last executing test programs: 2m48.976803009s ago: executing program 32 (id=76): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) 2m7.658276337s ago: executing program 33 (id=828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r2) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) 2m3.691307685s ago: executing program 3 (id=899): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @multicast, 'veth1_to_team\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0xfffd, @broadcast, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) 2m3.566762899s ago: executing program 3 (id=902): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40002041, 0x0) 2m3.52800642s ago: executing program 3 (id=904): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) close(0x3) 2m3.489982881s ago: executing program 3 (id=905): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c81, 0xfffff) r1 = syz_ublk_setup_io_uring(0x3ed2, &(0x7f0000000100)={0x0, 0x3af3, 0x20000, 0x1, 0x39d}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000680)={[{@i_version}, {@nombcache}, {@errors_remount}, {@nolazytime}, {@acl}], [{@obj_user={'obj_user', 0x3d, 'acl'}}, {@subj_user={'subj_user', 0x3d, '/dev/loop-control\x00'}}]}, 0xfe, 0x28f, &(0x7f0000000280)="$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") io_uring_enter(r1, 0x37fe, 0xc58c, 0x40, &(0x7f0000000240)={[0x4]}, 0x8) 2m3.342463736s ago: executing program 3 (id=907): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 2m3.311840217s ago: executing program 3 (id=909): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x0, 0x800000000000, 0x4, 0x0, 0x0, 0x800000010}, {0x9, 0x2, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x3, 0x7, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1m50.940578835s ago: executing program 34 (id=1069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 1m48.222609512s ago: executing program 35 (id=909): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x0, 0x800000000000, 0x4, 0x0, 0x0, 0x800000010}, {0x9, 0x2, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x3, 0x7, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 1m41.569279376s ago: executing program 6 (id=1194): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8001, 0xffd}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.267312086s ago: executing program 6 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)=r2}, 0x20) 1m41.165757009s ago: executing program 6 (id=1191): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 1m41.103645361s ago: executing program 6 (id=1197): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002600)='blkio.bfq.time\x00', 0x275a, 0x0) 1m40.601658747s ago: executing program 6 (id=1204): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1, 0xb0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m39.518442042s ago: executing program 6 (id=1221): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21085e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x57f, 0x7fff, 0xda, 0xb, 0x200007de66e8c, 0x8000000020000000, 0x20000000ffe, 0xfa, 0x4}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0xff) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socket(0x2, 0x80805, 0x0) 1m39.491050503s ago: executing program 36 (id=1221): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21085e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x57f, 0x7fff, 0xda, 0xb, 0x200007de66e8c, 0x8000000020000000, 0x20000000ffe, 0xfa, 0x4}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0xff) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socket(0x2, 0x80805, 0x0) 1m19.428572368s ago: executing program 4 (id=1621): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="000000004ea9"], 0x48) 1m19.287706482s ago: executing program 4 (id=1626): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m19.199845455s ago: executing program 4 (id=1627): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x13, 0x4) 1m19.167839836s ago: executing program 4 (id=1628): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@nolazytime}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)=0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m19.05360634s ago: executing program 4 (id=1634): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xfff, @empty, 0x10000}}}, 0x32) getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f00000000c0)) 1m18.467044558s ago: executing program 4 (id=1645): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m18.466929918s ago: executing program 37 (id=1645): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m14.425391208s ago: executing program 9 (id=1674): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x8b501a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x8614d7, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x1) 1m14.353830841s ago: executing program 9 (id=1675): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) 1m14.243916684s ago: executing program 9 (id=1678): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x2f, 0x10, &(0x7f0000000000)={0x0, 0x400000, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1m14.190994336s ago: executing program 9 (id=1681): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 1m14.149877907s ago: executing program 9 (id=1683): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nojournal_checksum}, {@grpquota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@i_version}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000000)=ANY=[], 0x835, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x0, 0x0, 0x1) 1m13.908685275s ago: executing program 9 (id=1688): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x8, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.831707008s ago: executing program 38 (id=1688): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x8, @void}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 32.04798922s ago: executing program 1 (id=2439): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="52000146"], 0x5) 31.907018855s ago: executing program 1 (id=2441): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 31.865663076s ago: executing program 1 (id=2443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 31.851577357s ago: executing program 1 (id=2444): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 31.829263787s ago: executing program 1 (id=2445): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$eJzs3MtvVFUYAPDv3r54tyo+QNAqJhIfLS3PhRuMJi40MdEFxlVtC0EGqrQmQkhAF7g0JO6NSxP/Ale6MerKxMSV7g0JMWxEE5Mx9869nXE6Uzt0YID5/ZIL58w9wznfnHPmPs5cAuhb49kfScSWiPg1IjbUsv8tMF7768b1C7N/Xb8wm0S1+sYfSV7uz+sXZsui5fs21zLVapEfaVHv5bcjZiqV+bNFfnLp9HuTi+fOP3/y9MyJ+RPzZ6aPHDmwf/fwoemDXYlzNGvrSCzs2vHKW1demz125Z0fvsrau6XY3xhHt4zXPt2VBrpdU+9tbUgngz1sCB3JhmLWXUP5/B+Ngdi4vG80Xv64p40DbqlqtVptdXwuXKoC97Aket0CoDfKA312/Vtut+nU445w7WjE+4dr8d8ottqewUiLMkNN17fdNB4Rxy79/Xm2xS26DwEA0OiboxHxXKvzvzQeaii3rVhDGYuI+yLi/oh4ICK2R8SDEXnZhyPikQ7rb14hWXn+k169qcDWKDv/e6FY21o+//unmsdfGBsoclvz+IeS4ycr8/uKz2RvDI1k+alV6vj2pZ8/bbev8fwv27L6y3PBmvTqYNMNurmZpZl1hr3s2kcROweb4s8lUS7jJBGxIyJ2dvQv168wTj7z5a52perxb4yIVvGvogvrTNUvIp6u9f+laIq/lLRdn5w6fGj64OSGqMzvmyxHxUo//nT59Xb1/3//31pZ/29qHv/13ruYDflkQ8TiufOn8vXaxc7ruPzbJy2vaTatY/wPJ2/m6eHitQ9nlpbOTkUMJ6+ufH26/t4yX5bP4t+7p9X4T/PvuCj6/9GIyAbx7oh4LCIeL9r+REQ8GRF7Von/+xeferfdvvbxr3JXvouy+Oda9H/D+B/LUvX+7zwxcOq7rzuPv5T1/4E8tbd4ZS3ff2tt4Ho+OwAAALhbpPlv4JN0YjmdphMTtd/wb49NaWVhcenZ4wsfnJmr/VZ+LIbS8k7XaMP90Kni3nCZn27K7y/uG382sDHPT8wuVOZ6HTz0uc1t5n/m93vwORWgiee1oH+Z/9C/zH/oX/X5f6in7QBuP8d/6F+t5v/FHrQDuP0c/6F/mf/Qv8x/6F/mP/Slts/Gp+t65P+uTfyy7Y5oxl2QiLTzdw1GL9s83NPabzoxuOb/zOImEyMtd/X6mwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA7/g0AAP//hh/x1w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) waitid(0x2, 0x0, &(0x7f0000000300), 0x2, 0x0) 31.723068001s ago: executing program 1 (id=2449): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.699971261s ago: executing program 39 (id=2449): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.110610193s ago: executing program 8 (id=3098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dedc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) 2.109702182s ago: executing program 7 (id=3101): socket$nl_generic(0x11, 0x3, 0x10) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) 2.053792994s ago: executing program 7 (id=3103): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 2.034713435s ago: executing program 7 (id=3104): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.991732726s ago: executing program 8 (id=3106): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0x7}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='6L\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.980008677s ago: executing program 7 (id=3107): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000000010904000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0) 1.886885809s ago: executing program 7 (id=3108): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xea}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.886606229s ago: executing program 8 (id=3109): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r2, @ANYBLOB="83000400040000002800128008000100736974001c00028006000d00ff07000008000300e0000001080001002da0"], 0x48}, 0x1, 0x0, 0x0, 0x24048014}, 0x4040) 1.818417471s ago: executing program 7 (id=3112): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="cfb700201c15d661"], 0x4) 1.762863714s ago: executing program 8 (id=3113): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000001000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.622929728s ago: executing program 0 (id=3116): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x4004802) shutdown(r0, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0xffffffff}, 0x8) 1.622608558s ago: executing program 0 (id=3117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x3, 0x0, 0x8, {0x5, 0x2, 0x0, 0xa, 0xccc}, {0x5, 0x1, 0x0, 0x6, 0x2, 0x4}, 0x1, 0x0, 0x800000}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x78}}, 0x0) 1.407568725s ago: executing program 8 (id=3118): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.387894226s ago: executing program 8 (id=3119): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25150000000a0014002f292b3a5e2c000008000100", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) 1.342854187s ago: executing program 0 (id=3120): syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef) 1.298464169s ago: executing program 0 (id=3121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 1.280130179s ago: executing program 0 (id=3122): setresgid(0xee00, 0xee01, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000000)=[r1]) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) 1.266809639s ago: executing program 0 (id=3123): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7f, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.126975574s ago: executing program 5 (id=3127): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x41) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000029) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.126628894s ago: executing program 5 (id=3128): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.023247147s ago: executing program 5 (id=3129): socket$inet_sctp(0x2, 0x5, 0x84) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000340)=""/170, 0xaa) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x4, 0x0, 0x0, 0x800, 0x0, 0x2, 0x2}, 0x0, 0x0, 0x0, 0x0) 943.5467ms ago: executing program 5 (id=3130): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r2, 0x0, 0x0) 886.979702ms ago: executing program 5 (id=3131): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x3, r0, 0x5}) 886.668972ms ago: executing program 2 (id=3132): pipe2$9p(&(0x7f0000000080), 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 886.514362ms ago: executing program 2 (id=3133): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) 880.057742ms ago: executing program 2 (id=3134): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) syz_open_procfs(r0, &(0x7f00000000c0)='attr/keycreate\x00') 861.851283ms ago: executing program 2 (id=3135): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) 847.562783ms ago: executing program 2 (id=3136): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 766.987376ms ago: executing program 5 (id=3137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x74bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000080) 0s ago: executing program 2 (id=3138): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 008032][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 143.236110][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 143.236126][ T28] audit: type=1400 audit(1781612112.040:1331): avc: denied { watch_reads } for pid=10172 comm="syz.1.1888" path="/36" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 143.341527][ T28] audit: type=1326 audit(1781612112.150:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebd5cce59 code=0x7ffc0000 [ 143.367219][ T28] audit: type=1326 audit(1781612112.150:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebd5cce59 code=0x7ffc0000 [ 143.414674][ T28] audit: type=1326 audit(1781612112.150:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebd5cce59 code=0x7ffc0000 [ 143.440577][ T28] audit: type=1326 audit(1781612112.150:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ebd5cce59 code=0x7ffc0000 [ 143.468663][ T28] audit: type=1326 audit(1781612112.150:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebd5cce59 code=0x7ffc0000 [ 143.517281][ T28] audit: type=1326 audit(1781612112.150:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebd5cce59 code=0x7ffc0000 [ 143.547678][T10195] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1896'. [ 143.559011][ T28] audit: type=1326 audit(1781612112.150:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ebd5cce59 code=0x7ffc0000 [ 143.619465][ T28] audit: type=1326 audit(1781612112.150:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4ebd5cce59 code=0x7ffc0000 [ 143.651134][ T28] audit: type=1326 audit(1781612112.150:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10179 comm="syz.2.1891" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ebd5cce59 code=0x0 [ 