last executing test programs: 2m21.347167789s ago: executing program 0 (id=7): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r3, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x9}, &(0x7f0000000400)=0x90) 2m21.206577823s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x2f0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x24, 0x1) setreuid(0xffffffffffffffff, 0xee01) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)=@random={'user.', ',\x00'}) 2m21.160278415s ago: executing program 0 (id=9): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, 0x0) 2m21.062969338s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 2m20.97708375s ago: executing program 0 (id=13): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty}}}}, 0x0) 2m19.75929846s ago: executing program 0 (id=40): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 2m19.73486447s ago: executing program 32 (id=40): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 2m15.967704481s ago: executing program 3 (id=84): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) getpgid(r0) 2m15.834432386s ago: executing program 3 (id=86): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40012141, 0x0) 2m15.759773678s ago: executing program 3 (id=87): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x4}]}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x11, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "0000980018"}}}}}}}, 0x0) 2m15.628941473s ago: executing program 3 (id=89): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x889, 0x8, 0x2) 2m15.434841339s ago: executing program 3 (id=91): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 2m15.131307478s ago: executing program 3 (id=98): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) 2m15.09317712s ago: executing program 33 (id=98): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r0, 0x0, &(0x7f0000000540)=""/153}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) 2m9.403131993s ago: executing program 6 (id=193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000001100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m6.491282907s ago: executing program 6 (id=199): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003d80)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) syz_open_dev$usbfs(0x0, 0xb, 0x103301) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 2m5.339653524s ago: executing program 6 (id=221): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x4070bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x804400, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2m4.621465877s ago: executing program 6 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x3}}}]}]}]}}]}, 0x50}}, 0x1d56ce4333ce878e) 2m4.380579815s ago: executing program 6 (id=238): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 2m4.286617998s ago: executing program 6 (id=242): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 1m49.234332092s ago: executing program 34 (id=242): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 40.656288731s ago: executing program 5 (id=1582): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000080)) 37.525049862s ago: executing program 5 (id=1622): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 37.320232978s ago: executing program 5 (id=1629): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) 37.277291169s ago: executing program 5 (id=1630): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 37.25313755s ago: executing program 5 (id=1631): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 36.358021199s ago: executing program 5 (id=1646): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) 36.35327315s ago: executing program 35 (id=1646): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x2402c004) 9.211130204s ago: executing program 7 (id=2168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in=@rand_addr=0x64010100, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x1, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 9.136082796s ago: executing program 7 (id=2170): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003940)=""/4101, 0x1005}], 0x1}, 0x40000040) 9.074899377s ago: executing program 7 (id=2172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e90009118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000180)="240030511cb60012237aa4dd338ada44", 0x10}], 0x2) 8.836195475s ago: executing program 7 (id=2175): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 8.740398778s ago: executing program 7 (id=2178): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf42d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) readahead(0xffffffffffffffff, 0x1, 0x9) 8.325479762s ago: executing program 7 (id=2184): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES32=r0, @ANYBLOB="eb91"], 0x40c}}, 0x0) 8.279442163s ago: executing program 36 (id=2184): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES32=r0, @ANYBLOB="eb91"], 0x40c}}, 0x0) 3.40431913s ago: executing program 1 (id=2272): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.7742979s ago: executing program 1 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270121406"], 0xffdd) 2.367214464s ago: executing program 8 (id=2296): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.288320376s ago: executing program 1 (id=2288): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 2.217232308s ago: executing program 1 (id=2290): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000021c0), 0xc1, 0x101000) syz_usb_disconnect(r0) 1.974684086s ago: executing program 2 (id=2295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 1.906397168s ago: executing program 2 (id=2297): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.833777631s ago: executing program 2 (id=2299): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.822547251s ago: executing program 8 (id=2300): fsopen(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.632994247s ago: executing program 8 (id=2301): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.478788812s ago: executing program 2 (id=2316): syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) close(r0) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0x7958, 0x130c8, 0xa, 0x30e}, 0x0, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x10c02, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.077842145s ago: executing program 1 (id=2309): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x8000000000000, 0x0, 0x20004051}, 0x40408c0) 1.077185285s ago: executing program 9 (id=2310): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x280401, 0x5) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0xffffffff, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'tunl0\x00', {}, {}, 0xff, 0x2, 0x16}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "07a80355d28bbcff9b5a838ad1d898e7f3872ead90a72898f058d8d95a35"}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xff, 'ip6erspan0\x00', 'veth0_to_team\x00', {}, {}, 0x21, 0x1, 0xa}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0xfe000000, 0x7f], 0x1}}, @common=@ttl={{0x28}, {0x2, 0x40}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 927.30133ms ago: executing program 9 (id=2311): socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0xec) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2818082, &(0x7f00000005c0)=ANY=[], 0x7f, 0x2bd, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1400, 0x0, 0x0, 0x0, &(0x7f0000000180)) mknod(0x0, 0x1, 0xba6e000) 915.23694ms ago: executing program 9 (id=2312): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 857.886862ms ago: executing program 9 (id=2314): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x84, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 775.297995ms ago: executing program 9 (id=2315): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 621.95824ms ago: executing program 2 (id=2317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x8}, 0x77) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x11004, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 610.19074ms ago: executing program 8 (id=2318): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 302.74865ms ago: executing program 9 (id=2319): gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0x0, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0) 299.51721ms ago: executing program 4 (id=2320): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 237.281482ms ago: executing program 8 (id=2321): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "1a00"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81482fb57) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000680)=""/1, 0x1}], 0x2}, 0x6}], 0x2, 0x42, 0x0) 236.910882ms ago: executing program 8 (id=2322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 212.670253ms ago: executing program 4 (id=2323): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x2, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 212.174173ms ago: executing program 2 (id=2324): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) 178.878874ms ago: executing program 1 (id=2325): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000280)={r1, 0x1, r2, 0x3, 0x80000}) 120.427616ms ago: executing program 4 (id=2326): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r2, 0x1, 0xf5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="070f", 0x2}, {&(0x7f0000001540)="20704e696119aed2", 0x8}], 0x2}, 0x4) 96.639736ms ago: executing program 4 (id=2327): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r0, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200), 0x20) 72.739377ms ago: executing program 4 (id=2328): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/39, 0x27}], 0x1, 0x9, 0xbf1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=2329): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)="7cda", 0x3ff, r0}, 0x38) sched_setscheduler(0x0, 0x1, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, &(0x7f0000001200)=""/119, &(0x7f00000002c0), &(0x7f0000000140), 0x7, r0}, 0x38) kernel console output (not intermixed with test programs): filesystem error report for type 5 error -117 [ 109.080863][ T6862] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 109.097259][ T6862] loop2: lost filesystem error report for type 5 error -117 [ 109.099555][ T6862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.120863][ T6862] ext2 filesystem being mounted at /211/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 109.153840][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.212955][ T6869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.228511][ T6873] nr0: tun_chr_ioctl cmd 1074025677 [ 109.236319][ T6873] nr0: Linktype set failed because interface is up [ 109.470225][ T6896] netlink: 'syz.7.1085': attribute type 13 has an invalid length. [ 109.479643][ T28] audit: type=1400 audit(1780931329.448:916): avc: denied { watch watch_reads } for pid=6894 comm="syz.2.1089" path="/proc/492/net/pfkey" dev="proc" ino=4026532942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 109.560361][ T6900] loop2: detected capacity change from 0 to 512 [ 109.584948][ T6900] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1091: iget: bad i_size value: 38620345925642 [ 109.631444][ T6900] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.631709][ T6900] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1091: couldn't read orphan inode 15 (err -117) [ 109.641147][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 109.641170][ C0] EXT4-fs (loop2): initial error at time 1780931329: ext4_orphan_get:1397: inode 15 [ 109.641224][ C0] EXT4-fs (loop2): last error at time 1780931329: ext4_orphan_get:1397: inode 15 [ 109.699431][ T6900] loop2: lost filesystem error report for type 5 error -117 [ 109.708539][ T6900] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.769040][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 109.778391][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 109.789763][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 110.054682][ T28] audit: type=1326 audit(1780931330.028:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6928 comm="syz.7.1102" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53633bce59 code=0x0 [ 110.095605][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 110.160424][ T6938] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.174835][ T6938] bond2: (slave lo): Enslaving as an active interface with an up link [ 110.183393][ T6938] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 110.252517][ T28] audit: type=1400 audit(1780931330.218:918): avc: denied { connect } for pid=6942 comm="syz.4.1110" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 110.310166][ T6945] sctp: [Deprecated]: syz.2.1109 (pid 6945) Use of int in max_burst socket option deprecated. [ 110.310166][ T6945] Use struct sctp_assoc_value instead [ 110.349920][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 110.358987][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 110.368339][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 110.377374][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 110.448262][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1116'. [ 110.476884][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 110.476902][ T28] audit: type=1400 audit(1780931330.438:920): avc: denied { connect } for pid=6956 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.642523][ T6961] loop2: detected capacity change from 0 to 512 [ 110.664328][ T6961] EXT4-fs: Ignoring removed i_version option [ 110.680348][ T6963] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1119'. [ 110.692394][ T6961] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.707480][ T6961] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1118: Allocating blocks 41-42 which overlap fs metadata [ 110.731457][ T6961] loop2: lost filesystem error report for type 5 error -117 [ 110.731926][ T6961] Quota error (device loop2): write_blk: dquota write failed [ 110.739347][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 110.739372][ C0] EXT4-fs (loop2): initial error at time 1780931330: ext4_mb_mark_diskspace_used:4222 [ 110.739408][ C0] EXT4-fs (loop2): last error at time 1780931330: ext4_mb_mark_diskspace_used:4222 [ 110.785075][ T6961] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 110.803057][ T6961] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 110.814437][ T6961] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1118: Failed to acquire dquot type 1 [ 110.826762][ T6961] loop2: lost filesystem error report for type 5 error -117 [ 110.826980][ T6961] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 110.850898][ T6961] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1118: corrupted inode contents [ 110.863774][ T6961] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 110.864309][ T6961] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.1118: mark_inode_dirty error [ 110.891445][ T6961] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 110.892063][ T6961] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1118: corrupted inode contents [ 110.915765][ T6961] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 110.916585][ T6961] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.1118: mark_inode_dirty error [ 110.932958][ T28] audit: type=1400 audit(1780931330.898:921): avc: denied { read } for pid=6971 comm="syz.1.1122" path="socket:[15855]" dev="sockfs" ino=15855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.941032][ T6961] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 110.970151][ T6961] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1118: corrupted inode contents [ 110.995323][ T6961] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 110.995958][ T6961] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 111.028289][ T6961] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1118: corrupted inode contents [ 111.042189][ T6961] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 111.045350][ T6961] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.1118: mark_inode_dirty error [ 111.067268][ T6961] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 111.067781][ T6961] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 111.095324][ T6975] loop7: detected capacity change from 0 to 256 [ 111.105195][ T6961] EXT4-fs (loop2): 1 truncate cleaned up [ 111.112570][ T6961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.200805][ T28] audit: type=1400 audit(1780931331.168:922): avc: denied { write } for pid=6960 comm="syz.2.1118" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.253511][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.266321][ T5693] Quota error (device loop2): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 111.278335][ T5693] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:20: Failed to release dquot type 1 [ 111.743892][ T6992] loop1: detected capacity change from 0 to 512 [ 111.783446][ T6992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.805130][ T6992] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.854679][ T28] audit: type=1400 audit(1780931331.828:923): avc: denied { write } for pid=6991 comm="syz.1.1130" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.888990][ T6996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.229700][ T28] audit: type=1400 audit(1780931332.198:924): avc: denied { bind } for pid=7010 comm="syz.5.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 112.905712][ T7030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.964923][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.027710][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 113.099034][ T28] audit: type=1400 audit(1780931333.068:925): avc: denied { write } for pid=7041 comm="syz.5.1152" path="socket:[15233]" dev="sockfs" ino=15233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.512269][ T7072] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1167'. [ 113.724034][ T7090] sctp: [Deprecated]: syz.1.1171 (pid 7090) Use of int in max_burst socket option deprecated. [ 113.724034][ T7090] Use struct sctp_assoc_value instead [ 114.067710][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1179'. [ 114.287349][ T7110] loop2: detected capacity change from 0 to 2048 [ 114.322936][ T7110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.392876][ T7115] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 114.706905][ T7123] loop1: detected capacity change from 0 to 128 [ 114.781331][ T7123] FAT-fs (loop1): bogus number of reserved sectors [ 114.824280][ T7123] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 114.851362][ T7123] FAT-fs (loop1): Can't find a valid FAT filesystem [ 114.921293][ T4300] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 114.953245][ T4300] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.953245][ T4300] [ 114.967703][ T4300] EXT4-fs (loop2): Total free blocks count 0 [ 114.973918][ T4300] EXT4-fs (loop2): Free/Dirty block details [ 114.981238][ T4300] EXT4-fs (loop2): free_blocks=4096 [ 114.987560][ T4300] EXT4-fs (loop2): dirty_blocks=512 [ 114.999172][ T4300] EXT4-fs (loop2): Block reservation details [ 115.007897][ T4300] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 115.018889][ T4300] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 115.037086][ T3309] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 115.286068][ T7148] loop5: detected capacity change from 0 to 256 [ 115.462284][ T7144] nr0: tun_chr_ioctl cmd 1074025677 [ 115.467962][ T7144] nr0: Linktype set failed because interface is up [ 115.569378][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 115.596950][ T7160] bridge0: entered allmulticast mode [ 115.977088][ T7183] loop7: detected capacity change from 0 to 256 [ 116.115114][ T7186] netlink: 4684 bytes leftover after parsing attributes in process `syz.1.1211'. [ 116.231870][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 116.231898][ T28] audit: type=1400 audit(1780931336.198:945): avc: denied { getopt } for pid=7188 comm="syz.1.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.348708][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.357850][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.369287][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.425300][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.439587][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.450955][ T7192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.468516][ T7192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.481425][ T7192] veth1_vlan: left promiscuous mode [ 116.487686][ T7192] veth0_vlan: left promiscuous mode [ 116.493936][ T7192] veth0_vlan: entered promiscuous mode [ 116.503024][ T7192] veth1_vlan: entered promiscuous mode [ 116.511992][ T7192] veth1_macvtap: left promiscuous mode [ 116.518481][ T7192] veth0_macvtap: left promiscuous mode [ 116.528714][ T7192] veth0_macvtap: entered promiscuous mode [ 116.539974][ T7192] veth1_macvtap: entered promiscuous mode [ 116.564221][ T7192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.572925][ T7192] 8021q: adding VLAN 0 to HW filter on device eth0 [ 116.581620][ T7192] 8021q: adding VLAN 0 to HW filter on device eth1 [ 116.590939][ T7192] 8021q: adding VLAN 0 to HW filter on device eth2 [ 116.600562][ T7192] 8021q: adding VLAN 0 to HW filter on device eth3 [ 116.614153][ T7192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.640863][ T7195] nr0: tun_chr_ioctl cmd 1074025677 [ 116.646633][ T7208] loop5: detected capacity change from 0 to 512 [ 116.652672][ T7195] nr0: Linktype set failed because interface is up [ 116.678666][ T7208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.684996][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.698350][ T49] bridge0: port 1(bridge_slave_0) entered listening state [ 116.698960][ T7208] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.717839][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.724979][ T49] bridge0: port 2(bridge_slave_1) entered listening state [ 116.737000][ T28] audit: type=1400 audit(1780931336.708:946): avc: denied { write } for pid=7207 comm="syz.5.1219" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.773957][ T28] audit: type=1400 audit(1780931336.708:947): avc: denied { write } for pid=7207 comm="syz.5.1219" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.822158][ T4300] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.837569][ T3610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.841746][ T4300] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.869347][ T4300] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.898327][ T4300] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.932381][ T7205] macvlan2: entered promiscuous mode [ 116.995118][ T7223] loop2: detected capacity change from 0 to 512 [ 117.008805][ T7223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.011002][ T28] audit: type=1326 audit(1780931336.968:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.5.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7bdce59 code=0x7ffc0000 [ 117.059276][ T7223] EXT4-fs (loop2): 1 orphan inode deleted [ 117.067355][ T7225] loop7: detected capacity change from 0 to 512 [ 117.074329][ T28] audit: type=1326 audit(1780931336.968:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.5.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7bdce59 code=0x7ffc0000 [ 117.087208][ T4300] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.100217][ T28] audit: type=1326 audit(1780931336.968:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.5.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7bdce59 code=0x7ffc0000 [ 117.100300][ T28] audit: type=1326 audit(1780931336.968:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.5.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ea7bdce59 code=0x7ffc0000 [ 117.100341][ T28] audit: type=1326 audit(1780931336.968:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.5.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7bdce59 code=0x7ffc0000 [ 117.100428][ T28] audit: type=1326 audit(1780931336.968:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.5.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7bdce59 code=0x7ffc0000 [ 117.121996][ T7223] EXT4-fs (loop2): 1 truncate cleaned up [ 117.156967][ T28] audit: type=1326 audit(1780931336.968:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7221 comm="syz.5.1226" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea7bdce59 code=0x7ffc0000 [ 117.246130][ T7225] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 117.254734][ T4300] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.263345][ T4300] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.271934][ T7225] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.1224: invalid block [ 117.283959][ T7225] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 117.284116][ T4300] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.301512][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 117.301553][ C0] EXT4-fs (loop7): initial error at time 1780931337: ext4_get_branch:178: inode 13: block 1024 [ 117.301588][ C0] EXT4-fs (loop7): last error at time 1780931337: ext4_get_branch:178: inode 13: block 1024 [ 117.329328][ T7225] EXT4-fs (loop7): 1 truncate cleaned up [ 117.335636][ T7225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.354647][ T7223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.373441][ T7223] EXT4-fs (loop2): shut down requested (1) [ 117.385286][ T7223] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 117.395227][ T7223] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 117.404627][ T7223] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 117.431373][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.472436][ T7233] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.511698][ T7233] bond4: (slave lo): Enslaving as an active interface with an up link [ 117.524642][ T7233] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 117.559037][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.585464][ T7238] bridge2: entered promiscuous mode [ 117.607871][ T7238] bridge2: entered allmulticast mode [ 117.724920][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1233'. [ 117.799203][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.818943][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.039636][ T7265] loop1: detected capacity change from 0 to 2048 [ 118.054280][ T7267] hsr0: entered promiscuous mode [ 118.065023][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 118.077619][ T7265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.161756][ T7270] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 118.440274][ T5687] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 118.469890][ T5687] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.469890][ T5687] [ 118.481475][ T5687] EXT4-fs (loop1): Total free blocks count 0 [ 118.507879][ T5687] EXT4-fs (loop1): Free/Dirty block details [ 118.513913][ T5687] EXT4-fs (loop1): free_blocks=4096 [ 118.519198][ T5687] EXT4-fs (loop1): dirty_blocks=528 [ 118.529024][ T5687] EXT4-fs (loop1): Block reservation details [ 118.562612][ T5687] EXT4-fs (loop1): i_reserved_data_blocks=33 [ 118.578132][ T4304] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 118.606710][ T3301] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 118.734314][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1249'. [ 118.745247][ T7290] netlink: 'syz.1.1246': attribute type 13 has an invalid length. [ 119.202185][ T7302] loop7: detected capacity change from 0 to 4096 [ 119.240496][ T7302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.295322][ T7304] loop1: detected capacity change from 0 to 512 [ 119.370438][ T7304] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 119.385483][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.400426][ T7304] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1256: bad orphan inode 15 [ 119.423840][ T7304] fserror_report: 3 callbacks suppressed [ 119.423885][ T7304] loop1: lost filesystem error report for type 5 error -117 [ 119.438335][ T7304] ext4_test_bit(bit=14, block=18) = 1 [ 119.445881][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 119.445946][ C0] EXT4-fs (loop1): initial error at time 1780931339: ext4_orphan_get:1423 [ 119.446031][ C0] EXT4-fs (loop1): last error at time 1780931339: ext4_orphan_get:1423 [ 119.476946][ T7304] is_bad_inode(inode)=0 [ 119.481265][ T7304] NEXT_ORPHAN(inode)=1023 [ 119.485827][ T7304] max_ino=32 [ 119.489394][ T7304] i_nlink=0 [ 119.500833][ T7304] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1256: bg 0: block 161: padding at end of block bitmap is not set [ 119.524392][ T7304] loop1: lost filesystem error report for type 5 error -117 [ 119.524914][ T7304] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 119.546919][ T7304] loop1: lost filesystem error report for type 5 error -117 [ 119.570370][ T7304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.611612][ T7304] ext2 filesystem being mounted at /265/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 119.701668][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.246068][ T7334] loop1: detected capacity change from 0 to 512 [ 120.267575][ T7334] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 120.281094][ T7334] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1269: invalid indirect mapped block 1 (level 1) [ 120.295388][ T7334] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 120.297866][ T7334] EXT4-fs (loop1): Remounting filesystem read-only [ 120.307124][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 120.307163][ C0] EXT4-fs (loop1): initial error at time 1780931340: ext4_free_branches:1023: inode 11 [ 120.307242][ C0] EXT4-fs (loop1): last error at time 1780931340: ext4_free_branches:1023: inode 11 [ 120.340044][ T7334] EXT4-fs (loop1): 1 truncate cleaned up [ 120.348808][ T7334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.363806][ T7337] hsr0: entered promiscuous mode [ 120.369764][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 120.430423][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.720278][ T7363] lo: Caught tx_queue_len zero misconfig [ 120.974163][ T4304] Bluetooth: hci0: Frame reassembly failed (-84) [ 121.025660][ T7339] netlink: 'syz.2.1280': attribute type 13 has an invalid length. [ 121.042146][ T7339] netlink: 'syz.2.1280': attribute type 17 has an invalid length. [ 121.114245][ T7339] ip_vti0: left promiscuous mode [ 121.399442][ T7339] bond1: left promiscuous mode [ 121.411696][ T7339] bridge1: left promiscuous mode [ 121.440801][ T7339] bridge2: left promiscuous mode [ 121.446426][ T7339] bridge2: left allmulticast mode [ 121.606370][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 121.615316][ T7400] netlink: 'syz.7.1294': attribute type 1 has an invalid length. [ 121.615337][ T7400] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.1294'. [ 121.655974][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 121.665392][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 121.676199][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 121.760557][ T7407] netlink: 'syz.4.1296': attribute type 13 has an invalid length. [ 121.888095][ T7413] loop7: detected capacity change from 0 to 128 [ 121.913974][ T7413] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 121.927276][ T7413] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.942724][ T7413] ext2 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.989110][ T5025] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.998810][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ba1cc00: rx timeout, send abort [ 122.103877][ T7420] loop4: detected capacity change from 0 to 1024 [ 122.115982][ T7420] EXT4-fs: Ignoring removed orlov option [ 122.150037][ T7420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.170082][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 122.170101][ T28] audit: type=1400 audit(1780931342.138:1011): avc: denied { write } for pid=7419 comm="syz.4.1302" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.259970][ T28] audit: type=1400 audit(1780931342.228:1012): avc: denied { write } for pid=7419 comm="syz.4.1302" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.284263][ T28] audit: type=1400 audit(1780931342.228:1013): avc: denied { write } for pid=7419 comm="syz.4.1302" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.328278][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.507493][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ba1cc00: abort rx timeout. Force session deactivation [ 122.648438][ T7444] loop7: detected capacity change from 0 to 512 [ 122.743226][ T7444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.776298][ T7450] macvlan2: entered promiscuous mode [ 122.884986][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.997897][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 123.004317][ T3702] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.358889][ T7483] loop7: detected capacity change from 0 to 512 [ 123.413232][ T7483] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 123.429570][ T7483] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1327: invalid indirect mapped block 1 (level 1) [ 123.465388][ T7483] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.465696][ T7483] EXT4-fs (loop7): Remounting filesystem read-only [ 123.481677][ T7483] EXT4-fs (loop7): 1 truncate cleaned up [ 123.487668][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 123.487711][ C0] EXT4-fs (loop7): initial error at time 1780931343: ext4_free_branches:1023: inode 11 [ 123.487790][ C0] EXT4-fs (loop7): last error at time 1780931343: ext4_free_branches:1023: inode 11 [ 123.515438][ T7483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.637218][ T7503] loop1: detected capacity change from 0 to 1024 [ 123.644185][ T7503] EXT4-fs: Ignoring removed orlov option [ 123.657522][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.711544][ T7503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.752725][ T7511] loop2: detected capacity change from 0 to 512 [ 123.808131][ T7511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.822597][ T28] audit: type=1400 audit(1780931343.788:1014): avc: denied { write } for pid=7502 comm="syz.1.1333" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.865833][ T7511] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.890996][ T28] audit: type=1400 audit(1780931343.858:1015): avc: denied { write } for pid=7502 comm="syz.1.1333" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.932776][ T28] audit: type=1400 audit(1780931343.858:1016): avc: denied { write } for pid=7502 comm="syz.1.1333" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.990911][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.013238][ T28] audit: type=1400 audit(1780931343.978:1017): avc: denied { ioctl } for pid=7521 comm="syz.4.1343" path="socket:[17860]" dev="sockfs" ino=17860 ioctlcmd=0x8913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 124.059591][ T28] audit: type=1400 audit(1780931344.028:1018): avc: denied { firmware_load } for pid=7518 comm="syz.7.1342" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 124.094203][ T28] audit: type=1400 audit(1780931344.028:1019): avc: denied { open } for pid=7527 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.115064][ T28] audit: type=1400 audit(1780931344.028:1020): avc: denied { kernel } for pid=7527 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 124.167126][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.222620][ T7532] loop1: detected capacity change from 0 to 512 [ 124.261542][ T7532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.450272][ T7530] loop5: detected capacity change from 0 to 32768 [ 124.499547][ T7530] loop5: p1 p3 < > [ 124.507307][ T7551] netlink: 'syz.2.1352': attribute type 13 has an invalid length. [ 124.530509][ T7553] loop7: detected capacity change from 0 to 512 [ 124.590362][ T7553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.612340][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 124.622934][ T7553] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.640339][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 124.990773][ T7564] loop5: detected capacity change from 0 to 1024 [ 125.034923][ T7564] EXT4-fs: Ignoring removed orlov option [ 125.056479][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.068624][ T7564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.192100][ T3610] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.354151][ T7575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.399827][ T7575] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1361: iget: bad i_size value: 38620345925642 [ 125.425899][ T7575] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.427043][ T7575] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1361: couldn't read orphan inode 15 (err -117) [ 125.436802][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 125.436845][ C1] EXT4-fs (loop1): initial error at time 1780931345: ext4_orphan_get:1397: inode 15 [ 125.436909][ C1] EXT4-fs (loop1): last error at time 1780931345: ext4_orphan_get:1397: inode 15 [ 125.596455][ T7575] loop1: lost filesystem error report for type 5 error -117 [ 125.598589][ T7575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.780070][ T7575] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1361: bg 0: block 5: invalid block bitmap [ 125.820310][ T7575] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 884 with error 28 [ 125.837078][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.850652][ T7575] EXT4-fs (loop1): This should not happen!! Data will be lost [ 125.850652][ T7575] [ 125.873198][ T7575] EXT4-fs (loop1): Total free blocks count 0 [ 125.885376][ T7575] EXT4-fs (loop1): Free/Dirty block details [ 125.917587][ T7575] EXT4-fs (loop1): free_blocks=0 [ 125.948309][ T7575] EXT4-fs (loop1): dirty_blocks=884 [ 125.972347][ T7575] EXT4-fs (loop1): Block reservation details [ 125.996758][ T7575] EXT4-fs (loop1): i_reserved_data_blocks=884 [ 126.077668][ T7603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.109882][ T7603] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.344326][ T7620] sit0: Caught tx_queue_len zero misconfig [ 126.358381][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 126.407453][ T7625] netlink: 'syz.5.1380': attribute type 13 has an invalid length. [ 126.748600][ T7639] Alternate GPT is invalid, using primary GPT. [ 126.770695][ T7639] loop7: p1 p2 p3 [ 126.778030][ T7639] loop7: partition table partially beyond EOD, truncated [ 126.958006][ T7657] veth0_vlan: entered allmulticast mode [ 126.964855][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 127.003682][ T7657] veth0_vlan (unregistering): left allmulticast mode [ 127.767998][ T7686] netlink: 'syz.2.1404': attribute type 13 has an invalid length. [ 127.906093][ T7690] set_capacity_and_notify: 3 callbacks suppressed [ 127.906114][ T7690] loop5: detected capacity change from 0 to 512 [ 127.945966][ T7690] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.982066][ T7690] EXT4-fs (loop5): 1 truncate cleaned up [ 128.093608][ T7696] loop2: detected capacity change from 0 to 736 [ 128.105838][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 128.105855][ T28] audit: type=1400 audit(1780931348.078:1036): avc: denied { write } for pid=6235 comm="kworker/1:9" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=17227 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.167534][ T28] audit: type=1400 audit(1780931348.138:1037): avc: denied { mount } for pid=7695 comm="syz.2.1410" name="/" dev="loop2" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 128.216124][ T28] audit: type=1400 audit(1780931348.188:1038): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 128.320763][ T7706] loop5: detected capacity change from 0 to 2048 [ 128.365198][ T7706] loop5: p1 p2 p3 [ 128.369180][ T7706] loop5: p1 size 16777216 extends beyond EOD, truncated [ 128.377712][ T7706] loop5: p2 size 458752 extends beyond EOD, truncated [ 128.392103][ T7706] loop5: p3 start 3036741376 is beyond EOD, truncated [ 128.506164][ T7715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.527431][ T7717] loop2: detected capacity change from 0 to 1024 [ 128.533979][ T7715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.558136][ T28] audit: type=1400 audit(1780931348.528:1039): avc: denied { write } for pid=7716 comm="syz.2.1420" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.583967][ T7717] EXT4-fs (loop2): shut down requested (1) [ 128.599214][ T28] audit: type=1400 audit(1780931348.548:1040): avc: denied { write } for pid=7716 comm="syz.2.1420" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.728814][ T7730] program syz.4.1421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.803184][ T7732] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7732 comm=syz.1.1425 [ 128.872468][ T6235] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 128.884235][ T6235] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.748446][ T7755] lo: Caught tx_queue_len zero misconfig [ 129.807119][ T7759] veth1_to_bond: entered allmulticast mode [ 129.813402][ T7759] veth1_to_bond: entered promiscuous mode [ 129.821168][ T7758] veth1_to_bond: left promiscuous mode [ 129.827083][ T7758] veth1_to_bond: left allmulticast mode [ 129.894771][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.910212][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.712053][ T7677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.856869][ T28] audit: type=1400 audit(1780931350.828:1041): avc: denied { attach_queue } for pid=7781 comm="syz.7.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 131.515748][ T28] audit: type=1400 audit(1780931351.478:1042): avc: denied { write } for pid=7792 comm="syz.1.