=22117 comm="syz.1.5899" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 359.833545][ T5088] team0 (unregistering): Port device team_slave_1 removed [ 359.844329][ T5088] team0 (unregistering): Port device team_slave_0 removed [ 359.890658][T22090] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.900501][T22090] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.936087][T22051] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.943157][T22051] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.950403][T22051] bridge_slave_0: entered allmulticast mode [ 359.959756][T22051] bridge_slave_0: entered promiscuous mode [ 359.966750][T22051] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.975602][T22051] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.983363][T22051] bridge_slave_1: entered allmulticast mode [ 359.989937][T22051] bridge_slave_1: entered promiscuous mode [ 360.023878][ T28] audit: type=1400 audit(1781612820.912:3406): avc: denied { write } for pid=22128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.063711][T22051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.074930][T22051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.083219][ T28] audit: type=1400 audit(1781612820.962:3407): avc: denied { write } for pid=22144 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.112152][T22090] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.122418][T22090] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.155276][T22051] team0: Port device team_slave_0 added [ 360.161905][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 360.181529][T22051] team0: Port device team_slave_1 added [ 360.201004][T22090] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.225955][T22090] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.266832][T22155] xt_hashlimit: size too large, truncated to 1048576 [ 360.281105][T22051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.288168][T22051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.314260][T22051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.393675][T22051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.404849][T22051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.445035][T22051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.479006][T22051] hsr_slave_0: entered promiscuous mode [ 360.485272][T22051] hsr_slave_1: entered promiscuous mode [ 360.491254][T22051] debugfs: 'hsr0' already exists in 'hsr' [ 360.496982][T22051] Cannot create hsr debugfs directory [ 360.530328][ T4282] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.560043][ T4282] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.592393][ T4282] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.600955][ T4282] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.608727][ T28] audit: type=1400 audit(1781612821.462:3408): avc: denied { write } for pid=22158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.635635][ T4282] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.646516][ T4282] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.675512][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 360.691495][ T4282] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.714162][ T4282] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.987418][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 360.987434][ T28] audit: type=1400 audit(1781612821.862:3410): avc: denied { write } for pid=22187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.052149][ T28] audit: type=1400 audit(1781612821.862:3411): avc: denied { write } for pid=22205 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.180613][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5920'. [ 361.219282][ T28] audit: type=1400 audit(1781612822.052:3412): avc: denied { write } for pid=22207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.265481][ T28] audit: type=1400 audit(1781612822.152:3413): avc: denied { write } for pid=22222 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.389161][ T28] audit: type=1400 audit(1781612822.272:3414): avc: denied { write } for pid=22228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.437384][T22245] xt_hashlimit: size too large, truncated to 1048576 [ 361.448290][ T28] audit: type=1400 audit(1781612822.332:3415): avc: denied { write } for pid=22246 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.512968][T22051] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.536462][T22051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.552994][T22051] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.600948][T22051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.615412][T22051] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.628470][ T28] audit: type=1400 audit(1781612822.512:3416): avc: denied { write } for pid=22251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.653958][T22051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.668993][T22051] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.681113][ T28] audit: type=1400 audit(1781612822.532:3417): avc: denied { write } for pid=22269 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.705375][T22051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.789486][T22051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.822112][T22051] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.853496][ T28] audit: type=1400 audit(1781612822.732:3418): avc: denied { write } for pid=22273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.887826][ T2297] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.894944][ T2297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.895456][ T28] audit: type=1400 audit(1781612822.782:3419): avc: denied { write } for pid=22293 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.943794][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.950948][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.003535][T22296] loop1: detected capacity change from 0 to 1024 [ 362.043106][T22296] EXT4-fs: Ignoring removed bh option [ 362.088425][T22296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.130934][T21874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.163817][T22051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.290252][T22051] veth0_vlan: entered promiscuous mode [ 362.311021][T22051] veth1_vlan: entered promiscuous mode [ 362.339479][T22051] veth0_macvtap: entered promiscuous mode [ 362.358917][T22051] veth1_macvtap: entered promiscuous mode [ 362.392235][T22051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.423460][T22051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.452218][ T4287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.461096][ T4459] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 362.462302][T22166] Bluetooth: hci0: command 0x1003 tx timeout [ 362.473428][ T4287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.501933][ T5088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.637171][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.719503][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5939'. [ 363.299235][T22372] loop0: detected capacity change from 0 to 1024 [ 363.310726][T22372] EXT4-fs: Ignoring removed nobh option [ 