143.823840][T10220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.832995][T10220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.201636][T10227] loop7: detected capacity change from 0 to 512 [ 144.220113][T10227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.232884][T10227] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.247351][T10227] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1914: iget: bad i_size value: 2533274857506816 [ 144.285782][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.388696][T10248] loop5: detected capacity change from 0 to 128 [ 144.398860][T10248] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.411439][T10248] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.580560][ T9366] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.723939][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 144.773842][T10285] loop1: detected capacity change from 0 to 128 [ 144.792202][T10285] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.822582][T10285] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.886633][T10290] loop2: detected capacity change from 0 to 512 [ 144.899997][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 144.902154][T10290] EXT4-fs: Ignoring removed bh option [ 144.917427][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 144.917591][T10290] EXT4-fs: inline encryption not supported [ 144.954635][T10290] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.016683][ T9014] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.031120][T10290] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 145.090191][T10290] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1925: bg 0: block 248: padding at end of block bitmap is not set [ 145.119506][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 145.172977][T10307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1936'. [ 145.194452][T10290] loop2: lost filesystem error report for type 5 error -117 [ 145.194838][T10290] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.1925: Failed to acquire dquot type 1 [ 145.202220][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 145.202243][ C0] EXT4-fs (loop2): last error at time 1781612115: ext4_validate_block_bitmap:441 [ 145.260110][T10321] loop5: detected capacity change from 0 to 512 [ 145.327990][T10321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.344167][T10321] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.354403][T10290] loop2: lost filesystem error report for type 5 error -28 [ 145.373597][T10290] EXT4-fs (loop2): 1 truncate cleaned up [ 145.389408][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.426987][T10290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 145.991727][T10381] loop1: detected capacity change from 0 to 512 [ 146.064058][T10381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.121717][T10381] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.163026][T10381] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.1950: iget: bad i_size value: 2533274857506816 [ 146.228151][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 146.391984][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1956'. [ 146.415827][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1956'. [ 146.512607][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.532461][ T9014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.542669][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.591244][T10403] loop5: detected capacity change from 0 to 256 [ 146.621584][T10403] FAT-fs (loop5): Directory bread(block 64) failed [ 146.628271][T10403] FAT-fs (loop5): Directory bread(block 65) failed [ 146.649540][T10403] FAT-fs (loop5): Directory bread(block 66) failed [ 146.666564][T10403] FAT-fs (loop5): Directory bread(block 67) failed [ 146.688325][T10403] FAT-fs (loop5): Directory bread(block 68) failed [ 146.711845][T10403] FAT-fs (loop5): Directory bread(block 69) failed [ 146.737426][T10403] FAT-fs (loop5): Directory bread(block 70) failed [ 146.766162][T10403] FAT-fs (loop5): Directory bread(block 71) failed [ 146.803199][T10403] FAT-fs (loop5): Directory bread(block 72) failed [ 146.828384][T10403] FAT-fs (loop5): Directory bread(block 73) failed [ 146.929219][T10403] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 146.947073][T10403] FAT-fs (loop5): Filesystem has been set read-only [ 146.966245][T10403] syz.5.1959: attempt to access beyond end of device [ 146.966245][T10403] loop5: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 147.007109][T10403] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 147.025446][T10403] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 147.325852][T10457] loop2: detected capacity change from 0 to 128 [ 147.351337][T10457] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.375413][T10457] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.406135][T10457] Invalid argument reading file caps for ./file0 [ 147.494349][ T6456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.840897][T10473] loop2: detected capacity change from 0 to 512 [ 147.895692][T10473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.929739][T10473] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.080832][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.211230][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.230370][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.578355][T10500] 9pnet: p9_errstr2errno: server reported unknown error e_0 [ 148.600124][T10507] loop1: detected capacity change from 0 to 256 [ 148.664006][T10507] FAT-fs (loop1): Directory bread(block 64) failed [ 148.686517][T10507] FAT-fs (loop1): Directory bread(block 65) failed [ 148.703410][T10507] FAT-fs (loop1): Directory bread(block 66) failed [ 148.721514][T10507] FAT-fs (loop1): Directory bread(block 67) failed [ 148.738535][T10507] FAT-fs (loop1): Directory bread(block 68) failed [ 148.754928][T10507] FAT-fs (loop1): Directory bread(block 69) failed [ 148.775275][T10507] FAT-fs (loop1): Directory bread(block 70) failed [ 148.815065][T10507] FAT-fs (loop1): Directory bread(block 71) failed [ 148.835010][T10507] FAT-fs (loop1): Directory bread(block 72) failed [ 148.863499][T10507] FAT-fs (loop1): Directory bread(block 73) failed [ 148.880828][ T28] kauditd_printk_skb: 465 callbacks suppressed [ 148.880843][ T28] audit: type=1400 audit(1781612118.695:1804): avc: denied { setopt } for pid=10512 comm="syz.8.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.935520][ T28] audit: type=1400 audit(1781612118.735:1805): avc: denied { bind } for pid=10512 comm="syz.8.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.995478][T10507] syz.1.1989: attempt to access beyond end of device [ 148.995478][T10507] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 149.693626][ T28] audit: type=1400 audit(1781612119.505:1806): avc: denied { read } for pid=10542 comm="syz.1.2004" name="/" dev="configfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.749317][ T28] audit: type=1400 audit(1781612119.505:1807): avc: denied { read open } for pid=10542 comm="syz.1.2004" path="/" dev="configfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.841852][T10547] loop7: detected capacity change from 0 to 4096 [ 149.866086][ T28] audit: type=1400 audit(1781612119.675:1808): avc: denied { name_connect } for pid=10552 comm="syz.1.2010" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 149.892991][ T28] audit: type=1400 audit(1781612119.705:1809): avc: denied { read } for pid=10552 comm="syz.1.2010" lport=33518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.931244][T10547] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.968572][T10547] EXT4-fs (loop7): shut down requested (0) [ 149.976032][ T28] audit: type=1400 audit(1781612119.775:1810): avc: denied { write } for pid=10546 comm="syz.7.2006" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.012928][T10547] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 150.025161][T10547] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 150.045834][T10547] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 150.055321][ T28] audit: type=1400 audit(1781612119.855:1811): avc: denied { read } for pid=10546 comm="syz.7.2006" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.144645][ T28] audit: type=1400 audit(1781612119.925:1812): avc: denied { open } for pid=10546 comm="syz.7.2006" path="/192/file0/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.149204][T10562] bridge_slave_0: invalid flags given to default FDB implementation [ 150.179497][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.345297][T10576] loop2: detected capacity change from 0 to 512 [ 150.362930][T10576] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 150.392172][T10576] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 150.424081][T10576] EXT4-fs (loop2): 1 truncate cleaned up [ 150.448872][T10576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.554763][ T28] audit: type=1400 audit(1781612120.355:1813): avc: denied { ioctl } for pid=10575 comm="syz.2.2019" path="socket:[26358]" dev="sockfs" ino=26358 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 150.607539][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.735135][T10598] loop7: detected capacity change from 0 to 512 [ 150.751896][T10598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.779320][T10598] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.852954][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.043734][T10615] program syz.7.2032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.243521][T10628] loop2: detected capacity change from 0 to 256 [ 151.264691][T10628] FAT-fs (loop2): Directory bread(block 64) failed [ 151.271527][T10628] FAT-fs (loop2): Directory bread(block 65) failed [ 151.278920][T10628] FAT-fs (loop2): Directory bread(block 66) failed [ 151.285881][T10628] FAT-fs (loop2): Directory bread(block 67) failed [ 151.293313][T10628] FAT-fs (loop2): Directory bread(block 68) failed [ 151.300187][T10628] FAT-fs (loop2): Directory bread(block 69) failed [ 151.306803][T10628] FAT-fs (loop2): Directory bread(block 70) failed [ 151.313978][T10628] FAT-fs (loop2): Directory bread(block 71) failed [ 151.322028][T10628] FAT-fs (loop2): Directory bread(block 72) failed [ 151.329066][T10628] FAT-fs (loop2): Directory bread(block 73) failed [ 151.376750][T10628] syz.2.2038: attempt to access beyond end of device [ 151.376750][T10628] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 151.453074][T10631] netlink: 'syz.2.2039': attribute type 25 has an invalid length. [ 151.462670][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 151.471915][T10631] netlink: 'syz.2.2039': attribute type 25 has an invalid length. [ 151.480380][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 153.793289][T10638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.800285][T10645] loop5: detected capacity change from 0 to 1024 [ 153.805477][T10638] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.821007][T10638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.845871][T10645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.893963][T10658] loop2: detected capacity change from 0 to 128 [ 153.909169][T10653] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 153.941796][T10658] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.952337][T10638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.969307][T10658] ext4 filesystem being mounted at /220/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.994987][T10638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.011758][T10638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.022627][T10638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.035266][T10638] veth1_vlan: left promiscuous mode [ 154.041330][T10638] veth0_vlan: left promiscuous mode [ 154.047335][T10638] veth0_vlan: entered promiscuous mode [ 154.053000][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 154.053061][ T28] audit: type=1400 audit(1781612123.855:1816): avc: denied { map } for pid=10667 comm="syz.7.2052" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 154.067188][T10638] veth1_vlan: entered promiscuous mode [ 154.091883][T10638] veth1_macvtap: left promiscuous mode [ 154.092712][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 154.098032][T10638] veth0_macvtap: left promiscuous mode [ 154.116278][T10638] veth0_macvtap: entered promiscuous mode [ 154.121681][ T40] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.121681][ T40] [ 154.123192][T10638] veth1_macvtap: entered promiscuous mode [ 154.137868][ T28] audit: type=1400 audit(1781612123.895:1817): avc: denied { write } for pid=10656 comm="syz.2.2049" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.157049][T10638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 154.174921][T10638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 154.179904][ T40] EXT4-fs (loop5): Total free blocks count 0 [ 154.183886][T10638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 154.188842][ T40] EXT4-fs (loop5): Free/Dirty block details [ 154.197529][T10638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 154.201823][ T28] audit: type=1400 audit(1781612123.895:1818): avc: denied { write } for pid=10656 comm="syz.2.2049" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.215400][ T40] EXT4-fs (loop5): free_blocks=20480 [ 154.240561][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.241272][ T40] EXT4-fs (loop5): dirty_blocks=64 [ 154.247642][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.252903][ T40] EXT4-fs (loop5): Block reservation details [ 154.266355][ T40] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 154.272782][ T6456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.282924][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 16 with error 28 [ 154.301534][ T9366] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 154.313057][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.320158][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.350717][ T1900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.359873][ T1900] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.377345][ T4112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.387086][ T4112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.636704][ T28] audit: type=1400 audit(1781612124.435:1819): avc: denied { write } for pid=10699 comm="syz.8.2063" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 154.774586][T10705] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.809189][T10705] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.001443][T10718] loop1: detected capacity change from 0 to 512 [ 155.036940][T10718] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.2069: corrupted in-inode xattr: invalid ea_ino [ 155.068321][T10718] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.070709][T10718] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2069: couldn't read orphan inode 15 (err -117) [ 155.079907][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 155.079928][ C1] EXT4-fs (loop1): initial error at time 1781612124: ext4_iget_extra_inode:5128: inode 15 [ 155.079958][ C1] EXT4-fs (loop1): last error at time 1781612124: ext4_iget_extra_inode:5128: inode 15 [ 155.202914][T10731] all: renamed from lo (while UP) [ 155.209876][T10718] loop1: lost filesystem error report for type 5 error -117 [ 155.210586][T10718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.352418][ T9014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.504472][T10758] gretap0: entered promiscuous mode [ 155.513952][T10758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2085'. [ 157.436723][ T28] audit: type=1400 audit(1781612127.245:1820): avc: denied { create } for pid=10772 comm="syz.1.