last executing test programs: 8m3.336908181s ago: executing program 32 (id=176): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x300127) keyctl$KEYCTL_MOVE(0x11, r0, 0x0, r0, 0x1) 7m49.362483225s ago: executing program 33 (id=502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x4, 0x5b55}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b8, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0e4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc}, 0x94) 6m55.341459023s ago: executing program 34 (id=1631): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xb4, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed66554900000000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0x10, "c8f46976e79ea788f03d9d320592"}]}, @cipso={0x86, 0x6, 0x20}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) 6m39.821352044s ago: executing program 35 (id=1811): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e900feff", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m36.025689454s ago: executing program 36 (id=2045): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x70, &(0x7f0000000700)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4e, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}, "eae6fbeaeba189c2bbf224894fbd265591f10c2f07259f9089502e289f470ce76cb152297d2121c2b30fb6fc0482d2ca7d2d4920cd0c510b32cc9587523b"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000280)=""/71, 0x47}], 0x1}, 0x4}], 0x1, 0x40000061, 0x0) 6m23.300887568s ago: executing program 37 (id=2022): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001900)={0x3c, r2, 0x94a4f44e6e358eff, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 6m7.097603764s ago: executing program 38 (id=2568): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x80000000}, 0xc) 5m58.327462673s ago: executing program 39 (id=2418): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 5m56.606578844s ago: executing program 9 (id=2776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m56.494135737s ago: executing program 9 (id=2777): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000340)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') 5m56.257706303s ago: executing program 9 (id=2779): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x37d}, 0x400, 0x0, 0x7, 0x4, 0x4, 0x8001, 0x8012}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x39) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 5m56.169323165s ago: executing program 9 (id=2780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m56.113518326s ago: executing program 9 (id=2781): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 5m56.035955948s ago: executing program 9 (id=2783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x2db4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}}], 0x2, 0x200400c4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x10000, @private0, 0xfff}}, [0x7, 0x60, 0x40, 0x9, 0x9, 0x5, 0x7, 0x100000000, 0x9, 0xba84, 0x2, 0x11dd, 0x80, 0x0, 0xa9]}, &(0x7f00000001c0)=0x100) 5m49.293651519s ago: executing program 40 (id=2884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x400c4) 5m40.970236988s ago: executing program 41 (id=2783): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x2db4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}}], 0x2, 0x200400c4) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x10000, @private0, 0xfff}}, [0x7, 0x60, 0x40, 0x9, 0x9, 0x5, 0x7, 0x100000000, 0x9, 0xba84, 0x2, 0x11dd, 0x80, 0x0, 0xa9]}, &(0x7f00000001c0)=0x100) 3m32.15420718s ago: executing program 1 (id=6607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 3m32.13473183s ago: executing program 1 (id=6608): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x40082104, 0x0) 3m31.275612511s ago: executing program 1 (id=6621): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x9}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m30.229306976s ago: executing program 1 (id=6656): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 3m30.177331277s ago: executing program 1 (id=6660): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0xf8, 0x0, @tick=0x1, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0x217, @time={0x1, 0x5}, 0x0, {}, 0x67, 0x2}) 3m29.262285839s ago: executing program 1 (id=6676): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008"], 0x88}}, 0x0) 3m29.262162399s ago: executing program 42 (id=6676): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008"], 0x88}}, 0x0) 3m3.20327367s ago: executing program 7 (id=7395): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x497, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ftruncate(r0, 0xbb16) 3m2.82035656s ago: executing program 7 (id=7407): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0x28}}, 0x0) 3m2.276661603s ago: executing program 7 (id=7409): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000001a00)=""/4113, 0x41100, 0xd}, 0x94) 3m2.192076944s ago: executing program 7 (id=7413): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1043400, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 3m2.191727424s ago: executing program 7 (id=7414): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x80) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 3m1.95131375s ago: executing program 7 (id=7423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 3m1.889817292s ago: executing program 43 (id=7423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 2m2.84781955s ago: executing program 5 (id=8746): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x4}, {0x6, 0xfd, 0xee}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r0, &(0x7f00000001c0)="43f1", 0x2) 2m2.654429135s ago: executing program 5 (id=8753): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000000dc0)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d400000015001d03"], 0xd4}}, 0x0) 2m2.639729015s ago: executing program 5 (id=8757): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xd, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x10, @mcast2, 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000011c0)="c2fb8e95213f23e208cf81fbe16d", 0xe}], 0x1}}], 0x1, 0x4001c00) 2m2.584493186s ago: executing program 5 (id=8760): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1204040, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2b05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 2m2.528762358s ago: executing program 5 (id=8762): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000600)={r2, 0x1}, &(0x7f0000000640)=0x8) 2m2.00065227s ago: executing program 5 (id=8778): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x47f5, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m1.996968831s ago: executing program 44 (id=8778): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x47f5, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 59.050757242s ago: executing program 0 (id=10394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000ff0effff1c0012800e00010069703665727370616e00"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 58.928412215s ago: executing program 0 (id=10399): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) statx(0xffffffffffffff9c, 0x0, 0x800, 0x800, 0x0) 58.776240199s ago: executing program 0 (id=10402): perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x2, 0x8, 0x0, 0xd, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}, 0x10001, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x100882, 0x7ff, 0x3, 0x0, 0x648, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x6, 0x2}, 0x400, 0x9, 0x8, 0x6, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x100820, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') 58.70231341s ago: executing program 0 (id=10404): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f00000000c0)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) 58.554611714s ago: executing program 0 (id=10405): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) syz_usbip_server_init(0x1) 57.951664178s ago: executing program 0 (id=10420): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 42.919159137s ago: executing program 45 (id=10420): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 2.416499503s ago: executing program 8 (id=11383): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) 2.344071174s ago: executing program 8 (id=11385): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x140301, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000019}) poll(&(0x7f00000003c0)=[{r1, 0x3021}], 0x1, 0x50c00000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 1.645536351s ago: executing program 2 (id=11405): unshare(0x2c020400) r0 = semget(0x1, 0x1, 0x39c) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) unshare(0x40400) 1.645129591s ago: executing program 2 (id=11406): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0xe, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) 1.508631305s ago: executing program 8 (id=11407): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.507520465s ago: executing program 2 (id=11417): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)='W', 0x1}], 0x1, 0x0, 0x7) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 1.430407296s ago: executing program 2 (id=11408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x3, 0x6, 0x6, 0x3f8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) 1.387753677s ago: executing program 2 (id=11409): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x437, 0x800000, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x504c3, 0x26492}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 1.342376908s ago: executing program 4 (id=11411): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 1.203280512s ago: executing program 4 (id=11413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.138663383s ago: executing program 4 (id=11415): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) 849.86908ms ago: executing program 2 (id=11416): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 844.82863ms ago: executing program 3 (id=11419): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/52, 0x34}, 0xc0000}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/75, 0x4b}], 0x1}, 0xfffffffd}], 0x2, 0x40010112, 0x0) 786.460081ms ago: executing program 6 (id=11420): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x3c, 0x65, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff2, 0x7}, {0x0, 0x1}, {0xffec, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffeffff}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) 786.060421ms ago: executing program 3 (id=11421): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84"], 0xdd12}], 0x1}, 0x20040890) 718.438523ms ago: executing program 3 (id=11422): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) syz_clone3(&(0x7f0000001c80)={0x10902000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 718.249953ms ago: executing program 6 (id=11423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 697.814584ms ago: executing program 3 (id=11424): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3fb, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 651.239935ms ago: executing program 6 (id=11425): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d"], 0x88}, 0x1, 0x0, 0x0, 0x9d}, 0x0) 583.381866ms ago: executing program 6 (id=11426): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003e00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 582.520476ms ago: executing program 4 (id=11427): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x4c, 0x0}, 0x7}], 0x400000000000064, 0x40010020, 0x0) 294.404733ms ago: executing program 6 (id=11428): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 253.493284ms ago: executing program 8 (id=11429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 192.014025ms ago: executing program 6 (id=11430): getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@orlov}, {@oldalloc}, {@orlov}, {@nogrpid}, {@resuid}, {@grpjquota}]}, 0x2, 0x57b, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 180.217746ms ago: executing program 4 (id=11431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 135.434307ms ago: executing program 8 (id=11432): r0 = socket$kcm(0xa, 0x2, 0x73) syz_clone(0x420000, 0x0, 0xfffffffffffffc52, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) 123.037797ms ago: executing program 3 (id=11433): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x40000060) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x189800, 0x1b0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)) 62.093939ms ago: executing program 3 (id=11434): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) close(r0) 18.9337ms ago: executing program 8 (id=11435): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2d, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) 0s ago: executing program 4 (id=11436): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 455.153417][ T28] audit: type=1400 audit(1784206681.005:13091): avc: denied { map } for pid=29149 comm="syz.3.9702" path="socket:[88611]" dev="sockfs" ino=88611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 455.276230][ T28] audit: type=1400 audit(1784206681.125:13092): avc: denied { ioctl } for pid=29162 comm="syz.0.9710" path="socket:[88628]" dev="sockfs" ino=88628 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 455.338060][T29169] loop8: detected capacity change from 0 to 128 [ 455.356477][T29174] sctp: [Deprecated]: syz.3.9712 (pid 29174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.356477][T29174] Use struct sctp_sack_info instead [ 455.380229][T29169] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 455.394054][T29169] ext4 filesystem being mounted at /400/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 455.429331][ T28] audit: type=1400 audit(1784206681.275:13093): avc: denied { write } for pid=29167 comm="syz.8.9711" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.486022][T23029] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 455.507208][ T28] audit: type=1400 audit(1784206681.305:13094): avc: denied { write } for pid=29167 comm="syz.8.9711" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.624315][T29196] netlink: 'syz.4.9722': attribute type 8 has an invalid length. [ 455.642111][ T28] audit: type=1400 audit(1784206681.495:13095): avc: denied { getopt } for pid=29195 comm="syz.0.9723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 456.132553][T29245] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 456.160514][T13664] Bluetooth: hci0: Frame reassembly failed (-84) [ 456.310054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.318670][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.422237][T29256] loop6: detected capacity change from 0 to 128 [ 456.469562][T29256] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.482651][T29256] ext4 filesystem being mounted at /652/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 456.792509][ T3531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.853419][T29263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.862802][T29263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.872323][T29263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.881403][T29263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.894060][T29262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.902528][T29262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.911267][T29262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.230063][T27377] Bluetooth: hci0: command 0x1003 tx timeout [ 458.231375][ T3905] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 458.244144][T29247] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 459.205942][T21111] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.494916][T29301] loop4: detected capacity change from 0 to 1024 [ 459.507213][T29301] EXT4-fs: Ignoring removed orlov option [ 459.523524][T29301] EXT4-fs: Ignoring removed mblk_io_submit option [ 459.571325][T29301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.588758][T29316] netlink: 'syz.8.9773': attribute type 1 has an invalid length. [ 459.649142][T29316] bond1: entered promiscuous mode [ 459.667694][T29316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.689286][T29325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.723369][T29325] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 459.741650][T29325] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 459.754327][T29325] bond1: (slave gre1): Opening slave failed [ 459.943493][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.994122][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 459.994142][ T28] audit: type=1400 audit(1784206685.835:13101): avc: denied { mount } for pid=29340 comm="syz.4.9782" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 460.138825][T29350] loop6: detected capacity change from 0 to 512 [ 460.164278][T29350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.177845][T29350] ext4 filesystem being mounted at /656/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.192057][ T28] audit: type=1400 audit(1784206686.045:13102): avc: denied { write } for pid=29347 comm="syz.6.9785" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.241045][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.261584][T29355] loop8: detected capacity change from 0 to 256 [ 460.431054][ T28] audit: type=1400 audit(1784206686.275:13103): avc: denied { unmount } for pid=29368 comm="syz.6.9794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 460.544244][T29373] loop6: detected capacity change from 0 to 512 [ 460.562619][T29373] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 460.576420][T29373] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.9797: corrupted in-inode xattr: e_value size too large [ 460.599997][T29373] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 460.602404][T29373] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.9797: couldn't read orphan inode 15 (err -117) [ 460.611633][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 460.611651][ C1] EXT4-fs (loop6): initial error at time 1784206686: ext4_iget_extra_inode:5180: inode 15 [ 460.611689][ C1] EXT4-fs (loop6): last error at time 1784206686: ext4_iget_extra_inode:5180: inode 15 [ 460.670380][T29373] loop6: lost filesystem error report for type 5 error -117 [ 460.671923][T29373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.698075][ T28] audit: type=1400 audit(1784206686.545:13104): avc: denied { write } for pid=29372 comm="syz.6.9797" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.764026][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.818438][ T28] audit: type=1400 audit(1784206686.665:13105): avc: denied { connect } for pid=29383 comm="syz.6.9800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 461.054074][T29407] __nla_validate_parse: 2 callbacks suppressed [ 461.054097][T29407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9808'. [ 461.110560][T29409] netlink: 'syz.8.9810': attribute type 6 has an invalid length. [ 461.269479][T29419] netlink: 'syz.4.9812': attribute type 21 has an invalid length. [ 461.284658][T29422] dummy0: entered allmulticast mode [ 461.308117][T29422] dummy0: left allmulticast mode [ 461.357026][T29419] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9812'. [ 461.512221][ T3378] net_ratelimit: 10 callbacks suppressed [ 461.512242][ T3378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.649268][T29445] loop4: detected capacity change from 0 to 1024 [ 461.656688][T29445] EXT4-fs: inline encryption not supported [ 461.686806][ T28] audit: type=1326 audit(1784206687.535:13106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29440 comm="syz.8.9821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50537de59 code=0x7ffc0000 [ 461.716326][T29445] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 461.743668][ T28] audit: type=1326 audit(1784206687.535:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29440 comm="syz.8.9821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fd50537de59 code=0x7ffc0000 [ 461.770343][ T28] audit: type=1326 audit(1784206687.535:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29440 comm="syz.8.9821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50537de59 code=0x7ffc0000 [ 461.796476][ T28] audit: type=1326 audit(1784206687.535:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29440 comm="syz.8.9821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50537de59 code=0x7ffc0000 [ 461.825820][T29445] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.9823: lblock 1 mapped to illegal pblock 1 (length 1) [ 461.840030][T29445] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 461.840878][T29445] EXT4-fs (loop4): Remounting filesystem read-only [ 461.849987][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 461.850011][ C1] EXT4-fs (loop4): initial error at time 1784206687: ext4_map_blocks:833: inode 3: block 1 [ 461.850049][ C1] EXT4-fs (loop4): last error at time 1784206687: ext4_map_blocks:833: inode 3: block 1 [ 461.883115][T29445] Quota error (device loop4): write_blk: dquota write failed [ 461.890664][T29445] EXT4-fs (loop4): 1 orphan inode deleted [ 461.896987][T29445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.910656][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.974286][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.121461][T29484] sctp: [Deprecated]: syz.3.9840 (pid 29484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 462.121461][T29484] Use struct sctp_sack_info instead [ 462.528948][T29522] loop4: detected capacity change from 0 to 512 [ 462.549997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.565960][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.586208][T29522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.599109][T29522] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.652259][T29522] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz.4.9856: invalid size [ 462.688678][T29522] EXT4-fs (loop4): Remounting filesystem read-only [ 462.721213][T29533] IPv6: Can't replace route, no match found [ 462.752041][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.778300][T29533] IPv6: Can't replace route, no match found [ 462.791271][T13658] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 463.996578][T29647] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9912'. [ 464.014996][T29655] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9915'. [ 464.039680][T29653] loop8: detected capacity change from 0 to 8192 [ 464.042309][T29655] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9915'. [ 464.068508][T29655] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 464.102379][T29653] loop8: p1 p3 p4 [ 464.109112][T29653] loop8: p3 start 117772289 is beyond EOD, truncated [ 464.129564][T29653] loop8: p4 size 4281074432 extends beyond EOD, truncated [ 464.199720][ T9102] udevd[9102]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 464.205825][ T9117] udevd[9117]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 464.234861][T29666] loop4: detected capacity change from 0 to 512 [ 464.256864][T29668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9921'. [ 464.273066][T29666] EXT4-fs: inline encryption not supported [ 464.284150][T29666] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 464.321723][T29666] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.9920: corrupted in-inode xattr: e_value size too large [ 464.381428][T29666] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.382082][T29666] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.9920: couldn't read orphan inode 15 (err -117) [ 464.391394][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 464.391418][ C0] EXT4-fs (loop4): initial error at time 1784206690: ext4_iget_extra_inode:5180: inode 15 [ 464.391451][ C0] EXT4-fs (loop4): last error at time 1784206690: ext4_iget_extra_inode:5180: inode 15 [ 464.466872][T29666] loop4: lost filesystem error report for type 5 error -117 [ 464.467622][T29666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.516010][T29666] EXT4-fs error (device loop4): ext4_check_dx_root:2201: inode #2: comm syz.4.9920: Corrupt dir, invalid name_len for '..', running e2fsck is recommended [ 464.589329][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.682046][T29698] netlink: 256 bytes leftover after parsing attributes in process `syz.8.9933'. [ 464.703898][T29698] netlink: 256 bytes leftover after parsing attributes in process `syz.8.9933'. [ 464.729445][T29700] loop6: detected capacity change from 0 to 128 [ 465.065849][T29724] loop8: detected capacity change from 0 to 256 [ 465.235534][T29728] loop4: detected capacity change from 0 to 2048 [ 465.322256][T29728] Alternate GPT is invalid, using primary GPT. [ 465.329393][T29728] loop4: p2 p3 p7 [ 465.439616][ T9100] udevd[9100]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 465.444264][ T9117] udevd[9117]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 465.459824][ T9102] udevd[9102]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 465.750106][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 465.757282][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 466.171931][T29759] loop4: detected capacity change from 0 to 1024 [ 466.178876][T29759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.187549][T29759] EXT4-fs: Ignoring removed orlov option [ 466.203773][T29759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.233919][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 466.233939][ T28] audit: type=1400 audit(1784206692.085:13146): avc: denied { write } for pid=29758 comm="syz.4.9960" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.380679][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.426422][T29776] loop4: detected capacity change from 0 to 512 [ 466.433814][T29776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 466.447073][T29776] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.9963: invalid indirect mapped block 4294967295 (level 0) [ 466.462102][T29776] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 466.462311][T29776] EXT4-fs (loop4): Remounting filesystem read-only [ 466.471526][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 466.471553][ C1] EXT4-fs (loop4): initial error at time 1784206692: ext4_free_branches:1023: inode 16 [ 466.471590][ C1] EXT4-fs (loop4): last error at time 1784206692: ext4_free_branches:1023: inode 16 [ 466.504078][T29776] EXT4-fs (loop4): 1 orphan inode deleted [ 466.509977][T29776] EXT4-fs (loop4): 1 truncate cleaned up [ 466.516291][T29776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.768226][ T111] Bluetooth: hci0: Frame reassembly failed (-84) [ 467.131648][ T28] audit: type=1400 audit(1784206692.985:13147): avc: denied { write } for pid=29806 comm="syz.0.9978" path="socket:[89812]" dev="sockfs" ino=89812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 467.195278][T29809] loop6: detected capacity change from 0 to 2048 [ 467.234371][T29809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.264356][ T28] audit: type=1400 audit(1784206693.115:13148): avc: denied { write } for pid=29808 comm="syz.6.9979" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.313216][ T28] audit: type=1400 audit(1784206693.115:13149): avc: denied { lock } for pid=29808 comm="syz.6.9979" path="/697/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.361353][ T28] audit: type=1400 audit(1784206693.115:13150): avc: denied { write } for pid=29808 comm="syz.6.9979" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.410433][ T28] audit: type=1400 audit(1784206693.115:13151): avc: denied { link } for pid=29808 comm="syz.6.9979" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 468.790162][ T3905] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 469.939087][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.993160][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.011522][ T28] audit: type=1326 audit(1784206695.865:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29813 comm="syz.6.9980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 470.039659][ T28] audit: type=1326 audit(1784206695.885:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29813 comm="syz.6.9980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 470.090772][ T28] audit: type=1326 audit(1784206695.885:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29813 comm="syz.6.9980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 470.142876][T29824] loop4: detected capacity change from 0 to 128 [ 470.196854][ T28] audit: type=1326 audit(1784206695.885:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29813 comm="syz.6.9980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 470.340965][T29843] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9990'. [ 470.358298][T29836] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.9990'. [ 470.521452][T29861] loop6: detected capacity change from 0 to 1024 [ 470.564044][T29861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.598696][T29861] ext4 filesystem being mounted at /702/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.617613][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10005'. [ 470.688883][T29870] syz_tun (unregistering): left allmulticast mode [ 470.697240][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 