last executing test programs: 2m22.474072582s ago: executing program 3 (id=56): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000500)={0x5, 0x2000027, 0x20000000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 2m22.375955934s ago: executing program 3 (id=61): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 2m22.285214296s ago: executing program 3 (id=67): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2m22.186397668s ago: executing program 3 (id=72): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000200)={[{@errors_remount}, {@resgid}, {@norecovery}, {@nolazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@block_validity}]}, 0x1, 0x783, &(0x7f0000000fc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='.\x00', &(0x7f0000000000)='ext4\x00', 0x0, 0x0) 2m22.007770683s ago: executing program 3 (id=80): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x3, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m21.586485372s ago: executing program 3 (id=98): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x48, 0x31, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 2m21.532402693s ago: executing program 32 (id=98): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_bp={0x0, 0x3}, 0x1a3bd, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0x48, 0x31, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 1m52.251386505s ago: executing program 5 (id=937): mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) 1m52.177684017s ago: executing program 5 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x20, r1, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048055}, 0x0) 1m52.08252013s ago: executing program 5 (id=945): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x24, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0xce, 0x0, 0x0, @u64}]}, @nested={0x4, 0x2e}]}, 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 1m51.942012842s ago: executing program 5 (id=951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1m51.885986894s ago: executing program 5 (id=954): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 1m51.790421506s ago: executing program 5 (id=957): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) 1m36.802025255s ago: executing program 33 (id=957): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) 1.231422141s ago: executing program 2 (id=4309): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 1.168550612s ago: executing program 2 (id=4313): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.167707312s ago: executing program 1 (id=4323): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a00340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d89cb9412c30c45f9d4d63d267d2a43f03a47fa56b300"/318], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 1.099114104s ago: executing program 1 (id=4316): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x20004000) 1.003283086s ago: executing program 6 (id=4318): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) 904.487698ms ago: executing program 1 (id=4320): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 893.830779ms ago: executing program 4 (id=4321): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000200)={0x1f, 0x3, 0x0, 0x1000, 0x3e, 0x0, 0x0}) 893.336009ms ago: executing program 6 (id=4322): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 836.63321ms ago: executing program 6 (id=4324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) 836.08726ms ago: executing program 2 (id=4325): r0 = socket(0x1e, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1e}}], 0x400000000000181, 0x9200000000044155) 774.446622ms ago: executing program 4 (id=4327): setuid(0xee01) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) 751.007772ms ago: executing program 6 (id=4328): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x3c, 0x17, 0xa, 0x5, 0x0, 0x0, {0x9, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 725.649993ms ago: executing program 2 (id=4329): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x20a00) setuid(0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000b00)="000600000000", 0x0, 0xfffffe00, 0x0, 0x3, 0x0}) 678.570493ms ago: executing program 6 (id=4330): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) 656.153565ms ago: executing program 2 (id=4332): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x20004000) 641.177755ms ago: executing program 4 (id=4333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) 602.456615ms ago: executing program 0 (id=4334): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000040)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1dc1556953231", 0x23}, {&(0x7f00000007c0)="43f8d35075f3da60f330f94c842e4f5a081a2412f81853dbf7a1e6dfdf", 0x1d}], 0x3}, 0x400c0c8) 594.580486ms ago: executing program 2 (id=4335): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x74, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usbip_server_init(0x5) 548.412187ms ago: executing program 4 (id=4336): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 546.181907ms ago: executing program 6 (id=4346): r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 518.704828ms ago: executing program 0 (id=4337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@@$\x00'}]}]}]}]}, 0x40}}, 0x0) 365.691601ms ago: executing program 0 (id=4338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) 252.621634ms ago: executing program 1 (id=4339): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000001140)={[{@errors_continue}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x495, &(0x7f0000001340)="$eJzs3M9vFFUcAPDv7rblt62IP0DQChKJP1pafsjBC0YTD5qY6AHjqbaFIAs1tCZCiIIHPBoS70ZvJv4FXsSLUU8mnkw08WhMiOECeBozuzPLtt1tt+12V9nPJxl4b+dN3/vOzJt9+2ZnA+hZw+k/hYitEfFbRAxWs/MLDFf/u33z0uSdm5cmC5Ekb/xdqJS7dfPSZF40325LNZMkS9R79e2IiXJ5+nyWH507+97o7IWLz50+O3Fq+tT0ufFjxw4f2jNwdPxIW+JM47q168OZ3Ttfeevaa5Mnrr3z49dpe7dm6+vjaJfh6t5taH+7K+uybXXpQl8XG8KKlCIiPVz9lf4/GKXYVFs3GC9/3NXGAesqSYrJhuarLyfAPSwdqDeUDg2SYu06Adxr8jf69PNvvnRg2PGfceN41OYxbmdLdU1f5Ne+/uwz0noYjogTl//5PF1ineYhAADqXT8eEc82Gv8V46G6cvdl91CGIuL+iNgeEQ9ExI6IeDCiUvbhiHhkhfUvvEOyePyTDK4qsBal478Xsntb88d/+egvhkpZblsl/v7CydPl6YPZPjkQ/RvS/NgSdXz30i+fNltXP/5Ll7T+fCyYteOvvgUTdFMTcxNribnejSsRu/oaxV+ojXnT8fHOiNi1yjpOP/3V7mbrhpaNfwltGJQnX0Q8VT3+l2NB/LlC0/uTY88fHT8yujHK0wdH87NisZ9+vvp6s/oXH//9X0a0GH8b3LiexOYF5/+C3TpUGMhS5fL0+dkVVvBrxNXfP2n6mWa15/9A4c1KOm/aBxNzc+fHIgYKry5+ffzutnk+L5+e/wf21eIvRF3/355tkx7/RyMiPYn3RMRjEfF41vYnImJvROxbYhf88OKT7648/iVm5dsojX+q4fWvdv4PpanZCxfPVO7XryJROvP9NyuPP7U5O/6HK7kD2TatXP9abeBa9x8AAAD8HxQr34EvFEdq6WJxZKT6Hf4dsblYnpmde+bkzPvnpqrflR+K/mI+0zVYNx86ls3l5fnxBflD2bzxZ6VNlfzI5Ex5qtvBQ4/b0qT/Ryniz1K1zB/dbiSwfjyvBb1L/4fepf9D79L/oXfp/9C7GvX/j7rQDqDzlnn/39SpdgCdZ/wPvUv/h961XP/f25lnkYHOavpsfHFNj/xLLJPYGBHr8Ze/HVjbbzW0noji3VcGIqK1re4k3d7znUqUWihzJeuF1Vf6G+/DvpZ/zGJeIn9TX77whoarunhRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaKN/AwAA//8WccuC") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) 252.084644ms ago: executing program 0 (id=4350): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 202.987555ms ago: executing program 4 (id=4340): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1, &(0x7f0000000380), 0x1, 0xbc5, &(0x7f0000000700)="$eJzs3M9rHNcdAPDvjH7balcupdS9WKUUG0rXsouMbQq1i0svPRTaa8BCXhmh9Q8kBUeyDqvkHwhJzoFcAklMgg/x2ZcEcs0lca4xOQRMUKwEQkgUZn9IsrSrH/GuxpE+H3ia9+bNzPt+NdLOe7C7ARxYw9mPNOJoRFxOIgr1/WlE9FZr/RGV2nHLSwvj3y4tjCexsvK/r5JIIuLx0sJ441pJfXu43uiPiI//mcRvXto87szc/NRYuVyarrdPzl67eXJmbv6vk9fGrpaulq6fOnN29PTomZFzo23L9bvPL9z75o///qLy/ds/3Pn61TeTuBCD9b71edSzfmrDMbz6O1mvOyLG2nD9Z0FXPZ/1eSbd25yUdjgoAABaStfN4X4XheiKtclbIT74JNfgAAAAgLZY6YpYAQAAAPa5xPofAAAA9rnG+wAeLy2MN0q+70jYW48uRsRQLf/leqn1dEeluu2Pnog49DiJ9R9rTWqnPbXhiHj42bn3shJNPofcaZXFiPh9s/ufVPMfqn8SemP+aUSMtGH84Q3tX1L+F9owft75A3Aw3b9Ye5Btfv6lq/OfaPL8627y7Po58n7+NeZ/y5vmf2v5d7WY//13h2Pcfuv1W636svz/fu9f7zZKNn62faqkduHRYsQfupvln6zmn7TI//IOxyj8eKvUqi/v/FfeiDgezfNvSLb+fqKTE5Pl0kjtZ9MxFj8afafV+Hnnn93/Qy3y3+7+33ziSq2/1Oe5S5futurbPv/0y97k/9Vab33PC2Ozs9OnInqT/2zef3rrfBvHNK6R5X/iT1v//zfLP3tNqNR/D1nmi/Vt1n5xw5j/uHP7/a3yz9Z+ed7/K63v/9mt7v/LOxzjzx++cqJV3/r1b1ay8R8mtbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADSkETEYSVqMiKRaT9NiMeJwRPw2DqXlGzOzf5m48fz1K1lfxFD0pBOT5dJIRBRq7SRrn6rW19qnN7T/FhFHIuK1wkC1XRy/Ub6Sd/IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsOhwRg5GkxYhII2K5kKbFYt5RAQAAAG03lHcAAAAAQMdZ/wMAAMD+Z/0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAhx05dv9BEhGV8wPVkumt9/XkGhnQaWneAQC56co7ACA33XkHAORml2t80wXYh5JW+yu1bX/LM/s6ExAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz6TjR+8/SCKicn6gWjK99b6epmcc28PogE5K8w4AyE3XVp3dexcHsPf8i8PB1XyNDxwkyTb9/WvHVJ7s6etYTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ewarJUmLEZFW62laLEb8KiKGoieZmCyXRiLi1xHxaaGnL2v35R00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbTczNz81Vi6XplVUdlEZ8PfT/kry5J6uiMgvnpxfmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyMXM3PzUWLlcmp7JOxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgbzNz81Nj5XJpegeVu7s5eF0l7xwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjPTwEAAP//ZJAJlQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 170.372726ms ago: executing program 0 (id=4341): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000000)={0x0, 0x7fffffff}) 86.305768ms ago: executing program 0 (id=4342): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 78.919108ms ago: executing program 1 (id=4343): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x20a00) setuid(0xee01) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000b00)="000600000000", 0x0, 0xfffffe00, 0x0, 0x3, 0x0}) 168.1µs ago: executing program 1 (id=4344): setuid(0xee01) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) 0s ago: executing program 4 (id=4345): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@showassoc}, {@nojoliet}, {@map_acorn}]}, 0x1, 0x566, &(0x7f0000000540)="$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") r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='9', 0x0) kernel console output (not intermixed with test programs): pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 120.003368][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.0.2523 Not tainted syzkaller #0 PREEMPT(lazy) [ 120.003461][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.003480][ T9650] Call Trace: [ 120.003487][ T9650] [ 120.003499][ T9650] __dump_stack+0x1d/0x30 [ 120.003603][ T9650] dump_stack_lvl+0x95/0xd0 [ 120.003631][ T9650] dump_stack+0x15/0x1b [ 120.003704][ T9650] warn_alloc+0x145/0x1c0 [ 120.003739][ T9650] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 120.003839][ T9650] ? __futex_wait+0x1fd/0x260 [ 120.003872][ T9650] ? __pfx_futex_wake_mark+0x10/0x10 [ 120.003958][ T9650] ? should_fail_ex+0x30/0x270 [ 120.003997][ T9650] ? xskq_create+0x36/0xe0 [ 120.004031][ T9650] ? should_failslab+0x8c/0xb0 [ 120.004055][ T9650] vmalloc_user_noprof+0x7d/0xb0 [ 120.004085][ T9650] ? xskq_create+0x80/0xe0 [ 120.004119][ T9650] xskq_create+0x80/0xe0 [ 120.004140][ T9650] xsk_init_queue+0x70/0xb0 [ 120.004161][ T9650] xsk_setsockopt+0x3ef/0x640 [ 120.004203][ T9650] ? __pfx_xsk_setsockopt+0x10/0x10 [ 120.004256][ T9650] __sys_setsockopt+0x184/0x200 [ 120.004293][ T9650] __x64_sys_setsockopt+0x64/0x80 [ 120.004326][ T9650] x64_sys_call+0x2327/0x3020 [ 120.004357][ T9650] do_syscall_64+0x136/0x3c0 [ 120.004413][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.004446][ T9650] RIP: 0033:0x7f78816fde59 [ 120.004473][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.004499][ T9650] RSP: 002b:00007f7880157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 120.004519][ T9650] RAX: ffffffffffffffda RBX: 00007f7881985fa0 RCX: 00007f78816fde59 [ 120.004606][ T9650] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 120.004622][ T9650] RBP: 00007f7881793e6f R08: 0000000000000004 R09: 0000000000000000 [ 120.004635][ T9650] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.004652][ T9650] R13: 00007f7881986038 R14: 00007f7881985fa0 R15: 00007ffeb887cc48 [ 120.004715][ T9650] [ 120.210645][ T9650] Mem-Info: [ 120.217184][ T9650] active_anon:42220 inactive_anon:1 isolated_anon:0 [ 120.217184][ T9650] active_file:0 inactive_file:25591 isolated_file:0 [ 120.217184][ T9650] unevictable:0 dirty:261 writeback:0 [ 120.217184][ T9650] slab_reclaimable:3427 slab_unreclaimable:19593 [ 120.217184][ T9650] mapped:42363 shmem:32898 pagetables:1856 [ 120.217184][ T9650] sec_pagetables:0 bounce:0 [ 120.217184][ T9650] kernel_misc_reclaimable:0 [ 120.217184][ T9650] free:1844277 free_pcp:1762 free_cma:0 [ 120.315466][ T9650] Node 0 active_anon:173172kB inactive_anon:4kB active_file:0kB inactive_file:102364kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169452kB dirty:1044kB writeback:0kB shmem:135536kB kernel_stack:4400kB pagetables:7420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 120.360889][ T9650] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.400885][ T9659] ucma_write: process 1096 (syz.1.2525) changed security contexts after opening file descriptor, this is not allowed. [ 120.401429][ T9650] lowmem_reserve[]: [ 120.464653][ T9667] macsec2: entered allmulticast mode [ 120.465656][ T9650] 0 [ 120.469183][ T9667] bond0: entered allmulticast mode [ 120.487077][ T9667] bond_slave_0: entered allmulticast mode [ 120.491683][ T9650] 2878 7857 7857 [ 120.502610][ T9667] bond_slave_1: entered allmulticast mode [ 120.518962][ T9650] Node 0 DMA32 free:2944168kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947692kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 120.521311][ T9667] bond_slave_0: entered promiscuous mode [ 120.556124][ T9667] bond_slave_1: entered promiscuous mode [ 120.574184][ T9667] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 120.603027][ T9650] lowmem_reserve[]: 0 0 4978 4978 [ 120.617112][ T9650] Node 0 Normal free:4411780kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:174796kB inactive_anon:4kB active_file:0kB inactive_file:102364kB unevictable:0kB writepending:1044kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:3348kB local_pcp:2320kB free_cma:0kB [ 120.650229][ T9667] bond0: left allmulticast mode [ 120.655191][ T9667] bond_slave_0: left allmulticast mode [ 120.661635][ T9667] bond_slave_1: left allmulticast mode [ 120.686906][ T9650] lowmem_reserve[]: 0 0 0 0 [ 120.693351][ T9650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.706937][ T23] bond_slave_0: left promiscuous mode [ 120.712403][ T23] bond_slave_1: left promiscuous mode [ 120.732648][ T9650] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944168kB [ 120.755247][ T9650] Node 0 Normal: 0*4kB 16*8kB (UE) 68*16kB (UME) 99*32kB (UME) 68*64kB (UME) 24*128kB (UE) 40*256kB (UM) 21*512kB (U) 10*1024kB (U) 3*2048kB (UME) 1065*4096kB (UM) = 4411424kB [ 120.796264][ T9650] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 120.817258][ T9650] 59336 total pagecache