last executing test programs: 4.424205693s ago: executing program 3 (id=1056): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x4}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 4.262193656s ago: executing program 4 (id=1060): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0xe}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() r1 = socket$inet(0x2, 0x3, 0x4) recvfrom(r1, 0x0, 0x0, 0x10002, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x34482, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x0, 0x800000, 0x2, 0x200005, 0xcb, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) 4.218834817s ago: executing program 3 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa3000000000000070300000080ffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed00ffc30300ff011000003f440000000000007a0a00fe00ffffffc30300ff41000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) 3.280195408s ago: executing program 3 (id=1066): syz_open_dev$tty1(0xc, 0x4, 0x2) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x1000000000000000, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x10ecd0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x5, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 3.253081208s ago: executing program 4 (id=1068): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 2.842912557s ago: executing program 3 (id=1073): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x800) io_uring_setup(0x185d, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 2.788822639s ago: executing program 1 (id=1074): socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c23003f) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.72160598s ago: executing program 1 (id=1075): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@broadcast}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2.701646791s ago: executing program 2 (id=1076): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.664062051s ago: executing program 2 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) 1.916424538s ago: executing program 0 (id=1078): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = epoll_create1(0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x39, 0x4, &(0x7f0000001180)) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, &(0x7f0000000640)={&(0x7f00000004c0)=[{0x1, 0x0, 0x57, 0x6, 0x8, 0x5, 0x6, 0x5}, {0x0, 0x0, 0x49, 0x6, 0x6, 0x7fffffff, 0x10, 0x3}, {0x0, 0x0, 0x3, 0x2, 0x10000, 0x3, 0x5, 0x5}, {0x1, 0x0, 0x4, 0x5, 0xcd15, 0xa, 0x2, 0x4}, {0x3, 0x0, 0x8, 0xfffffffffffffffa, 0x1ff, 0x1ff, 0xd0, 0x2}], 0x5, 0x38, 0x1, 0x800}) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 1.916245098s ago: executing program 3 (id=1079): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0xe}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() r1 = socket$inet(0x2, 0x3, 0x4) recvfrom(r1, 0x0, 0x0, 0x10002, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x34482, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x0, 0x800000, 0x2, 0x200005, 0xcb, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) 1.757551041s ago: executing program 0 (id=1080): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x10b, 0x2, 0x0, &(0x7f0000000380), 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380), &(0x7f00000004c0), 0x2, 0x3) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x7fc, @loopback, 0x3}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 1.728425672s ago: executing program 2 (id=1081): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x4}, 0x10008, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff0001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0xc2e00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x7fffffff, 0xfa}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x2, 0x5, 0x9, 0x4}, {0x1, 0x2, 0x10, 0x3}, {0x3, 0x2, 0x5, 0x3}, {0x0, 0x1, 0x6, 0x6}, {0x4, 0x4, 0xb, 0x9}, {0x4, 0x2, 0x1, 0x8}, {0x5, 0x1, 0x8, 0xa}], 0x10, 0x10}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x800000000000000, 0x4, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x3}}}, 0xb8}}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 1.605047085s ago: executing program 2 (id=1082): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) close(0x3) r2 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 1.573830885s ago: executing program 1 (id=1083): openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x26020480) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) getpid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x81, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) syz_emit_ethernet(0x4d, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x17, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "a78ce54006"}]}}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x378, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200000f00000004030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.402880629s ago: executing program 4 (id=1084): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 1.321294051s ago: executing program 0 (id=1085): sched_getattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x331f, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xd, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe3a, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080c1}, 0x20000054) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000140)={0x1}, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.278427692s ago: executing program 4 (id=1086): perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa54ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0xc0a4, 0xa2, 0x101, 0x7, 0x7f, 0x9b9c, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x1) r0 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x80) getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x68, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xbc}}, 0xa, 0x0, 0x81, 0xfffffffd, 0xb7, 0x9}, &(0x7f0000000380)=0x9c) socket(0x10, 0x803, 0x0) 1.219510823s ago: executing program 1 (id=1087): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.207599814s ago: executing program 4 (id=1088): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) iopl(0x3) writev(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.138810255s ago: executing program 1 (id=1089): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fchmodat(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 1.085689856s ago: executing program 2 (id=1090): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x77, 0x1013c1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x5c}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x73, 0x1, 0x17052, r1, 0x0) 1.042901647s ago: executing program 0 (id=1091): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000200)={[{@prjquota}, {@nogrpid}, {@discard}, {@errors_remount}, {@init_itable, 0x0}, {@usrjquota}, {@jqfmt_vfsv1}, {@nolazytime}, {@nobh}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0/../file0/../file0'}}], [], 0x2c}, 0xfe, 0x50a, &(0x7f00000010c0)="$eJzs3EtvVGUfAPD/OZ1S+kLf9uW9CaJU0dhopLRcFy6AxISNiYnG4LK2hSAFDK0JkMYWYyBxYcInILoz8RO40o1R40L3ErfGhJhuQFZjzsyZetq59OK0pfT3S2b6POf6/M+l57nMTABbVn/2lkTsjIifI6K3ml24QH/1z4O56dE/5qZHkyiX3/g9qSx3f256tLZobb0deWYgjUg/SuJE/W67Jq9dvzAyMTF+JZ8wOJXmqYsj58bPjV8aPn788KHuY0eHj7QlzqxM9/d8cHnv7tNv335t9Mztd777IitvOZ9fjKOqr/K+bdl76ChmylUzC49lwfMrLP+jrqeQTkrZe7pxhWHZsqs2O12dlfu/NzoquareePXDDS0csKayp1RX3dT5Z9lsuShJak+2G2XgMZDEatbKqgntLwuwnmoP+vtzWUt1erS+Hfx4u3cyKi2gLO4H+as6p1Rpwfb3VdtGnWu0//9ExJnZh3eyVzTshwAAaK+vTkbcOlWtd1Rfpbz+kcb/Csv9Mx8b6ouIf0XEroj4d15/+W9EZdn/R8QThXV6ljEK0L8oX1//+ak7TxSrq22T1f9eyce2Ftb/5kve15HneirxdyZnz0+MH8yPyUB0dmX5ofpN17rVOlrtvz+v/32d57P91+qCeTl+Ky3qoBsbmRpZdcCL3LtRObAz9fEnUUpqqYjdEbFnFdvPjtn5Fz/f22x+f6H+eyaLsy7+T5pvvLSKAi1S/jTihepxn41F8Uc+/pdUxicvvjc4ee36y+eL45NDx44OHxncHhPjBwdrV0W973+8+XqerGtGLIh/9uGdwvmv3RpprGgccmWy8/+Phtf//MhlX1I41FcmV76Pm3dvNW3TtIg/1/j635a8WUnXjsvVkampK0MR25LZ+unDf617daR7wfJZ/AP7G8W/0JMRkV3ET0XE0xGxLy/7MxHxbETsbxH/t6eee7dZE3Lp+NdWFv/YMs7//Hh908SJHyIaz+q48M2XdTv+uL8u/s5odv4PV1ID+ZSxkantS8XVqqTFxN8+gAAAALAJ7IuInZGkB/KOpp2RpgcOROyY70GZnHrp7OX3L41VvyPQF51praert9AfOpT3DWf5bK3hQj6bf6jSb1wul8vdWT5rv0/0bGzosOXtKIyqFO//zK8tRy6Ax8KKxtGafaMN2JQW3/93l71m+z+QAayvNnyOBtik3P+wdS37/l+rb8EBG6bR/T8T8WADigKss0b3/1t1Uxr8jB+w6Wn/w9a1+vvfhwFgs/P8hy1pWV+SX0Vi1+kWyySltdlp80QarX8FoC+iNqVWp2m9wV/SiPaUsGPhlNonqla5we7iOY204Xa2RzuOaqRLLlNawQ8xrG8ifTSKUU10LXW605i/2GZqietrXbDKVfjZxv1nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI8/AwAA//8jgcsl") r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) unshare(0x6020400) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x2, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_rxfh_indir={0x33, 0x3, [0xfffffffb, 0xe8d1, 0x8]}}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x97, &(0x7f0000000600)=""/151, 0x20900, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r1, r1, r1], &(0x7f0000000dc0)=[{0x3, 0x3, 0x6, 0x9}, {0x3, 0x2, 0x1, 0x4}, {0x5, 0x2, 0xe, 0x6}, {0x3, 0x2, 0xa, 0x8}]}, 0x94) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a0001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.016092078s ago: executing program 2 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, 0x0) 928.30305ms ago: executing program 1 (id=1093): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa62db, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x5, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000002000200005037f0aaea1d"], 0x2c, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 821.389922ms ago: executing program 3 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xff7f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x261a3000) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x600) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 409.602231ms ago: executing program 0 (id=1095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x2, {0x2, 0xff, 0x1}, {0x0, 0xf0, 0x2}, 0x0, 0xfd}, {0x3, 0x1, {0x2, 0xf0}, {0x1, 0x0, 0x2}, 0xff, 0xff}, {0xfffffffffffffffe, 0x1, {0x0, 0x1, 0x2}, {0x2, 0xf0, 0x1}, 0xff, 0x82}, {0x0, 0x3, {0x2, 0x0, 0x2}, {0x1, 0xfe, 0x2}, 0xff, 0xff}, {0x3, 0x2, {0x2, 0x0, 0x4}, {0x0, 0xf0, 0x3}, 0xff, 0xff}], 0xa0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 13.12497ms ago: executing program 0 (id=1096): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = dup3(r1, r0, 0x0) fchdir(r5) creat(&(0x7f0000000040)='./bus\x00', 0x0) 0s ago: executing program 4 (id=1097): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1218, &(0x7f00000005c0)="$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") add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@nobh}, {@nombcache}, {@nogrpid}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='.\x00', 0x2075, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x43aa, 0xc0ca, 0x29, &(0x7f0000000100)={[0xf]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0x4) kernel console output (not intermixed with test programs): device loop2): ext4_xattr_inode_iget:446: comm syz.2.188: error while reading EA inode 32 err=-116 [ 47.181712][ T3990] loop2: lost filesystem error report for type 5 error -117 [ 47.181880][ T3990] EXT4-fs (loop2): Remounting filesystem read-only [ 47.189229][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 47.189265][ C1] EXT4-fs (loop2): initial error at time 1784854360: ext4_xattr_inode_iget:446 [ 47.189293][ C1] EXT4-fs (loop2): last error at time 1784854360: ext4_xattr_inode_iget:446 [ 47.315438][ T3990] EXT4-fs (loop2): 1 orphan inode deleted [ 47.321833][ T3990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.391207][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.450984][ T4009] loop2: detected capacity change from 0 to 512 [ 47.517730][ T4009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.530573][ T4009] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.578151][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.582062][ T4008] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.590113][ T4016] capability: warning: `syz.0.198' uses 32-bit capabilities (legacy support in use) [ 47.747964][ T4026] loop4: detected capacity change from 0 to 512 [ 47.776139][ T4026] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.201: inode has both inline data and extents flags [ 47.794196][ T4026] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.794320][ T4026] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.201: couldn't read orphan inode 15 (err -117) [ 47.803565][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.803588][ C0] EXT4-fs (loop4): initial error at time 1784854360: ext4_orphan_get:1399: inode 15 [ 47.803637][ C0] EXT4-fs (loop4): last error at time 1784854360: ext4_orphan_get:1399: inode 15 [ 47.839952][ T4008] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.854984][ T4026] loop4: lost filesystem error report for type 5 error -117 [ 47.867820][ T4026] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.997878][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.056850][ T4042] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 48.078113][ T4042] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.091793][ T4044] netlink: 52 bytes leftover after parsing attributes in process `syz.4.205'. [ 48.096705][ T4042] bond0: (slave team0): Enslaving as an active interface with an up link [ 48.130957][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.138128][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.169870][ T4049] netlink: 76 bytes leftover after parsing attributes in process `syz.4.205'. [ 48.374461][ T4053] loop1: detected capacity change from 0 to 1024 [ 48.394490][ T4053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.409222][ T4053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.415992][ T4053] EXT4-fs: inline encryption not supported [ 48.422733][ T4053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.440474][ T4053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.453508][ T4053] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.212954][ T4008] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.223964][ T4057] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 49.235155][ T4049] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.242312][ T4049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.249770][ T4049] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.256866][ T4049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.265913][ T4049] netlink: 52 bytes leftover after parsing attributes in process `syz.4.205'. [ 49.275657][ T4049] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.282837][ T4049] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.304039][ T4059] bond1: option ad_actor_sys_prio: invalid value (0) [ 49.312019][ T4059] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 49.322351][ T4059] bond1 (unregistering): Released all slaves [ 49.352184][ T4061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 49.367229][ T4061] bond1: (slave bond2): making interface the new active one [ 49.375043][ T4061] bond1: (slave bond2): Enslaving as an active interface with an up link [ 49.395235][ T4066] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 49.417534][ T4057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.210'. [ 49.431228][ T4008] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.469015][ T4057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.447547][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.467632][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.476945][ T4082] loop2: detected capacity change from 0 to 512 [ 50.478258][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.489037][ T4082] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.219: iget: bad i_size value: 38620345925642 [ 50.504255][ T4082] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.504477][ T4082] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.219: couldn't read orphan inode 15 (err -117) [ 50.513663][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.513678][ C1] EXT4-fs (loop2): initial error at time 1784854363: ext4_orphan_get:1399: inode 15 [ 50.513715][ C1] EXT4-fs (loop2): last error at time 1784854363: ext4_orphan_get:1399: inode 15 [ 50.550573][ T4082] loop2: lost filesystem error report for type 5 error -117 [ 50.552634][ T4082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.586965][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.633613][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 50.633628][ T28] audit: type=1400 audit(1784854363.657:3587): avc: denied { connect } for pid=4086 comm="syz.3.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.698355][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.709707][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.809029][ T4098] capability: warning: `syz.2.224' uses deprecated v2 capabilities in a way that may be insecure [ 50.895022][ T28] audit: type=1400 audit(1784854363.917:3588): avc: denied { create } for pid=4106 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 50.932193][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 50.985943][ T28] audit: type=1400 audit(1784854364.007:3589): avc: denied { create } for pid=4106 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 51.024551][ T28] audit: type=1400 audit(1784854364.037:3590): avc: denied { create } for pid=4111 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.059259][ T28] audit: type=1400 audit(1784854364.037:3591): avc: denied { setopt } for pid=4111 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.101035][ T28] audit: type=1400 audit(1784854364.037:3592): avc: denied { write } for pid=4111 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.155352][ T28] audit: type=1400 audit(1784854364.177:3593): avc: denied { read } for pid=4114 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.319725][ T28] audit: type=1400 audit(1784854364.337:3594): avc: denied { ioctl } for pid=4121 comm="syz.0.234" path="socket:[6868]" dev="sockfs" ino=6868 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.417990][ T4126] ref_ctr increment failed for inode: 0x11c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810436e900 [ 51.456907][ T4125] uprobe: syz.0.237:4125 failed to unregister, leaking uprobe [ 51.493443][ T28] audit: type=1400 audit(1784854364.497:3595): avc: denied { write } for pid=4130 comm="syz.2.238" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.759948][ T28] audit: type=1400 audit(1784854364.777:3596): avc: denied { ioctl } for pid=4127 comm="syz.1.236" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.338502][ T4167] loop4: detected capacity change from 0 to 512 [ 52.415383][ T4167] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.556949][ T4177] netlink: 'syz.0.259': attribute type 1 has an invalid length. [ 52.583941][ T4177] bond1: entered promiscuous mode [ 52.589527][ T4177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.708542][ T4177] bond1: (slave bridge1): making interface the new active one [ 52.734555][ T4177] bridge1: entered promiscuous mode [ 52.767725][ T4167] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 52.798200][ T4177] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 52.806891][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 52.806910][ C0] EXT4-fs (loop4): initial error at time 1784854365: ext4_mb_generate_buddy:1317 [ 52.806932][ C0] EXT4-fs (loop4): last error at time 1784854365: ext4_mb_generate_buddy:1317 [ 52.856490][ T4167] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.882676][ T4167] EXT4-fs (loop4): 1 truncate cleaned up [ 52.904269][ T4167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.115194][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.619088][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 53.649160][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 53.738348][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.745595][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.859562][ T4203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.883794][ T4203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.994339][ T4203] team1: left promiscuous mode [ 53.999366][ T4203] team1: left allmulticast mode [ 54.024079][ T344] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.045590][ T344] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.070067][ T344] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.109219][ T344] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.146660][ T4209] loop1: detected capacity change from 0 to 128 [ 54.202647][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.212504][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.225668][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.244360][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.258038][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.272689][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.288274][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.304256][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.312076][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.320978][ T3410] hid-generic 0006:0008:0008.0001: unknown main item tag 0x0 [ 54.332500][ T3410] hid-generic 0006:0008:0008.0001: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 54.360280][ T4219] loop4: detected capacity change from 0 to 512 [ 54.408149][ T4222] loop2: detected capacity change from 0 to 512 [ 54.416949][ T4219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.421041][ T4220] fido_id[4220]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.474688][ T4222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.492336][ T4219] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.510267][ T4222] ext4 filesystem being mounted at /52/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.546758][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.556869][ T4222] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 54.581394][ T4222] EXT4-fs (loop2): Remounting filesystem read-only [ 54.656202][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.957503][ T4244] tipc: Failed to remove unknown binding: 66,0,0/0:1555149920/1555149922 [ 54.966260][ T4244] tipc: Failed to remove unknown binding: 66,0,0/0:1555149920/1555149921 [ 54.992890][ T4247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 55.357517][ T4259] loop4: detected capacity change from 0 to 512 [ 55.382269][ T4259] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.284: corrupted inode contents [ 55.394148][ T4259] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.394756][ T4259] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.284: mark_inode_dirty error [ 55.404059][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 55.404084][ C0] EXT4-fs (loop4): initial error at time 1784854368: ext4_do_update_inode:5742: inode 16 [ 55.404116][ C0] EXT4-fs (loop4): last error at time 1784854368: ext4_do_update_inode:5742: inode 16 [ 55.441390][ T4259] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.446329][ T4259] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.284: corrupted inode contents [ 55.467303][ T4259] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.468229][ T4259] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.284: mark_inode_dirty error [ 55.488606][ T4259] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.488902][ T4259] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.284: corrupted inode contents [ 55.510055][ T4259] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.510765][ T4259] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 55.528499][ T4259] loop4: lost filesystem error report for type 5 error -117 [ 55.528824][ T4259] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.284: corrupted inode contents [ 55.548050][ T4259] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.548229][ T4259] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.284: mark_inode_dirty error [ 55.568418][ T4259] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.569012][ T4259] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 55.587111][ T4259] loop4: lost filesystem error report for type 5 error -117 [ 55.589131][ T4259] EXT4-fs (loop4): 1 truncate cleaned up [ 55.602837][ T4259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.615449][ T4259] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.627548][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 55.668540][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.728646][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 55.734957][ T28] audit: type=1400 audit(1784854368.747:3607): avc: denied { ioctl } for pid=4264 comm="syz.1.286" path="socket:[7077]" dev="sockfs" ino=7077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.769550][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 55.916565][ T4271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.925217][ T4271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.024299][ T4282] loop1: detected capacity change from 0 to 164 [ 56.046367][ T28] audit: type=1400 audit(1784854369.067:3608): avc: denied { mount } for pid=4281 comm="syz.1.293" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 56.097845][ T4287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 56.240631][ T28] audit: type=1400 audit(1784854369.267:3609): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 56.303496][ T28] audit: type=1400 audit(1784854369.307:3610): avc: denied { remount } for pid=4295 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.418093][ T28] audit: type=1400 audit(1784854369.437:3611): avc: denied { bind } for pid=4305 comm="syz.1.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.553289][ T4314] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 56.572441][ T4314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.623172][ T4314] bond2: entered promiscuous mode [ 56.631868][ T4314] bond2: entered allmulticast mode [ 56.649283][ T4312] loop2: detected capacity change from 0 to 1024 [ 56.688234][ T4314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 56.731587][ T4314] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 56.771920][ T4314] bond2: left promiscuous mode [ 56.791188][ T4314] bond2: left allmulticast mode [ 56.806140][ T4314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.842931][ T4312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.934854][ T4320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.307'. [ 56.935211][ T28] audit: type=1400 audit(1784854369.957:3612): avc: denied { write } for pid=4319 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.007165][ T28] audit: type=1400 audit(1784854369.957:3613): avc: denied { nlmsg_write } for pid=4319 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.070658][ T28] audit: type=1400 audit(1784854370.007:3614): avc: denied { write } for pid=4311 comm="syz.2.305" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.206869][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.252588][ T28] audit: type=1400 audit(1784854370.277:3615): avc: denied { connect } for pid=4328 comm="syz.2.311" lport=47308 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 57.318403][ T4332] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 57.344787][ T4332] syzkaller0: entered promiscuous mode [ 57.360088][ T4332] syzkaller0: entered allmulticast mode [ 57.468246][ T28] audit: type=1400 audit(1784854370.487:3616): avc: denied { write } for pid=4343 comm="syz.0.317" name="tcp6" dev="proc" ino=4026532939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.674666][ T4354] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 57.759354][ T4359] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 58.465814][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 58.481102][ T4366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 58.732816][ T4379] syz_tun: entered allmulticast mode [ 58.745928][ T4379] syz_tun: left allmulticast mode [ 60.135741][ T4430] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 60.204945][ T4428] loop4: detected capacity change from 0 to 512 [ 60.353742][ T4435] nftables ruleset with unbound chain [ 60.385169][ T4421] Set syz1 is full, maxelem 65536 reached [ 60.488175][ T4440] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1 [ 60.497134][ T4440] ref_ctr increment failed for inode: 0x18f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810436aa00 [ 60.628517][ T4438] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1 [ 60.638245][ T4438] ref_ctr decrement failed for inode: 0x18f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810436aa00 [ 60.649664][ T4438] uprobe: syz.0.350:4438 failed to unregister, leaking uprobe [ 60.713599][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 61.093652][ T4457] netlink: 68 bytes leftover after parsing attributes in process `syz.3.356'. [ 61.103158][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 61.103171][ T28] audit: type=1326 audit(1784854374.127:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.140499][ T28] audit: type=1326 audit(1784854374.157:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.166304][ T28] audit: type=1326 audit(1784854374.157:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.195764][ T28] audit: type=1326 audit(1784854374.157:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.234069][ T28] audit: type=1326 audit(1784854374.157:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.294044][ T28] audit: type=1326 audit(1784854374.157:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.320396][ T28] audit: type=1326 audit(1784854374.157:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.346008][ T28] audit: type=1326 audit(1784854374.157:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.372254][ T28] audit: type=1326 audit(1784854374.157:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.429430][ T28] audit: type=1326 audit(1784854374.157:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 61.458814][ T4465] uprobe: syz.1.359:4465 failed to unregister, leaking uprobe [ 61.469499][ T4465] uprobe: syz.1.359:4465 failed to unregister, leaking uprobe [ 61.884653][ T4489] loop1: detected capacity change from 0 to 512 [ 61.892816][ T4489] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.810370][ T4499] loop0: detected capacity change from 0 to 164 [ 62.825354][ T4496] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 62.855025][ T4503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'. [ 62.878133][ T4496] bond1: entered allmulticast mode [ 62.909309][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 62.933828][ T4504] ip6gretap1: entered promiscuous mode [ 62.944268][ T4504] ip6gretap1: entered allmulticast mode [ 62.958037][ T4504] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 62.975601][ T4505] veth1_to_team: Caught tx_queue_len zero misconfig [ 63.426279][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 63.471249][ T4514] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.576212][ T4526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.607005][ T4526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.949516][ T4514] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.090607][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.097877][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.167661][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.207622][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.270104][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 64.360916][ T4533] bond1: left promiscuous mode [ 64.365884][ T4533] bridge1: left promiscuous mode [ 64.656254][ T344] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.665314][ T344] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.696974][ T4514] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.718370][ T344] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.727433][ T344] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.784787][ T4514] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.876251][ T4560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.391'. [ 64.890458][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.900076][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.915512][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.928036][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.981819][ T4566] netlink: 'syz.4.393': attribute type 21 has an invalid length. [ 65.005868][ T4566] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.019423][ T4566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.026865][ T4566] IPv6: NLM_F_CREATE should be set when creating new route [ 65.034327][ T4566] IPv6: NLM_F_CREATE should be set when creating new route [ 65.041765][ T4566] IPv6: NLM_F_CREATE should be set when creating new route [ 65.051019][ T4570] netlink: 'syz.4.393': attribute type 21 has an invalid length. [ 65.063700][ T4570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.140236][ T4566] vlan2: entered promiscuous mode [ 65.156260][ T4566] bridge0: entered promiscuous mode [ 65.442926][ T4588] 9p: Could not find request transport: 0x0000000000000005 [ 65.511818][ T4594] tipc: Started in network mode [ 65.522575][ T4594] tipc: Node identity e2bbda2ed59c, cluster identity 4711 [ 65.532385][ T4594] tipc: Enabled bearer , priority 0 [ 65.562902][ T4594] syzkaller0: entered promiscuous mode [ 65.568512][ T4594] syzkaller0: entered allmulticast mode [ 65.574613][ T4594] tipc: Resetting bearer [ 65.590317][ T4592] tipc: Resetting bearer [ 65.612568][ T4592] tipc: Disabling bearer [ 65.875693][ T4607] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 65.892054][ T4607] sch_tbf: burst 593 is lower than device lo mtu (11337746) ! [ 66.185212][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 66.185232][ T28] audit: type=1400 audit(1784854379.207:3736): avc: denied { ioctl } for pid=4605 comm="syz.4.407" path="socket:[8159]" dev="sockfs" ino=8159 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.390164][ T4617] tipc: Failed to remove unknown binding: 66,0,0/0:37431923/37431924 [ 66.405455][ T4617] tipc: Failed to remove unknown binding: 66,0,0/0:37431923/37431924 [ 66.578269][ T4624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.413'. [ 66.964878][ T4642] loop1: detected capacity change from 0 to 512 [ 66.983731][ T4642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.002441][ T4642] EXT4-fs (loop1): 1 truncate cleaned up [ 67.009383][ T4642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.141732][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.205976][ T4654] loop1: detected capacity change from 0 to 1024 [ 67.236576][ T4654] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.250788][ T4654] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.423: Invalid block bitmap block 0 in block_group 0 [ 67.264532][ T4654] loop1: lost filesystem error report for type 5 error -117 [ 67.265982][ T4654] Quota error (device loop1): write_blk: dquota write failed [ 67.273436][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 67.273451][ C1] EXT4-fs (loop1): initial error at time 1784854380: ext4_read_block_bitmap_nowait:483 [ 67.273476][ C1] EXT4-fs (loop1): last error at time 1784854380: ext4_read_block_bitmap_nowait:483 [ 67.306735][ T4654] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 67.316834][ T4654] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.423: Failed to acquire dquot type 0 [ 67.328037][ T4654] loop1: lost filesystem error report for type 5 error -117 [ 67.329494][ T4654] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.423: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.360782][ T4654] loop1: lost filesystem error report for type 5 error -117 [ 67.363231][ T4654] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.423: Invalid inode bitmap blk 0 in block_group 0 [ 67.383244][ T4654] loop1: lost filesystem error report for type 5 error -117 [ 67.383310][ T36] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 67.401654][ T4654] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 67.418576][ T4654] loop1: lost filesystem error report for type 5 error -117 [ 67.420233][ T4654] EXT4-fs (loop1): 1 orphan inode deleted [ 67.437435][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 67.459863][ T4654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.470476][ T36] loop1: lost filesystem error report for type 5 error -117 [ 67.538503][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.816607][ T28] audit: type=1400 audit(1784854380.837:3737): avc: denied { read } for pid=4674 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 67.968841][ T4682] tipc: Failed to remove unknown binding: 66,0,0/0:990658788/990658789 [ 67.978936][ T4682] tipc: Failed to remove unknown binding: 66,0,0/0:990658788/990658789 [ 68.052504][ T4684] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 68.538867][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 68.681046][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.695008][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.833227][ T28] audit: type=1400 audit(1784854381.857:3738): avc: denied { create } for pid=4717 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.244420][ T4738] loop1: detected capacity change from 0 to 1024 [ 69.278888][ T4738] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 69.535580][ T4745] tipc: Failed to remove unknown binding: 66,0,0/0:912750384/912750386 [ 69.641081][ T4745] tipc: Failed to remove unknown binding: 66,0,0/0:912750384/912750385 [ 69.743357][ T4745] tipc: Failed to remove unknown binding: 66,0,0/0:912750384/912750386 [ 69.823027][ T4745] tipc: Failed to remove unknown binding: 66,0,0/0:912750384/912750385 [ 69.872559][ T4742] infiniband syz1: set active [ 69.887887][ T4742] infiniband syz1: added syz_tun [ 69.930357][ T4742] RDS/IB: syz1: added [ 69.950651][ T4750] loop2: detected capacity change from 0 to 128 [ 69.961864][ T4742] smc: adding ib device syz1 with port count 1 [ 70.016064][ T4742] smc: ib device syz1 port 1 has no pnetid [ 70.120368][ T4762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.475'. [ 70.132793][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 70.173680][ T4760] loop1: detected capacity change from 0 to 8192 [ 70.245175][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 70.348475][ T28] audit: type=1400 audit(1784854383.367:3739): avc: denied { getopt } for pid=4770 comm="syz.0.468" lport=52618 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 71.264742][ T4794] loop3: detected capacity change from 0 to 1764 [ 71.604421][ T28] audit: type=1400 audit(1784854384.627:3741): avc: denied { watch watch_reads } for pid=4805 comm="syz.4.483" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 71.634260][ T4804] sg_write: data in/out 401884/32 bytes for SCSI command 0x0-- guessing data in; [ 71.634260][ T4804] program syz.0.482 not setting count and/or reply_len properly [ 71.704203][ T28] audit: type=1400 audit(1784854384.617:3740): avc: denied { write } for pid=4803 comm="syz.0.482" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.856493][ T4820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.489'. [ 71.896175][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.490'. [ 71.910914][ T4820] netlink: 'syz.4.489': attribute type 5 has an invalid length. [ 71.918939][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 71.947268][ T4824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4824 comm=syz.0.490 [ 72.001131][ T4828] netlink: 'syz.0.491': attribute type 21 has an invalid length. [ 72.035276][ T4828] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.051438][ T4829] netlink: 'syz.0.491': attribute type 21 has an invalid length. [ 72.059474][ T4829] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.062020][ T4828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.074668][ T4828] IPv6: NLM_F_CREATE should be set when creating new route [ 72.082071][ T4828] IPv6: NLM_F_CREATE should be set when creating new route [ 72.089357][ T4828] IPv6: NLM_F_CREATE should be set when creating new route [ 72.096733][ T4829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.189655][ T4828] vlan2: entered promiscuous mode [ 72.203693][ T4828] bridge0: entered promiscuous mode [ 72.428360][ T4842] loop3: detected capacity change from 0 to 128 [ 72.465576][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 72.616400][ T4854] syzkaller0: entered promiscuous mode [ 72.622118][ T4854] syzkaller0: entered allmulticast mode [ 72.637185][ T28] audit: type=1400 audit(1784854385.657:3742): avc: denied { cmd } for pid=4853 comm="syz.0.501" path="/110/file0" dev="tmpfs" ino=588 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 73.255616][ T28] audit: type=1400 audit(1784854386.277:3743): avc: denied { write } for pid=4878 comm="syz.4.