470.872757][T29882] netlink: 'syz.0.10010': attribute type 4 has an invalid length. [ 470.889256][T29882] netlink: 'syz.0.10010': attribute type 7 has an invalid length. [ 470.897245][T29882] netlink: 'syz.0.10010': attribute type 8 has an invalid length. [ 470.905244][T29882] netlink: 'syz.0.10010': attribute type 7 has an invalid length. [ 470.913398][T29882] netlink: 125384 bytes leftover after parsing attributes in process `syz.0.10010'. [ 471.318058][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 471.318076][ T28] audit: type=1400 audit(1784206697.165:13206): avc: denied { kexec_image_load } for pid=29908 comm="syz.8.10023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 471.439697][T29911] netlink: 'syz.3.10024': attribute type 4 has an invalid length. [ 471.472093][T29911] netlink: 'syz.3.10024': attribute type 7 has an invalid length. [ 471.487707][T29911] netlink: 'syz.3.10024': attribute type 8 has an invalid length. [ 471.511813][T29911] netlink: 'syz.3.10024': attribute type 7 has an invalid length. [ 471.521735][T29911] netlink: 125384 bytes leftover after parsing attributes in process `syz.3.10024'. [ 471.632934][T29919] 9p: Bad value for 'rfdno' [ 471.869776][ T28] audit: type=1326 audit(1784206697.715:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7c62de59 code=0x7ffc0000 [ 471.937013][ T28] audit: type=1326 audit(1784206697.715:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7c62de59 code=0x7ffc0000 [ 472.003056][ T28] audit: type=1326 audit(1784206697.715:13209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7c62de59 code=0x7ffc0000 [ 472.049640][ T28] audit: type=1326 audit(1784206697.715:13210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7c62de59 code=0x7ffc0000 [ 472.103067][ T28] audit: type=1326 audit(1784206697.715:13211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7c62de59 code=0x7ffc0000 [ 472.151404][ T28] audit: type=1326 audit(1784206697.715:13212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fba7c62de59 code=0x7ffc0000 [ 472.204930][ T28] audit: type=1326 audit(1784206697.715:13213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba7c62dbc2 code=0x7ffc0000 [ 472.259181][ T28] audit: type=1326 audit(1784206697.715:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fba7c62dbc2 code=0x7ffc0000 [ 472.297779][ T28] audit: type=1326 audit(1784206697.715:13215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29930 comm="syz.4.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7c62de59 code=0x7ffc0000 [ 472.575272][T29909] kexec: Could not allocate control_code_buffer [ 473.504383][T30040] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10082'. [ 473.722751][T30059] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10091'. [ 473.933948][T30076] loop4: detected capacity change from 0 to 512 [ 473.952899][T30076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.965964][T30076] ext4 filesystem being mounted at /219/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.995356][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.023563][T30085] bond0: option mode: unable to set because the bond device has slaves [ 474.093295][T30095] loop4: detected capacity change from 0 to 512 [ 474.124445][T30095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.137655][T30095] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.184163][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.254220][T30108] loop6: detected capacity change from 0 to 2048 [ 474.273933][T30112] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10112'. [ 474.293170][T30108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.138956][T30108] Process accounting resumed [ 475.203133][T13675] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 475.227360][T13675] EXT4-fs (loop6): Remounting filesystem read-only [ 475.241844][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.304311][T30158] netlink: 'syz.6.10134': attribute type 3 has an invalid length. [ 475.389580][T30167] loop6: detected capacity change from 0 to 2048 [ 475.451686][T30172] loop8: detected capacity change from 0 to 8192 [ 475.561476][T30167] loop6: p1 < > p4 [ 475.570165][T30167] loop6: p4 size 8388608 extends beyond EOD, truncated [ 475.592077][T30167] EXT4-fs (loop6p1): unable to read superblock [ 475.720490][T30180] loop6: detected capacity change from 0 to 128 [ 475.767057][T30184] netlink: 566 bytes leftover after parsing attributes in process `syz.3.10146'. [ 475.789006][T30186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30186 comm=syz.8.10147 [ 475.901400][T30198] loop6: detected capacity change from 0 to 512 [ 475.913368][T30198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.926560][T30198] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 475.937780][T30198] EXT4-fs (loop6): 1 truncate cleaned up [ 475.944409][T30198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.988233][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.297795][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10170'. [ 476.308394][T30241] netlink: 'syz.3.10170': attribute type 30 has an invalid length. [ 476.326823][T30241] vxlan1: entered promiscuous mode [ 476.332665][T30241] vxlan1: entered allmulticast mode [ 476.351542][T30245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10170'. [ 476.372223][T30245] netlink: 'syz.3.10170': attribute type 30 has an invalid length. [ 476.403954][T30245] vxlan1: entered promiscuous mode [ 476.411193][T30245] vxlan1: entered allmulticast mode [ 476.426750][T30248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10173'. [ 477.316878][T30318] loop8: detected capacity change from 0 to 512 [ 477.331317][T30318] EXT4-fs: Ignoring removed bh option [ 477.406813][T30318] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.10205: corrupted in-inode xattr: e_value size too large [ 477.430424][T30318] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 477.434726][T30318] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.10205: couldn't read orphan inode 15 (err -117) [ 477.444267][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 477.444347][ C0] EXT4-fs (loop8): initial error at time 1784206959: ext4_iget_extra_inode:5180: inode 15 [ 477.444466][ C0] EXT4-fs (loop8): last error at time 1784206959: ext4_iget_extra_inode:5180: inode 15 [ 477.547740][T30349] loop6: detected capacity change from 0 to 1024 [ 477.555009][T30349] EXT4-fs: Ignoring removed bh option [ 477.588725][T30349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.596895][T30318] loop8: lost filesystem error report for type 5 error -117 [ 477.605961][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 477.605981][ T28] audit: type=1400 audit(1784206959.460:13232): avc: denied { write } for pid=30347 comm="syz.6.10218" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 477.675248][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.687838][T30318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.814444][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.932022][T30377] loop6: detected capacity change from 0 to 512 [ 477.950577][ T28] audit: type=1400 audit(1784206959.790:13233): avc: denied { write } for pid=30378 comm="syz.8.10231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 477.974159][T30377] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 478.004332][T30377] EXT4-fs (loop6): 1 truncate cleaned up [ 478.030076][T30377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.109147][ T28] audit: type=1400 audit(1784206959.950:13234): avc: denied { write } for pid=30376 comm="syz.6.10229" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 478.132740][T13664] Bluetooth: hci0: Frame reassembly failed (-84) [ 478.172763][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.292530][ T28] audit: type=1326 audit(1784206960.140:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.10242" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 478.321258][ T28] audit: type=1326 audit(1784206960.140:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.10242" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 478.348061][ T28] audit: type=1326 audit(1784206960.140:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.10242" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 478.386119][ T28] audit: type=1326 audit(1784206960.140:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.10242" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 478.433446][ T28] audit: type=1326 audit(1784206960.160:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.10242" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 478.493064][ T28] audit: type=1326 audit(1784206960.160:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.10242" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 478.527451][ T28] audit: type=1326 audit(1784206960.160:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30404 comm="syz.6.10242" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 478.935826][T30445] bond2: option arp_interval: invalid value (18446744073709551615) [ 478.972499][T30445] bond2: option arp_interval: allowed values 0 - 2147483647 [ 479.002007][T30445] bond2 (unregistering): Released all slaves [ 479.134182][T30459] program syz.4.10268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.149999][T27377] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 480.358640][T30517] tipc: Started in network mode [ 480.372816][T30517] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 480.385411][T30517] tipc: Enabling of bearer rejected, failed to enable media [ 480.450861][T30519] loop6: detected capacity change from 0 to 256 [ 480.459172][T30523] ref_ctr_offset mismatch. inode: 0x591 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 480.488840][T30519] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 480.536014][T30519] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 480.692573][T30542] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10306'. [ 480.958304][T30571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10320'. [ 481.592723][T30606] loop8: detected capacity change from 0 to 256 [ 481.802419][T30611] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10338'. [ 481.828645][T30606] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 481.961359][T30618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=30618 comm=syz.4.10341 [ 481.969099][T30606] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 482.185967][T30630] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 129 [ 482.555177][T30660] rdma_rxe: rxe_newlink: failed to add vcan0 [ 482.563718][T30660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.591467][T30660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.829189][T30684] netlink: 'syz.3.10373': attribute type 1 has an invalid length. [ 482.845881][T30684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.977487][T30690] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.032468][T30690] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.058718][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 483.058737][ T28] audit: type=1400 audit(1784206964.900:13246): avc: denied { getopt } for pid=30691 comm="syz.3.10376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 483.111845][T30690] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.166437][T30690] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.269313][T13664] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.281635][T13664] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.295634][T13664] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.319064][T13664] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.368845][T30715] bond2: option tlb_dynamic_lb: invalid value (64) [ 483.401695][T30715] bond2 (unregistering): Released all slaves [ 483.640766][T30736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10394'. [ 483.705375][T30742] loop6: detected capacity change from 0 to 512 [ 483.718464][T30742] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 483.749761][T30742] EXT4-fs: error: could not find journal device path [ 483.750442][ T28] audit: type=1326 audit(1784206965.590:13247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30743 comm="syz.0.10399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84c56de59 code=0x7ffc0000 [ 483.796506][ T28] audit: type=1326 audit(1784206965.590:13248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30743 comm="syz.0.10399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84c56de59 code=0x7ffc0000 [ 483.830875][ T28] audit: type=1326 audit(1784206965.590:13249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30743 comm="syz.0.10399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84c56de59 code=0x7ffc0000 [ 483.866663][T30746] loop8: detected capacity change from 0 to 512 [ 483.911985][ T28] audit: type=1326 audit(1784206965.590:13250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30743 comm="syz.0.10399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fd84c56de59 code=0x7ffc0000 [ 483.941794][T30752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10403'. [ 483.956814][ T28] audit: type=1326 audit(1784206965.590:13251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30743 comm="syz.0.10399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84c56de59 code=0x7ffc0000 [ 483.984380][T30742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.995219][T30742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.006945][ T28] audit: type=1326 audit(1784206965.590:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30743 comm="syz.0.10399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd84c56de59 code=0x7ffc0000 [ 484.034120][ T28] audit: type=1326 audit(1784206965.590:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30743 comm="syz.0.10399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd84c56de59 code=0x7ffc0000 [ 484.062043][ T28] audit: type=1326 audit(1784206965.710:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30743 comm="syz.0.10399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd84c56de59 code=0x7ffc0000 [ 484.125488][T30756] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 484.132159][T30756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 484.150700][T30756] vhci_hcd vhci_hcd.0: Device attached [ 484.156636][T30757] vhci_hcd: connection closed [ 484.161014][ T111] vhci_hcd vhci_hcd.0: stop threads [ 484.181834][ T111] vhci_hcd vhci_hcd.0: release socket [ 484.194901][ T111] vhci_hcd vhci_hcd.0: disconnect device [ 484.468433][ T28] audit: type=1400 audit(1784206966.310:13255): avc: denied { unmount } for