363.319734][T22372] EXT4-fs: Ignoring removed i_version option [ 363.385684][T22372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.537431][T22372] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 363.597374][T22372] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 808 with error 28 [ 363.613298][T22372] EXT4-fs (loop0): This should not happen!! Data will be lost [ 363.613298][T22372] [ 363.655868][T22372] EXT4-fs (loop0): Total free blocks count 0 [ 363.670975][T22372] EXT4-fs (loop0): Free/Dirty block details [ 363.682061][T22372] EXT4-fs (loop0): free_blocks=20480 [ 363.687516][T22372] EXT4-fs (loop0): dirty_blocks=816 [ 363.693037][T22372] EXT4-fs (loop0): Block reservation details [ 363.699097][T22372] EXT4-fs (loop0): i_reserved_data_blocks=51 [ 363.885546][ T4287] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 808 with error 28 [ 363.919855][T22051] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 364.659275][T22397] bridge0: port 3(batadv1) entered blocking state [ 364.684037][T22397] bridge0: port 3(batadv1) entered disabled state [ 364.694511][T22397] batadv1: entered allmulticast mode [ 364.707946][T22397] batadv1: entered promiscuous mode [ 364.709893][T22403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5969'. [ 364.918201][T22414] loop1: detected capacity change from 0 to 1024 [ 364.978993][T22414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 365.019368][T22414] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.045278][T22414] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5974: bg 0: block 112: padding at end of block bitmap is not set [ 365.114242][T21874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 365.160498][ T5088] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 365.169729][ T5088] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 365.313628][T22441] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5985'. [ 365.971824][T22457] loop1: detected capacity change from 0 to 512 [ 365.988752][T22457] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 366.188196][T22457] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 366.208146][T22457] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5990: bg 0: block 248: padding at end of block bitmap is not set [ 366.235605][T22457] loop1: lost filesystem error report for type 5 error -117 [ 366.240085][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 366.253967][ C0] EXT4-fs (loop1): last error at time 1781612827: ext4_validate_block_bitmap:441 [ 366.265654][T22457] __quota_error: 2 callbacks suppressed [ 366.265681][T22457] Quota error (device loop1): write_blk: dquota write failed [ 366.284218][T22457] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 366.297159][T22457] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.5990: Failed to acquire dquot type 1 [ 366.313872][T22457] loop1: lost filesystem error report for type 5 error -28 [ 366.321423][T22457] EXT4-fs (loop1): 1 truncate cleaned up [ 366.344764][T22457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 366.830021][T21874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 366.855385][T22476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5997'. [ 367.320661][T22500] loop1: detected capacity change from 0 to 512 [ 367.345866][T22500] EXT4-fs: Ignoring removed i_version option [ 367.354963][T22502] loop0: detected capacity change from 0 to 512 [ 367.361964][T22500] EXT4-fs: Ignoring removed bh option [ 367.382702][T22502] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 367.396242][T22500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.410329][T22500] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.451745][T22502] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 367.469519][T22502] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6009: bg 0: block 248: padding at end of block bitmap is not set [ 367.472850][T21874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.489927][T22502] loop0: lost filesystem error report for type 5 error -117 [ 367.496668][T22502] Quota error (device loop0): write_blk: dquota write failed [ 367.504818][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 367.504851][ C1] EXT4-fs (loop0): last error at time 1781612828: ext4_validate_block_bitmap:441 [ 367.535542][T22502] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 367.546863][T22502] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.6009: Failed to acquire dquot type 1 [ 367.562873][T22502] loop0: lost filesystem error report for type 5 error -28 [ 367.575584][T22502] EXT4-fs (loop0): 1 truncate cleaned up [ 367.595990][T22502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 367.596408][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.619831][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.639242][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.649409][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.658330][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.670093][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.679118][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.689134][T22051] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 367.732142][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.770216][T22515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6014'. [ 367.988923][T22515] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.996556][T22515] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.329874][T22536] loop8: detected capacity change from 0 to 1024 [ 368.345954][T22536] EXT4-fs: Ignoring removed bh option [ 368.360111][ T28] audit: type=1326 audit(1781612829.242:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22537 comm="syz.0.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304f0dce59 code=0x7ffc0000 [ 368.398406][T22515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.402900][T22538] loop0: detected capacity change from 0 to 2048 [ 368.415091][T22536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.438875][ T28] audit: type=1326 audit(1781612829.242:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22537 comm="syz.0.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304f0dce59 code=0x7ffc0000 [ 368.444846][T22515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.484782][T22538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.506684][ T28] audit: type=1326 audit(1781612829.272:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22537 comm="syz.0.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304f0dce59 code=0x7ffc0000 [ 368.510423][T22538] EXT4-fs error (device loop0): __ext4_new_inode:1081: comm syz.0.6023: reserved inode found cleared - inode=1 [ 368.532259][ T28] audit: type=1326 audit(1781612829.272:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22537 comm="syz.0.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304f0dce59 code=0x7ffc0000 [ 368.570170][ T28] audit: type=1326 audit(1781612829.272:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22537 comm="syz.0.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f304f0dce59 code=0x7ffc0000 [ 368.571866][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.595976][ T28] audit: type=1326 audit(1781612829.272:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22537 comm="syz.0.