pages [ 120.826378][ T9650] 1 pages in swap cache [ 120.835147][ T9650] Free swap = 124992kB [ 120.846170][ T9650] Total swap = 124996kB [ 120.854951][ T9650] 2097051 pages RAM [ 120.863018][ T9650] 0 pages HighMem/MovableOnly [ 120.882979][ T9650] 81729 pages reserved [ 120.891165][ T9686] netlink: 'syz.1.2535': attribute type 2 has an invalid length. [ 121.565115][ T9739] loop0: detected capacity change from 0 to 512 [ 121.624996][ T9739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.676707][ T9739] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.696757][ T9745] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.2563'. [ 121.741805][ T9739] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2559: bg 0: block 194: padding at end of block bitmap is not set [ 121.741892][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 121.741935][ T28] audit: type=1400 audit(2000000002.190:848): avc: denied { write } for pid=9737 comm="syz.0.2559" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.776932][ T9745] netlink: 5364 bytes leftover after parsing attributes in process `syz.4.2563'. [ 121.825838][ T28] audit: type=1400 audit(2000000002.270:849): avc: denied { write } for pid=9737 comm="syz.0.2559" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.860652][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.918292][ T9751] bridge0: port 3(netdevsim1) entered blocking state [ 121.944913][ T9751] bridge0: port 3(netdevsim1) entered disabled state [ 121.970567][ T9751] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 122.004269][ T9751] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 122.013942][ T28] audit: type=1400 audit(2000000002.460:850): avc: denied { ioctl } for pid=9755 comm="syz.1.2567" path="socket:[24624]" dev="sockfs" ino=24624 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.049427][ T9751] bridge0: port 3(netdevsim1) entered blocking state [ 122.056235][ T9751] bridge0: port 3(netdevsim1) entered forwarding state [ 122.128488][ T9758] netlink: 'syz.0.2569': attribute type 11 has an invalid length. [ 122.354709][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2576'. [ 122.478598][ T9789] loop0: detected capacity change from 0 to 256 [ 122.506061][ T9786] netlink: 'syz.1.2583': attribute type 11 has an invalid length. [ 122.519934][ T9789] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 122.533130][ T9794] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 122.552524][ T9789] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 122.753604][ T9803] loop0: detected capacity change from 0 to 8192 [ 122.870413][ T9820] loop6: detected capacity change from 0 to 164 [ 122.906093][ T9820] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 122.926419][ T9823] netlink: 'syz.4.2601': attribute type 11 has an invalid length. [ 123.145443][ T9837] loop6: detected capacity change from 0 to 512 [ 123.167581][ T9837] EXT4-fs: Ignoring removed oldalloc option [ 123.182056][ T9839] loop1: detected capacity change from 0 to 512 [ 123.196876][ T9837] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 123.248522][ T9837] EXT4-fs (loop6): 1 orphan inode deleted [ 123.264802][ T9837] EXT4-fs (loop6): 1 truncate cleaned up [ 123.291401][ T9837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.317117][ T9845] can0: slcan on ptm0. [ 123.358926][ T28] audit: type=1400 audit(2000000003.810:851): avc: denied { write } for pid=9836 comm="syz.6.2606" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.390498][ T9837] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 123.406396][ T9844] can0 (unregistered): slcan off ptm0. [ 123.448265][ T9837] EXT4-fs (loop6): Remounting filesystem read-only [ 123.514423][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.582511][ T28] audit: type=1400 audit(2000000004.030:852): avc: denied { write } for pid=9849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.679268][ T9878] netlink: 'syz.6.2615': attribute type 11 has an invalid length. [ 123.688596][ T28] audit: type=1400 audit(2000000004.120:853): avc: denied { write } for pid=9872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.843942][ T28] audit: type=1400 audit(2000000004.290:854): avc: denied { write } for pid=9883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.916257][ T28] audit: type=1400 audit(2000000004.360:855): avc: denied { write } for pid=9898 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.978042][ T28] audit: type=1400 audit(2000000004.360:856): avc: denied { append } for pid=9899 comm="syz.1.2619" name="file0" dev="tmpfs" ino=2791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 124.064447][ T9905] macsec2: entered allmulticast mode [ 124.077591][ T9905] bond0: entered allmulticast mode [ 124.088851][ T9905] bond_slave_0: entered allmulticast mode [ 124.102222][ T9905] bond_slave_1: entered allmulticast mode [ 124.115768][ T9905] bond_slave_0: entered promiscuous mode [ 124.121596][ T9905] bond_slave_1: entered promiscuous mode [ 124.138865][ T9905] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 124.172017][ T9895] xt_NFQUEUE: number of total queues is 0 [ 124.495697][ T9905] bond0: left allmulticast mode [ 124.500979][ T9905] bond_slave_0: left allmulticast mode [ 124.526218][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2629'. [ 124.535657][ T9905] bond_slave_1: left allmulticast mode [ 124.565406][ T28] audit: type=1400 audit(2000000005.010:857): avc: denied { write } for pid=9914 comm="syz.6.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 124.593217][ T23] bond_slave_0: left promiscuous mode [ 124.598733][ T23] bond_slave_1: left promiscuous mode [ 124.740427][ T9936] loop0: detected capacity change from 0 to 512 [ 124.748994][ T9936] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.754023][ T9936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 124.754067][ T9936] System zones: 1-12 [ 124.758306][ T9936] EXT4-fs (loop0): 1 truncate cleaned up [ 124.758747][ T9936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.812176][ T9941] netlink: 'syz.1.2640': attribute type 1 has an invalid length. [ 124.844082][ T9941] bond2: entered promiscuous mode [ 124.851629][ T9941] bond2: entered allmulticast mode [ 124.859227][ T9941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.869823][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.971057][ T9940] loop4: detected capacity change from 0 to 8192 [ 124.980454][ T9954] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 125.040949][ T9962] loop0: detected capacity change from 0 to 512 [ 125.078584][ T9962] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.096601][ T9966] loop1: detected capacity change from 0 to 512 [ 125.115990][ T9962] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 125.129410][ T9966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.144530][ T9962] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 125.158489][ T9962] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 125.166604][ T9962] System zones: 0-2, 18-18, 34-35 [ 125.191036][ T9966] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.233133][ T9973] loop6: detected capacity change from 0 to 2048 [ 125.254856][ T9973] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 125.283369][ T9982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2657'. [ 125.301464][ T9985] EXT4-fs error (device loop1): ext4_generic_delete_entry:2673: inode #2: block 3: comm syz.1.2654: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=2048 fake=0 [ 125.368597][ T9985] EXT4-fs error (device loop1) in ext4_delete_entry:2744: Corrupt filesystem [ 125.461358][T10005] loop6: detected capacity change from 0 to 512 [ 125.480262][T10005] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.505617][T10005] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 125.531285][T10005] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 125.546979][T10005] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 125.557322][T10005] System zones: 0-2, 18-18, 34-35 [ 125.595971][T10012] loop0: detected capacity change from 0 to 2048 [ 125.607526][T10006] loop2: detected capacity change from 0 to 8192 [ 125.619365][T10006] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.659913][T10012] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 125.675833][T10006] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 125.698576][T10006] FAT-fs (loop2): Filesystem has been set read-only [ 125.707189][T10006] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 125.796075][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 125.884664][T10041] loop6: detected capacity change from 0 to 1024 [ 125.902212][T10041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.924897][T10041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.950681][T10041] EXT4-fs: inline encryption not supported [ 125.961236][T10041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.984961][T10052] loop1: detected capacity change from 0 to 2048 [ 126.010130][T10041] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.037479][T10052] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 126.058516][T10041] EXT4-fs (loop6): re-mounted 00000000-0000-0006-0000-000000000000. [ 126.096111][T10064] tipc: Enabling of bearer rejected, failed to enable media [ 126.777352][T10128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.802230][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 126.802311][ T28] audit: type=1400 audit(2000000007.250:894): avc: denied { execute } for pid=10131 comm="syz.0.2732" path="/613/memory.events" dev="tmpfs" ino=3147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 126.848861][T10128] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.902257][ T28] audit: type=1400 audit(2000000007.350:895): avc: denied { write } for pid=10127 comm="syz.6.2723" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.909801][T10128] EXT4-fs error (device loop6): ext4_generic_delete_entry:2673: inode #2: block 3: comm syz.6.2723: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=2048 fake=0 [ 126.957764][ T28] audit: type=1400 audit(2000000007.360:896): avc: denied { write } for pid=10127 comm="syz.6.2723" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.968564][T10100] xt_NFQUEUE: number of total queues is 0 [ 126.998784][T10128] EXT4-fs error (device loop6) in ext4_delete_entry:2744: Corrupt filesystem [ 127.017405][T10147] netlink: 'syz.4.2730': attribute type 2 has an invalid length. [ 127.128332][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 127.174440][T10162] lo speed is unknown, defaulting to 1000 [ 127.181289][T10162] lo speed is unknown, defaulting to 1000 [ 127.192044][T10162] lo speed is unknown, defaulting to 1000 [ 127.238086][T10170] syz_tun: entered promiscuous mode [ 127.253774][T10170] macvtap1: entered promiscuous mode [ 127.274902][T10170] macvtap1: entered allmulticast mode [ 127.292436][T10170] syz_tun: entered allmulticast mode [ 127.321850][T10170] syz_tun: left allmulticast mode [ 127.332093][T10170] syz_tun: left promiscuous mode [ 127.358231][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 127.367668][T10162] infiniband sz1: set down [ 127.372254][ T5372] lo speed is unknown, defaulting to 1000 [ 127.379893][T10162] infiniband sz1: added lo [ 127.384518][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'. [ 127.397248][T10181] netlink: 'syz.2.2745': attribute type 15 has an invalid length. [ 127.414721][T10162] RDS/IB: sz1: added [ 127.422706][T10181] netlink: 'syz.2.2745': attribute type 18 has an invalid length. [ 127.433678][T10184] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2747'. [ 127.438889][T10162] smc: adding ib device sz1 with port count 1 [ 127.450884][T10162] smc: ib device sz1 port 1 has no pnetid [ 127.460763][T10162] lo speed is unknown, defaulting to 1000 [ 127.467086][ T5372] lo speed is unknown, defaulting to 1000 [ 127.519515][T10190] isofs: Unable to find the ".." directory for NFS. [ 127.554803][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2752'. [ 127.564950][T10192] IPv6: Can't replace route, no match found [ 127.649129][T10162] lo speed is unknown, defaulting to 1000 [ 127.768655][T10162] lo speed is unknown, defaulting to 1000 [ 127.798404][T10208] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2759: invalid indirect mapped block 256 (level 2) [ 127.864775][T10208] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.865181][T10208] EXT4-fs (loop6): 2 truncates cleaned up [ 127.874414][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 127.874434][ C1] EXT4-fs (loop6): initial error at time 2000000008: ext4_free_branches:1023: inode 11 [ 127.874480][ C1] EXT4-fs (loop6): last error at time 2000000008: ext4_free_branches:1023: inode 11 [ 127.949415][T10218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2763'. [ 127.958555][T10162] lo speed is unknown, defaulting to 1000 [ 127.980432][ T28] audit: type=1400 audit(2000000008.420:897): avc: denied { write } for pid=10206 comm="syz.6.2759" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.047805][ T28] audit: type=1400 audit(2000000008.430:898): avc: denied { create } for pid=10206 comm="syz.6.2759" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 128.169384][T10162] lo speed is unknown, defaulting to 1000 [ 128.254146][T10232] program syz.6.2768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.757708][T10269] bond4: invalid ARP target 0.0.0.0 specified for addition [ 128.765120][T10269] bond4: option arp_ip_target: invalid value (0) [ 128.775667][T10269] bond4 (unregistering): Released all slaves [ 128.872188][T10280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2792'. [ 128.963281][T10284] netlink: 'syz.1.2794': attribute type 10 has an invalid length. [ 129.071957][T10284] team0 (unregistering): Port device team_slave_0 removed [ 129.200425][T10284] team0 (unregistering): Port device team_slave_1 removed [ 129.549824][T10309] xt_NFQUEUE: number of total queues is 0 [ 129.660630][ T28] audit: type=1400 audit(2000000010.110:899): avc: denied { write } for pid=10317 comm="syz.6.2810" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 129.786803][T10327] set_capacity_and_notify: 5 callbacks suppressed [ 129.786824][T10327] loop6: detected capacity change from 0 to 512 [ 129.853404][ T28] audit: type=1400 audit(2000000010.300:900): avc: denied { write } for pid=10326 comm="syz.6.2814" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.880829][T10327] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm syz.6.2814: bg 0: bad block bitmap checksum [ 130.010927][T10344] __nla_validate_parse: 3 callbacks suppressed [ 130.010950][T10344] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2821'. [ 130.115679][T10355] netlink: 'syz.6.2825': attribute type 1 has an invalid length. [ 130.126142][T10354] loop2: detected capacity change from 0 to 512 [ 