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.440566][T10778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.464409][ T28] audit: type=1400 audit(1781612127.265:1821): avc: denied { read } for pid=10772 comm="syz.1.2093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 157.486199][T10778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.334839][ T28] audit: type=1400 audit(1781612128.145:1822): avc: denied { name_bind } for pid=10810 comm="syz.5.2106" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 158.360380][ T28] audit: type=1400 audit(1781612128.145:1823): avc: denied { setopt } for pid=10810 comm="syz.5.2106" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.558319][ T4013] Bluetooth: hci0: command 0x1003 tx timeout [ 159.558544][ T3941] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.093271][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2114'. [ 160.109784][T10826] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2114'. [ 160.243131][ T28] audit: type=1400 audit(1781612130.055:1824): avc: denied { read } for pid=10845 comm="syz.8.2121" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 160.275882][ T28] audit: type=1400 audit(1781612130.055:1825): avc: denied { open } for pid=10845 comm="syz.8.2121" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 160.353577][ T28] audit: type=1400 audit(1781612130.165:1826): avc: denied { view } for pid=10854 comm="syz.8.2124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 160.425197][T10861] sock: sock_set_timeout: `syz.7.2127' (pid 10861) tries to set negative timeout [ 160.751904][ T28] audit: type=1400 audit(1781612130.565:1827): avc: denied { read } for pid=10881 comm="syz.8.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 160.855665][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'. [ 160.876438][ T28] audit: type=1400 audit(1781612130.685:1828): avc: denied { write } for pid=3401 comm="kworker/0:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27796 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 160.945471][T10898] loop8: detected capacity change from 0 to 128 [ 160.973488][T10898] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.994730][T10898] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.030808][ T28] audit: type=1400 audit(1781612130.845:1829): avc: denied { write } for pid=10897 comm="syz.8.2144" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.039548][T10902] loop7: detected capacity change from 0 to 512 [ 161.065926][ T28] audit: type=1400 audit(1781612130.875:1830): avc: denied { write } for pid=10897 comm="syz.8.2144" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.092893][T10902] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 161.105946][ T7204] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.120888][T10902] EXT4-fs (loop7): 1 truncate cleaned up [ 161.127922][T10902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.142987][ T28] audit: type=1400 audit(1781612130.955:1831): avc: denied { write } for pid=10901 comm="syz.7.2145" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.219694][ T28] audit: type=1400 audit(1781612131.035:1832): avc: denied { bind } for pid=10913 comm="syz.8.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.240107][ T28] audit: type=1400 audit(1781612131.035:1833): avc: denied { write } for pid=10913 comm="syz.8.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 161.275547][T10915] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 161.290538][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.362897][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2154'. [ 162.385322][T10990] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 162.391877][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.401048][T10990] vhci_hcd vhci_hcd.0: Device attached [ 162.409167][T10990] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 162.415792][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.423747][T10990] vhci_hcd vhci_hcd.0: Device attached [ 162.431154][T10990] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 162.437778][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.445732][T10990] vhci_hcd vhci_hcd.0: Device attached [ 162.453502][T10990] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 162.460041][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.468163][T10990] vhci_hcd vhci_hcd.0: Device attached [ 162.474621][T10990] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 162.483900][T10990] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 162.490516][T10990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 162.498365][T10990] vhci_hcd vhci_hcd.0: Device attached [ 162.504825][T10991] vhci_hcd: connection closed [ 162.504828][T10997] vhci_hcd: connection closed [ 162.504934][T10993] vhci_hcd: connection closed [ 162.510736][T10995] vhci_hcd: connection closed [ 162.514807][T10999] vhci_hcd: connection closed [ 162.524243][ T1900] vhci_hcd vhci_hcd.1: stop threads [ 162.543014][ T1900] vhci_hcd vhci_hcd.1: release socket [ 162.559611][ T1900] vhci_hcd vhci_hcd.1: disconnect device [ 162.574340][ T1900] vhci_hcd vhci_hcd.1: stop threads [ 162.578248][ T3401] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 162.607107][ T1900] vhci_hcd vhci_hcd.1: release socket [ 162.626407][ T1900] vhci_hcd vhci_hcd.1: disconnect device [ 162.648050][ T1900] vhci_hcd vhci_hcd.1: stop threads [ 162.661113][ T1900] vhci_hcd vhci_hcd.1: release socket [ 162.674589][ T1900] vhci_hcd vhci_hcd.1: disconnect device [ 162.694019][ T1900] vhci_hcd vhci_hcd.1: stop threads [ 162.711237][ T1900] vhci_hcd vhci_hcd.1: release socket [ 162.725946][ T1900] vhci_hcd vhci_hcd.1: disconnect device [ 162.744818][ T1900] vhci_hcd vhci_hcd.1: stop threads [ 162.756321][ T1900] vhci_hcd vhci_hcd.1: release socket [ 162.780429][ T1900] vhci_hcd vhci_hcd.1: disconnect device [ 162.838281][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2192'. [ 162.840314][T11023] netlink: 'syz.7.2191': attribute type 15 has an invalid length. [ 162.983898][T11039] loop5: detected capacity change from 0 to 256 [ 163.235470][T11062] SELinux: failed to load policy [ 163.287443][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2208'. [ 163.376715][T11080] loop2: detected capacity change from 0 to 512 [ 163.410157][T11080] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2215: inode has both inline data and extents flags [ 163.444947][T11080] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.445159][T11080] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2215: couldn't read orphan inode 15 (err -117) [ 163.454407][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 163.454432][ C0] EXT4-fs (loop2): initial error at time 1781612133: ext4_orphan_get:1399: inode 15 [ 163.454465][ C0] EXT4-fs (loop2): last error at time 1781612133: ext4_orphan_get:1399: inode 15 [ 163.493842][T11080] loop2: lost filesystem error report for type 5 error -117 [ 163.494708][T11080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.549493][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.698930][ T3400] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 163.716058][ T3400] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.091310][T11126] loop8: detected capacity change from 0 to 2048 [ 164.110942][T11126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.129523][T11126] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 164.144337][T11126] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 164.157174][T11126] EXT4-fs (loop8): This should not happen!! Data will be lost [ 164.157174][T11126] [ 164.167506][T11126] EXT4-fs (loop8): Total free blocks count 0 [ 164.173778][T11126] EXT4-fs (loop8): Free/Dirty block details [ 164.180436][T11126] EXT4-fs (loop8): free_blocks=4096 [ 164.185768][T11126] EXT4-fs (loop8): dirty_blocks=16 [ 164.191279][T11126] EXT4-fs (loop8): Block reservation details [ 164.197652][T11126] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 164.219245][ T310] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 164.232557][ T7204] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 164.989512][T11162] syzkaller1: entered allmulticast mode [ 165.060833][T11166] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2246'. [ 165.155992][T11174] loop8: detected capacity change from 0 to 512 [ 165.184325][T11174] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.417841][T11187] loop7: detected capacity change from 0 to 8192 [ 165.443307][T11197] loop8: detected capacity change from 0 to 512 [ 165.509155][T11197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.540703][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 165.540718][ T28] audit: type=1400 audit(1781612135.345:1841): avc: denied { write } for pid=11202 comm="syz.2.2263" path="socket:[28263]" dev="sockfs" ino=28263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 165.608208][T11197] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.637123][T11205] 9pnet: p9_errstr2errno: server reported unknown error ½p [ 165.676845][T11197] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 165.721746][ T7204] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.772443][ T28] audit: type=1400 audit(1781612135.585:1842): avc: denied { watch_reads } for pid=11219 comm="syz.1.2281" path="/116/file1" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 165.860666][T11222] SELinux: failed to load policy [ 165.897095][T11228] loop1: detected capacity change from 0 to 512 [ 165.946224][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2276'. [ 165.956206][T11228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.992692][T11228] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.041866][ T28] audit: type=1400 audit(1781612135.845:1843): avc: denied { write } for pid=11225 comm="syz.1.2273" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.831711][T11255] loop5: detected capacity change from 0 to 4096 [ 166.844916][ T9014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.864364][T11255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.933028][ T28] audit: type=1400 audit(1781612136.745:1844): avc: denied { write } for pid=11253 comm="syz.5.2284" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.001904][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.064824][T11279] loop1: detected capacity change from 0 to 128 [ 167.086969][T11279] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.108479][T11283] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 167.115820][T11279] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.150950][ T28] audit: type=1400 audit(1781612136.965:1845): avc: denied { write } for pid=11277 comm="syz.1.2296" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.160503][T11279] EXT4-fs error (device loop1): dx_make_map:1296: inode #2: block 33: comm syz.1.2296: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 167.173349][ T28] audit: type=1400 audit(1781612136.965:1846): avc: denied { create } for pid=11277 comm="syz.1.2296" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 167.194748][T11279] EXT4-fs error (device loop1) in do_split:2027: Corrupt filesystem [ 167.239903][ T28] audit: type=1400 audit(1781612136.975:1847): avc: denied { write } for pid=11277 comm="syz.1.2296" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.262884][ T28] audit: type=1400 audit(1781612136.975:1848): avc: denied { write } for pid=11277 comm="syz.1.2296" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.284927][ T28] audit: type=1400 audit(1781612136.975:1849): avc: denied { write } for pid=11277 comm="syz.1.2296" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.285947][ T9014] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.311539][ T28] audit: type=1400 audit(1781612137.055:1850): avc: denied { write } for pid=11277 comm="syz.1.2296" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.532538][T11308] loop8: detected capacity change from 0 to 512 [ 167.554133][T11310] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.2308'. [ 167.574212][T11308] EXT4-fs: inline encryption not supported [ 167.608086][T11308] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.626162][T11312] loop7: detected capacity change from 0 to 512 [ 167.628495][T11308] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.643055][T11312] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 167.661331][T11312] EXT4-fs (loop7): 1 truncate cleaned up [ 167.667626][T11312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.696692][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.711413][T11308] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 167.737703][T11308] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2305: bg 0: block 248: padding at end of block bitmap is