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.603399][ T7802] vlan2: entered allmulticast mode [ 131.609220][ T7802] bond_slave_1: entered allmulticast mode [ 131.680734][ T7802] vlan2: entered allmulticast mode [ 132.073025][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 132.087347][ T7820] netlink: 'syz.2.1459': attribute type 4 has an invalid length. [ 132.284495][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 132.291822][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 132.342669][ T7832] netlink: 'syz.4.1466': attribute type 4 has an invalid length. [ 132.365628][ T7832] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1466'. [ 132.422411][ T28] audit: type=1400 audit(1780931352.388:1043): avc: denied { bind } for pid=7833 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.492213][ T28] audit: type=1400 audit(1780931352.418:1044): avc: denied { listen } for pid=7833 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 132.537575][ T28] audit: type=1400 audit(1780931352.448:1045): avc: denied { create } for pid=7835 comm="syz.4.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.550638][ T7839] netlink: 'syz.1.1469': attribute type 3 has an invalid length. [ 132.565310][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 133.376045][ T7851] netlink: 'syz.5.1474': attribute type 13 has an invalid length. [ 133.399032][ T7851] netlink: 'syz.5.1474': attribute type 17 has an invalid length. [ 133.543942][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 133.550625][ T28] audit: type=1400 audit(1780931353.508:1060): avc: denied { create } for pid=7872 comm="syz.1.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.616632][ T28] audit: type=1400 audit(1780931353.558:1061): avc: denied { read } for pid=7872 comm="syz.1.1482" path="socket:[19496]" dev="sockfs" ino=19496 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.930820][ T7879] loop2: detected capacity change from 0 to 1024 [ 133.968737][ T7879] EXT4-fs: Ignoring removed bh option [ 134.018407][ T7851] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.029892][ T7879] EXT4-fs mount: 6 callbacks suppressed [ 134.029923][ T7879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.061531][ T7851] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 134.111591][ T7851] bridge0: port 3(batadv1) entered blocking state [ 134.118729][ T7851] bridge0: port 3(batadv1) entered forwarding state [ 134.137702][ T28] audit: type=1400 audit(1780931354.098:1062): avc: denied { write } for pid=7878 comm="syz.2.1485" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.195148][ T28] audit: type=1400 audit(1780931354.138:1063): avc: denied { execute } for pid=7878 comm="syz.2.1485" path="/319/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.195593][ T7851] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 134.277814][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.369991][ T7851] bond1: left promiscuous mode [ 134.447850][ T28] audit: type=1400 audit(1780931354.418:1064): avc: denied { name_bind } for pid=7894 comm="syz.1.1491" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 134.509831][ T5091] team_slave_0: entered promiscuous mode [ 134.515574][ T5091] team_slave_1: entered promiscuous mode [ 134.524797][ T7898] netlink: 'syz.4.1492': attribute type 12 has an invalid length. [ 134.545889][ T7898] netlink: 'syz.4.1492': attribute type 29 has an invalid length. [ 134.567090][ T7898] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1492'. [ 134.599768][ T7898] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 134.614158][ T7898] netlink: 'syz.4.1492': attribute type 2 has an invalid length. [ 134.622952][ T7898] netlink: 'syz.4.1492': attribute type 3 has an invalid length. [ 134.639332][ T7898] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1492'. [ 134.864403][ T28] audit: type=1400 audit(1780931354.828:1065): avc: denied { mount } for pid=7909 comm="syz.5.1498" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 135.275687][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1511'. [ 135.296137][ T28] audit: type=1400 audit(1780931355.258:1066): avc: denied { ioctl } for pid=7938 comm="syz.2.1512" path="socket:[19649]" dev="sockfs" ino=19649 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.379116][ T28] audit: type=1400 audit(1780931355.258:1067): avc: denied { connect } for pid=7938 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.413259][ T28] audit: type=1400 audit(1780931355.258:1068): avc: denied { write } for pid=7938 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.434455][ T28] audit: type=1326 audit(1780931355.358:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7943 comm="syz.4.1515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d00ce59 code=0x7ffc0000 [ 135.472077][ T7949] loop5: detected capacity change from 0 to 2048 [ 135.565098][ T7949] loop5: p1 < > p3 [ 135.589680][ T7949] loop5: p3 start 458752 is beyond EOD, truncated [ 135.630089][ T2984] loop5: p1 < > p3 [ 135.636977][ T2984] loop5: p3 start 458752 is beyond EOD, truncated [ 136.174911][ T7982] loop5: detected capacity change from 0 to 1024 [ 136.211712][ T7982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.223969][ T7982] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.308283][ T7989] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.1531: Freeing blocks not in datazone - block = 0, count = 16 [ 136.420423][ T49] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 136.435403][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.447638][ T49] EXT4-fs (loop5): This should not happen!! Data will be lost [ 136.447638][ T49] [ 136.469148][ T49] EXT4-fs (loop5): Total free blocks count 0 [ 136.475906][ T49] EXT4-fs (loop5): Free/Dirty block details [ 136.482550][ T49] EXT4-fs (loop5): free_blocks=16 [ 136.488386][ T49] EXT4-fs (loop5): dirty_blocks=80 [ 136.494314][ T49] EXT4-fs (loop5): Block reservation details [ 136.503717][ T49] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 136.512540][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 64 with error 28 [ 136.529279][ T3610] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 136.607514][ T8003] lo: Caught tx_queue_len zero misconfig [ 136.613662][ T7999] xt_CT: No such helper "snmp_trap" [ 136.896607][ T8020] loop2: detected capacity change from 0 to 1024 [ 136.922739][ T8020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.953815][ T8020] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 137.033314][ T8020] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.1544: lblock 2 mapped to illegal pblock 2 (length 1) [ 137.081464][ T8020] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 137.081701][ T8020] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.1544: lblock 0 mapped to illegal pblock 48 (length 1) [ 137.091531][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 137.091577][ C1] EXT4-fs (loop2): initial error at time 1780931358: ext4_map_blocks:791: inode 3: block 2 [ 137.091641][ C1] EXT4-fs (loop2): last error at time 1780931358: ext4_map_blocks:791: inode 3: block 2 [ 137.187357][ T8020] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 137.187470][ T8020] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1544: Failed to acquire dquot type 0 [ 137.218104][ T8020] loop2: lost filesystem error report for type 5 error -117 [ 137.218266][ T8020] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 137.254137][ T8020] loop2: lost filesystem error report for type 5 error -117 [ 137.254261][ T8020] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.1544: mark_inode_dirty error [ 137.278970][ T8020] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 137.279151][ T8020] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 137.337412][ T8020] EXT4-fs (loop2): 1 orphan inode deleted [ 137.350988][ T8020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.376241][ T5689] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 137.407087][ T5689] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:18: Failed to release dquot type 0 [ 137.441277][ T8020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.450883][ T8020] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.1544: Invalid inode table block 1 in block_group 0 [ 137.473535][ T8020] loop2: lost filesystem error report for type 5 error -117 [ 137.473927][ T8020] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 137.481572][ T8030] xt_hashlimit: size too large, truncated to 1048576 [ 137.508646][ T8020] loop2: lost filesystem error report for type 5 error -117 [ 137.508886][ T8020] EXT4-fs error (device loop2): ext4_quota_off:7318: inode #3: comm syz.2.1544: mark_inode_dirty error [ 137.544079][ T8020] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 137.560137][ T8016] netlink: 'syz.1.1542': attribute type 13 has an invalid length. [ 137.582312][ T8016] netlink: 'syz.1.1542': attribute type 17 has an invalid length. [ 137.929509][ T8016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.995656][ T8016] bond3: left promiscuous mode [ 138.003326][ T8016] bridge1: left promiscuous mode [ 138.029146][ T8016] macvlan2: left promiscuous mode [ 138.051634][ T8016] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.043461][ T8104] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 139.050160][ T8104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.076431][ T8104] vhci_hcd vhci_hcd.0: Device attached [ 139.095098][ T8105] vhci_hcd: connection closed [ 139.098264][ T4300] vhci_hcd vhci_hcd.7: stop threads [ 139.111004][ T4300] vhci_hcd vhci_hcd.7: release socket [ 139.116699][ T4300] vhci_hcd vhci_hcd.7: disconnect device [ 139.284244][ T8117] block device autoloading is deprecated and will be removed. [ 139.434403][ T4300] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.478294][ T8129] loop2: detected capacity change from 0 to 128 [ 139.518648][ T8129] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.534452][ T8129] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.583121][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 139.583146][ T28] audit: type=1400 audit(1780931360.548:1113): avc: denied { write } for pid=8128 comm="syz.2.1584" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.655454][ T8132] loop7: detected capacity change from 0 to 128 [ 139.675638][ T8132] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 139.683532][ T8132] FAT-fs (loop7): Filesystem has been set read-only [ 139.695513][ T8132] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fff0000) [ 139.757883][ T8132] bio_check_eod: 18 callbacks suppressed [ 139.757903][ T8132] syz.7.1585: attempt to access beyond end of device [ 139.757903][ T8132] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 139.795245][ T8132] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 139.870872][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.903633][ T8114] netlink: 'syz.4.1578': attribute type 13 has an invalid length. [ 139.918321][ T8114] netlink: 'syz.4.1578': attribute type 17 has an invalid length. [ 139.997947][ T28] audit: type=1326 audit(1780931360.968:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8138 comm="syz.2.1589" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd58059ce59 code=0x0 [ 140.067387][ T8144] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1590'. [ 140.155276][ T8114] macvlan2: left promiscuous mode [ 140.196730][ T8140] syzkaller0: entered promiscuous mode [ 140.202658][ T8140] syzkaller0: entered allmulticast mode [ 140.349838][ T8153] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.496188][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 140.509933][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 140.915601][ T8183] loop7: detected capacity change from 0 to 4096 [ 140.925422][ T8180] loop1: detected capacity change from 0 to 32768 [ 140.936446][ T8183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.951592][ T28] audit: type=1400 audit(1780931361.918:1115): avc: denied { write } for pid=8182 comm="syz.7.1606" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.005733][ T8180] loop1: p1 p3 < > [ 141.159186][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 141.162638][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 141.276191][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.494337][ T3702] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.500551][ T3701] Bluetooth: hci0: command 0x1003 tx timeout [ 141.544748][ T8208] loop2: detected capacity change from 0 to 512 [ 141.556830][ T8208] EXT4-fs: inline encryption not supported [ 141.643166][ T8208] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1612: bad orphan inode 15 [ 141.678415][ T8208] loop2: lost filesystem error report for type 5 error -117 [ 141.680131][ T8208] ext4_test_bit(bit=14, block=5) = 0 [ 141.687539][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 141.687583][ C0] EXT4-fs (loop2): initial error at time 1780931362: ext4_orphan_get:1423 [ 141.687611][ C0] EXT4-fs (loop2): last error at time 1780931362: ext4_orphan_get:1423 [ 141.798075][ T8208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.827212][ T8204] loop7: detected capacity change from 0 to 32768 [ 141.836084][ T8208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.984083][ T8204] loop7: p1 p3 < > [ 141.995682][ T8215] loop1: detected capacity change from 0 to 512 [ 142.105082][ T2984] loop7: p1 p3 < > [ 142.420976][ T8125] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 142.439431][ T8215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.573230][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.623700][ T8205] syz.2.1612 (8205) used greatest stack depth: 8808 bytes left [ 142.637557][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'. [ 142.671630][ T8239] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 142.679269][ T8239] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 142.715237][ T28] audit: type=1400 audit(1780931363.678:1116): avc: denied { setopt } for pid=8227 comm="syz.5.