130.169125][T10354] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2827: invalid indirect mapped block 256 (level 2) [ 130.184870][T10354] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.187111][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 130.202825][ C0] EXT4-fs (loop2): initial error at time 2000000010: ext4_free_branches:1023: inode 11 [ 130.208608][T10354] EXT4-fs (loop2): 2 truncates cleaned up [ 130.212916][ C0] EXT4-fs (loop2): last error at time 2000000010: ext4_free_branches:1023: inode 11 [ 130.267100][ T28] audit: type=1400 audit(2000000010.710:901): avc: denied { write } for pid=10353 comm="syz.2.2827" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.295978][T10362] program syz.4.2830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.434697][ T28] audit: type=1400 audit(2000000010.880:902): avc: denied { module_load } for pid=10377 comm="syz.4.2837" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=26253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 130.442760][T10378] Invalid ELF header magic: != ELF [ 130.518622][T10383] loop6: detected capacity change from 0 to 512 [ 130.572472][T10389] netlink: 'syz.0.2841': attribute type 1 has an invalid length. [ 130.594454][T10383] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.607272][T10389] netlink: 'syz.0.2841': attribute type 2 has an invalid length. [ 130.636029][T10395] loop0: detected capacity change from 0 to 512 [ 130.653567][T10395] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2845: invalid indirect mapped block 256 (level 2) [ 130.678581][T10395] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.680326][ T28] audit: type=1400 audit(2000000011.130:903): avc: denied { write } for pid=10382 comm="syz.6.2839" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.690212][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 130.690237][ C0] EXT4-fs (loop0): initial error at time 2000000011: ext4_free_branches:1023: inode 11 [ 130.690274][ C0] EXT4-fs (loop0): last error at time 2000000011: ext4_free_branches:1023: inode 11 [ 130.740111][T10395] EXT4-fs (loop0): 2 truncates cleaned up [ 130.784444][T10407] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2849'. [ 130.925423][T10417] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2851'. [ 131.050421][T10426] syz_tun: entered promiscuous mode [ 131.063119][T10426] macvtap1: entered promiscuous mode [ 131.071131][T10426] macvtap1: entered allmulticast mode [ 131.076696][T10426] syz_tun: entered allmulticast mode [ 131.084561][T10426] syz_tun: left allmulticast mode [ 131.090054][T10426] syz_tun: left promiscuous mode [ 131.130632][T10430] lo speed is unknown, defaulting to 1000 [ 131.514169][T10455] bond3: invalid ARP target 0.0.0.0 specified for addition [ 131.567763][T10455] bond3: option arp_ip_target: invalid value (0) [ 131.600953][T10455] bond3 (unregistering): Released all slaves [ 131.666329][T10466] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2875'. [ 131.724635][T10466] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2875'. [ 131.868474][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 131.966104][T10486] syz_tun: entered promiscuous mode [ 131.986349][T10486] macvtap1: entered promiscuous mode [ 132.006364][T10486] macvtap1: entered allmulticast mode [ 132.012139][T10486] syz_tun: entered allmulticast mode [ 132.031013][T10486] syz_tun: left allmulticast mode [ 132.036266][T10486] syz_tun: left promiscuous mode [ 132.093380][T10487] lo speed is unknown, defaulting to 1000 [ 132.207819][T10493] loop1: detected capacity change from 0 to 2048 [ 132.303549][T10493] EXT4-fs mount: 28 callbacks suppressed [ 132.303566][T10493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.341287][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 132.341336][ T28] audit: type=1400 audit(2000000012.790:907): avc: denied { write } for pid=10492 comm="syz.1.2886" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.432459][ T28] audit: type=1400 audit(2000000012.790:908): avc: denied { read } for pid=10492 comm="syz.1.2886" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.612706][T10521] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2896'. [ 132.717379][ T28] audit: type=1400 audit(2000000013.160:909): avc: denied { connect } for pid=10527 comm="syz.0.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.786068][ T28] audit: type=1400 audit(2000000013.220:910): avc: denied { map } for pid=10529 comm="syz.2.2900" path="pipe:[1599]" dev="pipefs" ino=1599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 133.147483][T10552] cgroup: fork rejected by pids controller in /syz0 [ 133.160085][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.206359][T10558] sch_tbf: burst 6 is lower than device batadv_slave_0 mtu (1514) ! [ 133.231267][ T28] audit: type=1326 audit(2000000013.680:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.1.2913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e19ede59 code=0x7ffc0000 [ 133.299450][ T28] audit: type=1326 audit(2000000013.680:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.1.2913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e19ede59 code=0x7ffc0000 [ 133.354677][ T28] audit: type=1326 audit(2000000013.680:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.1.2913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e19ede59 code=0x7ffc0000 [ 133.396959][ T8550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.410914][ T8550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.434554][ T28] audit: type=1326 audit(2000000013.680:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.1.2913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e19ede59 code=0x7ffc0000 [ 133.485276][ T28] audit: type=1326 audit(2000000013.680:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.1.2913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f34e19ede59 code=0x7ffc0000 [ 133.521174][ T8550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.538995][ T8550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.562092][ T28] audit: type=1326 audit(2000000013.680:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10559 comm="syz.1.2913" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34e19ede59 code=0x7ffc0000 [ 133.652639][ T8550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.671895][ T8550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.769415][ T8550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.796013][ T8550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.888222][T10600] loop6: detected capacity change from 0 to 1024 [ 133.899322][T10600] EXT4-fs: Ignoring removed orlov option [ 133.905460][T10604] Invalid ELF header magic: != ELF [ 133.960871][T10600] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 134.001088][T10576] lo speed is unknown, defaulting to 1000 [ 134.015394][ T8550] bridge_slave_1: left allmulticast mode [ 134.029173][T10600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.031962][ T8550] bridge_slave_1: left promiscuous mode [ 134.049544][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.089127][ T8550] bridge_slave_0: left allmulticast mode [ 134.094853][ T8550] bridge_slave_0: left promiscuous mode [ 134.100834][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.113643][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.126552][ T8550] batman_adv: batadv0: Interface deactivated: geneve2 [ 134.152128][T10624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2943'. [ 134.215679][ T8550] batman_adv: batadv0: Removing interface: geneve2 [ 134.268269][ T8550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.281628][ T8550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.292488][ T8550] bond0 (unregistering): Released all slaves [ 134.301035][ T8550] bond1 (unregistering): Released all slaves [ 134.311500][ T8550] bond2 (unregistering): Released all slaves [ 134.320746][ T8550] bond3 (unregistering): Released all slaves [ 134.558460][ T8550] hsr_slave_0: left promiscuous mode [ 134.573656][ T8550] hsr_slave_1: left promiscuous mode [ 134.579500][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.590234][ T8550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.691835][ T8550] team0 (unregistering): Port device team_slave_1 removed [ 134.704269][ T8550] team0 (unregistering): Port device team_slave_0 removed [ 134.747060][ T8552] smc: removing ib device sz1 [ 134.767915][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 135.101125][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.158208][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.190557][T10576] bridge_slave_0: entered allmulticast mode [ 135.244428][T10576] bridge_slave_0: entered promiscuous mode [ 135.259865][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.294993][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.324713][T10576] bridge_slave_1: entered allmulticast mode [ 135.422967][T10576] bridge_slave_1: entered promiscuous mode [ 135.459922][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 135.490886][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.530747][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.568771][T10576] team0: Port device team_slave_0 added [ 135.581269][T10576] team0: Port device team_slave_1 added [ 135.612071][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.626519][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.678988][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.702313][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.716237][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.775614][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.836983][T10576] hsr_slave_0: entered promiscuous mode [ 135.850231][T10576] hsr_slave_1: entered promiscuous mode [ 135.861670][T10576] debugfs: 'hsr0' already exists in 'hsr' [ 135.874201][T10576] Cannot create hsr debugfs directory [ 136.045582][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 136.118338][ T8550] IPVS: stop unused estimator thread 0... [ 136.344004][T10784] loop4: detected capacity change from 0 to 2048 [ 136.396796][T10784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 136.418620][T10576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.430273][T10576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.438162][T10576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.442298][T10784] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.2985: inline data xattr refers to an external xattr inode [ 136.464670][T10576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.499702][T10576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.522823][T10576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.529161][T10784] EXT4-fs (loop4): Remounting filesystem read-only [ 136.531924][T10576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.554832][T10576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.586436][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 136.696452][T10576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.745453][T10576] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.776399][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.783551][ T8552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.820357][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.827568][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.866765][T10837] veth1: entered promiscuous mode [ 136.872131][T10837] macsec1: entered promiscuous mode [ 136.899674][T10837] macsec1: entered allmulticast mode [ 136.914088][T10837] veth1: entered allmulticast mode [ 136.932121][T10837] veth1: left allmulticast mode [ 136.939016][T10837] veth1: left promiscuous mode [ 137.012537][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3004'. [ 137.124560][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3006'. [ 137.283153][T10576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.300504][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3012'. [ 137.351192][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 137.351212][ T28] audit: type=1400 audit(2000000017.800:941): avc: denied { write } for pid=10872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.429605][ T28] audit: type=1400 audit(2000000017.880:942): avc: denied { write } for pid=10903 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.533583][T10576] veth0_vlan: entered promiscuous mode [ 137.554587][T10576] veth1_vlan: entered promiscuous mode [ 137.605665][T10576] veth0_macvtap: entered promiscuous mode [ 137.624951][T10576] veth1_macvtap: entered promiscuous mode [ 137.666630][T10576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.692148][T10576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.718179][ T28] audit: type=1400 audit(2000000018.170:943): avc: denied { write } for pid=10913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.754631][ T1019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.778382][ T1019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.790169][ T28] audit: type=1400 audit(2000000018.170:944): avc: denied { create } for pid=10931 comm="syz.4.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 137.821057][ T1019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.838613][ T1019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.887997][ T28] audit: type=1400 audit(2000000018.330:945): avc: denied { write } for pid=10939 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.927742][T10940] loop6: detected capacity change from 0 to 4096 [ 137.956497][ T28] audit: type=1400 audit(2000000018.340:946): avc: denied { mount } for pid=10576 comm="syz-executor" name="/" dev="gadgetfs" ino=3895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 137.999010][T10940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.031616][ T28] audit: type=1400 audit(2000000018.400:947): avc: denied { open } for pid=10945 comm="syz.4.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.051310][ T28] audit: type=1400 audit(2000000018.400:948): avc: denied { kernel } for pid=10945 comm="syz.4.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.071239][ T28] audit: type=1400 audit(2000000018.470:949): avc: denied { write } for pid=10938 comm="syz.6.3023" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.193376][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.264047][ T28] audit: type=1400 audit(2000000018.710:950): avc: denied { tracepoint } for pid=10967 comm="syz.4.