pid=12317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 484.696493][T30792] loop4: detected capacity change from 0 to 128 [ 484.750258][T30792] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.792942][T30792] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.856088][T26705] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 485.022606][T30821] netlink: 'syz.6.10441': attribute type 11 has an invalid length. [ 485.073932][T30821] netlink: 140 bytes leftover after parsing attributes in process `syz.6.10441'. [ 485.084059][T30823] rdma_rxe: rxe_newlink: failed to add vcan0 [ 485.115626][T30823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.143510][T30823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.321485][T30842] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 485.727841][T30858] loop4: detected capacity change from 0 to 512 [ 485.748356][T30858] EXT4-fs (loop4): 1 truncate cleaned up [ 485.758442][T30858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.449007][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.788835][T30892] netlink: 48 bytes leftover after parsing attributes in process `syz.8.10460'. [ 486.940267][T30906] loop4: detected capacity change from 0 to 512 [ 486.954012][T30906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.981655][T30906] ext4 filesystem being mounted at /307/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.014227][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.903641][T30943] netlink: 176 bytes leftover after parsing attributes in process `syz.8.10484'. [ 488.096263][T30952] loop8: detected capacity change from 0 to 512 [ 488.111720][T30952] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 488.137035][T30952] EXT4-fs (loop8): 1 truncate cleaned up [ 488.150618][T30952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.214244][ T28] kauditd_printk_skb: 492 callbacks suppressed [ 488.214263][ T28] audit: type=1400 audit(1784206970.070:13748): avc: denied { write } for pid=30951 comm="syz.8.10488" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.309418][T30959] syzkaller1: entered promiscuous mode [ 488.345869][T30959] syzkaller1: entered allmulticast mode [ 488.369098][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.540690][T30965] loop6: detected capacity change from 0 to 512 [ 488.573246][T30965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.626314][T30965] ext4 filesystem being mounted at /807/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.679353][ T28] audit: type=1400 audit(1784206970.520:13749): avc: denied { write } for pid=30964 comm="syz.6.10493" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.757522][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.862333][T30978] loop8: detected capacity change from 0 to 1024 [ 488.871541][T30978] EXT4-fs: Ignoring removed orlov option [ 488.904534][T30978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.949373][T30982] netlink: 67 bytes leftover after parsing attributes in process `syz.6.10499'. [ 488.964654][ T28] audit: type=1400 audit(1784206970.810:13750): avc: denied { setattr } for pid=30977 comm="syz.8.10498" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 488.964697][ T28] audit: type=1400 audit(1784206970.810:13751): avc: denied { write } for pid=30977 comm="syz.8.10498" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.964731][ T28] audit: type=1400 audit(1784206970.810:13752): avc: denied { write } for pid=30977 comm="syz.8.10498" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.079401][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.127749][ T28] audit: type=1400 audit(1784206970.970:13753): avc: denied { map } for pid=30985 comm="syz.4.10501" path="socket:[94641]" dev="sockfs" ino=94641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 489.299390][T30999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10515'. [ 489.377354][T30999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10515'. [ 489.443056][T30999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10515'. [ 489.679654][T30982] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.689985][T30982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.962809][T30997] loop4: detected capacity change from 0 to 1024 [ 490.168677][T30997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 490.298737][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 490.488796][ T28] audit: type=1400 audit(1784206972.330:13754): avc: denied { connect } for pid=31040 comm="syz.4.10511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 491.861786][T31060] loop4: detected capacity change from 0 to 512 [ 492.110018][T31060] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 1: comm syz.4.10513: invalid block [ 492.155746][T31060] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 492.159968][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 492.175658][ C0] EXT4-fs (loop4): initial error at time 1784206974: __ext4_iget:5533: inode 11: block 1 [ 492.185529][ C0] EXT4-fs (loop4): last error at time 1784206974: __ext4_iget:5533: inode 11: block 1 [ 492.207385][T31060] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.10513: couldn't read orphan inode 11 (err -117) [ 492.225220][T30982] erspan0: entered promiscuous mode [ 492.233157][T31060] loop4: lost filesystem error report for type 5 error -117 [ 492.390890][T31060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.396707][T30982] veth0_to_team: entered promiscuous mode [ 492.643405][T31060] netlink: 560 bytes leftover after parsing attributes in process `syz.4.10513'. [ 492.653826][T30982] 8021q: adding VLAN 0 to HW filter on device eth0 [ 492.719434][T30982] 8021q: adding VLAN 0 to HW filter on device eth1 [ 492.762204][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.767526][T30982] 8021q: adding VLAN 0 to HW filter on device eth2 [ 492.870228][T30982] 8021q: adding VLAN 0 to HW filter on device eth3 [ 493.088847][T31122] loop4: detected capacity change from 0 to 512 [ 493.097851][T31122] EXT4-fs: Ignoring removed mblk_io_submit option [ 493.153393][T31122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.170716][T31122] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.187241][T13675] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.211219][T13675] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.224467][ T28] audit: type=1400 audit(1784206975.070:13755): avc: denied { write } for pid=31121 comm="syz.4.10527" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 493.249599][T13675] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.269747][T13675] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.281098][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.513498][ T28] audit: type=1400 audit(1784206975.360:13756): avc: denied { read } for pid=31149 comm="syz.3.10538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 493.563331][ T28] audit: type=1400 audit(1784206975.410:13757): avc: denied { ioctl } for pid=31149 comm="syz.3.10538" path="socket:[94020]" dev="sockfs" ino=94020 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 493.737308][ T28] audit: type=1326 audit(1784206975.580:13758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.3.10544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 493.764819][ T28] audit: type=1326 audit(1784206975.580:13759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.3.10544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 493.792659][ T28] audit: type=1326 audit(1784206975.580:13760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.3.10544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 493.847703][ T28] audit: type=1326 audit(1784206975.580:13761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.3.10544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 493.875991][ T28] audit: type=1326 audit(1784206975.610:13762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.3.10544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 493.903807][ T28] audit: type=1326 audit(1784206975.610:13763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.3.10544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 493.939803][T31171] kernel profiling enabled (shift: 5) [ 493.948492][ T28] audit: type=1326 audit(1784206975.610:13764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31163 comm="syz.3.10544" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 493.990809][ T3905] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 493.995035][T31174] syzkaller1: entered promiscuous mode [ 494.040403][T31174] syzkaller1: entered allmulticast mode [ 494.230627][T31199] loop4: detected capacity change from 0 to 1024 [ 494.248016][T31199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 494.295092][T31199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 494.324898][T31199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.348862][T31211] syzkaller1: entered promiscuous mode [ 494.367650][T31211] syzkaller1: entered allmulticast mode [ 494.383849][T31199] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 494.431477][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.123299][T31246] netlink: 220 bytes leftover after parsing attributes in process `syz.4.10577'. [ 495.650997][T31261] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10583'. [ 495.829997][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.837275][ C1] bridge0: topology change detected, propagating [ 495.843759][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.851039][ C1] bridge0: topology change detected, propagating [ 495.954616][T31278] sctp: [Deprecated]: syz.6.10591 (pid 31278) Use of int in maxseg socket option. [ 495.954616][T31278] Use struct sctp_assoc_value instead [ 496.377995][T31312] loop6: detected capacity change from 0 to 1024 [ 496.402220][T31312] ext4: Bad value for 'auto_da_alloc' [ 496.470002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.478191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.489095][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.498467][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.512899][T31321] loop6: detected capacity change from 0 to 256 [ 496.608759][T31326] loop6: detected capacity change from 0 to 1024 [ 496.616912][T31326] EXT4-fs (loop6): filesystem is read-only [ 496.890714][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 497.043937][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.110520][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.118727][T13675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.128677][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.136884][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.075934][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.713252][T31378] loop8: detected capacity change from 0 to 512 [ 498.735026][T31378] EXT4-fs: Ignoring removed orlov option [ 498.779415][T31378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.834251][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 498.834270][ T28] audit: type=1400 audit(1784206980.680:13780): avc: denied { write } for pid=31377 comm="syz.8.10634" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.943844][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.960515][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 498.961485][ T28] audit: type=1400 audit(1784206980.730:13781): avc: denied { write } for pid=31377 comm="syz.8.10634" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 498.966653][ T3905] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 499.030120][ T28] audit: type=1400 audit(1784206980.730:13782): avc: denied { write } for pid=31377 comm="syz.8.10634" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.063693][ T28] audit: type=1400 audit(1784206980.730:13783): avc: denied { write } for pid=31377 comm="syz.8.10634" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 499.776713][T31425] netlink: 'syz.3.10654': attribute type 3 has an invalid length. [ 499.827325][T31425] netlink: 'syz.3.10654': attribute type 1 has an invalid length. [ 499.869367][T31425] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.10654'. [ 500.044236][ T28] audit: type=1400 audit(1784206981.890:13784): avc: denied { append } for pid=31444 comm="syz.4.10658" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 500.291974][ T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:0) [ 500.363288][ T28] audit: type=1400 audit(1784206982.210:13785): avc: denied { read write } for pid=31471 comm="syz.4.10671" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 500.390405][ T28] audit: type=1400 audit(1784206982.210:13786): avc: denied { open } for pid=31471 comm="syz.4.10671" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 500.420269][ T3531] hid_parser_main: 6 callbacks suppressed [ 500.420292][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x1 [ 500.446810][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.459999][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.474097][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.486336][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.494698][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.502496][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.510773][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.518327][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.526086][ T3531] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 500.535034][ T3531] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.04 Device [syz1] on syz1 [ 500.609807][T31486] fido_id[31486]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 500.661121][T31426] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.694252][T31426] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.727040][T31426] bridge_slave_0: entered allmulticast mode [ 500.747023][T31426] bridge_slave_0: entered promiscuous mode [ 500.769601][T31426] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.788356][T31426] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.808540][T31426] bridge_slave_1: entered allmulticast mode [ 500.837283][T31426] bridge_slave_1: entered promiscuous mode [ 500.915529][T31426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.949309][T31426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.991072][T18066] syz_tun (unregistering): left allmulticast mode [ 500.998650][T13666] smc: removing ib device syz1 [ 501.004026][T31516] loop8: detected capacity change from 0 to 512 [ 501.011382][T31516] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 501.049772][T31516] EXT4-fs (loop8): 1 truncate cleaned up [ 501.058383][T31516] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.104532][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.284346][ T28] audit: type=1400 audit(1784206983.130:13787): avc: denied { read } for pid=31551 comm="syz.6.10700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 501.323218][T31426] team0: Port device team_slave_0 added [ 501.342557][T31426] team0: Port device team_slave_1 added [ 501.385657][T31426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.402747][T31426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.430220][T31426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.442948][T31426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.450887][T31426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.477863][T31426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.518972][T31561] xt_hashlimit: size too large, truncated to 1048576 [ 501.554745][T31426] hsr_slave_0: entered promiscuous mode [ 501.556151][T31562] net_ratelimit: 6 callbacks suppressed [ 501.556203][T31562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.564531][T31426] hsr_slave_1: entered promiscuous mode [ 501.621551][T31426] debugfs: 'hsr0' already exists in 'hsr' [ 501.627619][T31426] Cannot create hsr debugfs directory [ 501.643452][T13684] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.693884][T13684] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.747513][T13684] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.766693][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10708'. [ 501.824451][T13684] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.943418][ T28] audit: type=1400 audit(1784206983.780:13788): avc: denied { write } for pid=31576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.989399][T13684] bond0: left allmulticast mode [ 501.994479][T13684] bond_slave_0: left allmulticast mode [ 502.017594][T13684] bond_slave_1: left allmulticast mode [ 502.030484][T13684] bond0: left promiscuous mode [ 502.035420][T13684] bond_slave_0: left promiscuous mode [ 502.047367][ T28] audit: type=1400 audit(1784206983.900:13789): avc: denied { write } for pid=31599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.048002][T13684] bond_slave_1: left promiscuous mode [ 502.078254][T31604] netlink: 'syz.6.10715': attribute type 3 has an invalid length. [ 502.098069][T31604] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.10715'. [ 502.135984][T13684] bridge0: port 3(bond0) entered disabled state [ 502.157290][T13684] bridge_slave_1: left allmulticast mode [ 502.169470][T13684] bridge_slave_1: left promiscuous mode [ 502.175437][T13684] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.186077][T13684] bridge_slave_0: left allmulticast mode [ 502.195851][T13684] bridge_slave_0: left promiscuous mode [ 502.221452][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.231705][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.245649][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.254010][ T3531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.263708][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.348820][T31625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10732'. [ 502.550636][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.926783][T13684] veth1_to_hsr: left allmulticast mode [ 502.932934][T13684] veth1_to_hsr: left promiscuous mode [ 502.938542][T13684] Ÿë: port 1(veth1_to_hsr) entered disabled state [ 503.094929][T13684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.106172][T13684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.119215][T13684] bond0 (unregistering): Released all slaves [ 503.128152][T13684] bond1 (unregistering): Released all slaves [ 503.231661][T13684] hsr_slave_0: left promiscuous mode [ 503.250715][T13684] hsr_slave_1: left promiscuous mode [ 503.262776][T13684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.282988][ T3531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.301133][T13684] batman_adv: batadv0: Removing interface: macsec2 [ 503.309044][T31663] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10735'. [ 503.495073][T13684] team0 (unregistering): Port device team_slave_1 removed [ 503.513336][T13684] team0 (unregistering): Port device team_slave_0 removed [ 503.692743][T31426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 503.705925][T31426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.715806][T31426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 503.745604][T31426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.759230][T31426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 503.774842][T31426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.801906][T31426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 503.827722][T31426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.862600][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 503.862620][ T28] audit: type=1400 audit(1784206985.710:13794): avc: denied { write } for pid=31701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.916310][T31426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.941638][T31426] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.949249][ T28] audit: type=1400 audit(1784206985.790:13795): avc: denied { write } for pid=31721 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.980690][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.987873][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.045505][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.052736][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.095600][T13684] IPVS: stop unused estimator thread 0... [ 504.303719][ T28] audit: type=1400 audit(1784206986.140:13796): avc: denied { write } for pid=31725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.354744][T31426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.361967][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.405465][ T28] audit: type=1400 audit(1784206986.230:13797): avc: denied { write } for pid=31752 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.586986][ T28] audit: type=1400 audit(1784206986.430:13798): avc: denied { write } for pid=31756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.660329][ T28] audit: type=1400 audit(1784206986.480:13799): avc: denied { write } for pid=31775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.704288][T31426] veth0_vlan: entered promiscuous mode [ 504.733736][T31426] veth1_vlan: entered promiscuous mode [ 504.766705][T31426] veth0_macvtap: entered promiscuous mode [ 504.780803][T31426] veth1_macvtap: entered promiscuous mode [ 504.799252][T31426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.812179][T31426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.845474][T13675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.862910][T13675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.877342][T13675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.906606][T13675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.969682][ T28] audit: type=1400 audit(1784206986.810:13800): avc: denied { write } for pid=31779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.006316][T31796] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.10753'. [ 505.066132][ T28] audit: type=1400 audit(1784206986.920:13801): avc: denied { write } for pid=31800 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.156739][T31804] loop4: detected capacity change from 0 to 512 [ 505.267702][T31804] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.10754: corrupted in-inode xattr: invalid ea_ino [ 505.315193][T31804] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 505.315487][T31804] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.10754: couldn't read orphan inode 15 (err -117) [ 505.324759][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 505.324803][ C0] EXT4-fs (loop4): initial error at time 1784206987: ext4_iget_extra_inode:5180: inode 15 [ 505.324830][ C0] EXT4-fs (loop4): last error at time 1784206987: ext4_iget_extra_inode:5180: inode 15 [ 505.415944][T31804] loop4: lost filesystem error report for type 5 error -117 [ 505.416548][T31804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.430227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.442288][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.464811][ T28] audit: type=1400 audit(1784206987.300:13802): avc: denied { write } for pid=31803 comm="syz.4.10754" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.526581][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.564313][ T28] audit: type=1400 audit(1784206987.390:13803): avc: denied { write } for pid=31808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.629038][T31834] netlink: 'syz.4.10760': attribute type 1 has an invalid length. [ 505.657014][T31834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10760'. [ 505.711539][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 505.886526][T31844] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31844 comm=syz.6.10763 [ 505.948877][T31844] syz.6.10763 (31844) used greatest stack depth: 8920 bytes left [ 506.036995][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 506.326392][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 506.591675][T31906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10775'. [ 506.601480][T31906] net_ratelimit: 4 callbacks suppressed [ 506.601512][T31906] openvswitch: netlink: Flow key attr not present in new flow. [ 506.695424][T31915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.704048][T31915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.751133][T31915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.787690][T31915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.813807][T31915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.876872][T31913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.928982][T31936] loop4: detected capacity change from 0 to 128 [ 506.987464][T31936] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 507.053209][T31936] ext4 filesystem being mounted at /392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 507.213701][T26705] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.376781][T31984] loop6: detected capacity change from 0 to 512 [ 507.394745][T31989] loop4: detected capacity change from 0 to 512 [ 507.407161][T31989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.426384][T31984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.433179][T31989] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.454513][T31989] EXT4-fs error (device loop4): ext4_get_first_dir_block:3548: inode #12: comm syz.4.10795: directory missing '.' [ 507.479255][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.489200][T31984] ext4 filesystem being mounted at /888/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.511678][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.529700][T31984] EXT4-fs (loop6): shut down requested (2) [ 507.644756][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.656450][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 508.016907][T32059] netlink: 212892 bytes leftover after parsing attributes in process `syz.2.10814'. [ 508.517903][T32113] netlink: 'syz.6.10827': attribute type 3 has an invalid length. [ 508.554844][T32113] netlink: 'syz.6.10827': attribute type 4 has an invalid length. [ 508.556495][ T3531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.591450][T32113] netlink: 9067 bytes leftover after parsing attributes in process `syz.6.10827'. [ 508.631145][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.708183][T32123] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.724937][T32123] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.815399][T32123] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.825540][T32123] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.931073][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 508.931163][ T28] audit: type=1400 audit(1784206990.770:13838): avc: denied { write } for pid=32132 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.004122][T32123] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.014253][T32123] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.114405][T32123] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.141558][T32123] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.215981][ T28] audit: type=1400 audit(1784206991.060:13839): avc: denied { write } for pid=32134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.259469][ T36] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.275112][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.313874][ T28] audit: type=1400 audit(1784206991.150:13840): avc: denied { write } for pid=32151 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.342490][T13675] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.361269][T13675] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.390140][T13675] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.417649][T13675] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.447839][T13675] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.468107][T13675] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.631720][ T28] audit: type=1400 audit(1784206991.470:13841): avc: denied { write } for pid=32157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.727574][ T28] audit: type=1400 audit(1784206991.570:13842): avc: denied { write } for pid=32181 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.805373][T32190] netlink: 67 bytes leftover after parsing attributes in process `syz.2.10844'. [ 509.972346][ T28] audit: type=1400 audit(1784206991.810:13843): avc: denied { write } for pid=32191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.052041][ T28] audit: type=1400 audit(1784206991.900:13844): avc: denied { write } for pid=32210 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.134865][T32221] syzkaller1: entered promiscuous mode [ 511.165469][T32221] syzkaller1: entered allmulticast mode [ 511.167817][T32230] sctp: [Deprecated]: syz.6.10855 (pid 32230) Use of int in maxseg socket option. [ 511.167817][T32230] Use struct sctp_assoc_value instead [ 511.317391][T32243] loop4: detected capacity change from 0 to 128 [ 511.350774][T32243] bio_check_eod: 130 callbacks suppressed [ 511.350792][T32243] syz.4.10860: attempt to access beyond end of device [ 511.350792][T32243] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 511.520787][ T28] audit: type=1400 audit(1784206993.370:13845): avc: denied { attach_queue } for pid=32250 comm="syz.8.10873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 511.670445][ T9] net_ratelimit: 4 callbacks suppressed [ 