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f304f0dce59 code=0x7ffc0000 [ 368.658006][ T4287] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.689247][ T4287] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.725850][ T4287] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.734760][ T4287] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.892917][T22553] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.049698][T22553] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.288366][T22577] loop1: detected capacity change from 0 to 1024 [ 369.302162][T22553] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.318511][T22577] EXT4-fs: Ignoring removed bh option [ 369.347151][T22577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.407825][T21874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.505245][T22553] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.594183][T22581] loop1: detected capacity change from 0 to 512 [ 369.754056][ T4276] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.785318][ T5088] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.794186][ T5088] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.813963][ T5088] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.381232][T22620] loop6: detected capacity change from 0 to 128 [ 370.476994][T22628] syz.6.6056: attempt to access beyond end of device [ 370.476994][T22628] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 370.543769][T22628] syz.6.6056: attempt to access beyond end of device [ 370.543769][T22628] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 370.576191][T22628] syz.6.6056: attempt to access beyond end of device [ 370.576191][T22628] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 370.589671][T22628] syz.6.6056: attempt to access beyond end of device [ 370.589671][T22628] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 370.603079][T22628] syz.6.6056: attempt to access beyond end of device [ 370.603079][T22628] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 370.616487][T22628] syz.6.6056: attempt to access beyond end of device [ 370.616487][T22628] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 370.629920][T22628] syz.6.6056: attempt to access beyond end of device [ 370.629920][T22628] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 370.645596][T22628] syz.6.6056: attempt to access beyond end of device [ 370.645596][T22628] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 370.659490][T22628] syz.6.6056: attempt to access beyond end of device [ 370.659490][T22628] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 370.702916][T22628] syz.6.6056: attempt to access beyond end of device [ 370.702916][T22628] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 370.779132][ T7654] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 370.783901][T22642] loop1: detected capacity change from 0 to 512 [ 370.787435][ T7654] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 370.795031][T22472] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 370.856772][T22642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.870737][T22642] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.944105][T21874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.988853][T22664] team1: entered promiscuous mode [ 370.993916][T22664] team1: entered allmulticast mode [ 370.999354][T22664] 8021q: adding VLAN 0 to HW filter on device team1 [ 371.134754][T22679] loop8: detected capacity change from 0 to 128 [ 371.259328][T22686] netlink: 'syz.0.6081': attribute type 3 has an invalid length. [ 372.395350][T22727] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 372.647493][T22759] __nla_validate_parse: 136 callbacks suppressed [ 372.647513][T22759] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.6110'. [ 372.695466][T22759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6110'. [ 373.356281][T22765] loop8: detected capacity change from 0 to 4096 [ 373.418736][T22765] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.446642][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 373.446656][ T28] audit: type=1400 audit(1781612834.332:3507): avc: denied { write } for pid=22764 comm="syz.8.6113" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.508489][ T5557] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.936057][T22809] loop1: detected capacity change from 0 to 2048 [ 373.957645][T22809] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.964270][T22809] EXT4-fs: Ignoring removed mblk_io_submit option [ 373.981859][T22809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.997304][ T28] audit: type=1400 audit(1781612834.882:3508): avc: denied { write } for pid=22808 comm="syz.1.6131" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.028123][T21874] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.096703][T22826] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6138'. [ 374.121268][T22830] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6141'. [ 374.143308][ T28] audit: type=1400 audit(1781612835.022:3509): avc: denied { ioctl } for pid=22831 comm="syz.0.6140" path="net:[4026533438]" dev="nsfs" ino=4026533438 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 374.176209][T22834] loop6: detected capacity change from 0 to 128 [ 374.200623][T22834] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 374.207444][T14153] udevd[14153]: incorrect ext4 checksum on /dev/loop6 [ 374.413261][T22856] ================================================================== [ 374.421388][T22856] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 374.430023][T22856] [ 374.432350][T22856] write to 0xffff88811b3a1220 of 8 bytes by task 22862 on cpu 0: [ 374.440073][T22856] shmem_file_splice_read+0x401/0x590 [ 374.445471][T22856] splice_direct_to_actor+0x261/0x680 [ 374.450856][T22856] do_splice_direct+0x119/0x1a0 [ 374.455717][T22856] do_sendfile+0x37d/0x640 [ 374.460142][T22856] __x64_sys_sendfile64+0x105/0x150 [ 374.465355][T22856] x64_sys_call+0x2dc4/0x3020 [ 374.470042][T22856] do_syscall_64+0x136/0x3c0 [ 374.474639][T22856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.480542][T22856] [ 374.482898][T22856] write to 0xffff88811b3a1220 of 8 bytes by task 22856 on cpu 1: [ 374.490619][T22856] shmem_file_splice_read+0x401/0x590 [ 374.496105][T22856] splice_direct_to_actor+0x261/0x680 [ 374.501491][T22856] do_splice_direct+0x119/0x1a0 [ 374.506351][T22856] do_sendfile+0x37d/0x640 [ 374.510785][T22856] __x64_sys_sendfile64+0x105/0x150 [ 374.515996][T22856] x64_sys_call+0x2dc4/0x3020 [ 374.520691][T22856] do_syscall_64+0x136/0x3c0 [ 374.525288][T22856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.531190][T22856] [ 374.533545][T22856] value changed: 0x0000000000000f0d -> 0x0000000000000f0e [ 374.540677][T22856] [ 374.542998][T22856] Reported by Kernel Concurrency Sanitizer on: [ 374.549156][T22856] CPU: 1 UID: 0 PID: 22856 Comm: syz.2.6152 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 374.560097][T22856] Tainted: [W]=WARN [ 374.563888][T22856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.573961][T22856] ==================================================================