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 142.753979][ T8245] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 142.852379][ T28] audit: type=1400 audit(1780931363.818:1117): avc: denied { setopt } for pid=8251 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.145419][ T8266] loop1: detected capacity change from 0 to 512 [ 143.165748][ T8266] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.1638: corrupted in-inode xattr: invalid ea_ino [ 143.180140][ T8266] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 143.180574][ T8266] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1638: couldn't read orphan inode 15 (err -117) [ 143.201667][ T8266] loop1: lost filesystem error report for type 5 error -117 [ 143.214073][ T8266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.241357][ T8266] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.1638: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 143.244659][ T28] audit: type=1400 audit(1780931364.208:1118): avc: denied { write } for pid=8265 comm="syz.1.1638" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.332978][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.694540][ T4304] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.773501][ T4304] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.840817][ T4304] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.935052][ T4304] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.001537][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.008655][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.015894][ T8287] bridge_slave_0: entered allmulticast mode [ 144.022327][ T8287] bridge_slave_0: entered promiscuous mode [ 144.029114][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.036180][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.048104][ T8287] bridge_slave_1: entered allmulticast mode [ 144.056330][ T8287] bridge_slave_1: entered promiscuous mode [ 144.086074][ T8287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.098486][ T8287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.131933][ T8287] team0: Port device team_slave_0 added [ 144.138724][ T8287] team0: Port device team_slave_1 added [ 144.171741][ T4304] batadv1: left allmulticast mode [ 144.176871][ T4304] batadv1: left promiscuous mode [ 144.182047][ T4304] bridge0: port 3(batadv1) entered disabled state [ 144.190813][ T4304] bridge_slave_1: left allmulticast mode [ 144.200182][ T4304] bridge_slave_1: left promiscuous mode [ 144.205951][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.221389][ T4304] bridge_slave_0: left allmulticast mode [ 144.228042][ T4304] bridge_slave_0: left promiscuous mode [ 144.233959][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.243045][ T8305] loop4: detected capacity change from 0 to 512 [ 144.354406][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 144.375515][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.427150][ T28] audit: type=1400 audit(1780931365.398:1119): avc: denied { connect } for pid=8315 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.466990][ T28] audit: type=1400 audit(1780931365.438:1120): avc: denied { ioctl } for pid=8315 comm="syz.4.1654" path="socket:[20375]" dev="sockfs" ino=20375 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.492134][ T28] audit: type=1400 audit(1780931365.438:1121): avc: denied { read } for pid=8315 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.520760][ T28] audit: type=1400 audit(1780931365.488:1122): avc: denied { getopt } for pid=8315 comm="syz.4.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.719277][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.740602][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.755686][ T4304] bond0 (unregistering): Released all slaves [ 144.774618][ T4304] bond1 (unregistering): Released all slaves [ 144.815700][ T8287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.835179][ T8287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.895600][ T8287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.913371][ T8330] loop2: detected capacity change from 0 to 736 [ 144.925741][ T8287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.937669][ T8287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.965921][ T8287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.987349][ T4304] hsr_slave_0: left promiscuous mode [ 145.003203][ T4304] hsr_slave_1: left promiscuous mode [ 145.025713][ T4304] veth1_macvtap: left promiscuous mode [ 145.035459][ T4304] veth0_macvtap: left promiscuous mode [ 145.041238][ T4304] veth1_vlan: left promiscuous mode [ 145.047585][ T4304] veth0_vlan: left promiscuous mode [ 145.068720][ T28] audit: type=1400 audit(1780931366.038:1123): avc: denied { read } for pid=8331 comm="syz.1.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.206660][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 145.217700][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 145.290947][ T8287] hsr_slave_0: entered promiscuous mode [ 145.301556][ T8287] hsr_slave_1: entered promiscuous mode [ 145.308717][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 145.323176][ T8341] netlink: 'syz.1.1672': attribute type 5 has an invalid length. [ 145.338148][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1672'. [ 145.376004][ T8341] geneve2: entered promiscuous mode [ 145.393421][ T8341] geneve2: entered allmulticast mode [ 145.411388][ T5695] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 145.435576][ T5695] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 145.469529][ T28] audit: type=1400 audit(1780931366.438:1124): avc: denied { mount } for pid=8352 comm="syz.2.1666" name="/" dev="rpc_pipefs" ino=19360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 145.531347][ T5695] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 145.558437][ T5695] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 145.575867][ T28] audit: type=1400 audit(1780931366.468:1125): avc: denied { watch watch_reads } for pid=8352 comm="syz.2.1666" path="/371/file0" dev="rpc_pipefs" ino=19360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 145.672204][ T28] audit: type=1400 audit(1780931366.518:1126): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 145.723222][ T28] audit: type=1400 audit(1780931366.598:1127): avc: denied { write } for pid=8365 comm="syz.1.1670" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.746747][ T28] audit: type=1400 audit(1780931366.638:1128): avc: denied { write } for pid=8348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.801698][ T8287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 145.817540][ T28] audit: type=1400 audit(1780931366.788:1129): avc: denied { write } for pid=8375 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.851773][ T8287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 145.859764][ T8287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 145.875828][ T8287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 145.884669][ T8287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 145.898520][ T8287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 145.924795][ T8380] pimreg: entered allmulticast mode [ 145.936026][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 145.943408][ T8287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 145.956299][ T8287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.967250][ T8380] lo: entered allmulticast mode [ 145.983305][ T8380] lo: left allmulticast mode [ 145.996434][ T8379] pimreg: left allmulticast mode [ 146.064558][ T8287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.091384][ T8287] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.103717][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.111023][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.132139][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.139270][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.278187][ T28] audit: type=1400 audit(1780931367.238:1130): avc: denied { write } for pid=8388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.369021][ T28] audit: type=1400 audit(1780931367.328:1131): avc: denied { write } for pid=8412 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.416544][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 146.495328][ T8287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.548136][ T8378] loop1: detected capacity change from 0 to 4096 [ 146.562945][ T8378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.599688][ T28] audit: type=1400 audit(1780931367.568:1132): avc: denied { write } for pid=8377 comm="syz.1.1675" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.815575][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 146.900815][ T8287] veth0_vlan: entered promiscuous mode [ 146.924589][ T8287] veth1_vlan: entered promiscuous mode [ 146.972347][ T8287] veth0_macvtap: entered promiscuous mode [ 146.988702][ T8287] veth1_macvtap: entered promiscuous mode [ 147.016112][ T8287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.040746][ T8287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.078816][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.102056][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.141414][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.157821][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.176522][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.249355][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 147.644091][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.651429][ C0] bridge0: topology change detected, propagating [ 147.657916][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.665174][ C0] bridge0: topology change detected, propagating [ 148.110331][ T8536] netlink: 'syz.7.1707': attribute type 4 has an invalid length. [ 148.359767][ T6234] IPVS: starting estimator thread 0... [ 148.484172][ T8547] IPVS: using max 2160 ests per chain, 108000 per kthread [ 148.496509][ T8558] loop8: detected capacity change from 0 to 512 [ 148.504255][ T8558] EXT4-fs: Ignoring removed i_version option [ 148.510410][ T8558] EXT4-fs: Ignoring removed bh option [ 148.520851][ T8558] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.1715: inode #13: comm syz.8.1715: iget: illegal inode # [ 148.533780][ T8558] loop8: lost filesystem error report for type 5 error -117 [ 148.534020][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 148.547952][ C1] EXT4-fs (loop8): initial error at time 1780931369: ext4_orphan_get:1397 [ 148.556534][ C1] EXT4-fs (loop8): last error at time 1780931369: ext4_orphan_get:1397 [ 148.565126][ T8558] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1715: couldn't read orphan inode 13 (err -117) [ 148.577144][ T8558] loop8: lost filesystem error report for type 5 error -117 [ 148.577777][ T8558] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.600313][ T8558] EXT4-fs (loop8): shut down requested (1) [ 148.616988][ T8287] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.638091][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1716'. [ 149.433151][ T8595] loop1: detected capacity change from 0 to 1024 [ 149.453213][ T8595] EXT4-fs: Ignoring removed bh option [ 149.463725][ T8597] loop7: detected capacity change from 0 to 512 [ 149.477419][ T8595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.513180][ T8597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.526928][ T8597] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.548543][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.562819][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.649259][ T8612] loop4: detected capacity change from 0 to 128 [ 149.684273][ T8612] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 149.726289][ T8612] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.750577][ T8617] hsr0: entered promiscuous mode [ 149.774921][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1735'. [ 149.803017][ T8617] hsr_slave_0: left promiscuous mode [ 149.821574][ T8617] hsr_slave_1: left promiscuous mode [ 149.831152][ T8589] loop2: detected capacity change from 0 to 4096 [ 149.854712][ T8589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.870044][ T8617] hsr0 (unregistering): left promiscuous mode [ 149.922391][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.030690][ T8628] loop8: detected capacity change from 0 to 256 [ 150.039033][ T8628] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.353744][ T8641] SELinux: failed to load policy [ 150.358869][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 150.358889][ T28] audit: type=1400 audit(1780931371.298:1165): avc: denied { load_policy } for pid=8640 comm="syz.8.1745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 150.484623][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.604149][ T28] audit: type=1400 audit(1780931371.568:1166): avc: denied { map } for pid=8654 comm="syz.2.1748" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.645069][ T28] audit: type=1400 audit(1780931371.568:1167): avc: denied { execute } for pid=8654 comm="syz.2.1748" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 150.680059][ T28] audit: type=1400 audit(1780931371.568:1168): avc: denied { ioctl } for pid=8652 comm="syz.4.1751" path="socket:[20943]" dev="sockfs" ino=20943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.894113][ T8675] loop1: detected capacity change from 0 to 512 [ 150.917518][ T8675] EXT4-fs: Ignoring removed bh option [ 150.947835][ T8675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.965404][ T8675] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.010909][ T28] audit: type=1400 audit(1780931371.978:1169): avc: denied { write } for pid=8674 comm="syz.1.1760" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.076220][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.173276][ T8701] loop2: detected capacity change from 0 to 128 [ 151.190743][ T8701] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 151.206995][ T28] audit: type=1400 audit(1780931372.178:1170): avc: denied { mounton } for pid=8702 comm="syz.1.1767" path="/371/file0" dev="tmpfs" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 151.247397][ T8701] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.278746][ T28] audit: type=1400 audit(1780931372.248:1171): avc: denied { write } for pid=8700 comm="syz.2.1770" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.330266][ T8706] loop1: detected capacity change from 0 to 8192 [ 151.363471][ T8710] SELinux: failed to load policy [ 151.594969][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.657607][ T28] audit: type=1400 audit(1780931372.628:1172): avc: denied { append } for pid=8737 comm="syz.2.1786" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 151.897317][ T28] audit: type=1400 audit(1780931372.868:1173): avc: denied { read } for pid=8753 comm="syz.2.1793" name="file1" dev="tmpfs" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 152.206081][ T8769] loop1: detected capacity change from 0 to 128 [ 152.220137][ T8769] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 152.288708][ T8769] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.375401][ T28] audit: type=1400 audit(1780931373.338:1174): avc: denied { write } for pid=8768 comm="syz.1.1797" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.432334][ T8774] loop8: detected capacity change from 0 to 8192 [ 152.492773][ T8774] loop8: p1 < > p2 p4 < p5 > [ 152.511637][ T8774] loop8: partition table partially beyond EOD, truncated [ 152.519700][ T8774] loop8: p1 start 4294967040 is beyond EOD, truncated [ 152.527808][ T8774] loop8: p2 size 983040 extends beyond EOD, truncated [ 152.540629][ T8774] loop8: p5 size 983040 extends beyond EOD, truncated [ 152.642002][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.055832][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1813'. [ 153.076373][ T8803] team1: entered promiscuous mode [ 153.081462][ T8803] team1: entered allmulticast mode [ 153.086740][ T8803] 8021q: adding VLAN 0 to HW filter on device team1 [ 153.116395][ T8805] netlink: 'syz.4.1814': attribute type 13 has an invalid length. [ 153.127911][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 153.163851][ T8805] netlink: 'syz.4.1814': attribute type 13 has an invalid length. [ 153.173494][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 153.281690][ T8816] netlink: 'syz.2.1819': attribute type 6 has an invalid length. [ 153.720007][ T8833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1824'. [ 154.057707][ T8833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1824'. [ 154.782717][ T8864] loop8: detected capacity change from 0 to 4096 [ 154.805266][ T8864] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.880363][ T8902] netlink: 'syz.2.1850': attribute type 39 has an invalid length. [ 155.166635][ T3082] Process accounting resumed [ 155.259539][ T8287] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.366689][ T8936] loop8: detected capacity change from 0 to 128 [ 155.378689][ T8936] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 155.395950][ T8936] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.430964][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 155.431022][ T28] audit: type=1400 audit(1780931376.398:1191): avc: denied { write } for pid=8935 comm="syz.8.1864" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.563765][ T8287] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.626289][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1867'. [ 155.637041][ T8943] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1867'. [ 155.672811][ T28] audit: type=1326 audit(1780931376.638:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8946 comm="syz.8.1869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3250fce59 code=0x0 [ 155.708896][ T8949] loop7: detected capacity change from 0 to 512 [ 155.718121][ T8949] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.756652][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.837675][ T8958] loop4: detected capacity change from 0 to 512 [ 155.856335][ T8958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.871514][ T28] audit: type=1400 audit(1780931376.848:1193): avc: denied { write } for pid=8957 comm="syz.4.1873" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.911308][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.956072][ T8966] loop2: detected capacity change from 0 to 512 [ 155.971571][ T8966] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.990123][ T8966] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1875: corrupted in-inode xattr: bad e_name length [ 156.013781][ T8966] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.014029][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 156.029793][ C0] EXT4-fs (loop2): initial error at time 1780931376: ext4_iget_extra_inode:5128: inode 15 [ 156.039757][ C0] EXT4-fs (loop2): last error at time 1780931376: ext4_iget_extra_inode:5128: inode 15 [ 156.050593][ T8966] EXT4-fs (loop2): get orphan inode failed [ 156.056612][ T8966] EXT4-fs (loop2): mount failed [ 156.278549][ T28] audit: type=1400 audit(1780931377.248:1194): avc: denied { create } for pid=8984 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.315194][ T28] audit: type=1400 audit(1780931377.248:1195): avc: denied { read } for pid=8984 comm="syz.2.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.344902][ T28] audit: type=1400 audit(1780931377.288:1196): avc: denied { listen } for pid=8986 comm="syz.4.1883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 157.790473][ T9042] loop1: detected capacity change from 0 to 8192 [ 157.819229][ T9042] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.955138][ T9018] loop4: detected capacity change from 0 to 4096 [ 157.979343][ T9018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.036986][ T28] audit: type=1400 audit(1780931379.008:1197): avc: denied { write } for pid=9015 comm="syz.4.1894" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.113525][ T9053] loop2: detected capacity change from 0 to 256 [ 158.167147][ T9053] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.405887][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.537387][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1916'. [ 158.566712][ T28] audit: type=1400 audit(1780931379.538:1198): avc: denied { write } for pid=9062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.590277][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1916'. [ 158.615851][ T9083] netlink: 'syz.2.1919': attribute type 4 has an invalid length. [ 158.637028][ T28] audit: type=1400 audit(1780931379.608:1199): avc: denied { write } for pid=9084 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.649406][ T9083] netlink: 'syz.2.1919': attribute type 4 has an invalid length. [ 158.770038][ T28] audit: type=1400 audit(1780931379.738:1200): avc: denied { listen } for pid=9096 comm="syz.7.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.901007][ T9119] loop8: detected capacity change from 0 to 512 [ 158.915166][ T9119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.941598][ T9119] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1928: iget: bad i_size value: 38620345925642 [ 158.963577][ T9119] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.963967][ T9119] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1928: couldn't read orphan inode 15 (err -117) [ 158.964111][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 158.991539][ C1] EXT4-fs (loop8): initial error at time 1780931379: ext4_orphan_get:1397: inode 15 [ 159.000986][ C1] EXT4-fs (loop8): last error at time 1780931379: ext4_orphan_get:1397: inode 15 [ 159.010382][ T9119] loop8: lost filesystem error report for type 5 error -117 [ 159.014777][ T9119] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.113359][ T9138] loop1: detected capacity change from 0 to 512 [ 159.133035][ T9138] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 159.155940][ T9138] EXT4-fs (loop1): 1 truncate cleaned up [ 159.162349][ T9138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.215497][ T8287] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.251013][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.275469][ T9147] loop8: detected capacity change from 0 to 512 [ 159.293138][ T9147] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 159.343846][ T9147] EXT4-fs (loop8): 1 truncate cleaned up [ 159.351757][ T9147] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.581674][ T8287] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.637626][ T9192] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 159.691064][ T9192] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.834817][ T9216] netlink: 'syz.1.1955': attribute type 4 has an invalid length. [ 159.914355][ T9225] netlink: 'syz.1.1955': attribute type 4 has an invalid length. [ 159.923626][ T5025] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.969203][ T9219] Alternate GPT is invalid, using primary GPT. [ 159.985502][ T9219] loop2: p2 p3 p7 [ 160.091545][ T9238] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.114379][ T9238] ext4 filesystem being mounted at /269/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.220243][ T5025] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.489465][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 160.489482][ T28] audit: type=1400 audit(1780931381.458:1217): avc: denied { remount } for pid=9259 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 160.577481][ T28] audit: type=1400 audit(1780931381.548:1218): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 160.985402][ T9290] IPVS: Scheduler module ip_vs_ not found [ 161.045148][ T9298] set_capacity_and_notify: 3 callbacks suppressed [ 161.045171][ T9298] loop1: detected capacity change from 0 to 128 [ 161.156349][ T9310] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 161.197536][ T9310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.247037][ T9310] bond3: (slave gretap1): making interface the new active one [ 161.255536][ T9310] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 161.424668][ T9334] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2008'. [ 161.439978][ T9334] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2008'. [ 161.532497][ T28] audit: type=1400 audit(1780931382.488:1219): avc: denied { module_load } for pid=9349 comm="syz.1.2014" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 161.641529][ T9355] loop1: detected capacity change from 0 to 8192 [ 161.643533][ T9362] loop8: detected capacity change from 0 to 1024 [ 161.676265][ T9362] EXT4-fs: Ignoring removed bh option [ 161.685936][ T9355] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.708928][ T9362] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.765537][ T28] audit: type=1400 audit(1780931382.738:1220): avc: denied { write } for pid=9361 comm="syz.8.2019" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.873175][ T8287] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.953720][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2023'. [ 161.991513][ T28] audit: type=1326 audit(1780931382.958:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.8.2024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3250fce59 code=0x7ffc0000 [ 162.018594][ T28] audit: type=1326 audit(1780931382.988:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.8.2024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3250fce59 code=0x7ffc0000 [ 162.044487][ T28] audit: type=1326 audit(1780931382.988:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.8.2024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3250fce59 code=0x7ffc0000 [ 162.070563][ T28] audit: type=1326 audit(1780931382.988:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.8.2024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3250fce59 code=0x7ffc0000 [ 162.096336][ T28] audit: type=1326 audit(1780931382.988:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.8.2024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa3250fce59 code=0x7ffc0000 [ 162.146226][ T28] audit: type=1326 audit(1780931382.988:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9379 comm="syz.8.2024" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3250fce59 code=0x7ffc0000 [ 162.328403][ T9392] loop2: detected capacity change from 0 to 1024 [ 162.379746][ T9392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.396211][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 162.518401][ T9413] netlink: 'syz.2.2037': attribute type 1 has an invalid length. [ 162.533135][ T9413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.549543][ T9413] bond2: (slave geneve2): making interface the new active one [ 162.558736][ T9413] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 162.867343][ T9428] loop4: detected capacity change from 0 to 8192 [ 163.240000][ T9468] loop7: detected capacity change from 0 to 512 [ 163.249055][ T9468] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 163.266524][ T9468] EXT4-fs (loop7): 1 truncate cleaned up [ 163.275427][ T9468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.307913][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.505744][ T9491] smc: net device lo applied user defined pnetid SYZ2 [ 163.519932][ T9491] smc: net device lo erased user defined pnetid SYZ2 [ 163.649908][ T5693] Bluetooth: hci0: Frame reassembly failed (-84) [ 163.692977][ T9514] loop1: detected capacity change from 0 to 512 [ 163.711545][ T9514] EXT4-fs: Ignoring removed bh option [ 163.733351][ T9514] EXT4-fs: inline encryption not supported [ 163.745311][ T9514] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.775700][ T9514] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 163.791125][ T9514] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2075: bg 0: block 248: padding at end of block bitmap is not set [ 163.806298][ T9514] loop1: lost filesystem error report for type 5 error -117 [ 163.806595][ T9514] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.2075: Failed to acquire dquot type 1 [ 163.814033][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 163.814058][ C0] EXT4-fs (loop1): last error at time 1780931384: ext4_validate_block_bitmap:441 [ 163.841064][ T9514] loop1: lost filesystem error report for type 5 error -28 [ 163.841674][ T9514] EXT4-fs (loop1): 1 truncate cleaned up [ 163.855201][ T9514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 164.220263][ T9520] netlink: 'syz.8.2079': attribute type 83 has an invalid length. [ 164.462571][ T9503] syz.1.2075 (9503) used greatest stack depth: 8616 bytes left [ 164.526744][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 164.633828][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 164.685090][ T9537] loop7: detected capacity change from 0 to 8192 [ 164.716320][ T9537] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.902341][ T9553] loop1: detected capacity