not set [ 167.747704][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2311'. [ 167.752531][T11308] loop8: lost filesystem error report for type 5 error -117 [ 167.763410][T11308] EXT4-fs error (device loop8): ext4_acquire_dquot:7032: comm syz.8.2305: Failed to acquire dquot type 1 [ 167.771054][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 167.771075][ C1] EXT4-fs (loop8): last error at time 1781612137: ext4_validate_block_bitmap:441 [ 167.805767][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2311'. [ 167.849473][T11308] loop8: lost filesystem error report for type 5 error -28 [ 167.851306][T11308] EXT4-fs (loop8): 1 truncate cleaned up [ 167.867204][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2311'. [ 167.878909][ T4117] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.887667][ T4117] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.888868][T11308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 167.896897][ T4117] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.913191][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2311'. [ 167.936203][T11323] loop5: detected capacity change from 0 to 512 [ 167.939418][ T4117] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.988048][T11323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 168.022374][T11323] System zones: 1-12 [ 168.040198][T11323] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2314: corrupted in-inode xattr: e_value size too large [ 168.080165][T11323] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.080410][T11323] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2314: couldn't read orphan inode 15 (err -117) [ 168.089602][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 168.089626][ C1] EXT4-fs (loop5): initial error at time 1781612137: ext4_iget_extra_inode:5128: inode 15 [ 168.089656][ C1] EXT4-fs (loop5): last error at time 1781612137: ext4_iget_extra_inode:5128: inode 15 [ 168.149938][T11328] ip_vti0: entered promiscuous mode [ 168.155362][T11323] loop5: lost filesystem error report for type 5 error -117 [ 168.157623][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2316'. [ 168.158078][T11323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.197253][ T7204] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 168.220861][T11323] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.2314: Unrecognised inode hash code 4 [ 168.246937][T11323] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2314: Corrupt directory, running e2fsck is recommended [ 168.278527][T11335] loop8: detected capacity change from 0 to 512 [ 168.306640][T11335] EXT4-fs (loop8): 1 truncate cleaned up [ 168.317322][T11335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.332876][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.347675][T11341] loop7: detected capacity change from 0 to 256 [ 168.360731][T11341] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.394503][T11341] FAT-fs (loop7): Directory bread(block 64) failed [ 168.432729][T11341] FAT-fs (loop7): Directory bread(block 65) failed [ 168.446997][T11341] FAT-fs (loop7): Directory bread(block 66) failed [ 168.454489][T11345] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.2317: invalid indirect mapped block 234881024 (level 0) [ 168.469040][T11341] FAT-fs (loop7): Directory bread(block 67) failed [ 168.475785][T11341] FAT-fs (loop7): Directory bread(block 68) failed [ 168.485126][T11341] FAT-fs (loop7): Directory bread(block 69) failed [ 168.491914][T11341] FAT-fs (loop7): Directory bread(block 70) failed [ 168.498729][T11341] FAT-fs (loop7): Directory bread(block 71) failed [ 168.505356][T11341] FAT-fs (loop7): Directory bread(block 72) failed [ 168.512338][T11341] FAT-fs (loop7): Directory bread(block 73) failed [ 168.612858][T11353] netlink: 'syz.1.2325': attribute type 29 has an invalid length. [ 168.634288][T11353] netlink: 'syz.1.2325': attribute type 29 has an invalid length. [ 168.643767][T11353] netlink: 588 bytes leftover after parsing attributes in process `syz.1.2325'. [ 168.717700][T11360] netlink: 'syz.2.2328': attribute type 39 has an invalid length. [ 168.851092][T11375] loop5: detected capacity change from 0 to 256 [ 168.857971][T11375] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.894443][T11375] FAT-fs (loop5): Directory bread(block 64) failed [ 168.903446][T11375] FAT-fs (loop5): Directory bread(block 65) failed [ 168.910319][T11378] loop2: detected capacity change from 0 to 512 [ 168.911037][T11375] FAT-fs (loop5): Directory bread(block 66) failed [ 168.933232][T11375] FAT-fs (loop5): Directory bread(block 67) failed [ 168.939997][T11375] FAT-fs (loop5): Directory bread(block 68) failed [ 168.946857][T11375] FAT-fs (loop5): Directory bread(block 69) failed [ 168.955774][T11375] FAT-fs (loop5): Directory bread(block 70) failed [ 168.968377][T11378] EXT4-fs (loop2): 1 truncate cleaned up [ 168.975153][T11378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.986570][T11375] FAT-fs (loop5): Directory bread(block 71) failed [ 168.994549][T11375] FAT-fs (loop5): Directory bread(block 72) failed [ 169.001388][T11375] FAT-fs (loop5): Directory bread(block 73) failed [ 169.113756][ T7204] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.448860][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.457352][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.794856][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.863885][T11435] ip_vti0: entered promiscuous mode [ 169.870095][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'. [ 169.990554][T11444] loop2: detected capacity change from 0 to 512 [ 170.011227][T11444] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 170.031627][T11444] EXT4-fs (loop2): 1 truncate cleaned up [ 170.037772][T11444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.077325][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.085876][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.099249][T11452] xt_policy: output policy not valid in PREROUTING and INPUT [ 170.120111][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.187482][T11465] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 170.200937][T11465] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.222723][T11463] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.238868][T11463] ext4 filesystem being mounted at /276/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.260198][ T9014] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.455841][T11484] EXT4-fs (loop1): 1 truncate cleaned up [ 170.477859][T11484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.581755][T11486] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2379: invalid indirect mapped block 234881024 (level 0) [ 170.653056][T11490] netlink: 'syz.5.2381': attribute type 39 has an invalid length. [ 170.659825][T11488] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 170.691801][T11488] EXT4-fs (loop8): 1 truncate cleaned up [ 170.704009][T11488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.739077][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 170.739093][ T28] audit: type=1400 audit(1781612140.555:1879): avc: denied { write } for pid=11487 comm="syz.8.2380" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.294518][ T7204] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.304772][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.358483][T11495] rdma_rxe: rxe_newlink: failed to add lo [ 171.365592][ T9014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.595814][T11518] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 172.275253][ T28] audit: type=1326 audit(1781612142.085:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0795e9ce59 code=0x7ffc0000 [ 172.304906][T11558] set_capacity_and_notify: 4 callbacks suppressed [ 172.304924][T11558] loop5: detected capacity change from 0 to 512 [ 172.308483][ T28] audit: type=1326 audit(1781612142.085:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0795e9ce59 code=0x7ffc0000 [ 172.350262][ T28] audit: type=1326 audit(1781612142.085:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0795e9ce59 code=0x7ffc0000 [ 172.365052][T11558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.388834][T11558] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.399438][ T28] audit: type=1326 audit(1781612142.085:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0795e9ce59 code=0x7ffc0000 [ 172.426028][ T28] audit: type=1326 audit(1781612142.085:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0795e9ce59 code=0x7ffc0000 [ 172.457590][ T28] audit: type=1326 audit(1781612142.085:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0795e9cbc2 code=0x7ffc0000 [ 172.483170][ T28] audit: type=1326 audit(1781612142.085:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0795e5d68e code=0x7ffc0000 [ 172.486679][T11572] loop2: detected capacity change from 0 to 128 [ 172.514550][ T28] audit: type=1326 audit(1781612142.085:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0795e9cc87 code=0x7ffc0000 [ 172.553994][ T28] audit: type=1326 audit(1781612142.115:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.5.2411" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0795e5d68e code=0x7ffc0000 [ 172.563579][T11572] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 172.595643][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.605278][T11572] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.794408][ T6456] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.182353][T11609] sg_write: data in/out 155648/136 bytes for SCSI command 0x0-- guessing data in; [ 173.182353][T11609] program syz.8.2429 not setting count and/or reply_len properly [ 173.237012][T11615] loop1: detected capacity change from 0 to 128 [ 173.257446][T11615] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 173.270668][T11615] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.319368][ T9014] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.480940][T11637] loop5: detected capacity change from 0 to 512 [ 173.487991][T11637] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 173.500367][T11637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 173.508856][T11637] System zones: 1-12 [ 173.513532][T11637] EXT4-fs (loop5): 1 truncate cleaned up [ 173.521565][T11637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.596186][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.667445][ T3400] syz0: Port: 1 Link DOWN [ 173.921919][T11683] loop5: detected capacity change from 0 to 128 [ 173.940886][T11683] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 173.962304][T11683] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.037294][ T9366] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.111804][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.119246][T11661] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.126598][T11661] bridge_slave_0: entered allmulticast mode [ 174.133336][T11661] bridge_slave_0: entered promiscuous mode [ 174.140291][T11661] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.147379][T11661] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.155359][T11661] bridge_slave_1: entered allmulticast mode [ 174.162125][T11661] bridge_slave_1: entered promiscuous mode [ 174.191986][T11661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.202500][T11661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.229195][T11661] team0: Port device team_slave_0 added [ 174.235902][T11661] team0: Port device team_slave_1 added [ 174.256967][T11661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.263967][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.295349][T11661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.310337][T11661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.318013][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.346778][T11661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.427359][T11661] hsr_slave_0: entered promiscuous mode [ 174.441412][T11661] hsr_slave_1: entered promiscuous mode [ 174.466948][T11661] debugfs: 'hsr0' already exists in 'hsr' [ 174.474810][T11661] Cannot create hsr debugfs directory [ 174.482483][T11724] loop7: detected capacity change from 0 to 1024 [ 174.508267][T11724] EXT4-fs: Mount option(s) incompatible with ext2 [ 174.647465][T11744] loop2: detected capacity change from 0 to 512 [ 174.664372][T11744] EXT4-fs: inline encryption not supported [ 174.683906][T11744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.709237][T11744] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.731853][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2478'. [ 174.741716][T11744] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 174.765900][T11744] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2477: bg 0: block 248: padding at end of block bitmap is not set [ 174.780480][T11744] loop2: lost filesystem error report for type 5 error -117 [ 174.780745][T11744] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.2477: Failed to acquire dquot type 1 [ 174.799283][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 174.799317][ C1] EXT4-fs (loop2): last error at time 1781612144: ext4_validate_block_bitmap:441 [ 174.815305][T11744] loop2: lost filesystem error report for type 5 error -28 [ 174.821665][T11744] EXT4-fs (loop2): 1 truncate cleaned up [ 174.835426][T11744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 174.864359][T11744] EXT4-fs (loop2): shut down requested (2) [ 174.948410][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 174.975410][T11661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 175.010380][T11661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.032992][T11661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 175.056526][T11661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.081150][T11661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 175.101878][T11661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.115005][T11661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.135536][T11661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.197755][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.212986][T11661] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.223803][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.230975][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.281785][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.288892][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.398258][ T3941] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.429985][T11854] loop7: detected capacity change from 0 to 512 [ 175.442893][T11854] EXT4-fs: Ignoring removed bh option [ 175.468717][T11854] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 175.485126][T11854] EXT4-fs (loop7): 1 truncate cleaned up [ 175.491544][T11854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.538285][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.552303][T11661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.678790][T11661] veth0_vlan: entered promiscuous mode [ 175.687389][T11661] veth1_vlan: entered promiscuous mode [ 175.704532][T11661] veth0_macvtap: entered promiscuous mode [ 175.713115][T11661] veth1_macvtap: entered promiscuous mode [ 175.740802][T11661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.754262][T11661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.766396][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.776049][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.790163][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.799528][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.810108][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 175.810124][ T28] audit: type=1400 audit(1781612145.625:1927): avc: denied { write } for pid=11896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.845131][ T28] audit: type=1400 audit(1781612145.625:1928): avc: denied { write } for pid=11907 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.907803][ T28] audit: type=1400 audit(1781612145.715:1929): avc: denied { read } for pid=11924 comm="syz.5.2506" name="file0" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 175.950161][ T28] audit: type=1400 audit(1781612145.715:1930): avc: denied { write } for pid=11909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.002522][ T28] audit: type=1400 audit(1781612145.765:1931): avc: denied { write } for pid=11930 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.049230][ T28] audit: type=1400 audit(1781612145.865:1932): avc: denied { write } for pid=11932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.072598][ T28] audit: type=1400 audit(1781612145.885:1933): avc: denied { write } for pid=11943 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.136349][ T28] audit: type=1400 audit(1781612145.945:1934): avc: denied { write } for pid=11945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.168554][ T28] audit: type=1400 audit(1781612145.945:1935): avc: denied { write } for pid=11956 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.240296][ T28] audit: type=1400 audit(1781612146.055:1936): avc: denied { write } for pid=11958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.913881][ T7950] kernel write not supported for file bpf-prog (pid: 7950 comm: kworker/1:7) [ 177.038362][T12032] netlink: 'syz.8.2520': attribute type 22 has an invalid length. [ 177.056383][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2520'. [ 177.087808][T12032] netlink: 'syz.8.2520': attribute type 22 has an invalid length. [ 177.089171][ T40] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.110717][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2520'. [ 177.131020][ T40] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.209330][T12040] netlink: 'syz.8.2524': attribute type 39 has an invalid length. [ 177.229034][T12038] syzkaller0: entered promiscuous mode [ 177.246683][ T40] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.271140][ T40] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.388356][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 177.896303][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2541'. [ 177.936770][T12087] loop7: detected capacity change from 0 to 512 [ 177.984145][T12087] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.005992][T12087] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.350934][T12120] loop0: detected capacity change from 0 to 512 [ 178.360206][T12120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.371369][T12120] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 178.379833][T12120] System zones: 1-12 [ 178.385072][T12120] EXT4-fs (loop0): 1 truncate cleaned up [ 178.391715][T12120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.503114][T11661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.618426][T12129] loop0: detected capacity change from 0 to 128 [ 178.633302][T12129] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.646123][T12129] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.723547][T11661] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.765057][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2557'. [ 178.798602][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.876129][T12136] loop7: detected capacity change from 0 to 512 [ 178.890263][T12136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.903003][T12136] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.923375][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.025294][T12141] loop8: detected capacity change from 0 to 1024 [ 179.063147][T12141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 179.083303][T12141] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.151270][T12150] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.2562: lblock 0 mapped to illegal pblock 0 (length 6) [ 179.164778][T12150] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 179.177353][T12150] EXT4-fs (loop8): This should not happen!! Data will be lost [ 179.177353][T12150] [ 179.196527][T12150] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 8: comm syz.8.2562: lblock 8 mapped to illegal pblock 8 (length 8) [ 179.218393][T12150] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 179.243769][T12150] EXT4-fs (loop8): This should not happen!! Data will be lost [ 179.243769][T12150] [ 179.266492][T12152] syzkaller0: entered promiscuous mode [ 179.560150][T12174] loop5: detected capacity change from 0 to 2048 [ 179.675703][T12179] loop5: detected capacity change from 0 to 512 [ 179.693306][T12179] EXT4-fs: inline encryption not supported [ 179.711609][T12179] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.721059][T12179] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.737166][ T40] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 179.752585][ T40] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 179.770090][T12179] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 179.796573][ T40] EXT4-fs (loop8): This should not happen!! Data will be lost [ 179.796573][ T40] [ 179.803941][T12179] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2575: bg 0: block 248: padding at end of block bitmap is not set [ 179.819495][ T40] EXT4-fs (loop8): Total free blocks count 0 [ 179.823559][T12179] loop5: lost filesystem error report for type 5 error -117 [ 179.826858][T12179] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.2575: Failed to acquire dquot type 1 [ 179.834251][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 179.834280][ C0] EXT4-fs (loop5): last error at time 1781612149: ext4_validate_block_bitmap:441 [ 179.838130][ T40] EXT4-fs (loop8): Free/Dirty block details [ 179.855706][T12179] loop5: lost filesystem error report for type 5 error -28 [ 179.870756][ T40] EXT4-fs (loop8): free_blocks=0 [ 179.874241][T12179] EXT4-fs (loop5): 1 truncate cleaned up [ 179.889987][T12179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 179.894615][ T7204] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 179.948378][T12179] EXT4-fs (loop5): shut down requested (2) [ 179.987479][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 179.996730][T12194] loop0: detected capacity change from 0 to 1024 [ 180.005390][T12194] EXT4-fs: Ignoring removed bh option [ 180.027529][T12194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.104158][T11661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.190725][T12214] loop5: detected capacity change from 0 to 1024 [ 180.211449][T12214] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.227478][T12214] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2590: bg 0: block 112: padding at end of block bitmap is not set [ 180.243347][T12214] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.2590: lblock 3 mapped to illegal pblock 3 (length 1) [ 180.257921][T12214] EXT4-fs error (device loop5): ext4_ext_remove_space:2969: inode #15: comm syz.5.2590: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 180.277795][T12214] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.2590: lblock 0 mapped to illegal pblock 0 (length 1) [ 180.292640][T12214] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: comm syz.5.2590: lblock 0 mapped to illegal pblock 0 (length 1) [ 180.310793][T12214] EXT4-fs error (device loop5): ext4_ext_remove_space:2969: inode #15: comm syz.5.2590: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 180.435999][T12236] loop5: detected capacity change from 0 to 256 [ 180.446747][T12236] msdos: Unknown parameter 'dots$ns' [ 180.503195][T12238] netlink: 'syz.5.2599': attribute type 49 has an invalid length. [ 180.821514][T12253] EXT4-fs: Ignoring removed bh option [ 180.835770][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 180.835787][ T28] audit: type=1400 audit(1781612150.645:1975): avc: denied { write } for pid=12252 comm="syz.5.2605" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.886082][T12088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.939572][ T28] audit: type=1400 audit(1781612150.745:1976): avc: denied { append } for pid=12260 comm="syz.7.2608" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.068296][ T28] audit: type=1400 audit(1781612150.875:1977): avc: denied { mount } for pid=12264 comm="syz.5.2612" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 181.110335][T12283] netlink: 'syz.8.2617': attribute type 3 has an invalid length. [ 181.120462][T12283] netlink: 'syz.8.2617': attribute type 4 has an invalid length. [ 181.123673][ T28] audit: type=1400 audit(1781612150.935:1978): avc: denied { unmount } for pid=9366 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 181.129006][T12283] netlink: 9067 bytes leftover after parsing attributes in process `syz.8.2617'. [ 181.346255][ T28] audit: type=1326 audit(1781612151.155:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.5.2623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0795e9ce59 code=0x0 [ 181.385627][T12307] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.396937][T12307] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 181.408965][T12307] System zones: 1-12 [ 181.417352][T12307] EXT4-fs (loop2): 1 truncate cleaned up [ 181.440578][ T28] audit: type=1400 audit(1781612151.255:1980): avc: denied { write } for pid=12306 comm="syz.2.2627" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.570604][T12305] loop8: p1 p3 < > [ 181.763242][ T28] audit: type=1400 audit(1781612151.575:1981): avc: denied { ioctl } for pid=12324 comm="syz.2.2634" path="socket:[32200]" dev="sockfs" ino=32200 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 181.968911][T12342] FAT-fs (loop8): Directory bread(block 32) failed [ 181.972046][T12344] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 181.992798][T12342] FAT-fs (loop8): Directory bread(block 33) failed [ 181.994088][T12344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 182.007488][T12344] System zones: 1-12 [ 182.012806][T12342] FAT-fs (loop8): Directory bread(block 34) failed [ 182.019453][T12342] FAT-fs (loop8): Directory bread(block 35) failed [ 182.020025][T12344] EXT4-fs (loop7): 1 truncate cleaned up [ 182.026032][T12342] FAT-fs (loop8): Directory bread(block 36) failed [ 182.038954][T12342] FAT-fs (loop8): Directory bread(block 37) failed [ 182.045585][T12342] FAT-fs (loop8): Directory bread(block 38) failed [ 182.052515][T12342] FAT-fs (loop8): Directory bread(block 39) failed [ 182.059168][T12342] FAT-fs (loop8): Directory bread(block 40) failed [ 182.065955][T12342] FAT-fs (loop8): Directory bread(block 41) failed [ 182.097513][T12342] syz.8.2640: attempt to access beyond end of device [ 182.097513][T12342] loop8: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 182.100057][ T28] audit: type=1400 audit(1781612151.915:1982): avc: denied { write } for pid=12343 comm="syz.7.2641" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.227980][T12350] netlink: 'syz.5.2652': attribute type 1 has an invalid length. [ 182.236140][T12350] netlink: 'syz.5.2652': attribute type 2 has an invalid length. [ 182.246057][T12350] netlink: 'syz.5.2652': attribute type 6 has an invalid length. [ 182.261519][T12348] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.275422][ T28] audit: type=1400 audit(1781612152.085:1983): avc: denied { write } for pid=12347 comm="syz.8.2642" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.275579][T12348] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2642: bg 0: block 112: padding at end of block bitmap is not set [ 182.342227][T12348] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.2642: lblock 3 mapped to illegal pblock 3 (length 1) [ 182.356860][T12348] EXT4-fs error (device loop8): ext4_ext_remove_space:2969: inode #15: comm syz.8.2642: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 182.388013][T12348] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.2642: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.405107][T12348] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #15: comm syz.8.2642: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.419740][T12348] EXT4-fs error (device loop8): ext4_ext_remove_space:2969: inode #15: comm syz.8.2642: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 182.521884][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2647'. [ 182.719112][ T28] audit: type=1400 audit(1781612152.525:1984): avc: denied { connect } for pid=12373 comm="syz.2.