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 138.289023][T10968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3032'. [ 138.696293][T11012] netlink: 'syz.1.3043': attribute type 1 has an invalid length. [ 138.840962][T11026] can0: slcan on ttyS3. [ 138.908054][T11026] can0 (unregistered): slcan off ttyS3. [ 138.948364][T11035] loop6: detected capacity change from 0 to 2048 [ 138.982990][T11035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.109034][T11056] program syz.2.3056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.239948][T11064] netlink: 'syz.2.3058': attribute type 3 has an invalid length. [ 139.657612][T11098] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 139.704463][T11098] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.930646][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.002687][T11120] bond0: entered promiscuous mode [ 140.025316][T11120] bond_slave_0: entered promiscuous mode [ 140.039228][T11120] bond_slave_1: entered promiscuous mode [ 140.063742][T11120] bond0: entered allmulticast mode [ 140.088348][T11120] bond_slave_0: entered allmulticast mode [ 140.108669][T11120] bond_slave_1: entered allmulticast mode [ 140.114840][T11120] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 140.133846][T11126] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3084'. [ 140.168049][T11126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.458874][T11159] loop1: detected capacity change from 0 to 1024 [ 140.500647][T11159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.625370][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.741613][ T1019] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.773085][ T3511] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.794097][ T3511] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.824251][ T3511] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.963249][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'. [ 141.000080][T11207] netlink: 'syz.2.3123': attribute type 2 has an invalid length. [ 141.021907][T11207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3123'. [ 141.251679][T11224] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3131'. [ 141.365448][T11234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3135'. [ 141.381058][T11234] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3135'. [ 142.462947][T11276] loop6: detected capacity change from 0 to 512 [ 142.512207][T11276] EXT4-fs (loop6): 1 truncate cleaned up [ 142.523142][T11276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.538627][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 142.538646][ T28] audit: type=1400 audit(2000000022.990:975): avc: denied { write } for pid=11274 comm="syz.6.3156" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.618289][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.678036][T11294] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3162'. [ 142.711029][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3162'. [ 142.735089][T11294] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3162'. [ 142.752681][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3162'. [ 142.773091][T11294] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3162'. [ 142.799233][T11298] batadv1: entered promiscuous mode [ 142.805606][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3169'. [ 142.814931][T11298] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 143.095786][ T28] audit: type=1400 audit(2000000023.540:976): avc: denied { write } for pid=11313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.154244][ T28] audit: type=1400 audit(2000000023.600:977): avc: denied { write } for pid=11349 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.290449][T11362] loop4: detected capacity change from 0 to 764 [ 143.377380][ T28] audit: type=1400 audit(2000000023.830:978): avc: denied { write } for pid=11353 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.449851][ T28] audit: type=1400 audit(2000000023.890:979): avc: denied { write } for pid=11378 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.538476][T11380] bond2: entered promiscuous mode [ 143.546526][T11380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.569880][T11387] loop4: detected capacity change from 0 to 128 [ 143.743526][ T28] audit: type=1400 audit(2000000024.190:980): avc: denied { bind } for pid=11406 comm="syz.6.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.834689][T11418] process 'syz.6.3212' launched '/dev/fd/3' with NULL argv: empty string added [ 143.860350][ T28] audit: type=1400 audit(2000000024.300:981): avc: denied { execute_no_trans } for pid=11416 comm="syz.6.3212" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.123904][T11449] loop4: detected capacity change from 0 to 2048 [ 144.158986][T11449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.191378][ T28] audit: type=1400 audit(2000000024.640:982): avc: denied { create } for pid=11459 comm="syz.1.3231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 144.230860][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.994095][T11499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3247'. [ 145.120269][ T28] audit: type=1400 audit(2000000025.570:983): avc: denied { read } for pid=11511 comm="syz.6.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 145.134910][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3257'. [ 145.219181][T11525] netlink: 79 bytes leftover after parsing attributes in process `syz.4.3261'. [ 145.373768][T11545] loop6: detected capacity change from 0 to 128 [ 145.382431][T11545] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 145.392788][T11545] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.405292][T11545] ext2 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.443503][ T6674] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.492086][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3272'. [ 145.612065][ T28] audit: type=1326 audit(2000000026.060:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11559 comm="syz.6.3278" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d90cade59 code=0x7ffc0000 [ 145.646302][T11562] loop1: detected capacity change from 0 to 2048 [ 145.660646][T11562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.698526][T11567] tipc: Started in network mode [ 145.712879][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.726151][T11567] tipc: Node identity , cluster identity 4711 [ 145.746804][T11567] tipc: Failed to obtain node identity [ 145.754438][T11567] tipc: Enabling of bearer rejected, failed to enable media [ 145.972473][T11590] loop4: detected capacity change from 0 to 512 [ 145.985433][T11590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.040977][T11590] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3290: bad orphan inode 131083 [ 146.051676][T11590] loop4: lost filesystem error report for type 5 error -117 [ 146.055273][T11590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.094167][T11590] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.3290: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 146.142590][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.149593][T11572] bond3: entered promiscuous mode [ 146.183073][T11572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.493019][T11613] loop6: detected capacity change from 0 to 4096 [ 146.533587][T11617] Option ' ' to dns_resolver key: bad/missing value [ 146.575115][T11613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.664284][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.378997][T11668] loop1: detected capacity change from 0 to 256 [ 147.658484][T11667] bond2: entered promiscuous mode [ 147.676071][T11667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.747488][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 147.747504][ T28] audit: type=1400 audit(2000000028.190:1029): avc: denied { create } for pid=11693 comm="syz.6.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.814972][T11696] loop6: detected capacity change from 0 to 512 [ 147.831636][T11696] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.856613][ T28] audit: type=1400 audit(2000000028.300:1030): avc: denied { mount } for pid=11695 comm="syz.6.3340" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 147.883237][T11698] loop4: detected capacity change from 0 to 512 [ 147.889995][T11698] EXT4-fs: Ignoring removed i_version option [ 147.900716][ T28] audit: type=1400 audit(2000000028.330:1031): avc: denied { unmount } for pid=6674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 147.922060][ T28] audit: type=1400 audit(2000000028.350:1032): avc: denied { watch } for pid=11700 comm="syz.2.3342" path="/678" dev="tmpfs" ino=3467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.947108][ T6674] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 147.972316][T11698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.986500][T11698] ext4 filesystem being mounted at /697/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.028923][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.071115][ T28] audit: type=1400 audit(2000000028.520:1033): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.096899][ T28] audit: type=1400 audit(2000000028.520:1034): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.125699][ T28] audit: type=1400 audit(2000000028.520:1035): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.191711][T11714] __nla_validate_parse: 3 callbacks suppressed [ 148.191732][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'. [ 148.215615][ T28] audit: type=1400 audit(2000000028.600:1036): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.144 dest=48470 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 148.249121][T11718] loop1: detected capacity change from 0 to 128 [ 148.256259][T11718] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.290493][ T28] audit: type=1400 audit(2000000028.620:1037): avc: denied { open } for pid=11709 comm="syz.6.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 148.312513][ T28] audit: type=1400 audit(2000000028.620:1038): avc: denied { perfmon } for pid=11709 comm="syz.6.3345" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.336469][T11718] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.474294][ T8552] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.589063][T11730] gretap1: entered allmulticast mode [ 149.643173][T11768] loop0: detected capacity change from 0 to 4096 [ 149.676700][T11776] loop1: detected capacity change from 0 to 256 [ 149.693760][T11768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.722622][T11779] loop4: detected capacity change from 0 to 512 [ 149.763673][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3371'. [ 149.791470][T11779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.826831][T11779] ext4 filesystem being mounted at /703/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.882925][T10576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.893742][T11803] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11803 comm=syz.6.3377 [ 149.906546][T11803] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11803 comm=syz.6.3377 [ 149.932056][T11779] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #12: comm syz.4.3369: Directory hole found for htree leaf block 0 [ 150.002955][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.078172][T11817] tipc: Failed to obtain node identity [ 150.093626][ T5371] kernel write not supported for file /input/event0 (pid: 5371 comm: kworker/0:8) [ 150.095859][T11817] tipc: Enabling of bearer rejected, failed to enable media [ 150.104396][ T8552] tipc: Subscription rejected, illegal request [ 150.210936][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3390'. [ 150.317911][T11845] loop2: detected capacity change from 0 to 512 [ 150.343951][T11845] EXT4-fs: Ignoring removed nobh option [ 150.364875][T11845] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 150.390469][T11845] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 150.428825][T11845] EXT4-fs (loop2): orphan cleanup on readonly fs [ 150.454793][T11845] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.3395: attempt to clear invalid blocks 1024 len 1 [ 150.473537][T11845] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.477083][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 150.492723][ C1] EXT4-fs (loop2): initial error at time 2000000030: ext4_clear_blocks:876: inode 11 [ 150.502232][ C1] EXT4-fs (loop2): last error at time 2000000030: ext4_clear_blocks:876: inode 11 [ 150.511548][T11845] EXT4-fs (loop2): Remounting filesystem read-only [ 150.530405][T11845] EXT4-fs (loop2): 1 truncate cleaned up [ 150.541542][T11845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 150.650942][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 150.996090][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3416'. [ 151.312163][T11918] loop4: detected capacity change from 0 to 256 [ 151.348900][T11918] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.495846][T11927] loop0: detected capacity change from 0 to 4096 [ 151.542161][T11927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.575821][T11944] loop1: detected capacity change from 0 to 736 [ 151.695835][T10576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.791114][T11957] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 152.131425][T11988] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3465'. [ 152.176494][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 152.214139][T11994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3468'. [ 152.322382][T12005] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 152.322382][T12005] The task syz.0.3469 (12005) triggered the difference, watch for misbehavior. [ 152.725096][T12040] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 152.733541][T12040] System zones: 1-3, 19-19, 35-36 [ 152.778378][T12040] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 152.794534][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 152.794569][ T28] audit: type=1400 audit(2000000033.240:1184): avc: denied { mmap_zero } for pid=12042 comm="syz.6.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 152.833259][T12040] ext4 filesystem being mounted at /733/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.890219][ T28] audit: type=1400 audit(2000000033.340:1185): avc: denied { write } for pid=12039 comm="syz.4.3489" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.921319][ T28] audit: type=1400 audit(2000000033.340:1186): avc: denied { read write open } for pid=12039 comm="syz.4.3489" path="/733/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 152.973281][ T28] audit: type=1400 audit(2000000033.360:1187): avc: denied { ioctl } for pid=12039 comm="syz.4.3489" path="/733/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop4" ino=12 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.040234][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.095097][T12054] set_capacity_and_notify: 3 callbacks suppressed [ 153.095118][T12054] loop6: detected capacity change from 0 to 512 [ 153.112381][ T28] audit: type=1400 audit(2000000033.560:1188): avc: denied { read } for pid=12053 comm="syz.4.3492" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.136332][T12054] EXT4-fs: Ignoring removed nobh option [ 153.148128][ T28] audit: type=1400 audit(2000000033.560:1189): avc: denied { open } for pid=12053 comm="syz.4.3492" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.172517][ T28] audit: type=1400 audit(2000000033.560:1190): avc: denied { ioctl } for pid=12053 comm="syz.4.3492" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 153.203425][T12059] netlink: 'syz.0.3497': attribute type 1 has an invalid length. [ 153.232913][T12054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.252006][T12054] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.263861][ T28] audit: type=1400 audit(2000000033.710:1191): avc: denied { write } for pid=12052 comm="syz.6.3495" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.294308][ T28] audit: type=1400 audit(2000000033.740:1192): avc: denied { create } for pid=12064 comm="syz.0.