511.670464][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.684699][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.830023][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.864425][ T28] audit: type=1400 audit(1784206993.710:13846): avc: denied { listen } for pid=32266 comm="syz.4.10869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.931397][T32271] loop6: detected capacity change from 0 to 512 [ 511.974934][T32271] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.003801][T32271] ext4 filesystem being mounted at /905/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.021238][ T28] audit: type=1400 audit(1784206993.870:13847): avc: denied { write } for pid=32270 comm="syz.6.10871" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 512.028258][T32275] loop2: detected capacity change from 0 to 8192 [ 512.262589][T32297] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10882'. [ 512.314314][T32301] loop4: detected capacity change from 0 to 128 [ 512.359586][T32301] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 512.361656][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.396685][T32301] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 512.443964][ T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 512.476147][T32308] xt_hashlimit: size too large, truncated to 1048576 [ 512.720235][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.925864][T32323] bond0: entered promiscuous mode [ 512.938920][T32323] bond_slave_0: entered promiscuous mode [ 512.951571][T32323] bond_slave_1: entered promiscuous mode [ 512.963777][T32323] batadv0: entered promiscuous mode [ 512.971777][T32323] debugfs: 'hsr1' already exists in 'hsr' [ 512.977695][T32323] Cannot create hsr debugfs directory [ 512.984729][T32323] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 513.006687][T32323] bond0: left promiscuous mode [ 513.019242][T32323] bond_slave_0: left promiscuous mode [ 513.025105][T32323] bond_slave_1: left promiscuous mode [ 513.034826][T32323] batadv0: left promiscuous mode [ 513.424319][T32334] loop8: detected capacity change from 0 to 512 [ 513.595514][T32334] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 513.606174][T32334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 513.622092][T32334] System zones: 0-1, 15-15, 18-18, 34-34 [ 513.639928][T32334] EXT4-fs (loop8): orphan cleanup on readonly fs [ 513.660212][T32334] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 513.710207][T32334] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 513.723289][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811523ca00: rx timeout, send abort [ 513.732049][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811523ca00: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 513.756230][T32334] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.10897: bad orphan inode 16 [ 513.767870][T32334] loop8: lost filesystem error report for type 5 error -117 [ 513.769961][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 513.770055][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.793549][ C1] EXT4-fs (loop8): initial error at time 1784206995: ext4_orphan_get:1425 [ 513.806431][ C1] EXT4-fs (loop8): last error at time 1784206995: ext4_orphan_get:1425 [ 513.881505][T32334] ext4_test_bit(bit=15, block=18) = 1 [ 513.894508][T32334] is_bad_inode(inode)=0 [ 513.914704][T32334] NEXT_ORPHAN(inode)=0 [ 513.930826][T32334] max_ino=32 [ 513.935226][T32334] i_nlink=2 [ 513.970590][T32334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 514.045063][T32343] loop2: detected capacity change from 0 to 512 [ 514.064321][T32343] EXT4-fs: Ignoring removed orlov option [ 514.084155][T32343] EXT4-fs: Ignoring removed mblk_io_submit option [ 514.118848][T32347] loop6: detected capacity change from 0 to 1024 [ 514.118942][T32343] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.10902: corrupted in-inode xattr: e_value size too large [ 514.140459][T32347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.189963][T32347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.196689][T32347] EXT4-fs: inline encryption not supported [ 514.206715][T32343] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 514.206975][T32343] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.10902: couldn't read orphan inode 15 (err -117) [ 514.211701][T32347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.216278][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 514.241202][ C0] EXT4-fs (loop2): initial error at time 1784206996: ext4_iget_extra_inode:5180: inode 15 [ 514.251218][ C0] EXT4-fs (loop2): last error at time 1784206996: ext4_iget_extra_inode:5180: inode 15 [ 514.285984][T32343] loop2: lost filesystem error report for type 5 error -117 [ 514.288465][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.306233][T32347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.311143][T32343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.331820][T32347] ext4 filesystem being mounted at /909/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.359039][T31426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.376059][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 514.376077][ T28] audit: type=1400 audit(1784206996.220:13849): avc: denied { write } for pid=32346 comm="syz.6.10903" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 514.381633][T32347] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10903: bg 0: block 112: padding at end of block bitmap is not set [ 514.490608][T32347] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 514.506240][T32364] loop8: detected capacity change from 0 to 512 [ 514.530924][T32364] EXT4-fs: Ignoring removed nobh option [ 514.553965][T32347] EXT4-fs (loop6): This should not happen!! Data will be lost [ 514.553965][T32347] [ 514.587730][T32364] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #3: comm syz.8.10908: corrupted inode contents [ 514.604190][T32364] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 514.604322][T32347] EXT4-fs (loop6): Total free blocks count 0 [ 514.613486][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 514.613513][ C1] EXT4-fs (loop8): initial error at time 1784206996: ext4_do_update_inode:5742: inode 3 [ 514.613553][ C1] EXT4-fs (loop8): last error at time 1784206996: ext4_do_update_inode:5742: inode 3 [ 514.646258][T32364] EXT4-fs (loop8): Remounting filesystem read-only [ 514.654169][T32347] EXT4-fs (loop6): Free/Dirty block details [ 514.655252][T32364] Quota error (device loop8): write_blk: dquota write failed [ 514.667649][T32347] EXT4-fs (loop6): free_blocks=0 [ 514.672788][T32347] EXT4-fs (loop6): dirty_blocks=16 [ 514.678107][T32347] EXT4-fs (loop6): Block reservation details [ 514.684285][T32364] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 514.694466][T32347] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 514.702906][T32364] EXT4-fs (loop8): 1 truncate cleaned up [ 514.710105][ T8956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.716371][T32364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.741391][T21111] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 514.754413][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 514.763790][T32364] ext4 filesystem being mounted at /606/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.789382][T32375] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.799981][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.867524][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.680553][T32408] loop2: detected capacity change from 0 to 512 [ 515.687457][T32408] EXT4-fs: inline encryption not supported [ 515.712136][T32408] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 515.784256][T32408] EXT4-fs (loop2): 1 truncate cleaned up [ 515.791375][T32408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.815597][ T28] audit: type=1400 audit(1784206997.660:13850): avc: denied { write } for pid=32407 comm="syz.2.10924" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 515.822179][T32408] EXT4-fs error (device loop2): __ext4_expand_extra_isize:6455: inode #15: comm syz.2.10924: bad extra_isize 62 (inode size 256) [ 515.845884][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.883178][T32408] EXT4-fs (loop2): Remounting filesystem read-only [ 515.892621][T32408] EXT4-fs (loop2): pa ffff8881004b4c40: logic 296, phys. 39, len 216 [ 515.926235][T31426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.150023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.179278][T32418] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10927'. [ 516.189735][T32418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10927'. [ 516.200621][T32418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10927'. [ 516.446799][ T8956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.476383][ T28] audit: type=1400 audit(1784206998.320:13851): avc: denied { create } for pid=32434 comm="syz.3.10935" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 516.602023][ T28] audit: type=1326 audit(1784206998.450:13852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10937" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 516.652004][ T28] audit: type=1326 audit(1784206998.450:13853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10937" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 516.678931][ T28] audit: type=1326 audit(1784206998.480:13854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10937" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fdc5f98de59 code=0x7ffc0000 [ 516.813054][T32443] net_ratelimit: 371 callbacks suppressed [ 516.813077][T32443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.827853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.875090][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.931028][ T28] audit: type=1326 audit(1784206998.770:13855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32448 comm="syz.8.10941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50537de59 code=0x7ffc0000 [ 516.986761][ T28] audit: type=1326 audit(1784206998.770:13856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32448 comm="syz.8.10941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50537de59 code=0x7ffc0000 [ 517.219546][T32468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10949'. [ 517.702816][T32499] loop2: detected capacity change from 0 to 512 [ 517.713534][T32491] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10958'. [ 517.731172][T32491] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10958'. [ 517.746532][T32499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.761045][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.762489][T32499] ext4 filesystem being mounted at /48/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.837582][ T111] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 517.853306][ T111] EXT4-fs (loop2): Remounting filesystem read-only [ 517.869606][T31426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.912772][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.100313][T32514] netlink: 67 bytes leftover after parsing attributes in process `syz.3.10964'. [ 518.494601][T32521] loop4: detected capacity change from 0 to 512 [ 518.502181][T32521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 518.536910][T32521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 518.545790][T32521] System zones: 1-12 [ 518.558947][T32521] EXT4-fs (loop4): 1 truncate cleaned up [ 518.565235][T32521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.627351][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.792631][T32514] 8021q: adding VLAN 0 to HW filter on device eth0 [ 518.846217][T32514] 8021q: adding VLAN 0 to HW filter on device eth1 [ 518.942137][T32514] 8021q: adding VLAN 0 to HW filter on device eth2 [ 518.972968][ T3392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.012797][T32514] 8021q: adding VLAN 0 to HW filter on device eth3 [ 519.994146][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.791376][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.034253][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.401095][T32607] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 521.401095][T32607] program syz.8.11004 not setting count and/or reply_len properly [ 521.436178][T32599] geneve0: entered promiscuous mode [ 521.444971][T32599] geneve0: entered allmulticast mode [ 521.833247][T32628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.841665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.083426][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.116359][T32659] netlink: 180 bytes leftover after parsing attributes in process `syz.6.11022'. [ 522.188710][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 522.188811][ T28] audit: type=1326 audit(1784207004.030:13877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32663 comm="syz.3.11027" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc5f98de59 code=0x0 [ 522.262163][T32662] loop4: detected capacity change from 0 to 8192 [ 522.533188][ T28] audit: type=1400 audit(1784207004.380:13878): avc: denied { write } for pid=32680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.537673][T32678] loop4: detected capacity change from 0 to 512 [ 522.604075][ T28] audit: type=1400 audit(1784207004.450:13879): avc: denied { write } for pid=32697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.913503][T32678] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 522.933459][T32678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 522.963695][T32678] System zones: 0-1, 15-15, 18-18, 34-34 [ 522.969120][ T28] audit: type=1400 audit(1784207004.810:13880): avc: denied { write } for pid=32706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.988661][T32678] [ 523.058388][ T28] audit: type=1400 audit(1784207004.900:13881): avc: denied { write } for pid=32735 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.092579][T32678] EXT4-fs (loop4): orphan cleanup on readonly fs [ 523.108685][T32739] loop6: detected capacity change from 0 to 128 [ 523.122909][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.126198][T32678] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 523.137526][T32741] bond3: ARP target 9.0.0.0 is already present [ 523.137556][T32741] bond3: option arp_ip_target: invalid value (9) [ 523.168517][T32741] bond3 (unregistering): Released all slaves [ 523.185504][T32739] syz.6.11045: attempt to access beyond end of device [ 523.185504][T32739] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 523.212367][T32678] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 523.230691][T32678] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 523.233189][T32739] syz.6.11045: attempt