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.343773][T12404] set_capacity_and_notify: 7 callbacks suppressed [ 183.343793][T12404] loop0: detected capacity change from 0 to 1024 [ 183.393294][T12404] EXT4-fs: Ignoring removed bh option [ 183.537381][T12428] loop0: detected capacity change from 0 to 128 [ 183.543608][T12427] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2675'. [ 183.552940][T12427] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2675'. [ 183.553883][T12428] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.690734][T12441] loop8: detected capacity change from 0 to 256 [ 183.841081][T12460] dummy0: entered promiscuous mode [ 183.846546][T12459] dummy0: left promiscuous mode [ 184.029542][T12473] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2695'. [ 184.364674][T12495] syzkaller0: entered promiscuous mode [ 184.370437][T12495] syzkaller0: entered allmulticast mode [ 184.532975][T12501] loop5: detected capacity change from 0 to 1024 [ 184.541230][T12501] EXT4-fs: Ignoring removed bh option [ 184.715534][T12515] loop7: detected capacity change from 0 to 128 [ 184.723697][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 184.735182][T12515] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.803689][ T4117] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.885388][T12531] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.892773][T12531] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.900553][T12531] bridge0: entered allmulticast mode [ 184.910856][T12531] bridge_slave_1: left allmulticast mode [ 184.916636][T12531] bridge_slave_1: left promiscuous mode [ 184.922872][T12531] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.932234][T12531] bridge_slave_0: left allmulticast mode [ 184.938002][T12531] bridge_slave_0: left promiscuous mode [ 184.943923][T12531] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.961306][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2719'. [ 184.994062][T12535] team1: entered promiscuous mode [ 184.999409][T12535] team1: entered allmulticast mode [ 185.004792][T12535] 8021q: adding VLAN 0 to HW filter on device team1 [ 185.128914][T12545] loop0: detected capacity change from 0 to 1024 [ 185.135662][T12545] EXT4-fs: Ignoring removed bh option [ 185.141438][T12545] EXT4-fs: Ignoring removed oldalloc option [ 185.242516][T12560] loop2: detected capacity change from 0 to 1024 [ 185.261922][T12560] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.282774][ T4117] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:14: lblock 0 mapped to illegal pblock 0 (length 6) [ 185.297456][ T4117] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 185.310483][ T4117] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.310483][ T4117] [ 185.332143][T12567] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm syz.2.2740: lblock 8 mapped to illegal pblock 8 (length 8) [ 185.346658][T12567] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 185.359099][T12567] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.359099][T12567] [ 185.375140][T12567] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2740: bg 0: block 112: padding at end of block bitmap is not set [ 185.389944][T12567] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 308 with error 28 [ 185.402601][T12567] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.402601][T12567] [ 185.412424][T12567] EXT4-fs (loop2): Total free blocks count 0 [ 185.418805][T12567] EXT4-fs (loop2): Free/Dirty block details [ 185.424714][T12567] EXT4-fs (loop2): free_blocks=0 [ 185.430664][T12567] EXT4-fs (loop2): dirty_blocks=320 [ 185.498134][ T6456] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 185.529771][T12570] bridge0: entered allmulticast mode [ 185.542367][T12570] bond4: left allmulticast mode [ 185.547461][T12570] bond4: left promiscuous mode [ 185.552993][T12570] bridge0: port 3(bond4) entered disabled state [ 185.561047][T12570] bridge_slave_1: left allmulticast mode [ 185.566851][T12570] bridge_slave_1: left promiscuous mode [ 185.572859][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.580970][T12570] bridge_slave_0: left allmulticast mode [ 185.586821][T12570] bridge_slave_0: left promiscuous mode [ 185.593634][T12570] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.688300][ T804] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 185.696065][ T804] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.946197][T12580] nr0: tun_chr_ioctl cmd 1074025677 [ 185.953653][T12580] nr0: Linktype set failed because interface is up [ 186.006645][T12583] syzkaller0: entered promiscuous mode [ 186.012756][T12583] syzkaller0: entered allmulticast mode [ 186.105142][T12593] loop7: detected capacity change from 0 to 2048 [ 186.128772][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 186.128786][ T28] audit: type=1400 audit(1781612155.945:1992): avc: denied { write } for pid=12591 comm="syz.7.2739" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.192300][T12593] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.207390][T12593] EXT4-fs (loop7): Remounting filesystem read-only [ 186.296690][T12598] loop2: detected capacity change from 0 to 512 [ 186.303284][T12598] EXT4-fs: Ignoring removed bh option [ 186.308834][T12598] EXT4-fs: inline encryption not supported [ 186.316467][T12598] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.329385][T12598] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.343924][T12598] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2742: bg 0: block 248: padding at end of block bitmap is not set [ 186.358280][T12598] loop2: lost filesystem error report for type 5 error -117 [ 186.358621][T12598] Quota error (device loop2): write_blk: dquota write failed [ 186.373401][T12598] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 186.378189][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 186.383448][T12598] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.2742: Failed to acquire dquot type 1 [ 186.389841][ C1] EXT4-fs (loop2): last error at time 1781612156: ext4_validate_block_bitmap:441 [ 186.410489][T12598] loop2: lost filesystem error report for type 5 error -28 [ 186.410959][T12598] EXT4-fs (loop2): 1 truncate cleaned up [ 187.164563][T12484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.316657][ T28] audit: type=1400 audit(1781612157.125:1993): avc: denied { ioctl } for pid=12619 comm="syz.8.2750" path="socket:[33469]" dev="sockfs" ino=33469 ioctlcmd=0x48de scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.319447][T12622] loop2: detected capacity change from 0 to 512 [ 187.388263][T12622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.424106][T12622] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2751: corrupted in-inode xattr: bad e_name length [ 187.435907][ T28] audit: type=1400 audit(1781612157.245:1994): avc: denied { mount } for pid=12623 comm="syz.5.2752" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 187.451081][T12622] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.461851][T12622] EXT4-fs (loop2): get orphan inode failed [ 187.471073][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 187.471095][ C1] EXT4-fs (loop2): initial error at time 1781612157: ext4_iget_extra_inode:5128: inode 15 [ 187.471123][ C1] EXT4-fs (loop2): last error at time 1781612157: ext4_iget_extra_inode:5128: inode 15 [ 187.527313][T12622] EXT4-fs (loop2): mount failed [ 187.601075][T12629] gretap1: entered allmulticast mode [ 187.626363][T12633] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 187.638469][T12629] team0: Port device gretap1 added [ 187.639400][T12633] EXT4-fs (loop2): 1 truncate cleaned up [ 187.659257][T12635] bridge0: port 3(team0) entered blocking state [ 187.681310][T12635] bridge0: port 3(team0) entered disabled state [ 187.709160][T12635] team0: entered allmulticast mode [ 187.721016][ T28] audit: type=1400 audit(1781612157.525:1995): avc: denied { write } for pid=12631 comm="syz.2.2755" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.758529][T12635] team_slave_0: entered allmulticast mode [ 187.782020][T12635] team_slave_1: entered allmulticast mode [ 187.806478][T12635] team0: entered promiscuous mode [ 187.828984][T12635] team_slave_0: entered promiscuous mode [ 187.835117][T12635] team_slave_1: entered promiscuous mode [ 187.844160][T12635] gretap1: entered promiscuous mode [ 187.859878][T12635] bridge0: port 3(team0) entered blocking state [ 187.866209][T12635] bridge0: port 3(team0) entered forwarding state [ 188.075243][T12658] ext4: Unknown parameter 'appraise_type' [ 188.158846][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 188.183328][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'. [ 188.291770][T12670] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2767'. [ 188.341841][T12676] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2767'. [ 188.356539][T12674] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2769'. [ 188.493338][T12690] set_capacity_and_notify: 2 callbacks suppressed [ 188.493356][T12690] loop7: detected capacity change from 0 to 512 [ 188.506696][T12686] loop0: detected capacity change from 0 to 512 [ 188.543579][T12690] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.2766: corrupted in-inode xattr: invalid ea_ino [ 188.568671][T12690] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.570669][T12690] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2766: couldn't read orphan inode 15 (err -117) [ 188.579871][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 188.579896][ C0] EXT4-fs (loop7): initial error at time 1781612158: ext4_iget_extra_inode:5128: inode 15 [ 188.579943][ C0] EXT4-fs (loop7): last error at time 1781612158: ext4_iget_extra_inode:5128: inode 15 [ 188.601666][T12686] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.618084][T12690] loop7: lost filesystem error report for type 5 error -117 [ 188.651724][ T28] audit: type=1400 audit(1781612158.465:1996): avc: denied { write } for pid=12685 comm="syz.0.2774" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.655646][T12705] loop5: detected capacity change from 0 to 512 [ 188.690011][ T28] audit: type=1400 audit(1781612158.505:1997): avc: denied { write } for pid=12667 comm="syz.7.2766" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.717895][T12668] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2766: bg 0: block 4: invalid block bitmap [ 188.736402][T12705] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 188.749126][T12668] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 188.757572][T12705] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2781: corrupted in-inode xattr: bad e_name length [ 188.762103][ T28] audit: type=1326 audit(1781612158.565:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.8.2782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55a974ce59 code=0x0 [ 188.771756][T12705] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 188.796787][T12705] EXT4-fs (loop5): get orphan inode failed [ 188.805958][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 188.805981][ C0] EXT4-fs (loop5): initial error at time 1781612158: ext4_iget_extra_inode:5128: inode 15 [ 188.806025][ C0] EXT4-fs (loop5): last error at time 1781612158: ext4_iget_extra_inode:5128: inode 15 [ 188.807433][T12668] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2766: invalid indirect mapped block 234881024 (level 0) [ 188.812323][T12705] EXT4-fs (loop5): mount failed [ 189.054510][T12720] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 189.308723][T12727] syzkaller0: entered promiscuous mode [ 189.319644][T12727] syzkaller0: entered allmulticast mode [ 189.334786][T12732] loop2: detected capacity change from 0 to 128 [ 189.376283][T12732] ext4 filesystem being mounted at /356/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.424247][ T28] audit: type=1400 audit(1781612159.235:1999): avc: denied { write } for pid=12731 comm="syz.2.2792" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.536438][T12741] loop0: detected capacity change from 0 to 512 [ 189.559154][T12741] EXT4-fs: inline encryption not supported [ 189.579930][T12741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.619766][T12741] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.671265][T12741] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 189.690874][T12741] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2793: bg 0: block 248: padding at end of block bitmap is not set [ 189.727375][T12741] loop0: lost filesystem error report for type 5 error -117 [ 189.728188][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 189.741990][ C0] EXT4-fs (loop0): last error at time 1781612159: ext4_validate_block_bitmap:441 [ 189.756809][T12741] EXT4-fs error (device loop0): ext4_acquire_dquot:7032: comm syz.0.2793: Failed to acquire dquot type 1 [ 189.768665][T12741] loop0: lost filesystem error report for type 5 error -28 [ 189.769826][T12741] EXT4-fs (loop0): 1 truncate cleaned up [ 189.855196][T12763] loop2: detected capacity change from 0 to 512 [ 189.875722][T12763] ext4: Unknown parameter 'appraise_type' [ 190.050305][T12766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.089458][T12766] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.131216][T12766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.239894][T12766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.261265][T12766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.301147][T12766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.336954][T12766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.387713][T12766] veth1_vlan: left promiscuous mode [ 190.394070][T12766] veth0_vlan: left promiscuous mode [ 190.400541][T12766] veth0_vlan: entered promiscuous mode [ 190.411937][T12766] veth1_vlan: entered promiscuous mode [ 190.426071][T12766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.436799][T12766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.446739][T12766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.456134][T12766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.465106][T12766] bond1: left promiscuous mode [ 190.470431][T12766] gre1: left promiscuous mode [ 190.524195][T12766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.642110][T12801] loop2: detected capacity change from 0 to 512 [ 190.649040][T12801] EXT4-fs: inline encryption not supported [ 190.656704][T12801] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.669574][T12801] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.705957][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.713109][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.725978][T12801] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 190.727376][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.747485][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.781392][T12801] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2817: bg 0: block 248: padding at end of block bitmap is not set [ 190.784901][ T4119] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.805712][ T4119] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.817068][ T4119] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.825889][ T1900] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.854019][T12801] loop2: lost filesystem error report for type 5 error -117 [ 190.856997][T12801] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.2817: Failed to acquire dquot type 1 [ 190.864391][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 190.864410][ C0] EXT4-fs (loop2): last error at time 1781612160: ext4_validate_block_bitmap:441 [ 190.891964][T12801] loop2: lost filesystem error report for type 5 error -28 [ 190.895082][T12801] EXT4-fs (loop2): 1 truncate cleaned up [ 191.014906][T12815] loop8: detected capacity change from 0 to 2048 [ 191.043918][T12815] EXT4-fs mount: 35 callbacks suppressed [ 191.043935][T12815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.089942][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 191.194154][T12824] netlink: 'syz.0.2826': attribute type 4 has an invalid length. [ 191.216829][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 191.216845][ T28] audit: type=1400 audit(1781612161.025:2006): avc: denied { write } for pid=12814 comm="syz.8.2822" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.283775][ T7204] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.358620][T12840] loop0: detected capacity change from 0 to 1024 [ 191.372330][T12840] EXT4-fs: Ignoring removed bh option [ 191.395245][T12840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.445278][ T28] audit: type=1400 audit(1781612161.255:2007): avc: denied { write } for pid=12838 comm="syz.0.2832" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.505753][T11661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.571883][T12854] loop0: detected capacity change from 0 to 128 [ 191.615058][T12854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 191.633609][T12854] System zones: 1-3, 19-19, 35-36 [ 191.639468][T12854] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 191.656172][T12854] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.705159][ T28] audit: type=1400 audit(1781612161.505:2008): avc: denied { write } for pid=12860 comm="syz.5.2840" path="socket:[33780]" dev="sockfs" ino=33780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.715253][T12854] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1803188485 (only 1 groups) [ 191.790780][T12863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.805602][T12868] geneve2: entered promiscuous mode [ 191.812402][T11661] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.813922][T12868] geneve2: entered allmulticast mode [ 191.825091][ T28] audit: type=1400 audit(1781612161.635:2009): avc: denied { write } for pid=12862 comm="syz.2.2841" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.906933][ T28] audit: type=1400 audit(1781612161.705:2010): avc: denied { write } for pid=12862 comm="syz.2.2841" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.987065][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.016963][T12879] usb usb7: usbfs: process 12879 (syz.8.2849) did not claim interface 0 before use [ 192.135300][T12890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.145122][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2854'. [ 192.155572][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2854'. [ 192.173791][T12890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.197501][T12890] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.211657][ T28] audit: type=1400 audit(1781612162.025:2011): avc: denied { write } for pid=12889 comm="syz.5.2853" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.247816][ T28] audit: type=1400 audit(1781612162.055:2012): avc: denied { write } for pid=12889 comm="syz.5.2853" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.275135][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.363767][T12911] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2860: iget: bad i_size value: 38620345925642 [ 192.380121][T12911] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 192.380292][T12911] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2860: couldn't read orphan inode 15 (err -117) [ 192.389470][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 192.389490][ C0] EXT4-fs (loop5): initial error at time 1781612162: ext4_orphan_get:1399: inode 15 [ 192.389518][ C0] EXT4-fs (loop5): last error at time 1781612162: ext4_orphan_get:1399: inode 15 [ 192.426540][T12911] loop5: lost filesystem error report for type 5 error -117 [ 192.428033][T12911] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.461533][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 192.504244][T12916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.529866][ T28] audit: type=1400 audit(1781612162.345:2013): avc: denied { write } for pid=12915 comm="syz.5.2862" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.637938][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.634176][T12930] syz.5.2868 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 193.659465][T12930] CPU: 0 UID: 0 PID: 12930 Comm: syz.5.2868 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 193.659498][T12930] Tainted: [W]=WARN [ 193.659610][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 193.659628][T12930] Call Trace: [ 193.659638][T12930] [ 193.659645][T12930] __dump_stack+0x1d/0x30 [ 193.659670][T12930] dump_stack_lvl+0x95/0xd0 [ 193.659692][T12930] dump_stack+0x15/0x1b [ 193.659749][T12930] dump_header+0x80/0x240 [ 193.659864][T12930] oom_kill_process+0x295/0x350 [ 193.659887][T12930] out_of_memory+0x981/0xbc0 [ 193.659922][T12930] try_charge_memcg+0x621/0xa00 [ 193.659984][T12930] charge_memcg+0x6d/0x120 [ 193.660043][T12930] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 193.660073][T12930] __swap_cache_prepare_and_add+0x69/0x490 [ 193.660168][T12930] ? alloc_pages_mpol+0xd9/0x1d0 [ 193.660199][T12930] swap_cache_alloc_folio+0xa2/0x120 [ 193.660305][T12930] swap_cluster_readahead+0x25f/0x3c0 [ 193.660338][T12930] swapin_readahead+0xde/0x840 [ 193.660441][T12930] ? _raw_spin_unlock+0x9/0x30 [ 193.660498][T12930] ? swap_put_entries_cluster+0x44a/0x470 [ 193.660565][T12930] ? __rcu_read_unlock+0x4e/0x70 [ 193.660586][T12930] ? swap_cache_get_folio+0x1e0/0x1f0 [ 193.660611][T12930] do_swap_page+0x34d/0x2150 [ 193.660717][T12930] ? __css_rstat_updated+0xbb/0x280 [ 193.660744][T12930] ? __rcu_read_lock+0x36/0x50 [ 193.660769][T12930] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 193.660804][T12930] handle_mm_fault+0xb3c/0x2da0 [ 193.660884][T12930] do_user_addr_fault+0x634/0x1060 [ 193.660919][T12930] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 193.660948][T12930] ? trace_page_fault_user+0x1f/0xa0 [ 193.661036][T12930] exc_page_fault+0x62/0xa0 [ 193.661068][T12930] asm_exc_page_fault+0x26/0x30 [ 193.661090][T12930] RIP: 0033:0x7f0795d507fc [ 193.661194][T12930] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 193.661242][T12930] RSP: 002b:00007ffc95013c58 EFLAGS: 00010246 [ 193.661261][T12930] RAX: 0000000000000000 RBX: ffffffff813c6beb RCX: 0000000000000000 [ 193.661277][T12930] RDX: 0000000000000beb RSI: ffffffff813c6beb RDI: 0000000000000003 [ 193.661292][T12930] RBP: 0000000000000000 R08: 00007f0796100000 R09: 00007f0796102000 [ 193.661341][T12930] R10: 00000000813c6bef R11: 0000000000000003 R12: 00007f0796116038 [ 193.661356][T12930] R13: 0000000000000009 R14: ffffffff813c6425 R15: 00007f0796c45720 [ 193.661372][T12930] ? __se_sys_prctl+0x4e5/0x13c0 [ 193.661405][T12930] ? __se_sys_prctl+0xcab/0x13c0 [ 193.661432][T12930] ? __se_sys_prctl+0xcab/0x13c0 [ 193.661460][T12930] [ 193.662914][T12930] memory: usage 307200kB, limit 307200kB, failcnt 492 [ 193.760938][T12973] set_capacity_and_notify: 4 callbacks suppressed [ 193.760965][T12973] loop8: detected capacity change from 0 to 512 [ 193.763853][T12930] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 193.797190][T12973] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 193.799474][T12930] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 193.799493][T12930] Memory cgroup stats for /syz5: [ 193.799757][T12930] cache 0 [ 193.799777][T12930] rss 0 [ 193.799785][T12930] shmem 0 [ 193.799792][T12930] mapped_file 0 [ 193.799800][T12930] dirty 0 [ 193.799808][T12930] writeback 0 [ 193.799816][T12930] workingset_refault_anon 110 [ 193.799825][T12930] workingset_refault_file 1213 [ 193.799834][T12930] swap 192512 [ 193.799851][T12930] swapcached 19632128 [ 193.799860][T12930] pgpgin 91661 [ 193.799868][T12930] pgpgout 91661 [ 193.799923][T12930] pgfault 116890 [ 193.800028][T12930] pgmajfault 197 [ 193.800036][T12930] inactive_anon 0 [ 193.800044][T12930] active_anon 0 [ 193.800053][T12930] inactive_file 0 [ 193.800061][T12930] active_file 0 [ 193.800069][T12930] unevictable 0 [ 193.800078][T12930] hierarchical_memory_limit 314572800 [ 193.800087][T12930] hierarchical_memsw_limit 9223372036854771712 [ 193.800098][T12930] total_cache 0 [ 193.800106][T12930] total_rss 0 [ 193.800136][T12930] total_shmem 0 [ 193.800142][T12930] total_mapped_file 0 [ 193.800150][T12930] total_dirty 0 [ 193.800158][T12930] total_writeback 0 [ 193.800167][T12930] total_workingset_refault_anon 110 [ 193.800176][T12930] total_workingset_refault_file 1213 [ 193.800186][T12930] total_swap 192512 [ 193.800194][T12930] total_swapcached 19632128 [ 193.800265][T12930] total_pgpgin 91661 [ 193.800273][T12930] total_pgpgout 91661 [ 193.800281][T12930] total_pgfault 116890 [ 193.800365][T12930] total_pgmajfault 197 [ 193.800374][T12930] total_inactive_anon 0 [ 193.800383][T12930] total_active_anon 0 [ 193.800391][T12930] total_inactive_file 0 [ 193.800400][T12930] total_active_file 0 [ 193.800408][T12930] total_unevictable 0 [ 193.800416][T12930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2868,pid=12930,uid=0 [ 193.800621][T12930] Memory cgroup out of memory: Killed process 12930 (syz.5.2868) total-vm:94164kB, anon-rss:1232kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 194.044718][T12973] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.2885: bad orphan inode 131083 [ 194.187780][T12973] loop8: lost filesystem error report for type 5 error -117 [ 194.188270][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 194.202629][ C0] EXT4-fs (loop8): initial error at time 1781612163: ext4_orphan_get:1425 [ 194.211530][ C0] EXT4-fs (loop8): last error at time 1781612163: ext4_orphan_get:1425 [ 194.235572][T12973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.302973][ T7204] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.348313][ T28] audit: type=1400 audit(1781612164.155:2014): avc: denied { getopt } for pid=12991 comm="syz.0.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.411485][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 194.724576][T13014] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2903'. [ 194.751302][T13016] loop2: detected capacity change from 0 to 128 [ 194.810654][T13020] loop2: detected capacity change from 0 to 512 [ 194.818820][T13020] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.830425][T13020] EXT4-fs (loop2): 1 truncate cleaned up [ 194.836960][T13020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.852745][ T28] audit: type=1400 audit(1781612164.665:2015): avc: denied { write } for pid=13019 comm="syz.2.2906" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.937574][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.200689][T12901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.261539][T13040] netlink: 'syz.7.2914': attribute type 1 has an invalid length. [ 195.299193][T13040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.319320][T13040] bond3: (slave geneve2): making interface the new active one [ 195.328484][T13040] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 195.434001][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.271066][T13096] netlink: 'syz.2.2932': attribute type 1 has an invalid length. [ 196.284214][T13096] 8021q: adding VLAN 0 to HW filter on device bond5 [ 196.301388][T13096] bond5: (slave geneve2): making interface the new active one [ 196.310244][T13096] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 196.320035][ T1900] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.330687][ T1900] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.340726][ T1900] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.351720][ T1900] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.478468][ T4013] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 197.478467][ T3941] Bluetooth: hci0: command 0x1003 tx timeout [ 197.509630][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 197.509643][ T28] audit: type=1400 audit(1781612167.325:2018): avc: denied { bind } for pid=13104 comm="syz.0.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.546466][ T28] audit: type=1400 audit(1781612167.345:2019): avc: denied { setopt } for pid=13104 comm="syz.0.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.589109][ T28] audit: type=1400 audit(1781612167.405:2020): avc: denied { bind } for pid=13111 comm="syz.0.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.745046][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 197.849794][T13124] loop0: detected capacity change from 0 to 256 [ 197.874345][T13128] loop2: detected capacity change from 0 to 512 [ 197.883079][ T28] audit: type=1400 audit(1781612167.685:2021): avc: denied { remount } for pid=13123 comm="syz.0.2945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 197.941339][T13128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.964150][T13128] ext4 filesystem being mounted at /397/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.980757][T13138] netlink: 'syz.0.2948': attribute type 13 has an invalid length. [ 198.008442][ T28] audit: type=1400 audit(1781612167.815:2022): avc: denied { mount } for pid=13139 comm="syz.7.2951" name="/" dev="hugetlbfs" ino=35381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 198.033264][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.128895][T13147] loop2: detected capacity change from 0 to 512 [ 198.137871][T13147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.151148][T13147] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2954: iget: bad i_size value: 38620345925642 [ 198.167351][T13147] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.167576][T13147] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2954: couldn't read orphan inode 15 (err -117) [ 198.178194][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 198.195199][ C0] EXT4-fs (loop2): initial error at time 1781612167: ext4_orphan_get:1399: inode 15 [ 198.204716][ C0] EXT4-fs (loop2): last error at time 1781612167: ext4_orphan_get:1399: inode 15 [ 198.206552][T13147] loop2: lost filesystem error report for type 5 error -117 [ 198.235577][T13147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.266843][ T28] audit: type=1400 audit(1781612168.075:2023): avc: denied { write } for pid=13146 comm="syz.2.2954" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.268605][T13147] EXT4-fs error (device loop2): ext4_check_dx_root:2201: inode #2: comm syz.2.2954: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 198.306306][ T28] audit: type=1400 audit(1781612168.075:2024): avc: denied { write } for pid=13146 comm="syz.2.2954" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.350477][ T28] audit: type=1400 audit(1781612168.075:2025): avc: denied { write } for pid=13146 comm="syz.2.2954" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.374238][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.380165][ T28] audit: type=1400 audit(1781612168.075:2026): avc: denied { write } for pid=13146 comm="syz.2.2954" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.436960][T13065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.445069][ T28] audit: type=1400 audit(1781612168.075:2027): avc: denied { write } for pid=13146 comm="syz.2.2954" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.544636][T13176] sock: sock_set_timeout: `syz.8.2967' (pid 13176) tries to set negative timeout [ 198.604657][T13173] syzkaller1: entered promiscuous mode [ 198.626300][T13173] syzkaller1: entered allmulticast mode [ 198.716045][T13194] netlink: 'syz.2.2974': attribute type 1 has an invalid length. [ 198.754676][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2977'. [ 198.897829][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2984'. [ 198.907041][T13218] netlink: 'syz.8.2984': attribute type 5 has an invalid length. [ 198.915097][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2984'. [ 198.933563][T13218] geneve2: entered promiscuous mode [ 198.940165][T13218] geneve2: entered allmulticast mode [ 198.948025][ T310] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 198.957561][ T310] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 198.974045][ T310] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 198.985049][ T310] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 199.222559][T13252] netlink: 'syz.8.2992': attribute type 1 has an invalid length. [ 199.299934][T13258] sit0: Caught tx_queue_len zero misconfig [ 200.314499][T13321] netlink: 'syz.7.3020': attribute type 2 has an invalid length. [ 200.376256][T13323] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3022'. [ 200.441828][T13327] syz_tun: entered allmulticast mode [ 200.460298][T13326] syz_tun: left allmulticast mode [ 201.469944][T13360] SELinux: ebitmap: map size 8192 does not match my size 64 (high bit was 0) [ 201.499604][T13360] SELinux: failed to load policy [ 201.655143][T13377] loop0: detected capacity change from 0 to 512 [ 201.682490][T13377] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 201.695547][T13377] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 201.746167][T13377] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3045: Corrupt directory, running e2fsck is recommended [ 201.799443][T13377] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 201.812568][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3049'. [ 201.825858][T13377] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.3045: corrupted in-inode xattr: e_name out of bounds [ 201.845044][T13377] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.848331][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 201.864750][ C1] EXT4-fs (loop0): initial error at time 1781612171: ext4_iget_extra_inode:5128: inode 15 [ 201.875232][ C1] EXT4-fs (loop0): last error at time 1781612171: ext4_iget_extra_inode:5128: inode 15 [ 201.891599][T13377] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3045: couldn't read orphan inode 15 (err -117) [ 201.907489][T13377] loop0: lost filesystem error report for type 5 error -117 [ 201.908705][T13377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.940789][T13377] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 201.962632][T13377] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 201.979207][T13377] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3045: Corrupt directory, running e2fsck is recommended [ 201.996004][T13393] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 202.009063][T13393] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 202.031678][T13393] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3045: Corrupt directory, running e2fsck is recommended [ 202.070827][T13377] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 202.089196][T13377] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 202.101691][T13377] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.3045: Corrupt directory, running e2fsck is recommended [ 202.147762][T13393] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 202.178244][T13393] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.3045: path /131/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 202.218955][T13393] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 8: comm syz.0.3045: path /131/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 202.307896][T11661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.361974][T13404] loop5: detected capacity change from 0 to 512 [ 202.443022][T13433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3070'. [ 202.512238][T13437] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 202.518558][T13404] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.564746][T13404] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.610288][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 202.610302][ T28] audit: type=1400 audit(1781612172.425:2074): avc: denied { write } for pid=13403 comm="syz.5.3058" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.716187][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.742216][T13445] loop7: detected capacity change from 0 to 512 [ 202.789892][T13445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.813892][T13445] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.836347][ T28] audit: type=1400 audit(1781612172.645:2075): avc: denied { write } for pid=13444 comm="syz.7.3076" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.862231][T13461] loop0: detected capacity change from 0 to 2048 [ 202.869433][ T28] audit: type=1400 audit(1781612172.645:2076): avc: denied { write } for pid=13444 comm="syz.7.3076" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.924015][T13461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.973167][ T7078] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.028049][T11661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.159291][ T28] audit: type=1400 audit(1781612172.965:2077): avc: denied { setopt } for pid=13484 comm="syz.5.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.165330][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3092'. [ 203.202302][T13488] bridge_slave_0: entered promiscuous mode [ 203.225738][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3092'. [ 203.247658][ T28] audit: type=1400 audit(1781612173.055:2078): avc: denied { setopt } for pid=13491 comm="syz.5.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.350093][T13502] loop0: detected capacity change from 0 to 1024 [ 203.358110][T13502] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 203.407338][T13502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.437901][T11661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.480879][T13520] loop0: detected capacity change from 0 to 512 [ 203.493392][T13522] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3107'. [ 203.516246][T13520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.534991][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3108'. [ 203.547927][T13520] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.557838][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3108'. [ 203.569411][ T28] audit: type=1400 audit(1781612173.375:2079): avc: denied { write } for pid=13518 comm="syz.0.3105" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.591458][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3108'. [ 203.601792][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3108'. [ 203.602044][T11661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.715504][ T28] audit: type=1400 audit(1781612173.525:2080): avc: denied { name_bind } for pid=13541 comm="syz.0.3114" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 204.300394][T13576] loop5: detected capacity change from 0 to 512 [ 204.309639][T13576] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 204.317729][T13576] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.3128: corrupted in-inode xattr: e_value size too large [ 204.332261][T13576] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 204.332450][T13576] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3128: couldn't read orphan inode 15 (err -117) [ 204.341758][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 204.341772][ C0] EXT4-fs (loop5): initial error at time 1781612174: ext4_iget_extra_inode:5128: inode 15 [ 204.341790][ C0] EXT4-fs (loop5): last error at time 1781612174: ext4_iget_extra_inode:5128: inode 15 [ 204.379890][T13576] loop5: lost filesystem error report for type 5 error -117 [ 204.380782][T13576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.402391][ T28] audit: type=1400 audit(1781612174.215:2081): avc: denied { write } for pid=13575 comm="syz.5.3128" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.432121][ T9366] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.462215][T13605] loop2: detected capacity change from 0 to 512 [ 205.469399][T13605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.480713][T13605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 205.489488][T13605] System zones: 1-12 [ 205.494168][T13605] EXT4-fs (loop2): 1 truncate cleaned up [ 205.500336][T13605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.513768][ T28] audit: type=1400 audit(1781612175.325:2082): avc: denied { write } for pid=13604 comm="syz.2.3138" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.886848][T13607] ================================================================== [ 205.894970][T13607] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 205.902965][T13607] [ 205.905384][T13607] write to 0xffff88810049afb4 of 4 bytes by task 13605 on cpu 1: [ 205.913106][T13607] xas_set_mark+0x12b/0x140 [ 205.917619][T13607] tag_pages_for_writeback+0xe3/0x2e0 [ 205.923010][T13607] ext4_do_writepages+0x696/0x2720 [ 205.928225][T13607] ext4_writepages+0x18f/0x300 [ 205.933047][T13607] do_writepages+0x1b9/0x300 [ 205.937665][T13607] file_write_and_wait_range+0x178/0x2f0 [ 205.943331][T13607] mmb_fsync_noflush+0x48/0x140 [ 205.948547][T13607] ext4_sync_file+0x1f2/0x6d0 [ 205.953247][T13607] vfs_fsync_range+0xc5/0xe0 [ 205.957879][T13607] ext4_buffered_write_iter+0x426/0x480 [ 205.963450][T13607] ext4_file_write_iter+0x38e/0xef0 [ 205.968658][T13607] iter_file_splice_write+0x6a0/0xa60 [ 205.974042][T13607] direct_splice_actor+0x156/0x280 [ 205.979165][T13607] splice_direct_to_actor+0x2f9/0x680 [ 205.984694][T13607] do_splice_direct+0x119/0x1a0 [ 205.989557][T13607] do_sendfile+0x37d/0x640 [ 205.993992][T13607] __x64_sys_sendfile64+0x105/0x150 [ 205.999207][T13607] x64_sys_call+0x2dc4/0x3020 [ 206.003896][T13607] do_syscall_64+0x136/0x3c0 [ 206.008496][T13607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.014392][T13607] [ 206.016715][T13607] read to 0xffff88810049afb4 of 4 bytes by task 13607 on cpu 0: [ 206.024339][T13607] file_write_and_wait_range+0x130/0x2f0 [ 206.029985][T13607] mmb_fsync_noflush+0x48/0x140 [ 206.035019][T13607] ext4_sync_file+0x1f2/0x6d0 [ 206.039711][T13607] vfs_fsync_range+0xc5/0xe0 [ 206.044304][T13607] ext4_buffered_write_iter+0x426/0x480 [ 206.049870][T13607] ext4_file_write_iter+0x38e/0xef0 [ 206.055081][T13607] iter_file_splice_write+0x6a0/0xa60 [ 206.060465][T13607] direct_splice_actor+0x156/0x280 [ 206.065587][T13607] splice_direct_to_actor+0x2f9/0x680 [ 206.070968][T13607] do_splice_direct+0x119/0x1a0 [ 206.075826][T13607] do_sendfile+0x37d/0x640 [ 206.080253][T13607] __x64_sys_sendfile64+0x105/0x150 [ 206.085547][T13607] x64_sys_call+0x2dc4/0x3020 [ 206.090226][T13607] do_syscall_64+0x136/0x3c0 [ 206.094813][T13607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.100707][T13607] [ 206.103028][T13607] value changed: 0x02000021 -> 0x04000021 [ 206.108749][T13607] [ 206.111070][T13607] Reported by Kernel Concurrency Sanitizer on: [ 206.117223][T13607] CPU: 0 UID: 0 PID: 13607 Comm: syz.2.3138 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 206.128177][T13607] Tainted: [W]=WARN [ 206.131976][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.142037][T13607] ================================================================== [ 206.313064][ T6456] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.647104][T13530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512