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.328021][ T28] audit: type=1400 audit(2000000033.770:1193): avc: denied { setopt } for pid=12064 comm="syz.0.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.359756][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.549376][T12094] loop2: detected capacity change from 0 to 512 [ 153.559842][T12094] EXT4-fs: inline encryption not supported [ 153.571348][T12094] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.595732][T12094] EXT4-fs (loop2): 1 truncate cleaned up [ 153.601882][T12094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.655950][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.670750][T12102] loop0: detected capacity change from 0 to 1024 [ 153.680937][T12104] loop4: detected capacity change from 0 to 256 [ 153.689267][T12102] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.713912][T12102] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.3516: lblock 2 mapped to illegal pblock 2 (length 1) [ 153.734666][T12102] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.737060][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 153.752643][ C1] EXT4-fs (loop0): initial error at time 2000000034: ext4_map_blocks:791: inode 3: block 2 [ 153.762942][ C1] EXT4-fs (loop0): last error at time 2000000034: ext4_map_blocks:791: inode 3: block 2 [ 153.775959][T12102] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.3516: lblock 0 mapped to illegal pblock 48 (length 1) [ 153.790410][T12102] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 153.790642][T12102] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.3516: Failed to acquire dquot type 0 [ 153.812188][T12102] loop0: lost filesystem error report for type 5 error -117 [ 153.812350][T12102] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 153.829406][T12102] loop0: lost filesystem error report for type 5 error -117 [ 153.832969][T12102] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.3516: mark_inode_dirty error [ 153.851699][T12102] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 153.853857][T12102] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 153.898658][T12112] loop4: detected capacity change from 0 to 512 [ 153.908098][T12112] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 153.918449][T12102] EXT4-fs (loop0): 1 orphan inode deleted [ 153.929422][T12112] EXT4-fs (loop4): orphan cleanup on readonly fs [ 153.939345][T12102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.953310][ T1019] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.970917][T12112] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 154.025384][T12112] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 154.045589][ T1019] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 154.075100][T12112] EXT4-fs (loop4): 1 truncate cleaned up [ 154.081595][T12112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.971970][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.982480][T10576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.021154][T10576] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 155.052624][T10576] loop0: lost filesystem error report for type 5 error -117 [ 155.052739][T10576] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 155.076280][T10576] loop0: lost filesystem error report for type 5 error -117 [ 155.076383][T10576] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 155.095186][T10576] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.295419][T12150] ALSA: seq fatal error: cannot create timer (-19) [ 155.500349][T12160] loop2: detected capacity change from 0 to 8192 [ 155.548010][T12160] loop2: p2 p3 p4 < > [ 155.555048][T12160] loop2: partition table partially beyond EOD, truncated [ 155.573437][T12160] loop2: p2 size 590592 extends beyond EOD, truncated [ 155.600770][T12160] loop2: p3 start 4294967295 is beyond EOD, truncated [ 155.625558][T12160] loop2: p4 start 117440516 is beyond EOD, truncated [ 155.756521][T12195] netlink: 'syz.4.3560': attribute type 6 has an invalid length. [ 155.797085][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 156.180382][T12229] netlink: 2072 bytes leftover after parsing attributes in process `syz.2.3577'. [ 156.279703][T12235] loop2: detected capacity change from 0 to 128 [ 156.304369][T12235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 156.318449][T12235] System zones: 1-3, 19-19, 35-36 [ 156.328477][T12235] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 156.391301][T12235] ext4 filesystem being mounted at /739/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.447619][T12240] can0: slcan on ptm0. [ 156.499498][T12245] loop4: detected capacity change from 0 to 256 [ 156.508077][T12235] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full [ 156.523146][T12245] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.538701][T12239] can0 (unregistered): slcan off ptm0. [ 156.589114][ T5371] Process accounting resumed [ 156.593904][ T5371] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 156.609719][ T5371] FAT-fs (loop4): Filesystem has been set read-only [ 156.656643][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.877286][T12287] loop4: detected capacity change from 0 to 2048 [ 156.899736][T12287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.954924][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3600'. [ 156.967345][T12304] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 156.970890][ T5362] Process accounting resumed [ 157.003791][ T8552] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.064082][ T8552] EXT4-fs (loop4): Remounting filesystem read-only [ 157.085683][T12314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3605'. [ 157.152779][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.970194][T12337] loop2: detected capacity change from 0 to 512 [ 157.976957][T12337] EXT4-fs: Ignoring removed orlov option [ 157.987180][T12337] EXT4-fs: Ignoring removed mblk_io_submit option [ 158.018772][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 158.018857][ T28] audit: type=1400 audit(2000000038.470:1230): avc: denied { setopt } for pid=12338 comm="syz.1.3615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.022583][T12337] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.3614: corrupted in-inode xattr: e_value size too large [ 158.025793][ T28] audit: type=1400 audit(2000000038.470:1231): avc: denied { ioctl } for pid=12338 comm="syz.1.3615" path="socket:[31613]" dev="sockfs" ino=31613 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.046127][T12337] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.086413][T12337] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3614: couldn't read orphan inode 15 (err -117) [ 158.095740][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 158.095768][ C0] EXT4-fs (loop2): initial error at time 2000000038: ext4_iget_extra_inode:5180: inode 15 [ 158.095798][ C0] EXT4-fs (loop2): last error at time 2000000038: ext4_iget_extra_inode:5180: inode 15 [ 158.135240][T12337] loop2: lost filesystem error report for type 5 error -117 [ 158.136717][T12337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.164580][ T28] audit: type=1400 audit(2000000038.610:1232): avc: denied { write } for pid=12336 comm="syz.2.3614" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.215396][ T28] audit: type=1400 audit(2000000038.660:1233): avc: denied { ioctl } for pid=12343 comm="syz.1.3618" path="socket:[32541]" dev="sockfs" ino=32541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.253868][ T28] audit: type=1400 audit(2000000038.690:1234): avc: denied { write } for pid=12343 comm="syz.1.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.278521][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.301811][T12346] loop6: detected capacity change from 0 to 512 [ 158.329154][T12346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.342283][T12346] ext4 filesystem being mounted at /457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.366381][ T28] audit: type=1400 audit(2000000038.800:1235): avc: denied { write } for pid=12345 comm="syz.6.3619" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.396826][ T28] audit: type=1400 audit(2000000038.800:1236): avc: denied { create } for pid=12345 comm="syz.6.3619" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 158.440420][ T28] audit: type=1400 audit(2000000038.800:1237): avc: denied { read } for pid=12345 comm="syz.6.3619" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 158.446646][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.518703][T12361] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 158.552726][ T28] audit: type=1400 audit(2000000038.970:1238): avc: denied { load_policy } for pid=12360 comm="syz.0.3624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 158.575497][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3626'. [ 158.593888][T12361] SELinux: failed to load policy [ 158.604209][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'. [ 158.689871][ T28] audit: type=1400 audit(2000000039.130:1239): avc: denied { create } for pid=12377 comm="syz.1.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.890737][T12402] loop6: detected capacity change from 0 to 512 [ 158.922406][T12402] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.958263][T12402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.003001][T12402] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.017931][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3649'. [ 159.019546][T12402] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 159.104720][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.224852][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3661'. [ 159.486742][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 159.632739][T12497] loop2: detected capacity change from 0 to 512 [ 159.658451][T12497] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.695454][ T3303] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 159.768635][T12504] loop2: detected capacity change from 0 to 256 [ 159.840547][T12509] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 159.852399][T12509] SELinux: failed to load policy [ 160.310861][T12551] macsec1: entered promiscuous mode [ 160.327242][T12551] dummy0: entered promiscuous mode [ 160.340090][T12551] macsec1: entered allmulticast mode [ 160.345508][T12551] dummy0: entered allmulticast mode [ 160.805493][T12561] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3718'. [ 160.919337][T12574] netlink: 'syz.2.3724': attribute type 8 has an invalid length. [ 160.987621][T12584] netlink: 'syz.6.3730': attribute type 1 has an invalid length. [ 161.182808][T12611] loop6: detected capacity change from 0 to 512 [ 161.190794][T12611] EXT4-fs: Ignoring removed nobh option [ 161.203316][T12611] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 161.235086][T12611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 161.247394][T12618] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3744'. [ 161.248514][T12611] EXT4-fs (loop6): orphan cleanup on readonly fs [ 161.279733][T12611] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.3743: attempt to clear invalid blocks 1024 len 1 [ 161.320306][T12611] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 161.321927][T12611] EXT4-fs (loop6): Remounting filesystem read-only [ 161.331194][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 161.331217][ C0] EXT4-fs (loop6): initial error at time 2000000041: ext4_clear_blocks:876: inode 11 [ 161.331249][ C0] EXT4-fs (loop6): last error at time 2000000041: ext4_clear_blocks:876: inode 11 [ 161.367489][T12611] EXT4-fs (loop6): 1 truncate cleaned up [ 161.373619][T12611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 161.428498][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 161.619834][T12647] loop1: detected capacity change from 0 to 512 [ 161.654990][T12647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.674909][T12656] loop2: detected capacity change from 0 to 256 [ 161.688595][T12647] ext4 filesystem being mounted at /766/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.730231][T12647] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #12: comm syz.1.3758: Directory hole found for htree leaf block 0 [ 161.745235][T12658] loop6: detected capacity change from 0 to 1024 [ 161.769476][T12658] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 161.842704][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.865475][T12658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.924559][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.176752][T12686] loop1: detected capacity change from 0 to 256 [ 162.724280][T12682] syz.6.3774 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 162.821050][T12682] CPU: 1 UID: 0 PID: 12682 Comm: syz.6.3774 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.821106][T12682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.821126][T12682] Call Trace: [ 162.821135][T12682] [ 162.821146][T12682] __dump_stack+0x1d/0x30 [ 162.821173][T12682] dump_stack_lvl+0x95/0xd0 [ 162.821201][T12682] dump_stack+0x15/0x1b [ 162.821227][T12682] dump_header+0x80/0x240 [ 162.821371][T12682] oom_kill_process+0x295/0x350 [ 162.821406][T12682] out_of_memory+0x981/0xbc0 [ 162.821440][T12682] try_charge_memcg+0x621/0xa00 [ 162.821523][T12682] ? __rcu_read_unlock+0x4e/0x70 [ 162.821565][T12682] __memcg_kmem_charge_page+0x199/0x3a0 [ 162.821600][T12682] __alloc_frozen_pages_noprof+0x18a/0x350 [ 162.821709][T12682] alloc_pages_mpol+0xa9/0x1d0 [ 162.821750][T12682] alloc_pages_noprof+0x8f/0x140 [ 162.821789][T12682] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 162.821900][T12682] __kvmalloc_node_noprof+0x3a0/0x590 [ 162.821933][T12682] ? futex_hash_allocate+0x192/0x920 [ 162.821961][T12682] ? futex_hash_allocate+0x192/0x920 [ 162.821981][T12682] ? futex_hash_allocate+0x192/0x920 [ 162.822049][T12682] futex_hash_allocate+0x192/0x920 [ 162.822076][T12682] ? cap_task_prctl+0x13f/0x6b0 [ 162.822125][T12682] futex_hash_prctl+0xd8/0xf0 [ 162.822198][T12682] __se_sys_prctl+0x4f4/0x13b0 [ 162.822236][T12682] __x64_sys_prctl+0x67/0x80 [ 162.822265][T12682] x64_sys_call+0x2533/0x3020 [ 162.822313][T12682] do_syscall_64+0x136/0x3c0 [ 162.822348][T12682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.822523][T12682] RIP: 0033:0x7f5d90cade59 [ 162.822539][T12682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.822563][T12682] RSP: 002b:00007f5d8f707028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 162.822584][T12682] RAX: ffffffffffffffda RBX: 00007f5d90f35fa0 RCX: 00007f5d90cade59 [ 162.822604][T12682] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 162.822620][T12682] RBP: 00007f5d90d43e6f R08: 0000000000000000 R09: 0000000000000000 [ 162.822634][T12682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.822648][T12682] R13: 00007f5d90f36038 R14: 00007f5d90f35fa0 R15: 00007ffff4128ae8 [ 162.822731][T12682] [ 162.822772][T12682] memory: usage 219320kB, limit 307200kB, failcnt 118 [ 163.058283][T12682] memory+swap: usage 123984kB, limit 9007199254740988kB, failcnt 0 [ 163.066317][T12682] kmem: usage 123080kB, limit 9007199254740988kB, failcnt 0 [ 163.073740][T12682] Memory cgroup stats for /syz6: [ 163.074012][T12682] cache 69632 [ 163.083065][T12682] rss 45056 [ 163.086238][T12682] shmem 0 [ 163.089338][T12682] mapped_file 0 [ 163.092945][T12682] dirty 0 [ 163.095964][T12682] writeback 0 [ 163.099664][T12682] workingset_refault_anon 30 [ 163.104331][T12682] workingset_refault_file 0 [ 163.108975][T12682] swap 319488 [ 163.112287][T12682] swapcached 507904 [ 163.116118][T12682] pgpgin 58933 [ 163.119572][T12682] pgpgout 58900 [ 163.123580][T12682] pgfault 71156 [ 163.127158][T12682] pgmajfault 17 [ 163.131107][T12682] inactive_anon 65536 [ 163.135457][T12682] active_anon 0 [ 163.139002][T12682] inactive_file 4096 [ 163.142927][T12682] active_file 65536 [ 163.146906][T12682] unevictable 0 [ 163.150535][T12682] hierarchical_memory_limit 314572800 [ 163.155981][T12682] hierarchical_memsw_limit 9223372036854771712 [ 163.162206][T12682] total_cache 69632 [ 163.166145][T12682] total_rss 45056 [ 163.170027][T12682] total_shmem 0 [ 163.173529][T12682] total_mapped_file 0 [ 163.177607][T12682] total_dirty 0 [ 163.260646][T12682] total_writeback 0 [ 163.273154][T12708] loop2: detected capacity change from 0 to 4096 [ 163.290427][T12708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.325457][T12682] total_workingset_refault_anon 30 [ 163.332943][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 163.332973][ T28] audit: type=1400 audit(2000000043.780:1281): avc: denied { write } for pid=12707 comm="syz.2.3786" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.406236][T12682] total_workingset_refault_file 0 [ 163.418620][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.438577][T12682] total_swap 319488 [ 163.442471][T12682] total_swapcached 507904 [ 163.446893][T12682] total_pgpgin 58933 [ 163.467200][T12682] total_pgpgout 58900 [ 163.476022][T12682] total_pgfault 71156 [ 163.480466][ T28] audit: type=1400 audit(2000000043.780:1282): avc: denied { write } for pid=12707 comm="syz.2.3786" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.495302][T12682] total_pgmajfault 17 [ 163.519967][T12682] total_inactive_anon 65536 [ 163.530519][T12682] total_active_anon 0 [ 163.550034][T12682] total_inactive_file 4096 [ 163.554568][T12682] total_active_file 65536 [ 163.559083][T12682] total_unevictable 0 [ 163.568893][T12682] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3774,pid=12680,uid=0 [ 163.594661][T12682] Memory cgroup out of memory: Killed process 12682 (syz.6.3774) total-vm:96164kB, anon-rss:1352kB, file-rss:22072kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 163.633688][T12717] loop4: detected capacity change from 0 to 256 [ 163.839060][T12742] loop1: detected capacity change from 0 to 512 [ 163.871016][ T28] audit: type=1400 audit(2000000044.320:1283): avc: denied { ioctl } for pid=12747 comm="syz.4.3806" path="socket:[34239]" dev="sockfs" ino=34239 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 163.913717][T12750] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3804'. [ 164.138643][T12781] loop6: detected capacity change from 0 to 256 [ 164.211039][T12786] loop2: detected capacity change from 0 to 256 [ 164.381238][T12806] loop0: detected capacity change from 0 to 736 [ 164.918328][T12843] loop2: detected capacity change from 0 to 512 [ 165.036132][T12854] loop2: detected capacity change from 0 to 512 [ 165.043036][T12854] EXT4-fs: Ignoring removed i_version option [ 165.070747][T12854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.097917][ T28] audit: type=1326 audit(2000000045.540:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.6.3857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d90cade59 code=0x7ffc0000 [ 165.138082][T12854] ext4 filesystem being mounted at /800/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.148824][ T28] audit: type=1326 audit(2000000045.540:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.6.3857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d90cade59 code=0x7ffc0000 [ 165.174859][ T28] audit: type=1326 audit(2000000045.540:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.6.3857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f5d90cade59 code=0x7ffc0000 [ 165.184403][T12854] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.3853: resize_inode disabled but reserved GDT blocks non-zero [ 165.200531][ T28] audit: type=1326 audit(2000000045.540:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.6.3857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d90cade59 code=0x7ffc0000 [ 165.200577][ T28] audit: type=1326 audit(2000000045.540:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.6.3857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d90cade59 code=0x7ffc0000 [ 165.290668][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.391237][T12876] loop0: detected capacity change from 0 to 128 [ 165.397971][T12878] netlink: 'syz.2.3863': attribute type 21 has an invalid length. [ 165.415767][T12878] netlink: 'syz.2.3863': attribute type 6 has an invalid length. [ 165.425376][T12876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 165.433805][T12876] System zones: 1-3, 19-19, 35-36 [ 165.439539][T12876] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 165.448112][T12878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3863'. [ 165.465528][T12876] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 165.573774][T12889] loop1: detected capacity change from 0 to 512 [ 165.588171][T12889] EXT4-fs: Ignoring removed nobh option [ 165.604728][ T28] audit: type=1400 audit(2000000046.050:1289): avc: denied { write } for pid=12875 comm="syz.0.3864" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.645941][T12889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.683878][T12897] loop6: detected capacity change from 0 to 256 [ 165.685953][T10576] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.740451][T12901] EXT4-fs: inline encryption not supported [ 165.743567][T12889] ext4 filesystem being mounted at /790/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.757739][T12901] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.779560][T12901] EXT4-fs (loop4): 1 truncate cleaned up [ 165.812075][T12901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.853084][ T28] audit: type=1400 audit(2000000046.300:1290): avc: denied { write } for pid=12886 comm="syz.1.3868" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.657310][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.698728][ T5370] IPVS: starting estimator thread 0... [ 166.739904][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.807194][T12916] IPVS: using max 2016 ests per chain, 100800 per kthread [ 166.826455][T12926] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 166.871444][T12926] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.3885: lblock 2 mapped to illegal pblock 2 (length 1) [ 166.893513][T12926] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.893687][T12926] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.3885: lblock 0 mapped to illegal pblock 48 (length 1) [ 166.902837][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 166.902866][ C0] EXT4-fs (loop6): initial error at time 2000000047: ext4_map_blocks:791: inode 3: block 2 [ 166.902896][ C0] EXT4-fs (loop6): last error at time 2000000047: ext4_map_blocks:791: inode 3: block 2 [ 166.936862][T12937] EXT4-fs: Ignoring removed i_version option [ 166.945006][T12926] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 166.951304][T12926] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.3885: Failed to acquire dquot type 0 [ 166.972146][T12926] loop6: lost filesystem error report for type 5 error -117 [ 166.973194][T12926] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 166.991491][T12926] loop6: lost filesystem error report for type 5 error -117 [ 166.991657][T12926] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.3885: mark_inode_dirty error [ 167.010866][T12926] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.016113][T12926] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 167.035812][T12926] EXT4-fs (loop6): 1 orphan inode deleted [ 167.043101][T12926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.055328][ T8552] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 167.071211][ T8552] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.071547][ T8552] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:11: Failed to release dquot type 0 [ 167.108112][T12937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.163378][T12937] ext4 filesystem being mounted at /803/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.184964][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.205525][ T6674] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 167.249831][T12937] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.3889: resize_inode disabled but reserved GDT blocks non-zero [ 167.258143][ T6674] loop6: lost filesystem error report for type 5 error -117 [ 167.272399][T12952] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3898'. [ 167.291436][ T6674] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 167.310665][ T6674] loop6: lost filesystem error report for type 5 error -117 [ 167.310776][ T6674] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 167.335349][ T6674] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 167.360749][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.476674][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3904'. [ 167.509387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 167.528728][T12976] tipc: Started in network mode [ 167.533711][T12976] tipc: Node identity , cluster identity 4711 [ 167.540206][T12976] tipc: Failed to obtain node identity [ 167.545714][T12976] tipc: Enabling of bearer rejected, failed to enable media [ 167.692835][T12993] netlink: 'syz.6.3913': attribute type 6 has an invalid length. [ 167.801679][T13011] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 167.910349][T13020] EXT4-fs: Ignoring removed i_version option [ 167.943901][T13024] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3930'. [ 167.970450][T13020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.025549][T13020] ext4 filesystem being mounted at /797/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.052632][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3934'. [ 168.065001][T13020] EXT4-fs error (device loop1): ext4_resize_begin:60: comm syz.1.3928: resize_inode disabled but reserved GDT blocks non-zero [ 168.116641][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.170624][T13044] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 168.247613][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3940'. [ 168.375864][T13055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 168.389964][T13055] System zones: 1-3, 19-19, 35-36 [ 168.395727][T13055] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 168.409550][T13055] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.446005][T13055] EXT4-fs warning (device loop0): verify_group_input:156: Last group not full [ 168.998971][T10576] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.105207][T13068] netlink: 2072 bytes leftover after parsing attributes in process `syz.4.3947'. [ 169.255013][T13081] set_capacity_and_notify: 5 callbacks suppressed [ 169.255028][T13081] loop0: detected capacity change from 0 to 512 [ 169.273924][T13083] can0: slcan on ptm0. [ 169.314897][T13081] EXT4-fs: Ignoring removed i_version option [ 169.356839][T13081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.378099][T13081] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.388915][T13082] can0 (unregistered): slcan off ptm0. [ 169.422747][T13081] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.3953: resize_inode disabled but reserved GDT blocks non-zero [ 169.536385][T10576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.545650][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 169.559963][T13110] loop6: detected capacity change from 0 to 1024 [ 169.578305][T13110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.599769][T13110] EXT4-fs: inline encryption not supported [ 169.621778][T13110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.638549][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 169.638666][ T28] audit: type=1400 audit(2000000050.080:1293): avc: denied { ioctl } for pid=13117 comm="syz.2.3969" path="socket:[33760]" dev="sockfs" ino=33760 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 169.691589][T13123] loop1: detected capacity change from 0 to 512 [ 169.703335][T13110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.731261][T13123] ------------[ cut here ]------------ [ 169.736868][T13123] EA inode 11 i_nlink=2 [ 169.736942][T13123] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.1.3970/13123 [ 169.753048][T13123] Modules linked in: [ 169.757098][T13123] CPU: 0 UID: 0 PID: 13123 Comm: syz.1.3970 Not tainted syzkaller #0 PREEMPT(lazy) [ 169.766539][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 169.776696][T13123] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 169.783946][T13123] Code: e6 c5 96 ff 49 8d 7e 40 4c 8d 2d eb 82 5a 05 e8 e6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 1a a1 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 01 8d d9 03 90 90 90 90 90 90 90 [ 169.803652][T13123] RSP: 0000:ffffc900027537f8 EFLAGS: 00010246 [ 169.810508][T13123] RAX: ffff888104132db0 RBX: ffff888105e4bbb0 RCX: ffffffff81c2b246 [ 169.818565][T13123] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3520 [ 169.826581][T13123] RBP: 000000000000000b R08: 0001888105e4bb63 R09: 0000000000000000 [ 169.834709][T13123] R10: 000188810228a293 R11: 0000000000000004 R12: ffff888105e4bb60 [ 169.843407][T13123] R13: ffffffff871d3520 R14: ffff888105e4bb18 R15: 0000000000000001 [ 169.851430][T13123] FS: 00007f34e04476c0(0000) GS:ffff8882ae8cf000(0000) knlGS:0000000000000000 [ 169.860426][T13123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.864832][T13110] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.867153][T13123] CR2: 00007f070a0168d2 CR3: 00000001206bc000 CR4: 00000000003506f0 [ 169.867179][T13123] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 169.867195][T13123] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 169.902418][T13123] Call Trace: [ 169.905737][T13123] [ 169.909391][T13123] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 169.915441][T13123] ext4_xattr_delete_inode+0x6b5/0x790 [ 169.921056][T13123] ext4_evict_inode+0xb18/0xdf0 [ 169.926049][T13123] ? __pfx_ext4_evict_inode+0x10/0x10 [ 169.931542][T13123] evict+0x2a5/0x510 [ 169.935593][T13123] iput+0x430/0x5a0 [ 169.940406][T13123] ext4_process_orphan+0x1a4/0x1c0 [ 169.945787][T13123] ext4_orphan_cleanup+0x6a6/0xa10 [ 169.951018][T13123] ? ext4_register_li_request+0x14c/0x440 [ 169.956963][T13123] ext4_fill_super+0x33ab/0x3760 [ 169.962023][T13123] ? set_blocksize+0x14c/0x270 [ 169.966852][T13123] ? __pfx_ext4_fill_super+0x10/0x10 [ 169.972942][T13123] get_tree_bdev_flags+0x291/0x300 [ 169.978206][T13123] ? __pfx_ext4_fill_super+0x10/0x10 [ 169.983607][T13123] get_tree_bdev+0x1f/0x30 [ 169.988116][T13123] ext4_get_tree+0x1c/0x30 [ 169.992597][T13123] vfs_get_tree+0x57/0x1d0 [ 169.997842][T13123] do_new_mount+0x288/0x8d0 [ 170.002422][T13123] path_mount+0x4ad/0xb90 [ 170.006820][T13123] __se_sys_mount+0x28c/0x2e0 [ 170.011721][T13123] __x64_sys_mount+0x67/0x80 [ 170.016489][T13123] x64_sys_call+0x2d61/0x3020 [ 170.021284][T13123] do_syscall_64+0x136/0x3c0 [ 170.025953][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.032499][T13123] RIP: 0033:0x7f34e19ef0ca [ 170.037006][T13123] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.043633][ T28] audit: type=1400 audit(2000000050.490:1294): avc: denied { write } for pid=13106 comm="syz.6.3964" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.056820][T13123] RSP: 002b:00007f34e0446e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.056853][T13123] RAX: ffffffffffffffda RBX: 00007f34e0446ee0 RCX: 00007f34e19ef0ca [ 170.095854][T13123] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f34e0446ea0 [ 170.103910][T13123] RBP: 00002000000009c0 R08: 00007f34e0446ee0 R09: 0000000000800718 [ 170.112569][T13123] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 170.120672][T13123] R13: 00007f34e0446ea0 R14: 000000000000048d R15: 0000200000000200 [ 170.128806][T13123] [ 170.131975][T13123] ---[ end trace 0000000000000000 ]--- [ 170.141371][T13123] EXT4-fs (loop1): 1 orphan inode deleted [ 170.147695][T13123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.160104][ T28] audit: type=1400 audit(2000000050.590:1295): avc: denied { write } for pid=13095 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.209497][ T28] audit: type=1400 audit(2000000050.660:1296): avc: denied { write } for pid=13136 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.290772][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.300305][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.380669][ T28] audit: type=1400 audit(2000000050.830:1297): avc: denied { ioctl } for pid=13149 comm="syz.2.3977" path="socket:[35841]" dev="sockfs" ino=35841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.410044][T13152] can0: slcan on ptm0. [ 170.418436][T13157] netlink: 'syz.0.3978': attribute type 9 has an invalid length. [ 170.505674][ T28] audit: type=1400 audit(2000000050.950:1298): avc: denied { write } for pid=13140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.538832][T13150] can0 (unregistered): slcan off ptm0. [ 170.588577][ T28] audit: type=1400 audit(2000000051.030:1299): avc: denied { write } for pid=13174 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.638640][T13182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3988'. [ 170.686928][ T28] audit: type=1400 audit(2000000051.130:1300): avc: denied { write } for pid=13183 comm="syz.0.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.765749][ T28] audit: type=1400 audit(2000000051.130:1301): avc: denied { connect } for pid=13183 comm="syz.0.3989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 170.815312][ T28] audit: type=1400 audit(2000000051.130:1302): avc: denied { name_connect } for pid=13183 comm="syz.0.3989" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 170.979776][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4004'. [ 171.616127][T13277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4033'. [ 171.865357][T13289] loop2: detected capacity change from 0 to 512 [ 171.901809][T13289] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 171.919171][T13289] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 171.947865][T13289] System zones: 0-1, 15-15, 18-18, 34-34 [ 171.983734][T13289] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.019808][T13289] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.095255][T13289] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 172.128369][T13289] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.4039: bad orphan inode 16 [ 172.146300][T13289] loop2: lost filesystem error report for type 5 error -117 [ 172.147050][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 172.160928][ C0] EXT4-fs (loop2): initial error at time 2000000052: ext4_orphan_get:1425 [ 172.169502][ C0] EXT4-fs (loop2): last error at time 2000000052: ext4_orphan_get:1425 [ 172.182559][T13289] ext4_test_bit(bit=15, block=18) = 1 [ 172.189651][T13289] is_bad_inode(inode)=0 [ 172.196912][T13289] NEXT_ORPHAN(inode)=0 [ 172.203443][T13289] max_ino=32 [ 172.208187][T13289] i_nlink=2 [ 172.214340][T13289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.276854][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.293381][T13298] loop4: detected capacity change from 0 to 512 [ 172.324349][T13298] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 172.359602][T13298] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 172.367949][T13298] System zones: 0-1, 15-15, 18-18, 34-34 [ 172.373880][T13298] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.380532][T13298] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.395401][T13298] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 172.415824][T13298] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.4053: bad orphan inode 16 [ 172.427693][T13298] loop4: lost filesystem error report for type 5 error -117 [ 172.427800][T13298] ext4_test_bit(bit=15, block=18) = 1 [ 172.440641][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 172.440667][ C0] EXT4-fs (loop4): initial error at time 2000000052: ext4_orphan_get:1425 [ 172.440695][ C0] EXT4-fs (loop4): last error at time 2000000052: ext4_orphan_get:1425 [ 172.489321][T13298] is_bad_inode(inode)=0 [ 172.500042][T13298] NEXT_ORPHAN(inode)=0 [ 172.504240][T13298] max_ino=32 [ 172.512037][T13305] netlink: 'syz.0.4045': attribute type 8 has an invalid length. [ 172.520067][T13298] i_nlink=2 [ 172.523786][T13298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.620268][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.768419][T13332] loop2: detected capacity change from 0 to 512 [ 172.803095][T13332] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.4058: bad orphan inode 15 [ 172.817328][T13332] loop2: lost filesystem error report for type 5 error -117 [ 172.818602][T13332] ext4_test_bit(bit=14, block=18) = 1 [ 172.831416][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 172.831439][ C1] EXT4-fs (loop2): initial error at time 2000000053: ext4_orphan_get:1425 [ 172.831471][ C1] EXT4-fs (loop2): last error at time 2000000053: ext4_orphan_get:1425 [ 172.854842][T13332] is_bad_inode(inode)=0 [ 172.859083][T13332] NEXT_ORPHAN(inode)=1023 [ 172.863434][T13332] max_ino=32 [ 172.866660][T13332] i_nlink=0 [ 172.871073][T13332] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.4058: corrupted xattr block 19: invalid header [ 172.887412][T13332] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 172.888452][T13332] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 172.912507][T13332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 172.926542][T13332] ext4 filesystem being mounted at /854/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 172.942874][T13332] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4058: bg 0: block 449: padding at end of block bitmap is not set [ 173.070457][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 173.202029][T13363] loop0: detected capacity change from 0 to 128 [ 173.220509][T13365] loop2: detected capacity change from 0 to 164 [ 173.239956][T13363] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.300626][T13363] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.382074][T13378] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4080'. [ 173.394468][T10576] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.569724][T13401] netlink: 'syz.4.4092': attribute type 8 has an invalid length. [ 173.684308][T13416] geneve0: entered promiscuous mode [ 173.700963][T13416] geneve0: left promiscuous mode [ 173.932443][T13447] loop2: detected capacity change from 0 to 512 [ 173.967282][T13447] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4110: bg 0: block 5: invalid block bitmap [ 173.997067][T13447] loop2: lost filesystem error report for type 5 error -117 [ 173.997700][T13447] EXT4-fs (loop2): Remounting filesystem read-only [ 174.011660][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 174.011680][ C0] EXT4-fs (loop2): initial error at time 2000000054: ext4_validate_block_bitmap:432 [ 174.011700][ C0] EXT4-fs (loop2): last error at time 2000000054: ext4_validate_block_bitmap:432 [ 174.065560][T13447] EXT4-fs (loop2): 2 truncates cleaned up [ 174.092791][T13447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.244591][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.403167][T13469] loop1: detected capacity change from 0 to 128 [ 174.733022][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 174.733039][ T28] audit: type=1400 audit(2000000055.180:1321): avc: denied { mount } for pid=13495 comm="syz.4.4136" name="/" dev="ramfs" ino=36366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 174.776998][ T28] audit: type=1400 audit(2000000055.220:1322): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 174.814977][ T28] audit: type=1326 audit(2000000055.260:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.4138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b66de59 code=0x7ffc0000 [ 174.841096][ T28] audit: type=1326 audit(2000000055.260:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.4138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b66de59 code=0x7ffc0000 [ 174.942873][ T28] audit: type=1326 audit(2000000055.260:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.4138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b66de59 code=0x7ffc0000 [ 174.972868][T13464] syz.2.4121 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 175.017723][ T28] audit: type=1326 audit(2000000055.260:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.4138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b66de59 code=0x7ffc0000 [ 175.060116][T13464] CPU: 1 UID: 0 PID: 13464 Comm: syz.2.4121 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 175.060158][T13464] Tainted: [W]=WARN [ 175.060168][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.060236][T13464] Call Trace: [ 175.060284][T13464] [ 175.060293][T13464] __dump_stack+0x1d/0x30 [ 175.060325][T13464] dump_stack_lvl+0x95/0xd0 [ 175.060400][T13464] dump_stack+0x15/0x1b [ 175.060425][T13464] dump_header+0x80/0x240 [ 175.060453][T13464] oom_kill_process+0x295/0x350 [ 175.060554][T13464] out_of_memory+0x981/0xbc0 [ 175.060596][T13464] try_charge_memcg+0x621/0xa00 [ 175.060729][T13464] charge_memcg+0x6d/0x120 [ 175.060819][T13464] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 175.060857][T13464] swap_cache_alloc_folio+0x47b/0x5e0 [ 175.060973][T13464] swap_cluster_readahead+0x2b1/0x460 [ 175.061012][T13464] swapin_readahead+0xd8/0x8a0 [ 175.061047][T13464] ? _raw_spin_unlock+0x9/0x30 [ 175.061074][T13464] ? swap_put_entries_cluster+0x49c/0x4c0 [ 175.061156][T13464] ? __rcu_read_unlock+0x4e/0x70 [ 175.061293][T13464] ? swap_cache_get_folio+0x1f7/0x200 [ 175.061330][T13464] do_swap_page+0x2a2/0x1ec0 [ 175.061359][T13464] ? __css_rstat_updated+0xbb/0x280 [ 175.061386][T13464] ? __rcu_read_lock+0x36/0x50 [ 175.061480][T13464] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 175.061514][T13464] handle_mm_fault+0xb3c/0x2da0 [ 175.061632][T13464] do_user_addr_fault+0x634/0x1060 [ 175.061671][T13464] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 175.061720][T13464] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 175.061780][T13464] ? trace_page_fault_user+0x1f/0xa0 [ 175.061809][T13464] exc_page_fault+0x62/0xa0 [ 175.061896][T13464] asm_exc_page_fault+0x26/0x30 [ 175.061917][T13464] RIP: 0033:0x7fbdc1d78fb8 [ 175.061934][T13464] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 175.061953][T13464] RSP: 002b:00007ffee4ccdd50 EFLAGS: 00010246 [ 175.061974][T13464] RAX: 0000000000000000 RBX: 000055555948c500 RCX: 00007fbdc1d7e68e [ 175.062017][T13464] RDX: 00007ffee4ccdda0 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.062035][T13464] RBP: 00007fbdc2047da0 R08: 0000000000000000 R09: 0000000000000000 [ 175.062052][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002ac03 [ 175.062068][T13464] R13: 00007fbdc2045fac R14: 000000000002a8f9 R15: 00007ffee4ccded0 [ 175.062091][T13464] [ 175.337680][T13464] memory: usage 225032kB, limit 307200kB, failcnt 177 [ 175.348220][ T28] audit: type=1326 audit(2000000055.260:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.4138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f435b66de59 code=0x7ffc0000 [ 175.387162][T13464] memory+swap: usage 180236kB, limit 9007199254740988kB, failcnt 0 [ 175.408475][T13464] kmem: usage 136844kB, limit 9007199254740988kB, failcnt 0 [ 175.415860][ T28] audit: type=1326 audit(2000000055.260:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.4138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b66de59 code=0x7ffc0000 [ 175.464550][T13464] Memory cgroup stats for /syz2: [ 175.464972][T13464] cache 413696 [ 175.477731][ T28] audit: type=1326 audit(2000000055.260:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.4138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b66de59 code=0x7ffc0000 [ 175.523852][T13527] loop4: detected capacity change from 0 to 128 [ 175.535015][ T28] audit: type=1326 audit(2000000055.260:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.4.4138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f435b66de59 code=0x7ffc0000 [ 175.563493][T13464] rss 8192 [ 175.590975][T13464] shmem 0 [ 175.612181][T13464] mapped_file 65536 [ 175.640931][T13464] dirty 0 [ 175.663948][T13464] writeback 0 [ 175.684062][T13464] workingset_refault_anon 38 [ 175.705032][T13464] workingset_refault_file 579 [ 175.713704][T13464] swap 385024 [ 175.725215][T13464] swapcached 557056 [ 175.732829][T13464] pgpgin 103762 [ 175.736485][T13464] pgpgout 103657 [ 175.740469][T13464] pgfault 144939 [ 175.744104][T13464] pgmajfault 26 [ 175.747868][T13464] inactive_anon 16384 [ 175.751907][T13464] active_anon 0 [ 175.758849][T13464] inactive_file 331776 [ 175.763108][T13464] active_file 81920 [ 175.767159][T13464] unevictable 0 [ 175.770757][T13464] hierarchical_memory_limit 314572800 [ 175.819456][T13464] hierarchical_memsw_limit 9223372036854771712 [ 175.829370][T13464] total_cache 413696 [ 175.857900][T13464] total_rss 8192 [ 175.903730][T13464] total_shmem 0 [ 175.908569][T13464] total_mapped_file 65536 [ 175.926870][T13553] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4162'. [ 175.942315][T13464] total_dirty 0 [ 176.010535][T13464] total_writeback 0 [ 176.035517][T13464] total_workingset_refault_anon 38 [ 176.063876][T13464] total_workingset_refault_file 579 [ 176.101383][T13464] total_swap 385024 [ 176.112861][T13577] loop4: detected capacity change from 0 to 1024 [ 176.119670][T13464] total_swapcached 557056 [ 176.119684][T13464] total_pgpgin 103762 [ 176.119695][T13464] total_pgpgout 103657 [ 176.119705][T13464] total_pgfault 144939 [ 176.119715][T13464] total_pgmajfault 26 [ 176.119726][T13464] total_inactive_anon 16384 [ 176.119735][T13464] total_active_anon 0 [ 176.119744][T13464] total_inactive_file 331776 [ 176.119754][T13464] total_active_file 81920 [ 176.119811][T13464] total_unevictable 0 [ 176.119826][T13464] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4121,pid=13464,uid=0 [ 176.119920][T13464] Memory cgroup out of memory: Killed process 13464 (syz.2.4121) total-vm:96164kB, anon-rss:1240kB, file-rss:22024kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 176.175050][T13577] EXT4-fs: Ignoring removed orlov option [ 176.261189][T13577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.399993][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.945787][T13670] netlink: 'syz.6.4216': attribute type 13 has an invalid length. [ 176.953907][T13670] netlink: 14581 bytes leftover after parsing attributes in process `syz.6.4216'. [ 177.064334][T13674] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4218'. [ 177.200290][T13696] netlink: 'syz.0.4231': attribute type 13 has an invalid length. [ 177.217341][T13696] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.4231'. [ 177.351188][T13718] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4241'. [ 177.459436][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4248'. [ 177.641422][T13757] vlan2: entered promiscuous mode [ 177.863192][T13789] loop4: detected capacity change from 0 to 512 [ 177.877002][T13789] EXT4-fs: inline encryption not supported [ 177.888300][T13789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 177.904059][T13789] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.931107][T13789] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.964607][T13789] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4276: bg 0: block 248: padding at end of block bitmap is not set [ 177.988215][T13789] loop4: lost filesystem error report for type 5 error -117 [ 177.991287][T13789] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.4276: Failed to acquire dquot type 1 [ 177.998744][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 177.998768][ C1] EXT4-fs (loop4): last error at time 2000000058: ext4_validate_block_bitmap:441 [ 178.056252][T13789] loop4: lost filesystem error report for type 5 error -28 [ 178.062247][T13789] EXT4-fs (loop4): 1 truncate cleaned up [ 178.091132][T13789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 178.140694][T13789] syz.4.4276 (13789) used greatest stack depth: 9760 bytes left [ 178.168215][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 178.378088][T13835] loop0: detected capacity change from 0 to 512 [ 178.393807][T13835] EXT4-fs: journaled quota format not specified [ 178.489010][T13842] loop1: detected capacity change from 0 to 512 [ 178.509927][T13842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.528221][T13842] ext4 filesystem being mounted at /862/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.614741][T13849] loop0: detected capacity change from 0 to 736 [ 178.631732][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.824008][T13870] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 178.860337][T13874] loop1: detected capacity change from 0 to 512 [ 178.928984][T13880] loop6: detected capacity change from 0 to 1024 [ 178.937549][T13880] EXT4-fs: Ignoring removed bh option [ 178.950290][T13880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.033194][ T6674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.202420][T13910] random: crng reseeded on system resumption [ 179.249888][T13910] Restarting kernel threads ... [ 179.276252][T13910] Done restarting kernel threads. [ 179.503824][T13942] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 179.510493][T13942] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 179.539185][T13942] vhci_hcd vhci_hcd.0: Device attached [ 179.584318][T13949] vhci_hcd: connection closed [ 179.586347][ T8552] vhci_hcd vhci_hcd.2: stop threads [ 179.623152][ T8552] vhci_hcd vhci_hcd.2: release socket [ 179.637340][ T8552] vhci_hcd vhci_hcd.2: disconnect device [ 179.781277][T13960] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4350'. [ 179.794995][T13961] loop1: detected capacity change from 0 to 512 [ 179.836790][T13961] EXT4-fs: journaled quota format not specified [ 179.873628][T13963] loop4: detected capacity change from 0 to 4096 [ 179.888899][T13965] usb usb8: usbfs: process 13965 (syz.0.4341) did not claim interface 0 before use [ 179.903078][T13963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.959391][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.962544][T13968] loop0: detected capacity change from 0 to 512 [ 179.982002][T13968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.013753][T13968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.053186][T13974] loop4: detected capacity change from 0 to 736 [ 180.079887][T13968] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.104794][T13955] ================================================================== [ 180.113022][T13955] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 180.120870][T13955] [ 180.123199][T13955] write to 0xffffea00048ac358 of 8 bytes by task 13946 on cpu 0: [ 180.130921][T13955] __filemap_remove_folio+0x201/0x2e0 [ 180.136338][T13955] filemap_remove_folio+0x6d/0x1d0 [ 180.141482][T13955] truncate_inode_folio+0x42/0x50 [ 180.146522][T13955] shmem_undo_range+0x27f/0xb60 [ 180.151384][T13955] shmem_fallocate+0x84e/0x8f0 [ 180.156171][T13955] vfs_fallocate+0x3ac/0x400 [ 180.160771][T13955] __x64_sys_fallocate+0x7a/0xd0 [ 180.165718][T13955] x64_sys_call+0x298e/0x3020 [ 180.170428][T13955] do_syscall_64+0x136/0x3c0 [ 180.175047][T13955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.180962][T13955] [ 180.183293][T13955] read to 0xffffea00048ac358 of 8 bytes by task 13955 on cpu 1: [ 180.190924][T13955] folio_mapping+0xa1/0xe0 [ 180.195347][T13955] move_folios_to_lru+0x1f6/0x810 [ 180.200391][T13955] evict_folios+0x29ce/0x2d80 [ 180.205090][T13955] try_to_shrink_lruvec+0x7c5/0xb10 [ 180.210343][T13955] shrink_lruvec+0x25e/0x1b60 [ 180.215127][T13955] shrink_node+0x69d/0x20f0 [ 180.219680][T13955] do_try_to_free_pages+0x408/0xc90 [ 180.224894][T13955] try_to_free_mem_cgroup_pages+0x201/0x420 [ 180.230806][T13955] try_charge_memcg+0x375/0xa00 [ 180.235681][T13955] __memcg_kmem_charge_page+0x199/0x3a0 [ 180.241250][T13955] __alloc_frozen_pages_noprof+0x18a/0x350 [ 180.247089][T13955] alloc_pages_mpol+0xa9/0x1d0 [ 180.251881][T13955] alloc_pages_noprof+0x8f/0x140 [ 180.256897][T13955] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 180.262816][T13955] __kvmalloc_node_noprof+0x3a0/0x590 [ 180.268220][T13955] futex_hash_allocate+0x192/0x920 [ 180.273455][T13955] futex_hash_prctl+0xd8/0xf0 [ 180.278161][T13955] __se_sys_prctl+0x4f4/0x13b0 [ 180.282977][T13955] __x64_sys_prctl+0x67/0x80 [ 180.287608][T13955] x64_sys_call+0x2533/0x3020 [ 180.292302][T13955] do_syscall_64+0x136/0x3c0 [ 180.296915][T13955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.302847][T13955] [ 180.305206][T13955] value changed: 0xffff8881049057a8 -> 0x0000000000000000 [ 180.312314][T13955] [ 180.314640][T13955] Reported by Kernel Concurrency Sanitizer on: [ 180.320795][T13955] CPU: 1 UID: 0 PID: 13955 Comm: syz.6.4346 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 180.331826][T13955] Tainted: [W]=WARN [ 180.335636][T13955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.345701][T13955] ================================================================== [ 180.364494][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 180.364555][ T28] audit: type=1400 audit(2000000060.810:1353): avc: denied { write } for pid=13967 comm="syz.0.4342" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.412611][T13968] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #2: block 3: comm syz.0.4342: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=17, rec_len=8, size=2048 fake=0 [ 180.433678][ T28] audit: type=1400 audit(2000000060.860:1354): avc: denied { write } for pid=13967 comm="syz.0.4342" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.438306][T13968] EXT4-fs error (device loop0) in ext4_delete_entry:2744: Corrupt filesystem [ 180.456175][ T28] audit: type=1400 audit(2000000060.860:1355): avc: denied { rmdir } for pid=13967 comm="syz.0.4342" name="control" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.516998][T10576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.573034][T13955] syz.6.4346 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 180.589315][T13955] CPU: 1 UID: 0 PID: 13955 Comm: syz.6.4346 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 180.589467][T13955] Tainted: [W]=WARN [ 180.589477][T13955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.589495][T13955] Call Trace: [ 180.589505][T13955] [ 180.589524][T13955] __dump_stack+0x1d/0x30 [ 180.589555][T13955] dump_stack_lvl+0x95/0xd0 [ 180.589648][T13955] dump_stack+0x15/0x1b [ 180.589773][T13955] dump_header+0x80/0x240 [ 180.589866][T13955] oom_kill_process+0x295/0x350 [ 180.589961][T13955] out_of_memory+0x981/0xbc0 [ 180.589995][T13955] try_charge_memcg+0x621/0xa00 [ 180.590052][T13955] ? __rcu_read_unlock+0x4e/0x70 [ 180.590088][T13955] __memcg_kmem_charge_page+0x199/0x3a0 [ 180.590129][T13955] __alloc_frozen_pages_noprof+0x18a/0x350 [ 180.590216][T13955] alloc_pages_mpol+0xa9/0x1d0 [ 180.590257][T13955] alloc_pages_noprof+0x8f/0x140 [ 180.590306][T13955] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 180.590347][T13955] __kvmalloc_node_noprof+0x3a0/0x590 [ 180.590392][T13955] ? futex_hash_allocate+0x192/0x920 [ 180.590415][T13955] ? futex_hash_allocate+0x192/0x920 [ 180.590437][T13955] ? futex_hash_allocate+0x192/0x920 [ 180.590468][T13955] futex_hash_allocate+0x192/0x920 [ 180.590528][T13955] ? cap_task_prctl+0x13f/0x6b0 [ 180.590564][T13955] futex_hash_prctl+0xd8/0xf0 [ 180.590587][T13955] __se_sys_prctl+0x4f4/0x13b0 [ 180.590618][T13955] __x64_sys_prctl+0x67/0x80 [ 180.590712][T13955] x64_sys_call+0x2533/0x3020 [ 180.590738][T13955] do_syscall_64+0x136/0x3c0 [ 180.590848][T13955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.590903][T13955] RIP: 0033:0x7f5d90cade59 [ 180.590923][T13955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.590943][T13955] RSP: 002b:00007f5d8f6e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 180.590965][T13955] RAX: ffffffffffffffda RBX: 00007f5d90f36090 RCX: 00007f5d90cade59 [ 180.590980][T13955] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 180.591031][T13955] RBP: 00007f5d90d43e6f R08: 0000000000000000 R09: 0000000000000000 [ 180.591046][T13955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.591102][T13955] R13: 00007f5d90f36128 R14: 00007f5d90f36090 R15: 00007ffff4128ae8 [ 180.591141][T13955] [ 180.591189][T13955] memory: usage 307196kB, limit 307200kB, failcnt 346 [ 180.832220][T13955] memory+swap: usage 211884kB, limit 9007199254740988kB, failcnt 0 [ 180.840298][T13955] kmem: usage 205096kB, limit 9007199254740988kB, failcnt 0 [ 180.847932][T13955] Memory cgroup stats for /syz6: [ 180.848154][T13955] cache 0 [ 180.856403][T13955] rss 20480 [ 180.859885][T13955] shmem 0 [ 180.863113][T13955] mapped_file 0 [ 180.866739][T13955] dirty 0 [ 180.869994][T13955] writeback 0 [ 180.873524][T13955] workingset_refault_anon 126 [ 180.878501][T13955] workingset_refault_file 0 [ 180.883262][T13955] swap 630784 [ 180.886770][T13955] swapcached 1183744 [ 180.890977][T13955] pgpgin 69619 [ 180.894558][T13955] pgpgout 69613 [ 180.898299][T13955] pgfault 87016 [ 180.902130][T13955] pgmajfault 74 [ 180.905787][T13955] inactive_anon 0 [ 180.909688][T13955] active_anon 12288 [ 180.913877][T13955] inactive_file 0 [ 180.927068][T13955] active_file 0 [ 180.937196][T13955] unevictable 0 [ 180.940783][T13955] hierarchical_memory_limit 314572800 [ 180.946176][T13955] hierarchical_memsw_limit 9223372036854771712 [ 180.952476][T13955] total_cache 0 [ 180.972905][T13955] total_rss 20480 [ 180.978074][T13955] total_shmem 0 [ 180.984060][T13955] total_mapped_file 0 [ 180.989000][T13955] total_dirty 0 [ 180.992564][T13955] total_writeback 0 [ 180.996465][T13955] total_workingset_refault_anon 126 [ 181.001947][T13955] total_workingset_refault_file 0 [ 181.007218][T13955] total_swap 630784 [ 181.011123][T13955] total_swapcached 1183744 [ 181.015653][T13955] total_pgpgin 69619 [ 181.020465][T13955] total_pgpgout 69613 [ 181.024632][T13955] total_pgfault 87016 [ 181.028999][T13955] total_pgmajfault 74 [ 181.033101][T13955] total_inactive_anon 0 [ 181.037673][T13955] total_active_anon 12288 [ 181.042154][T13955] total_inactive_file 0 [ 181.046427][T13955] total_active_file 0 [ 181.051321][T13955] total_unevictable 0 [ 181.055439][T13955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4346,pid=13944,uid=0 [ 181.070324][T13955] Memory cgroup out of memory: Killed process 13955 (syz.6.4346) total-vm:96228kB, anon-rss:1352kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 181.098129][T13955] syz.6.4346 (13955) used greatest stack depth: 8872 bytes left