to access beyond end of device [ 523.233189][T32739] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 523.255727][T32678] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.11031: bad orphan inode 16 [ 523.265179][T32739] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 523.291569][T32678] loop4: lost filesystem error report for type 5 error -117 [ 523.292927][T32678] ext4_test_bit(bit=15, block=18) = 1 [ 523.302346][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 523.302559][ C0] EXT4-fs (loop4): initial error at time 1784207005: ext4_orphan_get:1425 [ 523.302607][ C0] EXT4-fs (loop4): last error at time 1784207005: ext4_orphan_get:1425 [ 523.328991][T32739] syz.6.11045: attempt to access beyond end of device [ 523.328991][T32739] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 523.341855][T32678] is_bad_inode(inode)=0 [ 523.362394][T32739] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 523.372788][T32739] syz.6.11045: attempt to access beyond end of device [ 523.372788][T32739] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 523.391305][T32739] syz.6.11045: attempt to access beyond end of device [ 523.391305][T32739] loop6: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 523.405638][T32678] NEXT_ORPHAN(inode)=0 [ 523.411942][T32678] max_ino=32 [ 523.423917][T32739] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 523.431982][T32678] i_nlink=2 [ 523.460105][T32678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.474386][T32739] syz.6.11045: attempt to access beyond end of device [ 523.474386][T32739] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 523.526598][ T28] audit: type=1400 audit(1784207005.370:13882): avc: denied { write } for pid=32744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.553822][T32739] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 523.607317][T32739] syz.6.11045: attempt to access beyond end of device [ 523.607317][T32739] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 523.628603][ T28] audit: type=1400 audit(1784207005.480:13883): avc: denied { write } for pid=32761 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.651327][T32739] syz.6.11045: attempt to access beyond end of device [ 523.651327][T32739] loop6: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 523.669166][T32739] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 523.692541][T32739] syz.6.11045: attempt to access beyond end of device [ 523.692541][T32739] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 523.720879][T32739] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 523.735664][T32739] syz.6.11045: attempt to access beyond end of device [ 523.735664][T32739] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 523.759434][T32739] Buffer I/O error on dev loop6, logical block 99, lost async page write [ 523.773432][T32739] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 523.794263][T32739] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 523.803223][T32739] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 523.831034][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.957656][ T28] audit: type=1400 audit(1784207005.800:13884): avc: denied { write } for pid=32764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.018679][ T28] audit: type=1400 audit(1784207005.860:13885): avc: denied { write } for pid=311 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.053599][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.152584][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.259760][ T345] loop6: detected capacity change from 0 to 512 [ 524.268051][ T345] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 524.301510][ T345] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #17: comm syz.6.11060: inode has both inline data and extents flags [ 524.328616][ T345] loop6: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 524.329858][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 524.345618][ C0] EXT4-fs (loop6): initial error at time 1784207006: ext4_orphan_get:1399: inode 17 [ 524.350119][ T345] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.11060: couldn't read orphan inode 17 (err -117) [ 524.355046][ C0] EXT4-fs (loop6): last error at time 1784207006: ext4_orphan_get:1399: inode 17 [ 524.392570][ T345] loop6: lost filesystem error report for type 5 error -117 [ 524.394231][ T345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.497182][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.788213][ T382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.809104][ T385] loop2: detected capacity change from 0 to 512 [ 524.817278][ T382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.838648][ T385] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000603) [ 524.849511][ T382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.856234][ T385] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000603) [ 524.866345][ T382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.021930][ T394] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11081'. [ 525.058167][ T394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.074412][ T394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.652643][ T413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=413 comm=syz.8.11087 [ 525.881633][ T423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11093'. [ 525.895753][ T423] netlink: 'syz.2.11093': attribute type 26 has an invalid length. [ 525.924998][ T425] SELinux: failed to load policy [ 526.256802][ T473] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11114'. [ 526.281534][ T473] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11114'. [ 526.311403][ T473] netlink: 'syz.2.11114': attribute type 5 has an invalid length. [ 526.324705][ T473] netlink: 'syz.2.11114': attribute type 6 has an invalid length. [ 526.334294][ T473] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11114'. [ 526.832215][ T484] geneve0: entered promiscuous mode [ 526.837509][ T484] geneve0: entered allmulticast mode [ 526.871543][ T842] net_ratelimit: 5 callbacks suppressed [ 526.871557][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.008098][ T503] netlink: 'syz.8.11124': attribute type 2 has an invalid length. [ 527.279111][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.338057][ T521] loop8: detected capacity change from 0 to 4096 [ 527.386911][ T521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.389282][ T522] loop6: detected capacity change from 0 to 512 [ 527.419238][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 527.419255][ T28] audit: type=1400 audit(1784207009.260:13890): avc: denied { write } for pid=520 comm="syz.8.11131" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 527.515758][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.649687][ T522] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 527.659631][ T522] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 527.721238][ T522] System zones: 0-1, 15-15, 18-18, 34-34 [ 527.753784][ T522] EXT4-fs (loop6): orphan cleanup on readonly fs [ 527.777691][ T522] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 527.791346][ T522] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 527.810913][ T544] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 527.818785][ T544] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 527.820156][ T522] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 527.836781][ T522] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.11130: bad orphan inode 16 [ 527.869115][ T522] loop6: lost filesystem error report for type 5 error -117 [ 527.880525][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 527.899064][ C0] EXT4-fs (loop6): initial error at time 1784207009: ext4_orphan_get:1425 [ 527.909795][ C0] EXT4-fs (loop6): last error at time 1784207009: ext4_orphan_get:1425 [ 527.971584][ T522] ext4_test_bit(bit=15, block=18) = 1 [ 527.978660][ T522] is_bad_inode(inode)=0 [ 527.996544][ T522] NEXT_ORPHAN(inode)=0 [ 528.008310][ T522] max_ino=32 [ 528.020223][ T522] i_nlink=2 [ 528.041846][ T522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 528.229036][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.313833][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.388717][ T28] audit: type=1400 audit(1784207010.230:13891): avc: denied { bind } for pid=564 comm="syz.6.11148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 528.711877][ T589] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11158'. [ 528.863056][ T28] audit: type=1400 audit(1784207010.710:13892): avc: denied { relabelfrom } for pid=599 comm="syz.6.11162" name="NETLINK" dev="sockfs" ino=100893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 528.934121][ T28] audit: type=1400 audit(1784207010.710:13893): avc: denied { relabelto } for pid=599 comm="syz.6.11162" name="NETLINK" dev="sockfs" ino=100893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 529.102060][ T613] geneve0: entered promiscuous mode [ 529.131239][ T613] batadv0: entered promiscuous mode [ 529.137158][ T613] debugfs: 'hsr1' already exists in 'hsr' [ 529.144174][ T613] Cannot create hsr debugfs directory [ 529.180209][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.213911][ T617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.222095][ T617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.260591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.278098][ T617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.331505][ T617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.353434][ T617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.837813][ T640] loop8: detected capacity change from 0 to 512 [ 529.846915][ T640] EXT4-fs: Ignoring removed nobh option [ 529.904107][ T640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.930528][ T640] ext4 filesystem being mounted at /664/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 529.971096][ T28] audit: type=1400 audit(1784207011.820:13894): avc: denied { write } for pid=639 comm="syz.8.11179" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.022618][ T651] loop4: detected capacity change from 0 to 512 [ 530.035383][T23029] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.048322][ T651] FAT-fs (loop4): Invalid FSINFO signature: 0x00065252, 0x61417272 (sector = 1) [ 530.250571][ T667] loop6: detected capacity change from 0 to 512 [ 530.271582][ T667] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 530.644280][ T688] loop4: detected capacity change from 0 to 512 [ 530.675885][ T688] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 530.697128][ T688] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.11200: bad orphan inode 15 [ 530.714696][ T688] loop4: lost filesystem error report for type 5 error -117 [ 530.714946][ T688] ext4_test_bit(bit=14, block=18) = 1 [ 530.722327][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 530.722358][ C0] EXT4-fs (loop4): initial error at time 1784207012: ext4_orphan_get:1425 [ 530.722384][ C0] EXT4-fs (loop4): last error at time 1784207012: ext4_orphan_get:1425 [ 530.778510][ T688] is_bad_inode(inode)=0 [ 530.789610][ T688] NEXT_ORPHAN(inode)=1023 [ 530.799231][ T688] max_ino=32 [ 530.807194][ T688] i_nlink=0 [ 530.818346][ T688] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11200: bg 0: block 161: padding at end of block bitmap is not set [ 530.839144][ T688] loop4: lost filesystem error report for type 5 error -117 [ 530.839424][ T688] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 530.862594][ T688] loop4: lost filesystem error report for type 5 error -117 [ 530.863419][ T688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.897595][ T688] ext2 filesystem being mounted at /455/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 530.924056][ T28] audit: type=1400 audit(1784207012.770:13895): avc: denied { write } for pid=687 comm="syz.4.11200" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.946719][ T28] audit: type=1400 audit(1784207012.770:13896): avc: denied { create } for pid=687 comm="syz.4.11200" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 531.001430][T26705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.060435][ T28] audit: type=1326 audit(1784207012.900:13897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.6.11211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 531.101254][ T28] audit: type=1326 audit(1784207012.910:13898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=693 comm="syz.6.11211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5c57de59 code=0x7ffc0000 [ 531.129958][ T698] syzkaller1: entered promiscuous mode [ 531.138020][ T698] syzkaller1: entered allmulticast mode [ 531.240159][ T704] netlink: 656 bytes leftover after parsing attributes in process `syz.2.11206'. [ 531.260434][ T704] netlink: 656 bytes leftover after parsing attributes in process `syz.2.11206'. [ 531.307367][ T709] loop2: detected capacity change from 0 to 128 [ 531.327184][ T709] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 531.376672][T13684] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 531.914567][ T742] syzkaller1: entered promiscuous mode [ 531.941062][ T742] syzkaller1: entered allmulticast mode [ 531.976537][ T723] loop2: detected capacity change from 0 to 512 [ 532.072188][ T723] EXT4-fs: Ignoring removed i_version option [ 532.089787][ T723] EXT4-fs: Invalid want_extra_isize 2 [ 532.115137][ T752] program syz.6.11226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.162310][ T758] SELinux: failed to load policy [ 532.259241][ T768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11233'. [ 532.294499][ T772] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11235'. [ 532.472695][ T3500] net_ratelimit: 1031 callbacks suppressed [ 532.472716][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.953102][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.249999][T31426] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 533.292782][T31426] CPU: 1 UID: 0 PID: 31426 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 533.292853][T31426] Tainted: [W]=WARN [ 533.292922][T31426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 533.292949][T31426] Call Trace: [ 533.293000][T31426] [ 533.293011][T31426] __dump_stack+0x1d/0x30 [ 533.293041][T31426] dump_stack_lvl+0x95/0xd0 [ 533.293063][T31426] dump_stack+0x15/0x1b [ 533.293110][T31426] dump_header+0x80/0x240 [ 533.293136][T31426] oom_kill_process+0x295/0x350 [ 533.293217][T31426] out_of_memory+0x981/0xbc0 [ 533.293258][T31426] try_charge_memcg+0x621/0xa00 [ 533.293309][T31426] charge_memcg+0x6d/0x120 [ 533.293416][T31426] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 