change from 0 to 2048 [ 164.958499][ T9553] loop1: p4 < > [ 165.020316][ T9559] netlink: 'syz.2.2095': attribute type 12 has an invalid length. [ 165.040168][ T9559] netlink: 'syz.2.2095': attribute type 29 has an invalid length. [ 165.048351][ T9559] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2095'. [ 165.057808][ T9559] netlink: 'syz.2.2095': attribute type 2 has an invalid length. [ 165.065864][ T9559] netlink: 'syz.2.2095': attribute type 3 has an invalid length. [ 165.073620][ T9559] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2095'. [ 165.509073][ T9595] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2111'. [ 165.518971][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.526241][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.714305][ T3701] Bluetooth: hci0: command 0x1003 tx timeout [ 165.720433][ T3702] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.720414][ T9621] loop7: detected capacity change from 0 to 512 [ 168.753812][ T9621] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2122: bad orphan inode 17 [ 168.790091][ T9624] loop1: detected capacity change from 0 to 8192 [ 168.792749][ T9621] loop7: lost filesystem error report for type 5 error -117 [ 168.804008][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 168.817826][ C0] EXT4-fs (loop7): initial error at time 1780931389: ext4_orphan_get:1423 [ 168.824612][ T9621] ext4_test_bit(bit=16, block=4) = 1 [ 168.826450][ C0] EXT4-fs (loop7): last error at time 1780931389: ext4_orphan_get:1423 [ 168.840433][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'. [ 168.851217][ T9631] netlink: 'syz.2.2126': attribute type 6 has an invalid length. [ 168.861972][ T9621] is_bad_inode(inode)=0 [ 168.866391][ T9621] NEXT_ORPHAN(inode)=0 [ 168.870598][ T9621] max_ino=32 [ 168.871183][ T9631] vxlan0: entered promiscuous mode [ 168.873868][ T9621] i_nlink=1 [ 168.875299][ T9621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.963080][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 168.963099][ T28] audit: type=1400 audit(1780931389.928:1250): avc: denied { mounton } for pid=9619 comm="syz.7.2122" path="/296/bus" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.992144][ T6235] kernel write not supported for file /ppp (pid: 6235 comm: kworker/1:9) [ 169.164702][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.203229][ T9642] loop7: detected capacity change from 0 to 512 [ 169.235914][ T9642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.254178][ T9642] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.293138][ T9651] loop1: detected capacity change from 0 to 512 [ 169.303614][ T5025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.327875][ T9651] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 169.344230][ T9651] EXT4-fs (loop1): 1 truncate cleaned up [ 169.358792][ T9651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.444510][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.479994][ T9662] batadv_slave_0: entered promiscuous mode [ 169.510030][ T9661] batadv_slave_0: left promiscuous mode [ 169.891471][ T9691] loop7: detected capacity change from 0 to 128 [ 169.924896][ T9691] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.949787][ T9691] ext4 filesystem being mounted at /303/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.044690][ T28] audit: type=1400 audit(1780931391.008:1251): avc: denied { write } for pid=9690 comm="syz.7.2152" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.548826][ T9695] batadv_slave_0: entered promiscuous mode [ 170.571784][ T9693] batadv_slave_0: left promiscuous mode [ 170.585292][ T5025] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.873023][ T28] audit: type=1400 audit(1780931391.838:1252): avc: denied { mounton } for pid=9725 comm="syz.4.2167" path="/proc/1026/cgroup" dev="proc" ino=24668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 171.045176][ T9738] xt_hashlimit: size too large, truncated to 1048576 [ 171.139226][ T9741] loop4: detected capacity change from 0 to 1024 [ 171.148822][ T9741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.204511][ T9741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.321562][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.451350][ T28] audit: type=1326 audit(1780931392.418:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d00ce59 code=0x7ffc0000 [ 171.489138][ T28] audit: type=1326 audit(1780931392.418:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d00ce59 code=0x7ffc0000 [ 171.515837][ T28] audit: type=1326 audit(1780931392.418:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d00ce59 code=0x7ffc0000 [ 171.542783][ T28] audit: type=1326 audit(1780931392.418:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d00ce59 code=0x7ffc0000 [ 171.569176][ T28] audit: type=1326 audit(1780931392.418:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd18d00ce59 code=0x7ffc0000 [ 171.597269][ T28] audit: type=1326 audit(1780931392.418:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d00ce59 code=0x7ffc0000 [ 171.623177][ T28] audit: type=1326 audit(1780931392.418:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.4.2179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd18d00ce59 code=0x7ffc0000 [ 171.712096][ T5689] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.727427][ T9757] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 171.741492][ T5689] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.756461][ T9757] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 171.759559][ T9763] loop1: detected capacity change from 0 to 512 [ 171.819500][ T5689] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.849163][ T5689] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.861393][ T9763] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.2182: Bad quota inum: 2, type: 1 [ 171.883808][ T9763] loop1: lost filesystem error report for type 5 error -117 [ 171.884027][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 171.897856][ C0] EXT4-fs (loop1): initial error at time 1780931392: ext4_quota_enable:7221 [ 171.906621][ C0] EXT4-fs (loop1): last error at time 1780931392: ext4_quota_enable:7221 [ 171.915147][ T9763] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 171.931662][ T9763] EXT4-fs (loop1): mount failed [ 171.976353][ T5689] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.998944][ T5689] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.099036][ T5689] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.121787][ T5689] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.251745][ T5689] bridge_slave_1: left allmulticast mode [ 172.259479][ T5689] bridge_slave_1: left promiscuous mode [ 172.266187][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.274449][ T5689] bridge_slave_0: left allmulticast mode [ 172.280269][ T5689] bridge_slave_0: left promiscuous mode [ 172.286289][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.368563][ T5689] bridge0 (unregistering): left allmulticast mode [ 172.378061][ T9800] raw_sendmsg: syz.4.2195 forgot to set AF_INET. Fix it! [ 172.466949][ T5689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.477704][ T5689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.488261][ T5689] bond0 (unregistering): Released all slaves [ 172.530015][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 172.585800][ T5689] hsr_slave_0: left promiscuous mode [ 172.595600][ T5689] hsr_slave_1: left promiscuous mode [ 172.606516][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.614389][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.624440][ T9816] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 172.634462][ T5689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.643815][ T5689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.665025][ T5689] veth1_macvtap: left promiscuous mode [ 172.676305][ T5689] veth0_macvtap: left promiscuous mode [ 172.682011][ T5689] veth1_vlan: left promiscuous mode [ 172.687821][ T5689] veth0_vlan: left promiscuous mode [ 172.794757][ T5689] team0 (unregistering): Port device team_slave_1 removed [ 172.805562][ T5689] team0 (unregistering): Port device team_slave_0 removed [ 172.844075][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 172.906047][ T9770] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.917612][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.929250][ T9770] bridge_slave_0: entered allmulticast mode [ 172.935841][ T9770] bridge_slave_0: entered promiscuous mode [ 172.942979][ T9770] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.950433][ T9770] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.957990][ T9770] bridge_slave_1: entered allmulticast mode [ 172.966715][ T9770] bridge_slave_1: entered promiscuous mode [ 172.985594][ T9770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.996405][ T9770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.024781][ T9770] team0: Port device team_slave_0 added [ 173.043561][ T9770] team0: Port device team_slave_1 added [ 173.071523][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.088435][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.114724][ T9770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.232060][ T9770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.240456][ T9770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.267253][ T9770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.280236][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.299874][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 173.378362][ T9869] loop1: detected capacity change from 0 to 512 [ 173.395861][ T9869] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.425868][ T9869] EXT4-fs (loop1): 1 truncate cleaned up [ 173.426426][ T5689] IPVS: stop unused estimator thread 0... [ 173.447769][ T9770] hsr_slave_0: entered promiscuous mode [ 173.454341][ T9770] hsr_slave_1: entered promiscuous mode [ 173.460467][ T9869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.590383][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.711036][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 173.740548][ T9902] loop6: detected capacity change from 0 to 8 [ 173.750680][ T9770] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 173.768034][ T9770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.785051][ T9770] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 173.797114][ T9770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.804605][ T9902] loop6: detected capacity change from 8 to 7 [ 173.811965][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.821181][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.832627][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.841834][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.851743][ T9902] loop6: unable to read partition table [ 173.858514][ T9770] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 173.865855][ T9902] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 173.865855][ T9902] .BL_se) failed (rc=-5) [ 173.884543][ T9905] loop6: detected capacity change from 7 to 0 [ 173.893177][ T9770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.901326][ T9770] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 173.953466][ T9770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.083374][ T9770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.097199][ T9770] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.126591][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.133743][ T5695] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.160975][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 174.160995][ T28] audit: type=1400 audit(1780931395.128:1276): avc: denied { write } for pid=9911 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.167363][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.197387][ T5689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.204516][ T9945] loop4: detected capacity change from 0 to 512 [ 174.261319][ T28] audit: type=1400 audit(1780931395.228:1277): avc: denied { write } for pid=9946 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.286128][ T9945] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.316508][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 174.334217][ T9945] EXT4-fs (loop4): 1 truncate cleaned up [ 174.340414][ T9945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.363621][ T28] audit: type=1400 audit(1780931395.328:1278): avc: denied { write } for pid=9942 comm="syz.4.2228" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.554967][ T28] audit: type=1400 audit(1780931651.572:1279): avc: denied { sys_module } for pid=9770 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 174.607133][ T28] audit: type=1400 audit(1780931651.572:1280): avc: denied { module_request } for pid=9770 comm="syz-executor" kmod="caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 174.660841][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.673395][ T28] audit: type=1400 audit(1780931651.602:1281): avc: denied { search } for pid=9970 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.701721][ T9770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.718348][ T28] audit: type=1400 audit(1780931651.612:1282): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.743956][ T28] audit: type=1400 audit(1780931651.612:1283): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.768236][ T28] audit: type=1400 audit(1780931651.612:1284): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.851096][ T28] audit: type=1400 audit(1780931651.662:1285): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 174.926510][ T4304] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.060725][ T9770] veth0_vlan: entered promiscuous mode [ 175.069926][ T9770] veth1_vlan: entered promiscuous mode [ 175.111955][ T9770] veth0_macvtap: entered promiscuous mode [ 175.127361][ T9770] veth1_macvtap: entered promiscuous mode [ 175.149067][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.164830][ T9770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.191492][ T5695] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.200422][ T5695] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.503940][ T5695] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.538463][ T5695] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.700179][T10026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2249'. [ 175.750036][T10031] netlink: 'syz.1.2250': attribute type 3 has an invalid length. [ 175.760286][T10031] netlink: 'syz.1.2250': attribute type 4 has an invalid length. [ 175.768969][T10031] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.2250'. [ 175.990380][T10045] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 176.047829][T10050] loop9: detected capacity change from 0 to 512 [ 176.063736][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.077440][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.089786][T10050] EXT4-fs: Ignoring removed oldalloc option [ 176.123741][T10050] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.137148][T10050] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.155273][T10050] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #18: comm syz.9.2260: corrupted inode contents [ 176.167374][T10050] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 176.168372][T10050] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #18: comm syz.9.2260: mark_inode_dirty error [ 176.189234][T10050] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 176.189432][T10050] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #18: comm syz.9.2260: corrupted inode contents [ 176.214244][T10050] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 176.218257][T10050] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #18: comm syz.9.2260: mark_inode_dirty error [ 176.242128][T10050] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 176.242850][T10050] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #18: comm syz.9.2260: mark inode dirty (error -117) [ 176.264922][T10050] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 176.265645][T10050] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 176.289218][T10066] loop8: detected capacity change from 0 to 1024 [ 176.306367][T10066] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 176.318979][ T9770] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.346302][T10066] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.2264: lblock 2 mapped to illegal pblock 2 (length 1) [ 176.368774][T10066] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 176.368893][T10066] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.2264: lblock 0 mapped to illegal pblock 48 (length 1) [ 176.378034][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 176.378060][ C0] EXT4-fs (loop8): initial error at time 1780931653: ext4_map_blocks:791: inode 3: block 2 [ 176.378117][ C0] EXT4-fs (loop8): last error at time 1780931653: ext4_map_blocks:791: inode 3: block 2 [ 176.420083][T10066] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 176.420314][T10066] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2264: Failed to acquire dquot type 0 [ 176.449167][T10073] netlink: 'syz.2.2269': attribute type 7 has an invalid length. [ 176.457327][T10073] netlink: 'syz.2.2269': attribute type 7 has an invalid length. [ 176.468230][T10066] loop8: lost filesystem error report for type 5 error -117 [ 176.470146][T10066] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 176.487088][T10066] loop8: lost filesystem error report for type 5 error -117 [ 176.487631][T10066] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.2264: mark_inode_dirty error [ 176.506601][T10066] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 176.507781][T10066] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 176.532429][T10066] EXT4-fs (loop8): 1 orphan inode deleted [ 176.538868][T10066] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.552484][ T5689] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.576067][ T5689] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:18: Failed to release dquot type 0 [ 176.591998][T10079] netlink: 'syz.2.2270': attribute type 3 has an invalid length. [ 176.600282][T10066] EXT4-fs: Ignoring removed bh option [ 176.609582][T10066] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 176.631439][T10066] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.2264: lblock 0 mapped to illegal pblock 48 (length 1) [ 176.668009][T10081] loop9: detected capacity change from 0 to 512 [ 176.707834][T10066] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.721202][T10081] EXT4-fs: Ignoring removed bh option [ 176.733034][T10081] EXT4-fs: inline encryption not supported [ 176.746840][T10081] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.856789][T10081] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 176.900656][T10081] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2271: bg 0: block 248: padding at end of block bitmap is not set [ 176.940832][T10081] loop9: lost filesystem error report for type 5 error -117 [ 176.941144][T10081] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.2271: Failed to acquire dquot type 1 [ 176.959786][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 176.959808][ C0] EXT4-fs (loop9): last error at time 1780931653: ext4_validate_block_bitmap:441 [ 176.981619][T10089] xt_hashlimit: size too large, truncated to 1048576 [ 177.010419][ T3702] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.015884][T10081] loop9: lost filesystem error report for type 5 error -28 [ 177.017864][T10081] EXT4-fs (loop9): 1 truncate cleaned up [ 177.031841][T10081] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 177.275800][T10103] veth0: entered promiscuous mode [ 177.292067][T10103] bond0: entered promiscuous mode [ 177.316090][T10103] bond_slave_0: entered promiscuous mode [ 177.332955][T10103] bond_slave_1: entered promiscuous mode [ 177.398683][T10108] loop8: detected capacity change from 0 to 128 [ 177.410268][T10108] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 177.439192][T10106] syzkaller0: entered promiscuous mode [ 177.455778][T10108] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 177.466655][T10106] syzkaller0: entered allmulticast mode [ 177.470132][T10108] FAT-fs (loop8): Filesystem has been set read-only [ 177.486983][T10108] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 177.502031][T10108] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 177.511103][T10102] bond0: left promiscuous mode [ 177.516791][T10108] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 177.524407][T10102] bond_slave_0: left promiscuous mode [ 177.547083][T10102] bond_slave_1: left promiscuous mode [ 177.561980][ T8287] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 177.570175][T10102] veth0: left promiscuous mode [ 177.828086][ T4300] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 178.043678][T10142] loop4: detected capacity change from 0 to 512 [ 178.052839][T10142] EXT4-fs: inline encryption not supported [ 178.059102][T10142] EXT4-fs: inline encryption not supported [ 178.075372][ T9770] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 178.084983][T10142] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.129555][T10142] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 178.160668][T10142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2294: bg 0: block 248: padding at end of block bitmap is not set [ 178.190756][T10142] loop4: lost filesystem error report for type 5 error -117 [ 178.192384][T10142] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2294: Failed to acquire dquot type 1 [ 178.199826][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 178.199862][ C1] EXT4-fs (loop4): last error at time 1780931655: ext4_validate_block_bitmap:441 [ 178.269793][T10142] loop4: lost filesystem error report for type 5 error -28 [ 178.270306][T10142] EXT4-fs (loop4): 1 truncate cleaned up [ 178.284104][T10142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 178.413538][ T5689] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:18: Failed to release dquot type 1 [ 178.432055][T10142] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 178.464302][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 178.610849][T10173] loop8: detected capacity change from 0 to 512 [ 178.626931][T10173] EXT4-fs: Ignoring removed bh option [ 178.644146][T10173] EXT4-fs: inline encryption not supported [ 178.654527][T10173] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.687228][T10173] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 178.714539][T10173] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2301: bg 0: block 248: padding at end of block bitmap is not set [ 178.729289][T10173] loop8: lost filesystem error report for type 5 error -117 [ 178.729615][T10173] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.2301: Failed to acquire dquot type 1 [ 178.736992][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 178.737010][ C1] EXT4-fs (loop8): last error at time 1780931655: ext4_validate_block_bitmap:441 [ 178.788251][T10173] loop8: lost filesystem error report for type 5 error -28 [ 178.830693][T10173] EXT4-fs (loop8): 1 truncate cleaned up [ 178.840511][T10182] loop9: detected capacity change from 0 to 512 [ 178.848355][T10173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 178.864576][T10182] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 178.876734][T10182] EXT4-fs (loop9): 1 truncate cleaned up [ 178.883186][T10182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.989727][ T9770] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.105573][T10190] loop9: detected capacity change from 0 to 256 [ 179.215364][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 179.388425][T10173] syz.8.2301 (10173) used greatest stack depth: 8544 bytes left [ 179.651787][ T8287] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 179.695406][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 179.695429][ T28] audit: type=1400 audit(1780931656.722:1388): avc: denied { create } for pid=10201 comm="syz.8.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.731632][ T28] audit: type=1400 audit(1780931656.752:1389): avc: denied { connect } for pid=10201 comm="syz.8.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.769148][ T28] audit: type=1400 audit(1780931656.792:1390): avc: denied { read write } for pid=10203 comm="syz.4.2320" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 179.855833][ T28] audit: type=1400 audit(1780931656.792:1391): avc: denied { open } for pid=10203 comm="syz.4.2320" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.085680][ T2984] ================================================================== [ 180.093822][ T2984] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 180.101728][ T2984] [ 180.104065][ T2984] write to 0xffff8881084e0b40 of 4 bytes by task 3292 on cpu 0: [ 180.111695][ T2984] d_make_discardable+0x4f/0xa0 [ 180.116587][ T2984] simple_unlink+0x68/0x80 [ 180.121027][ T2984] shmem_unlink+0x12d/0x140 [ 180.125570][ T2984] vfs_unlink+0x1c7/0x490 [ 180.129944][ T2984] filename_unlinkat+0x1e2/0x410 [ 180.134903][ T2984] __se_sys_unlink+0x2b/0xe0 [ 180.139523][ T2984] __x64_sys_unlink+0x1f/0x30 [ 180.144304][ T2984] x64_sys_call+0x2eb6/0x3020 [ 180.149025][ T2984] do_syscall_64+0x12c/0x3b0 [ 180.153671][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.159611][ T2984] [ 180.161955][ T2984] read to 0xffff8881084e0b40 of 4 bytes by task 2984 on cpu 1: [ 180.169526][ T2984] step_into_slowpath+0x139/0x4c0 [ 180.174586][ T2984] path_lookupat+0x330/0x500 [ 180.179187][ T2984] filename_lookup+0x190/0x390 [ 180.183966][ T2984] do_readlinkat+0x74/0x2f0 [ 180.188518][ T2984] __x64_sys_readlink+0x47/0x60 [ 180.193409][ T2984] x64_sys_call+0x2b51/0x3020 [ 180.198121][ T2984] do_syscall_64+0x12c/0x3b0 [ 180.203011][ T2984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.208932][ T2984] [ 180.211266][ T2984] value changed: 0x08300080 -> 0x00004080 [ 180.216984][ T2984] [ 180.219310][ T2984] Reported by Kernel Concurrency Sanitizer on: [ 180.225476][ T2984] CPU: 1 UID: 0 PID: 2984 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 180.234348][ T2984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.244414][ T2984] ================================================================== [ 184.687009][ T28] audit: type=1400 audit(1780931661.712:1392): avc: denied { read } for pid=10241 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.712860][ T28] audit: type=1400 audit(1780931661.712:1393): avc: denied { read open } for pid=10241 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.739318][ T28] audit: type=1400 audit(1780931661.712:1394): avc: denied { getattr } for pid=10241 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.767099][ T28] audit: type=1400 audit(1780931661.712:1395): avc: denied { getattr } for pid=10241 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.795030][ T28] audit: type=1400 audit(1780931661.752:1396): avc: denied { read } for pid=10243 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.819047][ T28] audit: type=1400 audit(1780931661.752:1397): avc: denied { open } for pid=10243 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.844761][ T28] audit: type=1400 audit(1780931661.842:1398): avc: denied { write } for pid=10240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.868191][ T28] audit: type=1400 audit(1780931661.842:1399): avc: denied { add_name } for pid=10240 comm="dhcpcd-run-hook" name="resolv.conf.eth18.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.891756][ T28] audit: type=1400 audit(1780931661.842:1400): avc: denied { create } for pid=10240 comm="dhcpcd-run-hook" name="resolv.conf.eth18.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.915890][ T28] audit: type=1400 audit(1780931661.842:1401): avc: denied { write } for pid=10240 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth18.ipv4ll" dev="tmpfs" ino=12414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.942835][ T28] audit: type=1400 audit(1780931661.852:1402): avc: denied { append } for pid=10240 comm="dhcpcd-run-hook" name="resolv.conf.eth18.ipv4ll" dev="tmpfs" ino=12414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1