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.325520][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 73.455902][ T4891] ip6t_REJECT: ECHOREPLY is not supported [ 74.573123][ T4911] loop4: detected capacity change from 0 to 512 [ 74.580758][ T4911] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.490688][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 75.518189][ T4925] team2: entered promiscuous mode [ 75.518214][ T4925] team2: entered allmulticast mode [ 75.518365][ T4925] 8021q: adding VLAN 0 to HW filter on device team2 [ 75.525731][ T4925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'. [ 75.526103][ T4925] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 75.548031][ T4925] team3: entered promiscuous mode [ 75.548077][ T4925] team3: entered allmulticast mode [ 75.548211][ T4925] 8021q: adding VLAN 0 to HW filter on device team3 [ 75.670737][ T28] audit: type=1400 audit(1784854388.697:3744): avc: denied { create } for pid=4928 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 75.724873][ T4934] loop2: detected capacity change from 0 to 1024 [ 76.310634][ T4934] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 76.341541][ T4934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 76.341609][ T4934] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 76.342404][ T4934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.453783][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.541446][ T4939] rdma_rxe: rxe_newlink: failed to add syz_tun [ 76.558504][ T4944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 76.572441][ T9] IPVS: starting estimator thread 0... [ 76.658739][ T4946] IPVS: using max 2256 ests per chain, 112800 per kthread [ 76.764838][ T4948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.543'. [ 76.849000][ T4950] sg_write: data in/out 401884/32 bytes for SCSI command 0x0-- guessing data in; [ 76.849000][ T4950] program syz.2.532 not setting count and/or reply_len properly [ 76.965649][ T4933] syz.3.526 (4933) used greatest stack depth: 8032 bytes left [ 77.194620][ T4957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 77.220098][ T4957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.534'. [ 77.235964][ T4957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 77.284015][ T4957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.534'. [ 77.430545][ T4971] netlink: 380 bytes leftover after parsing attributes in process `syz.1.538'. [ 77.581368][ T4971] loop1: detected capacity change from 0 to 764 [ 78.172483][ T28] audit: type=1400 audit(1784854391.197:3745): avc: denied { allowed } for pid=4980 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.207417][ T28] audit: type=1400 audit(1784854391.197:3746): avc: denied { wake_alarm } for pid=4980 comm="syz.0.544" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.488492][ T4991] sg_write: data in/out 401884/32 bytes for SCSI command 0x0-- guessing data in; [ 78.488492][ T4991] program syz.1.547 not setting count and/or reply_len properly [ 78.901154][ T5001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 78.911319][ T5001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.550'. [ 78.921358][ T5001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 78.932183][ T5001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.550'. [ 79.148285][ T5006] loop4: detected capacity change from 0 to 512 [ 79.190333][ T5006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 79.216287][ T5006] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 79.237560][ T5006] EXT4-fs (loop4): 1 truncate cleaned up [ 79.243899][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 79.244048][ C0] EXT4-fs (loop4): initial error at time 1784854392: ext4_mb_generate_buddy:1317 [ 79.244369][ C0] EXT4-fs (loop4): last error at time 1784854392: ext4_mb_generate_buddy:1317 [ 79.308433][ T5006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.384956][ T28] audit: type=1400 audit(1784854392.397:3747): avc: denied { setattr } for pid=5005 comm="syz.4.552" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.407099][ T28] audit: type=1400 audit(1784854392.397:3748): avc: denied { write } for pid=5005 comm="syz.4.552" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.553645][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.102576][ T5019] loop2: detected capacity change from 0 to 256 [ 80.111831][ T5021] tipc: Failed to remove unknown binding: 66,0,0/0:2455283346/2455283348 [ 80.129460][ T5021] tipc: Failed to remove unknown binding: 66,0,0/0:2455283346/2455283347 [ 80.141427][ T5019] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 80.149060][ T5019] FAT-fs (loop2): Can't find a valid FAT filesystem [ 80.151568][ T5021] tipc: Failed to remove unknown binding: 66,0,0/0:2455283346/2455283348 [ 80.178063][ T5021] tipc: Failed to remove unknown binding: 66,0,0/0:2455283346/2455283347 [ 80.193855][ T28] audit: type=1400 audit(1784854393.217:3749): avc: denied { listen } for pid=5017 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.235414][ T28] audit: type=1400 audit(1784854393.257:3750): avc: denied { setopt } for pid=5029 comm="syz.4.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.255939][ T5030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 80.325994][ T5033] loop0: detected capacity change from 0 to 128 [ 81.818393][ T5039] loop4: detected capacity change from 0 to 512 [ 81.844434][ T28] audit: type=1400 audit(1784854394.867:3751): avc: denied { sys_admin } for pid=5042 comm="syz.0.566" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 81.888012][ T5039] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.565: inode has both inline data and extents flags [ 81.888051][ T5039] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.888176][ T5039] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.565: couldn't read orphan inode 15 (err -117) [ 81.888230][ T5039] loop4: lost filesystem error report for type 5 error -117 [ 81.889022][ T5039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.098921][ T28] audit: type=1400 audit(1784854395.057:3752): avc: denied { ioctl } for pid=5038 comm="syz.4.565" path="socket:[10686]" dev="sockfs" ino=10686 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.144864][ T28] audit: type=1400 audit(1784854395.147:3753): avc: denied { create } for pid=5058 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.633422][ T28] audit: type=1400 audit(1784854395.157:3754): avc: denied { bind } for pid=5058 comm="syz.0.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 83.124571][ T5090] __nla_validate_parse: 4 callbacks suppressed [ 83.124592][ T5090] netlink: 32 bytes leftover after parsing attributes in process `syz.2.582'. [ 83.755641][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 83.755656][ T28] audit: type=1400 audit(1784854396.777:3820): avc: denied { setopt } for pid=5093 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.452558][ T5110] loop2: detected capacity change from 0 to 512 [ 84.485763][ T5110] EXT4-fs: Ignoring removed nobh option [ 84.650905][ T5110] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.589: corrupted in-inode xattr: overlapping e_value [ 84.685539][ T5110] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.685828][ T5110] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.589: couldn't read orphan inode 15 (err -117) [ 84.695109][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 84.695124][ C1] EXT4-fs (loop2): initial error at time 1784854397: ext4_iget_extra_inode:5180: inode 15 [ 84.695160][ C1] EXT4-fs (loop2): last error at time 1784854397: ext4_iget_extra_inode:5180: inode 15 [ 84.770148][ T5110] loop2: lost filesystem error report for type 5 error -117 [ 84.797545][ T5110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.054470][ T28] audit: type=1400 audit(1784854398.077:3821): avc: denied { read } for pid=5114 comm="syz.3.592" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.082438][ T28] audit: type=1400 audit(1784854398.077:3822): avc: denied { open } for pid=5114 comm="syz.3.592" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.126805][ T28] audit: type=1326 audit(1784854398.147:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 85.181029][ T28] audit: type=1326 audit(1784854398.147:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 85.255906][ T28] audit: type=1326 audit(1784854398.147:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 85.326931][ T28] audit: type=1326 audit(1784854398.147:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 85.395985][ T28] audit: type=1326 audit(1784854398.197:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f869c15e6ce code=0x7ffc0000 [ 85.467976][ T28] audit: type=1326 audit(1784854398.207:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f869c15e6ce code=0x7ffc0000 [ 85.539140][ T28] audit: type=1326 audit(1784854398.207:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.1.591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f869c15e6ce code=0x7ffc0000 [ 85.769286][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.780069][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.887916][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.595'. [ 85.927366][ T5128] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5128 comm=syz.0.595 [ 86.678815][ T5135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.597'. [ 86.693577][ T5133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.607'. [ 86.975762][ T5152] netlink: 'syz.1.604': attribute type 21 has an invalid length. [ 86.984199][ T5152] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.992369][ T5152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.999725][ T5152] IPv6: NLM_F_CREATE should be set when creating new route [ 87.007174][ T5152] IPv6: NLM_F_CREATE should be set when creating new route [ 87.014596][ T5152] IPv6: NLM_F_CREATE should be set when creating new route [ 87.035205][ T5152] netlink: 'syz.1.604': attribute type 21 has an invalid length. [ 87.051360][ T5152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.069036][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 87.131287][ T5152] vlan3: entered promiscuous mode [ 87.136636][ T5152] bridge0: entered promiscuous mode [ 87.297959][ T5166] bridge_slave_0: left allmulticast mode [ 87.309226][ T5166] bridge_slave_0: left promiscuous mode [ 87.316100][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.332517][ T5166] bridge_slave_1: left allmulticast mode [ 87.341491][ T5166] bridge_slave_1: left promiscuous mode [ 87.348177][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.369307][ T5166] bond0: (slave bond_slave_0): Releasing backup interface [ 87.381619][ T5166] bond0: (slave bond_slave_1): Releasing backup interface [ 87.397686][ T5166] team0: Port device team_slave_0 removed [ 87.410305][ T5174] loop1: detected capacity change from 0 to 1024 [ 87.413239][ T5166] team0: Port device team_slave_1 removed [ 87.427126][ T5174] EXT4-fs: quotafile must be on filesystem root [ 87.430787][ T5166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.446817][ T5166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.458156][ T5166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.466300][ T5166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.480823][ T5166] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.532050][ T5169] team0: Port device xfrm0 added [ 87.537487][ T5173] tipc: Started in network mode [ 87.543118][ T5173] tipc: Node identity 620b012e18aa, cluster identity 4711 [ 87.551130][ T5173] tipc: Enabled bearer , priority 0 [ 87.563310][ T5172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.612'. [ 87.757003][ T5186] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 87.843611][ T5196] ip6tnl0: Caught tx_queue_len zero misconfig [ 88.451604][ T5224] syzkaller0: entered promiscuous mode [ 88.465248][ T5224] syzkaller0: entered allmulticast mode [ 88.663017][ T5219] loop4: detected capacity change from 0 to 1024 [ 88.712346][ T5219] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 88.757308][ T5219] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 88.796195][ T5219] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 88.807805][ T23] tipc: Node number set to 2057371950 [ 88.892246][ T5219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.960366][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.634'. [ 89.164475][ T5235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.179491][ T5235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.180361][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.720106][ T5243] loop2: detected capacity change from 0 to 8192 [ 90.221025][ T5251] loop4: detected capacity change from 0 to 512 [ 90.279250][ T5251] EXT4-fs: Ignoring removed nobh option [ 90.378596][ T5251] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.403604][ T5251] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #11: block 1: comm syz.4.640: lblock 0 mapped to illegal pblock 1 (length 1) [ 90.419813][ T5251] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.421088][ T5251] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.430364][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 90.430390][ C0] EXT4-fs (loop4): initial error at time 1784854403: ext4_map_blocks:791: inode 11: block 1 [ 90.430428][ C0] EXT4-fs (loop4): last error at time 1784854403: ext4_map_blocks:791: inode 11: block 1 [ 90.503448][ T5251] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.640: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 90.568205][ T5251] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.568705][ T5251] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.640: ea_inode dec ref err=-117 [ 90.754746][ T5251] EXT4-fs (loop4): 1 orphan inode deleted [ 90.786551][ T5251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 91.143425][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.565705][ T5276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.647'. [ 91.718429][ T5276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5276 comm=syz.4.647 [ 92.018538][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 92.018556][ T28] audit: type=1400 audit(1784854405.037:3920): avc: denied { connect } for pid=5280 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.187963][ T5291] loop3: detected capacity change from 0 to 512 [ 92.200474][ T5291] EXT4-fs: Ignoring removed nobh option [ 92.215558][ T5291] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.228186][ T5291] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 1: comm syz.3.653: lblock 0 mapped to illegal pblock 1 (length 1) [ 92.252261][ T5291] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.253427][ T5291] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.3.653: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 92.262687][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 92.262709][ C1] EXT4-fs (loop3): initial error at time 1784854405: ext4_map_blocks:791: inode 11: block 1 [ 92.262751][ C1] EXT4-fs (loop3): last error at time 1784854405: ext4_map_blocks:791: inode 11: block 1 [ 92.309837][ T5291] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 92.311535][ T5291] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.3.653: ea_inode dec ref err=-117 [ 92.334297][ T5291] EXT4-fs (loop3): 1 orphan inode deleted [ 92.341265][ T5291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 92.392116][ T5294] loop2: detected capacity change from 0 to 512 [ 92.433171][ T5294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.471952][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.485158][ T5294] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.553169][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 92.580297][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 92.614882][ T5302] netlink: 'syz.3.656': attribute type 21 has an invalid length. [ 92.623749][ T5302] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.645843][ T5302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.653246][ T5302] IPv6: NLM_F_CREATE should be set when creating new route [ 92.660632][ T5302] IPv6: NLM_F_CREATE should be set when creating new route [ 92.667955][ T5302] IPv6: NLM_F_CREATE should be set when creating new route [ 92.668490][ T5305] netlink: 'syz.3.656': attribute type 21 has an invalid length. [ 92.692618][ T5305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.713558][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.769139][ T5302] vlan3: entered promiscuous mode [ 92.774621][ T5302] bridge0: entered promiscuous mode [ 92.791330][ T5313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.661'. [ 92.811281][ T5315] netlink: 380 bytes leftover after parsing attributes in process `syz.2.660'. [ 92.845675][ T5313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5313 comm=syz.1.661 [ 93.066352][ T5315] loop2: detected capacity change from 0 to 764 [ 93.862810][ T5332] loop0: detected capacity change from 0 to 512 [ 93.951446][ T5332] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.967268][ T5332] EXT4-fs (loop0): 1 truncate cleaned up [ 93.996043][ T5332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.069829][ T28] audit: type=1400 audit(1784854407.097:3921): avc: denied { write } for pid=5331 comm="syz.0.668" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.115093][ T5330] loop3: detected capacity change from 0 to 512 [ 94.195719][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.394683][ T5330] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.526635][ T5330] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 94.568110][ T5330] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 94.581820][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 94.581960][ C0] EXT4-fs (loop3): initial error at time 1784854407: ext4_mb_generate_buddy:1317 [ 94.582079][ C0] EXT4-fs (loop3): last error at time 1784854407: ext4_mb_generate_buddy:1317 [ 94.652793][ T5330] EXT4-fs (loop3): 1 truncate cleaned up [ 94.747178][ T5352] netlink: 'syz.2.674': attribute type 21 has an invalid length. [ 94.769836][ T5330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.801279][ T5352] IPv6: NLM_F_CREATE should be specified when creating new route [ 94.835138][ T5352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.842488][ T5352] IPv6: NLM_F_CREATE should be set when creating new route [ 94.849826][ T5352] IPv6: NLM_F_CREATE should be set when creating new route [ 94.857097][ T5352] IPv6: NLM_F_CREATE should be set when creating new route [ 94.930689][ T5357] netlink: 'syz.2.674': attribute type 21 has an invalid length. [ 94.999883][ T28] audit: type=1400 audit(1784854407.997:3922): avc: denied { write } for pid=5329 comm="syz.3.666" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.086221][ T5361] vlan3: entered promiscuous mode [ 95.121997][ T5357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.187128][ T5361] bridge0: entered promiscuous mode [ 95.202149][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.236947][ T5366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.675'. [ 95.534654][ T5371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5371 comm=syz.3.675 [ 95.598206][ T5372] loop0: detected capacity change from 0 to 164 [ 96.136188][ T5391] loop3: detected capacity change from 0 to 512 [ 96.170864][ T5392] netlink: 36 bytes leftover after parsing attributes in process `syz.4.686'. [ 96.176752][ T5394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'. [ 96.208855][ T28] audit: type=1400 audit(1784854409.217:3923): avc: denied { create } for pid=5388 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.231216][ T5391] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.682: corrupted inode contents [ 96.243933][ T28] audit: type=1400 audit(1784854409.217:3924): avc: denied { write } for pid=5388 comm="syz.4.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.253995][ T5391] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.273895][ T5391] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 96.280358][ T5387] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.683'. [ 96.283101][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 96.283142][ C1] EXT4-fs (loop3): initial error at time 1784854409: ext4_do_update_inode:5742: inode 15 [ 96.283178][ C1] EXT4-fs (loop3): last error at time 1784854409: ext4_do_update_inode:5742: inode 15 [ 96.284420][ T5391] loop3: lost filesystem error report for type 5 error -117 [ 96.329838][ T28] audit: type=1400 audit(1784854409.347:3925): avc: denied { write } for pid=5393 comm="syz.2.687" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.359599][ T5391] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.682: corrupted inode contents [ 96.371542][ T5391] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.372920][ T5391] EXT4-fs error (device loop3): ext4_evict_inode:315: inode #15: comm syz.3.682: mark_inode_dirty error [ 96.403858][ T5391] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.404095][ T5391] EXT4-fs (loop3): 1 orphan inode deleted [ 96.448812][ T5391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.472068][ T5404] loop4: detected capacity change from 0 to 1024 [ 96.478533][ T28] audit: type=1400 audit(1784854409.487:3926): avc: denied { setopt } for pid=5399 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.527476][ T28] audit: type=1400 audit(1784854409.487:3927): avc: denied { write } for pid=5399 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.530778][ T5404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.572888][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.624089][ T5404] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.721970][ T28] audit: type=1400 audit(1784854409.747:3928): avc: denied { write } for pid=5400 comm="syz.4.691" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.861317][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'. [ 96.937539][ T112] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 6) [ 96.954676][ T5419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5419 comm=syz.2.694 [ 97.023386][ T112] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 97.180306][ T112] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.180306][ T112] [ 97.258564][ T5434] loop1: detected capacity change from 0 to 256 [ 97.333061][ T68] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 97.380048][ T68] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 97.434431][ T68] EXT4-fs (loop4): This should not happen!! Data will be lost [ 97.434431][ T68] [ 97.507064][ T28] audit: type=1326 audit(1784854410.527:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 97.604644][ T28] audit: type=1326 audit(1784854410.557:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 97.692583][ T28] audit: type=1326 audit(1784854410.557:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 97.728829][ T28] audit: type=1326 audit(1784854410.567:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 97.755920][ T28] audit: type=1326 audit(1784854410.617:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75388ae6ce code=0x7ffc0000 [ 97.784125][ T28] audit: type=1326 audit(1784854410.617:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75388ae6ce code=0x7ffc0000 [ 97.851352][ T5404] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.691: bg 0: block 112: padding at end of block bitmap is not set [ 97.866015][ T28] audit: type=1326 audit(1784854410.617:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75388ae6ce code=0x7ffc0000 [ 97.958189][ T5404] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 1732 with error 28 [ 97.973057][ T28] audit: type=1326 audit(1784854410.617:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75388ae6ce code=0x7ffc0000 [ 98.001509][ T5404] EXT4-fs (loop4): This should not happen!! Data will be lost [ 98.001509][ T5404] [ 98.014543][ T5404] EXT4-fs (loop4): Total free blocks count 0 [ 98.020619][ T28] audit: type=1326 audit(1784854410.617:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75388ae6ce code=0x7ffc0000 [ 98.047450][ T5404] EXT4-fs (loop4): Free/Dirty block details [ 98.053720][ T5404] EXT4-fs (loop4): free_blocks=0 [ 98.111456][ T28] audit: type=1326 audit(1784854410.617:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.2.697" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f75388ae6ce code=0x7ffc0000 [ 98.148864][ T3302] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 98.215818][ T5461] uprobe: syz.2.701:5461 failed to unregister, leaking uprobe [ 98.260310][ T5461] uprobe: syz.2.701:5461 failed to unregister, leaking uprobe [ 98.378624][ T5470] --map-set only usable from mangle table [ 98.395692][ T9] IPVS: starting estimator thread 0... [ 98.480091][ T5474] loop2: detected capacity change from 0 to 512 [ 98.504111][ T5471] IPVS: using max 2256 ests per chain, 112800 per kthread [ 98.515865][ T5474] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.708: inode has both inline data and extents flags [ 98.545393][ T5476] loop4: detected capacity change from 0 to 764 [ 98.552955][ T5474] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.553947][ T5474] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.708: couldn't read orphan inode 15 (err -117) [ 98.563146][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 98.563161][ C0] EXT4-fs (loop2): initial error at time 1784854411: ext4_orphan_get:1399: inode 15 [ 98.563186][ C0] EXT4-fs (loop2): last error at time 1784854411: ext4_orphan_get:1399: inode 15 [ 98.601893][ T5474] loop2: lost filesystem error report for type 5 error -117 [ 98.603311][ T5474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.645420][ T5476] Symlink component flag not implemented [ 98.654744][ T5476] Symlink component flag not implemented [ 98.660539][ T5476] Symlink component flag not implemented (129) [ 98.669401][ T5476] Symlink component flag not implemented (6) [ 98.695306][ T5479] loop1: detected capacity change from 0 to 1024 [ 98.710173][ T5479] EXT4-fs: Ignoring removed bh option [ 98.751812][ T5479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.158673][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.876221][ T5500] netlink: 'syz.4.718': attribute type 4 has an invalid length. [ 100.055633][ T5504] Driver unsupported XDP return value 0 on prog (id 128) dev N/A, expect packet loss! [ 100.637114][ T5518] loop4: detected capacity change from 0 to 1024 [ 100.645761][ T5518] EXT4-fs: Ignoring removed bh option [ 100.666145][ T5520] loop1: detected capacity change from 0 to 512 [ 100.682562][ T5520] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.698194][ T5518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.712538][ T5520] EXT4-fs (loop1): 1 truncate cleaned up [ 100.718924][ T5520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.780809][ T3960] IPVS: ip_vs_send_async error -101 [ 100.851005][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.514230][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.782202][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.841369][ T5542] xfrm0: Caught tx_queue_len zero misconfig [ 101.858838][ T5529] loop3: detected capacity change from 0 to 512 [ 102.446489][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 102.477834][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 102.536887][ T5529] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 102.565125][ T5565] loop1: detected capacity change from 0 to 128 [ 102.591650][ T5568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.737'. [ 102.600262][ T5565] syz.1.736: attempt to access beyond end of device [ 102.600262][ T5565] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 102.600531][ T5565] syz.1.736: attempt to access beyond end of device [ 102.600531][ T5565] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 102.600563][ T5565] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 102.600583][ T5565] syz.1.736: attempt to access beyond end of device [ 102.600583][ T5565] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 102.600627][ T5565] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 102.600804][ T5565] syz.1.736: attempt to access beyond end of device [ 102.600804][ T5565] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 102.601205][ T5565] syz.1.736: attempt to access beyond end of device [ 102.601205][ T5565] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 102.601235][ T5565] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 102.601254][ T5565] syz.1.736: attempt to access beyond end of device [ 102.601254][ T5565] loop1: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 102.601290][ T5565] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 102.601745][ T5565] syz.1.736: attempt to access beyond end of device [ 102.601745][ T5565] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 102.602125][ T5565] syz.1.736: attempt to access beyond end of device [ 102.602125][ T5565] loop1: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 102.602157][ T5565] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 102.602179][ T5565] syz.1.736: attempt to access beyond end of device [ 102.602179][ T5565] loop1: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 102.602271][ T5565] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 102.602527][ T5565] syz.1.736: attempt to access beyond end of device [ 102.602527][ T5565] loop1: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 102.602960][ T5565] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 102.602986][ T5565] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 102.607355][ T5565] Buffer I/O error on dev loop1, logical block 111, lost async page write [ 102.607439][ T5565] Buffer I/O error on dev loop1, logical block 112, lost async page write [ 102.705417][ T5571] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5571 comm=syz.0.737 [ 103.642021][ T5529] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.658600][ T5529] __quota_error: 25 callbacks suppressed [ 103.724631][ T5529] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 103.790236][ T5529] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.835345][ T28] audit: type=1400 audit(1784854416.857:3964): avc: denied { mounton } for pid=5579 comm="syz.4.739" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 104.097395][ T5583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.742'. [ 104.190684][ T5584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5584 comm=syz.1.742 [ 104.206181][ T5529] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 104.569069][ T5529] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #16: comm syz.3.726: inode has both inline data and extents flags [ 104.692194][ T5529] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 104.695553][ T5529] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.726: couldn't read orphan inode 16 (err -117) [ 104.705904][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 104.705933][ C1] EXT4-fs (loop3): initial error at time 1784854417: ext4_orphan_get:1399: inode 16 [ 104.706083][ C1] EXT4-fs (loop3): last error at time 1784854417: ext4_orphan_get:1399: inode 16 [ 105.064283][ T5529] loop3: lost filesystem error report for type 5 error -117 [ 105.097296][ T5529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.302942][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.427494][ T5580] syz.4.739 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 105.498173][ T5580] CPU: 0 UID: 0 PID: 5580 Comm: syz.4.739 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.498211][ T5580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.498226][ T5580] Call Trace: [ 105.498233][ T5580] [ 105.498242][ T5580] __dump_stack+0x1d/0x30 [ 105.498305][ T5580] dump_stack_lvl+0x95/0xd0 [ 105.498336][ T5580] dump_stack+0x15/0x1b [ 105.498364][ T5580] dump_header+0x80/0x240 [ 105.498423][ T5580] oom_kill_process+0x295/0x350 [ 105.498473][ T5580] out_of_memory+0x981/0xbc0 [ 105.498601][ T5580] try_charge_memcg+0x621/0xa00 [ 105.498637][ T5580] __memcg_kmem_charge_page+0x199/0x3a0 [ 105.498703][ T5580] __alloc_frozen_pages_noprof+0x18a/0x350 [ 105.498748][ T5580] alloc_pages_mpol+0xa9/0x1d0 [ 105.498790][ T5580] alloc_pages_noprof+0x8f/0x140 [ 105.498868][ T5580] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 105.498937][ T5580] __kvmalloc_node_noprof+0x3a0/0x590 [ 105.498976][ T5580] ? futex_hash_allocate+0x192/0x920 [ 105.499002][ T5580] ? futex_hash_allocate+0x192/0x920 [ 105.499093][ T5580] ? futex_hash_allocate+0x192/0x920 [ 105.499125][ T5580] futex_hash_allocate+0x192/0x920 [ 105.499156][ T5580] ? cap_task_prctl+0x13f/0x6b0 [ 105.499357][ T5580] futex_hash_prctl+0xd8/0xf0 [ 105.499382][ T5580] __se_sys_prctl+0x4f4/0x13b0 [ 105.499509][ T5580] __x64_sys_prctl+0x67/0x80 [ 105.499544][ T5580] x64_sys_call+0x2533/0x3020 [ 105.499587][ T5580] do_syscall_64+0x136/0x3c0 [ 105.499622][ T5580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.499674][ T5580] RIP: 0033:0x7fc97f88de99 [ 105.499706][ T5580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.499733][ T5580] RSP: 002b:00007fc97e2e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 105.499762][ T5580] RAX: ffffffffffffffda RBX: 00007fc97fb15fa0 RCX: 00007fc97f88de99 [ 105.499781][ T5580] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 105.499794][ T5580] RBP: 00007fc97f923eaf R08: 0000000000000000 R09: 0000000000000000 [ 105.499810][ T5580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.499828][ T5580] R13: 00007fc97fb16038 R14: 00007fc97fb15fa0 R15: 00007ffc5a8cde98 [ 105.499855][ T5580] [ 105.868286][ T5580] memory: usage 2216kB, limit 307200kB, failcnt 395 [ 105.878149][ T5580] memory+swap: usage 2576kB, limit 9007199254740988kB, failcnt 0 [ 105.901363][ T5580] kmem: usage 2040kB, limit 9007199254740988kB, failcnt 0 [ 105.912948][ T5580] Memory cgroup stats for /syz4: [ 105.913300][ T5580] cache 524288 [ 105.922769][ T5580] rss 4096 [ 105.925947][ T5580] shmem 0 [ 105.929272][ T5580] mapped_file 65536 [ 105.933203][ T5580] dirty 0 [ 105.936270][ T5580] writeback 0 [ 105.939951][ T5580] workingset_refault_anon 82 [ 105.944685][ T5580] workingset_refault_file 1494 [ 105.950699][ T5580] swap 368640 [ 105.954119][ T5580] swapcached 6041600 [ 105.958434][ T5580] pgpgin 63726 [ 105.969798][ T5580] pgpgout 63596 [ 105.973488][ T5580] pgfault 79472 [ 105.977206][ T5580] pgmajfault 67 [ 105.982247][ T5580] inactive_anon 8192 [ 105.986347][ T5580] active_anon 0 [ 105.990174][ T5580] inactive_file 0 [ 105.993951][ T5580] active_file 524288 [ 105.998331][ T5580] unevictable 0 [ 106.002238][ T5580] hierarchical_memory_limit 314572800 [ 106.007865][ T5580] hierarchical_memsw_limit 9223372036854771712 [ 106.014992][ T5580] total_cache 524288 [ 106.019286][ T5580] total_rss 4096 [ 106.023047][ T5580] total_shmem 0 [ 106.026963][ T5580] total_mapped_file 65536 [ 106.031989][ T5580] total_dirty 0 [ 106.035705][ T5580] total_writeback 0 [ 106.040953][ T5580] total_workingset_refault_anon 82 [ 106.046807][ T5580] total_workingset_refault_file 1494 [ 106.052539][ T5580] total_swap 368640 [ 106.056788][ T5580] total_swapcached 6041600 [ 106.062905][ T5580] total_pgpgin 63726 [ 106.077310][ T5580] total_pgpgout 63596 [ 106.082922][ T5580] total_pgfault 79472 [ 106.087073][ T5580] total_pgmajfault 67 [ 106.091759][ T5580] total_inactive_anon 8192 [ 106.096490][ T5580] total_active_anon 0 [ 106.102175][ T5580] total_inactive_file 0 [ 106.106609][ T5580] total_active_file 524288 [ 106.111384][ T5580] total_unevictable 0 [ 106.129613][ T5580] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.739,pid=5579,uid=0 [ 106.145269][ T5580] Memory cgroup out of memory: Killed process 5579 (syz.4.739) total-vm:96096kB, anon-rss:1236kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 106.177433][ T5601] netlink: 'syz.3.748': attribute type 83 has an invalid length. [ 106.297439][ T5612] xt_hashlimit: size too large, truncated to 1048576 [ 106.807627][ T5637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.760'. [ 106.973630][ T5643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5643 comm=syz.2.760 [ 107.122608][ T28] audit: type=1400 audit(1784854420.137:3965): avc: denied { create } for pid=5633 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 107.201845][ T28] audit: type=1326 audit(1784854420.227:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 107.266109][ T28] audit: type=1326 audit(1784854420.227:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 107.312973][ T28] audit: type=1326 audit(1784854420.227:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 107.363173][ T28] audit: type=1326 audit(1784854420.227:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 107.409885][ T28] audit: type=1326 audit(1784854420.227:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 107.461999][ T28] audit: type=1326 audit(1784854420.227:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 107.511199][ T28] audit: type=1326 audit(1784854420.227:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5647 comm="syz.1.763" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 107.590402][ T5662] usb usb8: usbfs: process 5662 (syz.1.768) did not claim interface 0 before use [ 107.841791][ T5669] loop0: detected capacity change from 0 to 256 [ 108.419157][ T5677] loop4: detected capacity change from 0 to 256 [ 108.698589][ T5677] FAT-fs (loop4): IO charset macroman not found [ 108.904722][ T5686] netlink: 'syz.1.786': attribute type 2 has an invalid length. [ 108.915624][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 108.915640][ T28] audit: type=1400 audit(1784854421.937:3978): avc: denied { accept } for pid=5685 comm="syz.1.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.927257][ T5688] loop4: detected capacity change from 0 to 512 [ 108.989908][ T5688] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.026514][ T5688] EXT4-fs (loop4): 1 truncate cleaned up [ 109.049533][ T5688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.090642][ T28] audit: type=1400 audit(1784854422.117:3979): avc: denied { write } for pid=5687 comm="syz.4.776" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.324368][ T5699] netlink: 72 bytes leftover after parsing attributes in process `syz.0.780'. [ 109.353701][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.421853][ T5705] loop4: detected capacity change from 0 to 512 [ 109.431558][ T5705] EXT4-fs: dax option not supported [ 109.490383][ T28] audit: type=1400 audit(1784854422.517:3980): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.756611][ T5718] loop3: detected capacity change from 0 to 4096 [ 109.774069][ T5718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.070222][ T28] audit: type=1400 audit(1784854423.067:3981): avc: denied { ioctl } for pid=5717 comm="syz.3.788" path="socket:[12885]" dev="sockfs" ino=12885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.149320][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.285114][ T28] audit: type=1400 audit(1784854423.307:3982): avc: denied { read write } for pid=5735 comm="syz.0.793" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.341315][ T28] audit: type=1400 audit(1784854423.307:3983): avc: denied { open } for pid=5735 comm="syz.0.793" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.378313][ T5739] syzkaller0: entered promiscuous mode [ 110.383914][ T5739] syzkaller0: entered allmulticast mode [ 110.596355][ T28] audit: type=1400 audit(1784854423.617:3984): avc: denied { mount } for pid=5746 comm="syz.4.797" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.911276][ T5751] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 110.984061][ T5753] netlink: 'syz.4.799': attribute type 2 has an invalid length. [ 111.091946][ T5754] bond3: Unable to set up delay as MII monitoring is disabled [ 111.111380][ T28] audit: type=1400 audit(1784854423.817:3985): avc: denied { search } for pid=5746 comm="syz.4.797" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.144420][ T28] audit: type=1400 audit(1784854423.817:3986): avc: denied { search } for pid=5746 comm="syz.4.797" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.180152][ T5754] bond3 (unregistering): Released all slaves [ 111.202708][ T28] audit: type=1400 audit(1784854423.817:3987): avc: denied { read } for pid=5746 comm="syz.4.797" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 111.229793][ T5751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.270975][ T5759] bond3: (slave ip6gretap1): making interface the new active one [ 111.302957][ T5759] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 111.547928][ T3410] IPVS: starting estimator thread 0... [ 111.558017][ T5772] loop1: detected capacity change from 0 to 512 [ 111.607605][ T5772] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.762366][ T5777] IPVS: using max 1776 ests per chain, 88800 per kthread [ 111.870722][ T5772] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 111.902691][ T5772] EXT4-fs (loop1): 1 truncate cleaned up [ 111.909671][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 111.909833][ C0] EXT4-fs (loop1): initial error at time 1784854424: ext4_mb_generate_buddy:1317 [ 111.910050][ C0] EXT4-fs (loop1): last error at time 1784854424: ext4_mb_generate_buddy:1317 [ 111.985825][ T5772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.078615][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.106433][ T5792] loop3: detected capacity change from 0 to 512 [ 112.133810][ T5792] EXT4-fs: Ignoring removed oldalloc option [ 112.165767][ T5792] EXT4-fs: Ignoring removed oldalloc option [ 112.178073][ T5792] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.813: corrupted in-inode xattr: invalid ea_ino [ 112.192939][ T5792] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.198661][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 112.214307][ C1] EXT4-fs (loop3): initial error at time 1784854425: ext4_iget_extra_inode:5180: inode 15 [ 112.224272][ C1] EXT4-fs (loop3): last error at time 1784854425: ext4_iget_extra_inode:5180: inode 15 [ 112.238042][ T5792] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.813: couldn't read orphan inode 15 (err -117) [ 112.264161][ T5792] loop3: lost filesystem error report for type 5 error -117 [ 112.264930][ T5792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.338231][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.473474][ T5819] xt_connbytes: Forcing CT accounting to be enabled [ 115.480368][ T5819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.528419][ T5821] netlink: 'syz.2.823': attribute type 4 has an invalid length. [ 115.565953][ T5818] loop0: detected capacity change from 0 to 4096 [ 115.584680][ T49] tipc: Resetting bearer [ 115.598949][ T5827] tipc: Enabling of bearer rejected, already enabled [ 115.607491][ T5818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.639144][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 115.639161][ T28] audit: type=1400 audit(1784854428.657:4006): avc: denied { write } for pid=5811 comm="syz.0.820" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.909698][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.017010][ T5848] syzkaller0: entered promiscuous mode [ 116.023942][ T5848] syzkaller0: entered allmulticast mode [ 116.040435][ T5854] veth0_to_bond: Caught tx_queue_len zero misconfig [ 116.058089][ T5857] netlink: 'syz.3.834': attribute type 13 has an invalid length. [ 116.067057][ T5857] netlink: 'syz.3.834': attribute type 17 has an invalid length. [ 116.114228][ T28] audit: type=1400 audit(1784854429.137:4007): avc: denied { read append } for pid=5860 comm="syz.2.837" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.175129][ T28] audit: type=1400 audit(1784854429.137:4008): avc: denied { open } for pid=5860 comm="syz.2.837" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.247444][ T5857] tipc: Resetting bearer [ 116.273448][ T5857] tipc: Resetting bearer [ 116.473316][ T28] audit: type=1400 audit(1784854429.457:4009): avc: denied { create } for pid=5865 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.610264][ T5857] vlan2: left allmulticast mode [ 117.615261][ T5857] bond_slave_1: left allmulticast mode [ 117.619769][ T5878] loop0: detected capacity change from 0 to 512 [ 117.626470][ T5857] netdevsim netdevsim3 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.670000][ T5878] EXT4-fs: Ignoring removed bh option [ 117.686808][ T5886] netlink: 'syz.2.846': attribute type 1 has an invalid length. [ 117.688918][ T5857] 8021q: adding VLAN 0 to HW filter on device eth0 [ 117.701668][ T5878] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 117.705680][ T5878] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.843: iget: bad i_size value: 3298534883338 [ 117.715535][ T5857] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.727446][ T5878] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.733256][ T5857] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.735754][ T5857] netdevsim netdevsim3 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.736750][ T5857] 8021q: adding VLAN 0 to HW filter on device eth2 [ 117.741028][ T5857] netdevsim netdevsim3 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.741784][ T5857] 8021q: adding VLAN 0 to HW filter on device eth3 [ 117.744418][ T5857] bond1: left allmulticast mode [ 117.744438][ T5857] ip6gretap1: left allmulticast mode [ 117.744581][ T5857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.827743][ T5857] ip6gretap1: left promiscuous mode [ 117.828167][ T5878] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.843: couldn't read orphan inode 15 (err -117) [ 117.833487][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 117.833725][ C0] EXT4-fs (loop0): initial error at time 1784854430: ext4_orphan_get:1399: inode 15 [ 117.834247][ C0] EXT4-fs (loop0): last error at time 1784854430: ext4_orphan_get:1399: inode 15 [ 117.881089][ T5878] loop0: lost filesystem error report for type 5 error -117 [ 117.883895][ T5857] vlan3: left promiscuous mode [ 117.892978][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.896020][ T5857] bridge0: left promiscuous mode [ 118.001826][ T5888] 8021q: adding VLAN 0 to HW filter on device bond5 [ 118.023186][ T5888] bond4: (slave bond5): making interface the new active one [ 118.033305][ T5888] bond4: (slave bond5): Enslaving as an active interface with an up link [ 118.049431][ T112] bond1: (slave ip6gretap1): link status definitely up, 0 Mbps full duplex [ 118.061110][ T5899] netlink: 'syz.3.848': attribute type 2 has an invalid length. [ 118.070322][ T112] bond1: active interface up! [ 118.101059][ T28] audit: type=1400 audit(1784854431.127:4010): avc: denied { getopt } for pid=5877 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.132656][ T5893] IPVS: Unknown mcast interface: vcan0 [ 118.155582][ T5899] 0: entered promiscuous mode [ 118.170354][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.269526][ T5907] netlink: 'syz.3.852': attribute type 20 has an invalid length. [ 118.296211][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 118.355338][ T5907] netlink: 'syz.3.852': attribute type 20 has an invalid length. [ 118.356777][ T3466] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.377078][ T3466] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.395572][ T3466] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.415572][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 118.430508][ T3466] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.697648][ T5924] loop3: detected capacity change from 0 to 8192 [ 118.980056][ T28] audit: type=1400 audit(1784854431.997:4011): avc: denied { listen } for pid=5934 comm="syz.0.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.125168][ T28] audit: type=1400 audit(1784854432.147:4012): avc: denied { ioctl } for pid=5936 comm="syz.4.863" path="socket:[13287]" dev="sockfs" ino=13287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.160494][ T5937] netlink: 14 bytes leftover after parsing attributes in process `syz.4.863'. [ 119.211652][ T28] audit: type=1400 audit(1784854432.237:4013): avc: denied { map } for pid=5936 comm="syz.4.863" path="socket:[13285]" dev="sockfs" ino=13285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.245309][ T28] audit: type=1400 audit(1784854432.237:4014): avc: denied { read } for pid=5936 comm="syz.4.863" path="socket:[13285]" dev="sockfs" ino=13285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.366819][ T5947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'. [ 119.498542][ T5944] 9pnet_fd: p9_fd_create_unix (5944): problem connecting socket: ./file0: -111 [ 120.040593][ T5967] tipc: Started in network mode [ 120.052646][ T5967] tipc: Node identity 4, cluster identity 4711 [ 120.060933][ T5957] loop3: detected capacity change from 0 to 8192 [ 120.067550][ T5967] tipc: Node number set to 4 [ 120.309124][ T28] audit: type=1400 audit(1784854433.297:4015): avc: denied { setopt } for pid=5956 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.487098][ T5976] loop0: detected capacity change from 0 to 1024 [ 120.511812][ T5976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.530593][ T5976] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 120.547602][ T5976] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 120.560004][ T5976] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.569541][ T5976] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.876: Invalid inode table block 0 in block_group 0 [ 120.584309][ T5976] loop0: lost filesystem error report for type 5 error -117 [ 120.584840][ T5976] EXT4-fs (loop0): Remounting filesystem read-only [ 120.592314][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 120.592348][ C0] EXT4-fs (loop0): initial error at time 1784854433: __ext4_get_inode_loc:4886 [ 120.592412][ C0] EXT4-fs (loop0): last error at time 1784854433: __ext4_get_inode_loc:4886 [ 120.625685][ T5976] EXT4-fs (loop0): 1 truncate cleaned up [ 120.633615][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.116488][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.174224][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 121.174239][ T28] audit: type=1400 audit(1784854434.197:4017): avc: denied { ioctl } for pid=5996 comm="syz.0.884" path="socket:[13855]" dev="sockfs" ino=13855 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.773716][ T28] audit: type=1400 audit(1784854434.797:4018): avc: denied { execute } for pid=6005 comm="syz.2.886" dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.795732][ T28] audit: type=1400 audit(1784854434.797:4019): avc: denied { execute_no_trans } for pid=6005 comm="syz.2.886" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.210842][ T6020] loop3: detected capacity change from 0 to 512 [ 122.218086][ T6020] EXT4-fs: Ignoring removed nobh option [ 122.240948][ T6020] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.892: invalid indirect mapped block 256 (level 2) [ 122.255350][ T6020] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.255573][ T6020] EXT4-fs (loop3): Remounting filesystem read-only [ 122.264860][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 122.264880][ C0] EXT4-fs (loop3): initial error at time 1784854435: ext4_free_branches:1023: inode 11 [ 122.264916][ C0] EXT4-fs (loop3): last error at time 1784854435: ext4_free_branches:1023: inode 11 [ 122.299488][ T6020] EXT4-fs (loop3): 2 truncates cleaned up [ 122.305796][ T6020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.324128][ T28] audit: type=1400 audit(1784854435.347:4020): avc: denied { write } for pid=6018 comm="syz.3.892" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.324165][ T6020] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 122.355655][ T28] audit: type=1400 audit(1784854435.347:4021): avc: denied { create } for pid=6018 comm="syz.3.892" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 122.596717][ T6017] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 122.995921][ T28] audit: type=1400 audit(1784854436.017:4022): avc: denied { read } for pid=6043 comm="syz.2.900" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.031693][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.053773][ T28] audit: type=1400 audit(1784854436.017:4023): avc: denied { open } for pid=6043 comm="syz.2.900" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.134478][ T28] audit: type=1326 audit(1784854436.047:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.1.898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 123.227893][ T28] audit: type=1326 audit(1784854436.047:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.1.898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 123.258159][ T28] audit: type=1326 audit(1784854436.067:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6038 comm="syz.1.898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f869c19de99 code=0x7ffc0000 [ 123.340165][ T6055] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.905'. [ 123.671424][ T6076] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 124.287593][ T6096] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 124.517909][ T6100] tipc: Enabling of bearer rejected, failed to enable media [ 124.928692][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 124.944924][ T6133] loop2: detected capacity change from 0 to 512 [ 124.963082][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 125.006589][ T6133] EXT4-fs (loop2): 1 truncate cleaned up [ 125.012960][ T6133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.032584][ T6133] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.930: bg 0: block 465: padding at end of block bitmap is not set [ 125.146026][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.715925][ T6158] loop2: detected capacity change from 0 to 8192 [ 125.845523][ T6162] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 125.870830][ T6162] ipvlan0: entered promiscuous mode [ 125.891179][ T6162] ipvlan0: entered allmulticast mode [ 125.925238][ T6162] veth0_vlan: entered allmulticast mode [ 126.029160][ T6162] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.184360][ T6162] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 126.230833][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 126.249192][ T6162] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 126.272682][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 126.356359][ T6115] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 126.373037][ T6170] netlink: 'syz.3.945': attribute type 4 has an invalid length. [ 126.469883][ T6170] netlink: 'syz.3.945': attribute type 4 has an invalid length. [ 127.332503][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'. [ 127.496659][ T6210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.566832][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.958'. [ 127.586653][ T6214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.654044][ T28] kauditd_printk_skb: 284 callbacks suppressed [ 127.654062][ T28] audit: type=1400 audit(1784854440.677:4311): avc: denied { kexec_image_load } for pid=6218 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 127.780154][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.964'. [ 127.811659][ T6229] bridge3: port 1(dummy0) entered blocking state [ 127.823109][ T6229] bridge3: port 1(dummy0) entered disabled state [ 127.849743][ T6229] dummy0: entered allmulticast mode [ 127.865575][ T6234] netlink: 'syz.0.964': attribute type 10 has an invalid length. [ 127.890831][ T6229] dummy0: entered promiscuous mode [ 127.904052][ T6234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.964'. [ 127.958442][ T6234] bridge3: port 1(dummy0) entered blocking state [ 127.964902][ T6234] bridge3: port 1(dummy0) entered forwarding state [ 128.008578][ T6234] dummy0: left allmulticast mode [ 128.023268][ T6234] bridge3: port 1(dummy0) entered disabled state [ 128.505028][ T6247] loop3: detected capacity change from 0 to 512 [ 128.696228][ T6247] EXT4-fs: Ignoring removed oldalloc option [ 128.739616][ T6247] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.002061][ T6247] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.970: invalid indirect mapped block 83886080 (level 1) [ 129.038996][ T6260] loop4: detected capacity change from 0 to 512 [ 129.051608][ T6247] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 129.054421][ T6247] EXT4-fs (loop3): Remounting filesystem read-only [ 129.064110][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 129.064269][ C1] EXT4-fs (loop3): initial error at time 1784854442: ext4_free_branches:1023: inode 16 [ 129.064860][ C1] EXT4-fs (loop3): last error at time 1784854442: ext4_free_branches:1023: inode 16 [ 129.111677][ T6260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.111798][ T6260] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.293610][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.293798][ T6247] EXT4-fs (loop3): 1 orphan inode deleted [ 129.345378][ T6247] EXT4-fs (loop3): 1 truncate cleaned up [ 129.349557][ T6247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.656427][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.776072][ T28] audit: type=1400 audit(1784854442.797:4312): avc: denied { watch } for pid=6281 comm="syz.3.979" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 129.930517][ T6291] loop2: detected capacity change from 0 to 512 [ 129.966556][ T6291] ------------[ cut here ]------------ [ 129.972116][ T6291] EA inode 11 i_nlink=0 [ 129.972136][ T6291] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.2.980/6291 [ 129.987062][ T6291] Modules linked in: [ 129.991658][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.2.980 Not tainted syzkaller #0 PREEMPT(lazy) [ 130.001044][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 130.011190][ T6291] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 130.017845][ T6291] Code: 76 c1 96 ff 49 8d 7e 40 4c 8d 2d db 9f 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 f1 f8 d9 03 90 90 90 90 90 90 90 [ 130.038255][ T6291] RSP: 0018:ffffc900029337f8 EFLAGS: 00010246 [ 130.044524][ T6291] RAX: ffff8881042f0b30 RBX: ffff88810597c180 RCX: ffffffff81c29656 [ 130.052640][ T6291] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3620 [ 130.061349][ T6291] RBP: 000000000000000b R08: 000188810597c133 R09: 0000000000000000 [ 130.069419][ T6291] R10: ffffc90002933728 R11: 0001c90002933728 R12: ffff88810597c130 [ 130.077462][ T6291] R13: ffffffff871d3620 R14: ffff88810597c0e8 R15: 0000000000000001 [ 130.085590][ T6291] FS: 00007f75373266c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 130.095252][ T6291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.102016][ T6291] CR2: 00007f753899cc6b CR3: 000000012eaa0000 CR4: 00000000003506f0 [ 130.110111][ T6291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.118119][ T6291] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 130.126809][ T6291] Call Trace: [ 130.130144][ T6291] [ 130.133113][ T6291] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 130.139222][ T6291] ext4_xattr_delete_inode+0x6b5/0x790 [ 130.144773][ T6291] ext4_evict_inode+0xb18/0xdf0 [ 130.150393][ T6291] ? __pfx_ext4_evict_inode+0x10/0x10 [ 130.155974][ T6291] evict+0x2a5/0x510 [ 130.159932][ T6291] iput+0x430/0x5a0 [ 130.163816][ T6291] ext4_process_orphan+0x1a4/0x1c0 [ 130.169024][ T6291] ext4_orphan_cleanup+0x6a6/0xa10 [ 130.174371][ T6291] ? ext4_register_li_request+0x14c/0x440 [ 130.180895][ T6291] ext4_fill_super+0x33ab/0x3760 [ 130.185917][ T6291] ? set_blocksize+0x14c/0x270 [ 130.190970][ T6291] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.196336][ T6291] get_tree_bdev_flags+0x291/0x300 [ 130.201516][ T6291] ? __pfx_ext4_fill_super+0x10/0x10 [ 130.206844][ T6291] get_tree_bdev+0x1f/0x30 [ 130.210492][ T6295] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 130.210492][ T6295] The task syz.3.982 (6295) triggered the difference, watch for misbehavior. [ 130.212949][ T6291] ext4_get_tree+0x1c/0x30 [ 130.233221][ T6291] vfs_get_tree+0x57/0x1d0 [ 130.237698][ T6291] do_new_mount+0x288/0x8d0 [ 130.242993][ T6291] path_mount+0x4ad/0xb90 [ 130.247450][ T6291] __se_sys_mount+0x28c/0x2e0 [ 130.252271][ T6291] __x64_sys_mount+0x67/0x80 [ 130.256899][ T6291] x64_sys_call+0x2d61/0x3020 [ 130.261649][ T6291] do_syscall_64+0x136/0x3c0 [ 130.266286][ T6291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.272950][ T6291] RIP: 0033:0x7f75388ef10a [ 130.277429][ T6291] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.297132][ T6291] RSP: 002b:00007f7537325e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.306229][ T6291] RAX: ffffffffffffffda RBX: 00007f7537325ee0 RCX: 00007f75388ef10a [ 130.314294][ T6291] RDX: 0000200000000180 RSI: 00002000000003c0 RDI: 00007f7537325ea0 [ 130.322321][ T6291] RBP: 0000200000000180 R08: 00007f7537325ee0 R09: 0000000000800700 [ 130.331018][ T6291] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000003c0 [ 130.339128][ T6291] R13: 00007f7537325ea0 R14: 0000000000000470 R15: 000000000000002c [ 130.347150][ T6291] [ 130.350272][ T6291] ---[ end trace 0000000000000000 ]--- [ 130.375297][ T6291] EXT4-fs (loop2): 1 orphan inode deleted [ 130.381767][ T6291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.586692][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.656785][ T6302] netlink: 'syz.2.984': attribute type 10 has an invalid length. [ 130.814759][ T28] audit: type=1400 audit(1784854443.827:4313): avc: denied { getopt } for pid=6304 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 130.927311][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 130.951029][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 130.974458][ T6309] ipvlan0: left promiscuous mode [ 131.009459][ T6309] ipvlan0: left allmulticast mode [ 131.021863][ T6309] veth0_vlan: left allmulticast mode [ 131.355044][ T6320] netlink: 'syz.2.990': attribute type 13 has an invalid length. [ 131.632706][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 131.633098][ T344] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.651267][ T344] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.661457][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'. [ 131.709671][ T344] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.723922][ T344] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.391502][ T3466] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.401347][ T3466] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.414814][ T3466] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.431301][ T3466] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.708469][ T28] audit: type=1400 audit(1784854445.727:4314): avc: denied { connect } for pid=6350 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.756039][ T28] audit: type=1400 audit(1784854445.777:4315): avc: denied { read } for pid=6350 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.403008][ T6360] loop1: detected capacity change from 0 to 256 [ 133.470275][ T6360] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 133.514448][ T6360] FAT-fs (loop1): Can't find a valid FAT filesystem [ 133.728707][ T28] audit: type=1400 audit(1784854446.747:4316): avc: denied { name_bind } for pid=6370 comm="syz.3.1008" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 133.756148][ T6371] loop3: detected capacity change from 0 to 512 [ 133.769567][ T6371] ext4: Unknown parameter 'nolazytime.orlov' [ 133.795696][ T6371] Invalid option length (141) for dns_resolver key [ 134.042980][ T6377] tipc: Enabling of bearer rejected, failed to enable media [ 134.196890][ T6373] loop1: detected capacity change from 0 to 512 [ 134.823338][ T6373] EXT4-fs (loop1): 1 orphan inode deleted [ 134.985356][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 134.994995][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 135.060839][ T6373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.086295][ T6399] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 135.130100][ T6399] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 135.150067][ T6399] macvlan2: entered promiscuous mode [ 135.155559][ T6399] macvlan2: entered allmulticast mode [ 135.162996][ T6399] bond2: entered promiscuous mode [ 135.168317][ T6399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.176737][ T6399] bond2: left promiscuous mode [ 135.224552][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.562367][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1019'. [ 136.567603][ T28] audit: type=1400 audit(1784854705.588:4317): avc: denied { create } for pid=6430 comm="syz.3.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 136.593546][ T6431] loop3: detected capacity change from 0 to 128 [ 137.907210][ T6407] loop4: detected capacity change from 0 to 1024 [ 138.072678][ T6407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.152934][ T6407] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.441317][ T6450] loop0: detected capacity change from 0 to 512 [ 138.500347][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.539531][ T6450] EXT4-fs (loop0): 1 orphan inode deleted [ 138.715390][ T6450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.917031][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.162912][ T28] audit: type=1326 audit(1784854964.189:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.212498][ T28] audit: type=1326 audit(1784854964.219:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.377179][ T28] audit: type=1326 audit(1784854964.399:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.495331][ T28] audit: type=1326 audit(1784854964.399:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.536806][ T6487] loop1: detected capacity change from 0 to 512 [ 139.573225][ T6487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.600284][ T6487] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.608334][ T28] audit: type=1326 audit(1784854964.479:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.642819][ T28] audit: type=1326 audit(1784854964.479:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.668462][ T28] audit: type=1326 audit(1784854964.479:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.694932][ T28] audit: type=1326 audit(1784854964.479:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.781480][ T28] audit: type=1326 audit(1784854964.479:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 139.911710][ T28] audit: type=1326 audit(1784854964.489:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6479 comm="syz.2.1041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f75388ede99 code=0x7ffc0000 [ 140.215416][ T6506] loop4: detected capacity change from 0 to 512 [ 140.224643][ T6506] ext4: Unknown parameter 'nolazytime.orlov' [ 140.330022][ T6506] Invalid option length (141) for dns_resolver key [ 140.378370][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.474410][ T6518] loop4: detected capacity change from 0 to 512 [ 140.488213][ T6518] EXT4-fs (loop4): 1 orphan inode deleted [ 140.494726][ T6518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.340777][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.449912][ T6529] : port 1(ip6gretap0) entered blocking state [ 141.459576][ T6529] : port 1(ip6gretap0) entered disabled state [ 141.466096][ T6529] ip6gretap0: entered allmulticast mode [ 141.473605][ T6529] ip6gretap0: entered promiscuous mode [ 141.482956][ T6528] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1054'. [ 141.517680][ T6530] ip6gretap0: left allmulticast mode [ 141.546494][ T6530] ip6gretap0: left promiscuous mode [ 141.570647][ T6530] : port 1(ip6gretap0) entered disabled state [ 141.609584][ T6542] macsec0: entered promiscuous mode [ 141.620118][ T6542] macsec0: entered allmulticast mode [ 141.659554][ T6542] veth1_macvtap: entered allmulticast mode [ 141.680855][ T6546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 141.713621][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 143.135271][ T6580] team_slave_1: Caught tx_queue_len zero misconfig [ 144.873187][ T6637] mmap: syz.2.1090 (6637) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 144.926550][ T6639] loop0: detected capacity change from 0 to 512 [ 144.945025][ T6639] EXT4-fs (loop0): bad s_min_extra_isize: 65535 [ 145.141945][ T6639] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1091'. [ 145.157629][ T6644] loop3: detected capacity change from 0 to 512 [ 145.715572][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'. [ 145.983648][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 145.983667][ T28] audit: type=1400 audit(1784854971.009:4352): avc: denied { associate } for pid=6651 comm="syz.0.1096" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 146.045125][ T6644] ================================================================== [ 146.053285][ T6644] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 146.060716][ T6644] [ 146.063068][ T6644] read-write to 0xffff88811ae25228 of 8 bytes by interrupt on cpu 1: [ 146.071159][ T6644] __xa_clear_mark+0xf5/0x1e0 [ 146.075886][ T6644] __folio_end_writeback+0xf4/0x360 [ 146.081135][ T6644] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 146.087441][ T6644] folio_end_writeback+0x1c/0x70 [ 146.092438][ T6644] mpage_write_end_io+0x245/0x4c0 [ 146.097510][ T6644] bio_endio+0x35b/0x3f0 [ 146.101795][ T6644] blk_update_request+0x338/0x710 [ 146.102672][ T6656] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1098'. [ 146.106866][ T6644] blk_mq_end_request+0x26/0x50 [ 146.106897][ T6644] lo_complete_rq+0x98/0x130 [ 146.106926][ T6644] blk_done_softirq+0x77/0xb0 [ 146.106965][ T6644] handle_softirqs+0xb9/0x280 [ 146.106990][ T6644] run_ksoftirqd+0x1c/0x30 [ 146.107018][ T6644] smpboot_thread_fn+0x32a/0x510 [ 146.107062][ T6644] kthread+0x221/0x270 [ 146.107084][ T6644] ret_from_fork+0x146/0x330 [ 146.107122][ T6644] ret_from_fork_asm+0x1a/0x30 [ 146.107154][ T6644] [ 146.107163][ T6644] read to 0xffff88811ae25228 of 8 bytes by task 6644 on cpu 0: [ 146.107184][ T6644] xas_find_marked+0x211/0x650 [ 146.107211][ T6644] filemap_get_folios_tag+0xf7/0x400 [ 146.107258][ T6644] filemap_write_and_wait_range+0x1f5/0x370 [ 146.107301][ T6644] direct_write_fallback+0x73/0x100 [ 146.107338][ T6644] __generic_file_write_iter+0xfd/0x120 [ 146.107365][ T6644] generic_file_write_iter+0x77/0x1f0 [ 146.107395][ T6644] do_iter_readv_writev+0x4f6/0x5a0 [ 146.107424][ T6644] vfs_writev+0x2d1/0x8b0 [ 146.107456][ T6644] __se_sys_pwritev2+0xfc/0x1c0 [ 146.107486][ T6644] __x64_sys_pwritev2+0x67/0x80 [ 146.107516][ T6644] x64_sys_call+0xe07/0x3020 [ 146.107548][ T6644] do_syscall_64+0x136/0x3c0 [ 146.107588][ T6644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.107618][ T6644] [ 146.107624][ T6644] value changed: 0xfffff80000000000 -> 0xffe0000000000000 [ 146.107641][ T6644] [ 146.107646][ T6644] Reported by Kernel Concurrency Sanitizer on: [ 146.107665][ T6644] CPU: 0 UID: 0 PID: 6644 Comm: syz.3.1094 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 146.107707][ T6644] Tainted: [W]=WARN [ 146.107717][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 146.107735][ T6644] ================================================================== [ 146.151812][ T6654] loop4: detected capacity change from 0 to 8192 [ 146.304468][ T28] audit: type=1400 audit(1784854971.329:4353): avc: denied { write } for pid=6653 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 146.391849][ T28] audit: type=1400 audit(1784854971.409:4354): avc: denied { remount } for pid=6653 comm="syz.4.1097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1