533.293544][T31426] swap_cache_alloc_folio+0x47b/0x5e0 [ 533.293594][T31426] swap_cluster_readahead+0x3d2/0x460 [ 533.293633][T31426] swapin_readahead+0xd8/0x8a0 [ 533.293676][T31426] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 533.293758][T31426] ? hrtimer_start_range_ns+0x108/0x120 [ 533.293796][T31426] ? __rcu_read_unlock+0x4e/0x70 [ 533.293823][T31426] ? swap_cache_get_folio+0x1f7/0x200 [ 533.293913][T31426] do_swap_page+0x2a2/0x1ec0 [ 533.293999][T31426] ? __schedule+0x799/0xd10 [ 533.294036][T31426] ? __rcu_read_lock+0x36/0x50 [ 533.294130][T31426] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 533.294166][T31426] handle_mm_fault+0xb3c/0x2da0 [ 533.294274][T31426] do_user_addr_fault+0x634/0x1060 [ 533.294307][T31426] ? trace_page_fault_user+0x1f/0xa0 [ 533.294342][T31426] exc_page_fault+0x62/0xa0 [ 533.294473][T31426] asm_exc_page_fault+0x26/0x30 [ 533.294494][T31426] RIP: 0033:0x7f12a2028fd7 [ 533.294588][T31426] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 533.294623][T31426] RSP: 002b:00007ffdd113e980 EFLAGS: 00010202 [ 533.294644][T31426] RAX: 0000000000000000 RBX: 000055555fbfb500 RCX: 00007f12a2028fd7 [ 533.294662][T31426] RDX: 00007ffdd113e9c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.294675][T31426] RBP: 00007ffdd113ea2c R08: 0000000000000000 R09: 0000000000000000 [ 533.294689][T31426] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 533.294779][T31426] R13: 00000000000927c0 R14: 000000000008222d R15: 00007ffdd113ea80 [ 533.294805][T31426] [ 533.296346][T31426] memory: usage 307200kB, limit 307200kB, failcnt 204 [ 533.431762][ T808] netlink: 'syz.4.11249': attribute type 13 has an invalid length. [ 533.538474][T31426] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 533.552232][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.553113][T31426] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 533.568357][ T808] netlink: 'syz.4.11249': attribute type 17 has an invalid length. [ 533.615729][T31426] Memory cgroup stats for /syz2: [ 533.616071][T31426] cache 0 [ 533.636345][T31426] rss 0 [ 533.642766][ T808] 8021q: adding VLAN 0 to HW filter on device eth0 [ 533.649430][T31426] shmem 0 [ 533.653633][T31426] mapped_file 0 [ 533.657225][T31426] dirty 0 [ 533.664884][T31426] writeback 0 [ 533.668285][T31426] workingset_refault_anon 4458 [ 533.677378][T31426] workingset_refault_file 0 [ 533.684731][ T808] 8021q: adding VLAN 0 to HW filter on device eth1 [ 533.692564][T31426] swap 192512 [ 533.697103][T31426] swapcached 22843392 [ 533.703423][T31426] pgpgin 111866 [ 533.707298][T31426] pgpgout 111865 [ 533.723253][ T808] 8021q: adding VLAN 0 to HW filter on device eth2 [ 533.745612][ T808] 8021q: adding VLAN 0 to HW filter on device eth3 [ 533.752354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.761391][T31426] pgfault 148371 [ 533.768016][T31426] pgmajfault 48 [ 533.776374][T31426] inactive_anon 0 [ 533.791318][T31426] active_anon 4096 [ 533.796896][T31426] inactive_file 0 [ 533.805542][ T808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.813490][T31426] active_file 0 [ 533.821341][T31426] unevictable 0 [ 533.828547][T31426] hierarchical_memory_limit 314572800 [ 533.842418][T31426] hierarchical_memsw_limit 9223372036854771712 [ 533.867763][T31426] total_cache 0 [ 533.874461][T31426] total_rss 0 [ 533.892612][T31426] total_shmem 0 [ 533.919618][T31426] total_mapped_file 0 [ 533.924375][T31426] total_dirty 0 [ 533.925184][ T814] ./file0: Can't lookup blockdev [ 533.927918][T31426] total_writeback 0 [ 533.928002][T31426] total_workingset_refault_anon 4458 [ 533.928015][T31426] total_workingset_refault_file 0 [ 533.928057][T31426] total_swap 192512 [ 533.928067][T31426] total_swapcached 22843392 [ 533.928078][T31426] total_pgpgin 111866 [ 533.928086][T31426] total_pgpgout 111865 [ 533.928094][T31426] total_pgfault 148371 [ 533.928104][T31426] total_pgmajfault 48 [ 533.928114][T31426] total_inactive_anon 0 [ 533.928124][T31426] total_active_anon 4096 [ 533.928131][T31426] total_inactive_file 0 [ 533.928139][T31426] total_active_file 0 [ 533.928168][T31426] total_unevictable 0 [ 533.928177][T31426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.11243,pid=787,uid=0 [ 533.928297][T31426] Memory cgroup out of memory: Killed process 787 (syz.2.11243) total-vm:94180kB, anon-rss:1240kB, file-rss:22224kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 533.928949][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 533.929002][ T28] audit: type=1400 audit(1784207015.780:13913): avc: denied { mounton } for pid=813 comm="syz.3.11252" path="/1704/file0" dev="tmpfs" ino=8723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 534.230647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.554313][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.262748][ T28] audit: type=1400 audit(1784207017.110:13914): avc: denied { watch watch_reads } for pid=864 comm="syz.2.11274" path="/119/file1" dev="tmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 535.511441][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.559536][T13675] tipc: Subscription rejected, illegal request [ 535.592807][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.632168][ T886] loop2: detected capacity change from 0 to 1024 [ 535.648711][ T886] EXT4-fs: inline encryption not supported [ 535.671071][ T886] EXT4-fs: Ignoring removed bh option [ 535.688768][ T886] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 535.722703][ T886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.728612][ T858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.761084][ T28] audit: type=1400 audit(1784207017.610:13915): avc: denied { write } for pid=885 comm="syz.2.11284" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.795585][T31426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.830179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.986636][ T28] audit: type=1400 audit(1784207017.830:13916): avc: denied { rename } for pid=901 comm="syz.4.11289" name="file0" dev="tmpfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 535.990204][ T902] 9p: Unknown Cache mode or invalid value 777777777777777777 [ 536.017419][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.038286][ T28] audit: type=1400 audit(1784207017.830:13917): avc: denied { mounton } for pid=901 comm="syz.4.11289" path="/473/file7" dev="tmpfs" ino=2466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 536.162893][ T28] audit: type=1400 audit(1784207018.010:13918): avc: denied { setopt } for pid=906 comm="syz.2.11292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 536.290156][ T927] loop2: detected capacity change from 0 to 512 [ 536.315236][ T927] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.11299: bad orphan inode 15 [ 536.351341][ T927] loop2: lost filesystem error report for type 5 error -117 [ 536.355614][ T927] ext4_test_bit(bit=14, block=5) = 0 [ 536.363035][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 536.363062][ C1] EXT4-fs (loop2): initial error at time 1784207018: ext4_orphan_get:1425 [ 536.363091][ C1] EXT4-fs (loop2): last error at time 1784207018: ext4_orphan_get:1425 [ 536.403660][ T927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.421779][ T927] EXT4-fs error (device loop2): __ext4_new_inode:1081: comm syz.2.11299: reserved inode found cleared - inode=1 [ 536.439128][ T28] audit: type=1400 audit(1784207018.270:13919): avc: denied { write } for pid=926 comm="syz.2.11299" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.498658][ T927] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 536.524639][ T932] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11302'. [ 536.600661][T31426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.765158][ T953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11311'. [ 536.942243][ T970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11317'. [ 537.000267][ T938] netlink: 'syz.6.11303': attribute type 4 has an invalid length. [ 537.008427][ T938] netlink: 17 bytes leftover after parsing attributes in process `syz.6.11303'. [ 537.119337][ T983] netlink: 4560 bytes leftover after parsing attributes in process `syz.6.11323'. [ 537.129402][ T983] netlink: 4560 bytes leftover after parsing attributes in process `syz.6.11323'. [ 537.345665][ T988] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.674369][ T3500] net_ratelimit: 2 callbacks suppressed [ 537.674384][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.909983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.295766][ T1017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.304365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.392394][ T1019] can: request_module (can-proto-5) failed. [ 538.712985][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.744586][ T1031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.035477][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.054066][ T28] audit: type=1400 audit(1784207020.910:13920): avc: denied { bind } for pid=1052 comm="syz.4.11352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 539.139949][ T1058] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11354'. [ 539.553099][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11364'. [ 539.565717][ T1082] gtp1: entered promiscuous mode [ 539.572365][ T1082] gtp1: entered allmulticast mode [ 539.752809][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.989986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.335343][ T1137] loop4: detected capacity change from 0 to 128 [ 540.344069][ T1139] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11388'. [ 540.698902][ T1154] netlink: 7 bytes leftover after parsing attributes in process `syz.3.11394'. [ 540.803163][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.317419][ T1193] loop4: detected capacity change from 0 to 512 [ 541.334301][ T1193] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 541.400259][ T28] audit: type=1400 audit(1784207023.250:13921): avc: denied { mounton } for pid=1192 comm="syz.4.11411" path="/499/file0/bus" dev="loop4" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 541.741366][ T1204] netlink: 'syz.4.11415': attribute type 4 has an invalid length. [ 541.749489][ T1204] __nla_validate_parse: 5 callbacks suppressed [ 541.749508][ T1204] netlink: 17 bytes leftover after parsing attributes in process `syz.4.11415'. [ 542.015594][ T1225] netlink: 108 bytes leftover after parsing attributes in process `syz.6.11425'. [ 542.434108][ T1234] loop6: detected capacity change from 0 to 1024 [ 542.452390][ T1234] EXT4-fs: Ignoring removed orlov option [ 542.490340][ T1234] EXT4-fs: Ignoring removed oldalloc option [ 542.516306][ T1234] EXT4-fs: Ignoring removed orlov option [ 542.544192][ T1234] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 542.562536][ T1234] System zones: 0-1, 3-12 [ 542.569389][ T1234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.608046][T23029] ================================================================== [ 542.616200][T23029] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 542.623721][T23029] [ 542.626074][T23029] read-write to 0xffff88811b761158 of 8 bytes by task 1245 on cpu 1: [ 542.634170][T23029] inode_add_bytes+0x47/0xe0 [ 542.638823][T23029] __dquot_alloc_space+0x17d/0x890 [ 542.643986][T23029] shmem_inode_acct_blocks+0x125/0x230 [ 542.649483][T23029] shmem_get_folio_gfp+0x5d3/0xd90 [ 542.654642][T23029] shmem_write_begin+0xfc/0x1f0 [ 542.659543][T23029] generic_perform_write+0x186/0x490 [ 542.664882][T23029] shmem_file_write_iter+0xc5/0xf0 [ 542.670051][T23029] __kernel_write_iter+0x30f/0x590 [ 542.675205][T23029] dump_user_range+0xa73/0xd00 [ 542.680018][T23029] elf_core_dump+0x21c0/0x2340 [ 542.684851][T23029] coredump_write+0xaf9/0xdd0 [ 542.689579][T23029] vfs_coredump+0x2770/0x3290 [ 542.694320][T23029] get_signal+0xd33/0xf10 [ 542.698711][T23029] arch_do_signal_or_restart+0x96/0x480 [ 542.704323][T23029] irqentry_exit+0x14d/0x610 [ 542.708959][T23029] asm_exc_page_fault+0x26/0x30 [ 542.713852][T23029] [ 542.716197][T23029] read to 0xffff88811b761158 of 8 bytes by task 23029 on cpu 0: [ 542.723845][T23029] generic_fillattr+0x283/0x340 [ 542.728750][T23029] shmem_getattr+0x181/0x200 [ 542.733378][T23029] vfs_getattr_nosec+0x146/0x1e0 [ 542.738347][T23029] vfs_getattr+0x48/0x60 [ 542.742626][T23029] vfs_statx_path+0x28/0x140 [ 542.747255][T23029] vfs_statx+0xc4/0x170 [ 542.751450][T23029] vfs_fstatat+0x118/0x170 [ 542.755904][T23029] __se_sys_newfstatat+0x55/0x3e0 [ 542.760962][T23029] __x64_sys_newfstatat+0x55/0x70 [ 542.766025][T23029] x64_sys_call+0x2c64/0x3020 [ 542.770736][T23029] do_syscall_64+0x136/0x3c0 [ 542.775378][T23029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.781295][T23029] [ 542.783645][T23029] value changed: 0x0000000000002150 -> 0x0000000000002160 [ 542.790775][T23029] [ 542.793131][T23029] Reported by Kernel Concurrency Sanitizer on: [ 542.799314][T23029] CPU: 0 UID: 0 PID: 23029 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 542.810452][T23029] Tainted: [W]=WARN [ 542.814286][T23029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 542.824384][T23029] ================================================================== [ 542.833957][ T28] audit: type=1400 audit(1784207024.550:13922): avc: denied { write } for pid=1233 comm="syz.6.11430" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.883043][ T3500] net_ratelimit: 7 callbacks suppressed [ 542.883080][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.905207][T21111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.912944][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.149998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.953038][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.110115][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.118465][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.992982][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.230008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.033237][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.072997][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.150511][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.320109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.122478][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.153652][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.389976][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.190208][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.198396][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.233029][ T3500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.479991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog