last executing test programs: 53.904161567s ago: executing program 4 (id=371): r0 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, &(0x7f0000000140), &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c4947d3"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x4000000) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syz_tun\x00'}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x3, 0x5003) ptrace$cont(0x21, r1, 0x80000001, 0x4) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, &(0x7f00000000c0)=0x19029) 53.724316s ago: executing program 4 (id=373): socket$inet(0x2, 0x4000000000000001, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2c}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x8402219, 0x4fce, 0x3b, 0x0, 0x0) 53.449306107s ago: executing program 4 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.522292348s ago: executing program 4 (id=382): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) getdents(r0, 0x0, 0x0) 52.112973667s ago: executing program 4 (id=388): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) 51.822035164s ago: executing program 4 (id=396): ioctl$KDDELIO(0xffffffffffffffff, 0x7040, 0x6) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0x44000, 0x0) socket(0x23, 0x2, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x4e, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$unix(0x1, 0x1, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) listns(&(0x7f0000000040)={0x20, 0x0, 0x10, 0x40000000}, 0x0, 0xf4240, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) bpf$MAP_CREATE(0x0, 0x0, 0x48) 51.821854024s ago: executing program 32 (id=396): ioctl$KDDELIO(0xffffffffffffffff, 0x7040, 0x6) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0x44000, 0x0) socket(0x23, 0x2, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x4e, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$unix(0x1, 0x1, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) listns(&(0x7f0000000040)={0x20, 0x0, 0x10, 0x40000000}, 0x0, 0xf4240, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) bpf$MAP_CREATE(0x0, 0x0, 0x48) 8.122436535s ago: executing program 2 (id=916): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xe) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x808e, &(0x7f0000000040)={[{@init_itable}]}, 0x1, 0x627, &(0x7f00000007c0)="$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") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x8, 0x13012, r1, 0x0) mprotect(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0xffffffff, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 6.992271511s ago: executing program 2 (id=912): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2904a3b527f1005) syz_create_resource$binfmt(0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) 6.122977681s ago: executing program 2 (id=926): pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x10005) 6.064026393s ago: executing program 2 (id=929): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x849d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 5.825508098s ago: executing program 2 (id=936): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB, @ANYRES64], 0x72) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 5.545592974s ago: executing program 2 (id=942): syz_usb_connect$uac3(0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000666000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000826000/0x2000)=nil, &(0x7f0000a68000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x2235, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x4932, 0x4) io_uring_enter(r1, 0x4c08, 0x57b7, 0x14, 0x0, 0x0) 4.158012175s ago: executing program 5 (id=960): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 4.034173888s ago: executing program 5 (id=962): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x2001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x86, 0x5, 0xfff, 0x4, 0x8, 0x9, 0xfffffffe, 0x92e}}) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time}], 0x38) 3.442102202s ago: executing program 3 (id=963): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x4480, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 3.117513689s ago: executing program 3 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 3.054557051s ago: executing program 5 (id=967): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000003c0), 0x1, 0x5a3, &(0x7f0000001040)="$eJzs3U9oHFUYAPBvZrNN/0RTQUGlh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3btIkW7O/H0z2vZnZ+d6b2e9lZ5hhA+hZh+t/0ojnIuJ8EjG4ZllfZAsPN9ZbXloo3l1aKCZRq134I4kkIu4sLRSb6yfZ64GIWIyIZyPih3zE0XR1k3uaherc/MRouVyazupDM5O5rDg6XhovTZ149bVTp0+eGjk+sra5d2tra/mN9fXar9c/vPbTGzevf/nVocXix6NJnImBbNnafmylxj7Jx5l1809uR7AuSrrdADYll+V5PZWeicHIZVnfSm3t4NC/I80DtlGtP6K2ak0R6AGJpIce1fweUD//bU47+f3j1tnGCUg97vLSQvGDaMbva1ybiL0r5yb7/0zuOzOpn28e3MmGsistXo2I4b6+Bz//Sfb527zhrWgg2+r7s40D9eDxT1fHn2gx/gw0r50+oub4t5yNf8st4ufajH/nO4zx99u/fdY2/tX+eL5l/GQ1ftIifhoR73YY/8Zb355ut6z2ecSRaB2/KWlcH748VJ2bP3Zpcv314aGLl8ql4cbfljG+O3Lo9fb9j9jfJn7jmu3elYas7f+erE1ph/3/5sevX1h8SPyXX3z48W+1//dFxEcdxn/qzhdvtlt262pyu/4tYKPHP4l83Oww/itnDv+SFV01BAAAAAAAAACALZSu3MuWpIXVcpoWCo1neJ+O/Wm5Up05erEyOzXWuOftYOTT5p1Wg416Uq+PZPfjNuvH19VPNJ/uze1bqReKlfJYl/sOAAAAAAAAAAAAAAAAAAAAj4sD657//yu38vz/+p+rBnar9j/5Dex28h961/35n3StHcDO8/8felZN/kPvkv/Qu+Q/9C75D71L/kPvkv/Qu+Q/AAAAAAAAAAAAAAAAAAAAAAAAAABsi/PnztWn2t2lhWK9PtY3NztRee/YWKk6UZicLRaKlenLhfFKZbxcKhQrk/+1vaRSuTwcU7NXhmZK1Zmh6tz8O5OV2anmb4qW8tveIwAAAAAAAAAAAAAAAAAAAPj/GViZkrQQkW/U07RQiHgiIg4mkVy8VC4NR8STEfFzLt9fr490u9EAAAAAAAAAAAAAAAAAAACwy1Tn5idGy+XSdMtC0n5R54W+LNSjbmdLCn0bWTkiFre2GfUtbvhd+WwHdnnX7Y5C7vH4HD7+hS4OSgAAAAAAAAAAAAAAAAAA0KPuPfTb6Tv+2d4GAQAAAAAAAAAAAAAAAAAAQE9Kf08ioj4dGXxpYP3SPclybuU1It6/ceGTK6MzM9Mj9fm3V+fPfJrNP96N9gOdauZpGhH1PAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuqc7NT4yWy6XpTRb6O1in230EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Ix/AwAA//9q8Mri") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x80) write$cgroup_int(r0, &(0x7f0000000280)=0x1ae, 0xfffffe72) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newsa={0x1a8, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private2, 0x0, 0x0, 0xfffe, 0x1000, 0x0, 0x0, 0x0, 0x2f}, {@in=@multicast1, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x1000000000, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x6a, 0x2, {{'cbc(aes)\x00'}, 0x110, "5540907f362dd81951638432adc2b330862592aac15cef2adcba13b2ac41daa07200"}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) pwrite64(r1, 0x0, 0x0, 0x9000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.917509824s ago: executing program 1 (id=969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.473586074s ago: executing program 3 (id=971): openat$nvram(0xffffffffffffff9c, 0x0, 0x600980, 0x0) syz_pidfd_open(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) 2.355414817s ago: executing program 0 (id=972): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c40)=@newtaction={0x14, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 1.235130072s ago: executing program 3 (id=973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x7) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000080), &(0x7f0000000840)=r2}, 0x20) 1.095858345s ago: executing program 1 (id=974): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x5}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, 0x0, 0xc1000) socket$inet6(0xa, 0x1, 0x8000000003c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.095668805s ago: executing program 3 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) 1.095514655s ago: executing program 5 (id=977): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000040000006240"], 0x18}, 0x3400c8d4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) pipe(0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @random="72b5773ca0b8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) 913.753019ms ago: executing program 5 (id=978): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) getsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) 798.173622ms ago: executing program 5 (id=979): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x81, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCUNBRIDGECHAN(r1, 0x7434) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) epoll_create1(0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 746.475383ms ago: executing program 1 (id=980): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 581.655257ms ago: executing program 1 (id=981): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x10000, &(0x7f00000007c0)={[{@sb={'sb', 0x3d, 0xf973}}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x849f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x2900, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 336.573792ms ago: executing program 0 (id=982): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x83, 0x0, 0x0) close(r0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) connect$unix(r0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 263.444214ms ago: executing program 0 (id=983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 198.150775ms ago: executing program 3 (id=984): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) 185.047126ms ago: executing program 0 (id=985): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24020000, 0x0, @perf_bp={0x0, 0x8}, 0x8040, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x7, 0x7, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 184.891786ms ago: executing program 1 (id=986): socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x60184, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={&(0x7f0000000300), 0x6}, 0x400, 0x0, 0x7, 0x4, 0x200, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000840)=0xfffffffffffffffd, 0x8, 0x1) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000001f40)=0x3, 0xfff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 90.014908ms ago: executing program 1 (id=987): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x31e9, 0x3}, 0x1400, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafbffff7ffffffff, 0xffffffffffffffff, 0x3) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000180200002020702500000000002020"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 89.443338ms ago: executing program 0 (id=988): setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(&(0x7f0000000080)='./file0\x00', 0x6) fcntl$setlease(r0, 0x400, 0x2) 0s ago: executing program 0 (id=989): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socket$qrtr(0x2a, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): ive=1 [ 42.213058][ T28] audit: type=1400 audit(1783599870.536:230): avc: denied { write } for pid=3722 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.415626][ T3733] loop3: detected capacity change from 0 to 128 [ 42.853419][ T3753] loop1: detected capacity change from 0 to 1024 [ 42.870684][ T3753] ======================================================= [ 42.870684][ T3753] WARNING: The mand mount option has been deprecated and [ 42.870684][ T3753] and is ignored by this kernel. Remove the mand [ 42.870684][ T3753] option from the mount to silence this warning. [ 42.870684][ T3753] ======================================================= [ 42.944311][ T3753] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 42.999264][ T3753] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.91: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.026144][ T3753] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.026339][ T3753] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.91: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.035587][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 43.035609][ C1] EXT4-fs (loop1): initial error at time 1783599871: ext4_map_blocks:791: inode 3: block 2 [ 43.035650][ C1] EXT4-fs (loop1): last error at time 1783599871: ext4_map_blocks:791: inode 3: block 2 [ 43.120850][ T3753] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.128346][ T3753] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.91: Failed to acquire dquot type 0 [ 43.152538][ T3753] loop1: lost filesystem error report for type 5 error -117 [ 43.154001][ T3753] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 43.182454][ T3753] loop1: lost filesystem error report for type 5 error -117 [ 43.196948][ T3753] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.91: mark_inode_dirty error [ 43.215986][ T3753] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 43.216156][ T3753] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 43.257724][ T3753] EXT4-fs (loop1): 1 orphan inode deleted [ 43.265486][ T3753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.283377][ T12] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.321268][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 43.378919][ T3771] netlink: 'syz.3.97': attribute type 3 has an invalid length. [ 43.387479][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.396581][ T3771] netlink: 24 bytes leftover after parsing attributes in process `syz.3.97'. [ 43.406023][ T12] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.422471][ T3771] Zero length message leads to an empty skb [ 43.428832][ T12] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.428945][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 43.449781][ T12] loop1: lost filesystem error report for type 5 error -117 [ 43.450142][ T3302] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 43.480166][ T3302] loop1: lost filesystem error report for type 5 error -117 [ 43.480287][ T3302] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 43.497559][ T3302] loop1: lost filesystem error report for type 5 error -117 [ 43.497712][ T3302] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 43.516377][ T3302] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.784335][ T3801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 43.821903][ T3801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.107'. [ 44.006091][ T3809] netlink: 92 bytes leftover after parsing attributes in process `syz.2.110'. [ 44.213649][ T3814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.239261][ T3814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.274421][ T3814] loop2: detected capacity change from 0 to 7 [ 44.281868][ T3814] loop2: [ 44.938059][ T3834] loop2: detected capacity change from 0 to 1024 [ 44.964349][ T3834] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.989571][ T3834] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.121: Invalid block bitmap block 0 in block_group 0 [ 45.009702][ T3834] loop2: lost filesystem error report for type 5 error -117 [ 45.009883][ T3834] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.121: Failed to acquire dquot type 0 [ 45.028434][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 45.028454][ C1] EXT4-fs (loop2): initial error at time 1783599873: ext4_read_block_bitmap_nowait:483 [ 45.028483][ C1] EXT4-fs (loop2): last error at time 1783599873: ext4_read_block_bitmap_nowait:483 [ 45.057370][ T3839] netlink: 'syz.3.118': attribute type 10 has an invalid length. [ 45.068993][ T3834] loop2: lost filesystem error report for type 5 error -117 [ 45.069331][ T3834] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.121: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.093734][ T3834] loop2: lost filesystem error report for type 5 error -117 [ 45.095619][ T3834] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.121: Invalid inode bitmap blk 0 in block_group 0 [ 45.115855][ T3834] loop2: lost filesystem error report for type 5 error -117 [ 45.116735][ T3839] team0 (unregistering): Port device team_slave_0 removed [ 45.131914][ T3440] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 45.131937][ T3834] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 45.143480][ T3834] loop2: lost filesystem error report for type 5 error -117 [ 45.152292][ T3834] EXT4-fs (loop2): 1 orphan inode deleted [ 45.169848][ T3834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.184884][ T3839] team0 (unregistering): Port device team_slave_1 removed [ 45.291721][ T3834] syz.2.121 (3834) used greatest stack depth: 9872 bytes left [ 45.302536][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.751971][ T3856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 46.151905][ T3861] tipc: Started in network mode [ 46.157215][ T3861] tipc: Node identity 625c982868a5, cluster identity 4711 [ 46.164810][ T3861] tipc: Enabled bearer , priority 0 [ 46.202841][ T3861] syzkaller0: entered promiscuous mode [ 46.214784][ T3861] syzkaller0: entered allmulticast mode [ 46.226829][ T3861] tipc: Resetting bearer [ 46.251353][ T12] tipc: Resetting bearer [ 46.262875][ T3860] tipc: Resetting bearer [ 46.285051][ T3860] tipc: Disabling bearer [ 46.327310][ T3870] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 46.342356][ T3870] bond1: entered promiscuous mode [ 46.348405][ T3870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.367049][ T3869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 46.401935][ T3870] bond1: (slave bridge1): making interface the new active one [ 46.409550][ T3870] bridge1: entered promiscuous mode [ 46.416502][ T3870] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 46.656720][ T3876] loop1: detected capacity change from 0 to 512 [ 46.695443][ T3876] EXT4-fs: Ignoring removed bh option [ 46.727524][ T3876] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 46.758869][ T3876] EXT4-fs (loop1): 1 truncate cleaned up [ 46.789160][ T3876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.849125][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.928225][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 46.928245][ T28] audit: type=1400 audit(1783599875.256:258): avc: denied { create } for pid=3892 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.955074][ T3893] netlink: 'syz.1.142': attribute type 1 has an invalid length. [ 47.007753][ T3893] netlink: 'syz.1.142': attribute type 10 has an invalid length. [ 47.015863][ T3893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.142'. [ 47.025054][ T3893] dummy0: entered promiscuous mode [ 47.447885][ T28] audit: type=1400 audit(1783599875.766:259): avc: denied { create } for pid=3907 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.487532][ T3910] netlink: 'syz.1.148': attribute type 1 has an invalid length. [ 47.508684][ T3910] vlan2: entered allmulticast mode [ 47.513925][ T3910] veth0_macvtap: entered allmulticast mode [ 47.584418][ T3903] loop3: detected capacity change from 0 to 512 [ 47.613246][ T3903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.627302][ T3903] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 47.825752][ T3924] loop2: detected capacity change from 0 to 256 [ 47.841042][ T3924] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.035841][ T3934] netlink: 'syz.4.157': attribute type 10 has an invalid length. [ 48.055542][ T3933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'. [ 48.069407][ T3934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.157'. [ 48.078844][ T3934] team0: entered promiscuous mode [ 48.084088][ T3934] team_slave_0: entered promiscuous mode [ 48.091360][ T3934] team_slave_1: entered promiscuous mode [ 48.097243][ T3934] team0: entered allmulticast mode [ 48.103008][ T3934] team_slave_0: entered allmulticast mode [ 48.109344][ T3934] team_slave_1: entered allmulticast mode [ 48.116596][ T3934] bridge0: port 3(team0) entered blocking state [ 48.123617][ T3934] bridge0: port 3(team0) entered disabled state [ 48.133272][ T3934] bridge0: port 3(team0) entered blocking state [ 48.139644][ T3934] bridge0: port 3(team0) entered forwarding state [ 48.171486][ T28] audit: type=1400 audit(1783599876.496:260): avc: denied { create } for pid=3937 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.199887][ T28] audit: type=1400 audit(1783599876.526:261): avc: denied { mount } for pid=3911 comm="syz.3.149" name="/" dev="autofs" ino=5692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 48.341016][ T28] audit: type=1400 audit(1783599876.666:262): avc: denied { perfmon } for pid=3944 comm="syz.3.163" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.562445][ T28] audit: type=1400 audit(1783599876.886:263): avc: denied { bpf } for pid=3952 comm="syz.3.166" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.986199][ T3965] loop3: detected capacity change from 0 to 512 [ 49.048349][ T3965] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.063209][ T3965] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.153910][ T3965] EXT4-fs (loop3): 1 truncate cleaned up [ 49.167597][ T3965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.194860][ T28] audit: type=1400 audit(1783599877.516:264): avc: denied { bind } for pid=3964 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.246991][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.293307][ T28] audit: type=1400 audit(1783599877.616:265): avc: denied { read } for pid=3968 comm="syz.0.174" path="socket:[5758]" dev="sockfs" ino=5758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.372380][ T28] audit: type=1400 audit(1783599877.696:266): avc: denied { create } for pid=3973 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 49.432238][ T28] audit: type=1400 audit(1783599877.726:267): avc: denied { sys_admin } for pid=3973 comm="syz.0.175" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 49.909282][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bc7e000: rx timeout, send abort [ 50.128590][ T4005] loop1: detected capacity change from 0 to 1024 [ 50.160914][ T4005] EXT4-fs: Ignoring removed bh option [ 50.182369][ T4005] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 50.258631][ T4005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.408436][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bacfc00: rx timeout, send abort [ 50.417686][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bc7e000: abort rx timeout. Force session deactivation [ 50.665568][ T4005] syz.1.186 (4005) used greatest stack depth: 9856 bytes left [ 50.917322][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811bacfc00: abort rx timeout. Force session deactivation [ 50.937242][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.191365][ T4057] tmpfs: Bad value for 'mpol' [ 52.183091][ T4089] loop1: detected capacity change from 0 to 512 [ 52.215493][ T4089] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.211: inode has both inline data and extents flags [ 52.255635][ T4089] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.256968][ T4089] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.211: couldn't read orphan inode 15 (err -117) [ 52.266209][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 52.266229][ C1] EXT4-fs (loop1): initial error at time 1783599880: ext4_orphan_get:1399: inode 15 [ 52.266277][ C1] EXT4-fs (loop1): last error at time 1783599880: ext4_orphan_get:1399: inode 15 [ 52.307664][ T4089] fserror_report: 1 callbacks suppressed [ 52.307684][ T4089] loop1: lost filesystem error report for type 5 error -117 [ 52.326040][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.377060][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 52.377080][ T28] audit: type=1400 audit(1783599880.696:306): avc: denied { write } for pid=4088 comm="syz.1.211" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.465971][ T28] audit: type=1400 audit(1783599880.736:307): avc: denied { append } for pid=4088 comm="syz.1.211" path="/42/file1/cpuacct.usage_percpu_user" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.494542][ T28] audit: type=1400 audit(1783599880.786:308): avc: denied { map } for pid=4088 comm="syz.1.211" path="/42/file1/cpuacct.usage_percpu_user" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.587018][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.702217][ T4103] netlink: 'syz.1.216': attribute type 39 has an invalid length. [ 52.764759][ T4111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 53.061312][ T4123] loop0: detected capacity change from 0 to 128 [ 53.082520][ T4123] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 53.101304][ T4123] FAT-fs (loop0): Filesystem has been set read-only [ 53.271702][ T28] audit: type=1400 audit(1783599881.596:309): avc: denied { block_suspend } for pid=4126 comm="syz.0.226" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.441742][ T4113] loop4: detected capacity change from 0 to 512 [ 53.658429][ T28] audit: type=1400 audit(1783599881.986:310): avc: denied { write } for pid=4139 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.691153][ T4113] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.826097][ T4113] EXT4-fs (loop4): 1 truncate cleaned up [ 53.857112][ T4113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.926540][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.012896][ T4150] syzkaller0: entered promiscuous mode [ 54.021252][ T28] audit: type=1400 audit(1783599882.346:311): avc: denied { read write } for pid=4151 comm="syz.4.231" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.049651][ T4150] syzkaller0: entered allmulticast mode [ 54.076509][ T28] audit: type=1400 audit(1783599882.346:312): avc: denied { open } for pid=4151 comm="syz.4.231" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 54.125268][ T28] audit: type=1400 audit(1783599882.386:313): avc: denied { relabelfrom } for pid=4149 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.179519][ T28] audit: type=1400 audit(1783599882.386:314): avc: denied { relabelto } for pid=4149 comm="syz.1.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.219266][ T28] audit: type=1400 audit(1783599882.476:315): avc: denied { create } for pid=4151 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.270490][ T4159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 54.692007][ T4172] loop2: detected capacity change from 0 to 512 [ 54.717157][ T4172] ext4: Unknown parameter 'smackfstransmute' [ 54.717522][ T4161] loop1: detected capacity change from 0 to 512 [ 54.860243][ T4182] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.242'. [ 54.862499][ T4161] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.888493][ T4161] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 54.899621][ T4161] System zones: 0-1, 15-15, 18-18, 34-34 [ 54.909087][ T4161] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.913565][ T4182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.242'. [ 54.916238][ T4161] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.959442][ T4161] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 54.972902][ T4161] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.235: bad orphan inode 16 [ 54.983531][ T4161] loop1: lost filesystem error report for type 5 error -117 [ 54.984583][ T4161] ext4_test_bit(bit=15, block=18) = 1 [ 54.992692][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 54.992780][ C0] EXT4-fs (loop1): initial error at time 1783599883: ext4_orphan_get:1425 [ 54.992889][ C0] EXT4-fs (loop1): last error at time 1783599883: ext4_orphan_get:1425 [ 55.031527][ T4161] is_bad_inode(inode)=0 [ 55.044844][ T4161] NEXT_ORPHAN(inode)=0 [ 55.060727][ T4161] max_ino=32 [ 55.065721][ T4161] i_nlink=2 [ 55.101386][ T4161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.132215][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 55.150901][ T4161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'. [ 55.169934][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 55.191568][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 55.221320][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.231477][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 55.253409][ T4194] loop3: detected capacity change from 0 to 1024 [ 55.287391][ T4190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 55.289056][ T4194] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 55.324849][ T4194] System zones: 0-1, 3-8 [ 55.361900][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.418936][ T4194] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.434926][ T4206] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.620449][ T12] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 55.640238][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 55.668182][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.668182][ T12] [ 55.699547][ T12] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 55.737141][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 55.765386][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.765386][ T12] [ 55.796877][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 55.817565][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.949018][ T4138] loop0: detected capacity change from 0 to 512 [ 56.179100][ T4234] loop2: detected capacity change from 0 to 512 [ 56.210508][ T4234] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.261: inode has both inline data and extents flags [ 56.254076][ T4234] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.254230][ T4234] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.261: couldn't read orphan inode 15 (err -117) [ 56.263441][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 56.263466][ C0] EXT4-fs (loop2): initial error at time 1783599884: ext4_orphan_get:1399: inode 15 [ 56.263503][ C0] EXT4-fs (loop2): last error at time 1783599884: ext4_orphan_get:1399: inode 15 [ 56.302537][ T4234] loop2: lost filesystem error report for type 5 error -117 [ 56.303148][ T4234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.670951][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.117189][ T4273] netlink: 'syz.4.275': attribute type 21 has an invalid length. [ 57.135675][ T4273] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.154505][ T4273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.161944][ T4273] IPv6: NLM_F_CREATE should be set when creating new route [ 57.169480][ T4273] IPv6: NLM_F_CREATE should be set when creating new route [ 57.176833][ T4273] IPv6: NLM_F_CREATE should be set when creating new route [ 57.186345][ T4275] netlink: 'syz.4.275': attribute type 21 has an invalid length. [ 57.199193][ T4269] loop2: detected capacity change from 0 to 512 [ 57.206366][ T4275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.209303][ T4269] EXT4-fs (loop2): unable to read superblock [ 57.286590][ T4273] vlan2: entered promiscuous mode [ 57.319822][ T4273] bridge0: entered promiscuous mode [ 57.345939][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.360869][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.380308][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.388239][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.396150][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.405768][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.413741][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.447798][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.468517][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.468567][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 57.468582][ T28] audit: type=1326 audit(1783599885.796:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x0 [ 57.476535][ T3404] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 57.544667][ T3404] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 57.581974][ T28] audit: type=1326 audit(1783599885.906:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 57.626053][ T4289] fido_id[4289]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.655740][ T28] audit: type=1326 audit(1783599885.906:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 57.688987][ T28] audit: type=1326 audit(1783599885.906:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 57.726258][ T28] audit: type=1326 audit(1783599885.906:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 57.752235][ T28] audit: type=1326 audit(1783599885.936:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 57.778665][ T28] audit: type=1326 audit(1783599885.946:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecf32fe68e code=0x7ffc0000 [ 57.805199][ T28] audit: type=1326 audit(1783599885.946:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecf32fe68e code=0x7ffc0000 [ 57.831129][ T28] audit: type=1326 audit(1783599885.946:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecf32fe68e code=0x7ffc0000 [ 57.857304][ T28] audit: type=1326 audit(1783599885.966:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4284 comm="syz.2.281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fecf32fe68e code=0x7ffc0000 [ 58.403230][ T4299] loop1: detected capacity change from 0 to 1024 [ 58.450443][ T4299] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 58.567018][ T4310] batadv_slave_1: entered promiscuous mode [ 58.585697][ T4299] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 58.613017][ T4299] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 58.642819][ T4299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.718572][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.788026][ T4320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.813940][ T4320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.844615][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.865704][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.880624][ T4325] tipc: Failed to remove unknown binding: 66,0,0/0:1422397622/1422397623 [ 58.898060][ T4320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.905872][ T4325] tipc: Failed to remove unknown binding: 66,0,0/0:1422397622/1422397623 [ 58.919983][ T4320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.907059][ T4323] loop1: detected capacity change from 0 to 512 [ 60.171516][ T4352] __nla_validate_parse: 51 callbacks suppressed [ 60.171539][ T4352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.305'. [ 60.358047][ T4361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.309'. [ 60.450486][ T4361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4361 comm=syz.1.309 [ 60.578224][ T4374] loop4: detected capacity change from 0 to 1024 [ 60.593093][ T4374] EXT4-fs: Ignoring removed orlov option [ 60.623169][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.664118][ T4384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.319'. [ 60.702816][ T4374] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 60.752067][ T4392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.320'. [ 60.784722][ T4392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4392 comm=syz.1.320 [ 60.789571][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b053c00: rx timeout, send abort [ 60.805756][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811b053c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 60.820229][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811b053e00: rx timeout, send abort [ 60.828619][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811b053e00: 0x0ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 61.096575][ T4417] loop3: detected capacity change from 0 to 8192 [ 61.192663][ T4415] tipc: Started in network mode [ 61.202122][ T4415] tipc: Node identity , cluster identity 4711 [ 61.211340][ T4415] tipc: Failed to set node id, please configure manually [ 61.219379][ T4415] tipc: Enabling of bearer rejected, failed to enable media [ 61.239733][ T4423] loop3: detected capacity change from 0 to 2048 [ 61.246824][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.276823][ T4423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.321676][ T4423] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.352238][ T4423] veth0_macvtap: left promiscuous mode [ 61.554951][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.650336][ T4442] netlink: 'syz.4.339': attribute type 1 has an invalid length. [ 61.675792][ T4442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.711540][ T4442] bond1: (slave veth0_to_bond): making interface the new active one [ 61.722174][ T4442] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 61.771124][ T4452] syzkaller0: entered promiscuous mode [ 61.776830][ T4452] syzkaller0: entered allmulticast mode [ 61.808949][ T4456] netlink: 'syz.4.341': attribute type 20 has an invalid length. [ 61.818700][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 61.835367][ T4456] netlink: 'syz.4.341': attribute type 20 has an invalid length. [ 61.841559][ T3440] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.845420][ T4456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 61.861496][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.875311][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.904436][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.997384][ T3019] veth0_macvtap: entered promiscuous mode [ 62.902146][ T4507] syzkaller0: entered promiscuous mode [ 62.911009][ T4507] syzkaller0: entered allmulticast mode [ 62.965470][ T12] syzkaller0: tun_net_xmit 48 [ 63.535610][ T4519] loop0: detected capacity change from 0 to 8192 [ 63.587904][ T4523] netlink: 'syz.2.358': attribute type 21 has an invalid length. [ 63.587951][ T4523] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.588096][ T4523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.588131][ T4523] IPv6: NLM_F_CREATE should be set when creating new route [ 63.588169][ T4523] IPv6: NLM_F_CREATE should be set when creating new route [ 63.588294][ T4523] IPv6: NLM_F_CREATE should be set when creating new route [ 63.594844][ T4523] netlink: 'syz.2.358': attribute type 21 has an invalid length. [ 63.673185][ T4526] syzkaller0: entered promiscuous mode [ 63.683137][ T4526] syzkaller0: entered allmulticast mode [ 63.704467][ T4523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 63.754954][ T4521] tipc: Started in network mode [ 63.761609][ T4521] tipc: Node identity 461f2d2be38a, cluster identity 4711 [ 63.778835][ T4521] tipc: Enabled bearer , priority 0 [ 63.821582][ T4523] vlan2: entered promiscuous mode [ 63.841941][ T4523] bridge0: entered promiscuous mode [ 63.863903][ T4520] tipc: Resetting bearer [ 63.881596][ T4520] tipc: Disabling bearer [ 64.144991][ T4534] loop0: detected capacity change from 0 to 1024 [ 64.192021][ T4534] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 64.244690][ T4534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 64.270842][ T4534] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 64.306192][ T4534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.331619][ T28] kauditd_printk_skb: 320 callbacks suppressed [ 64.331633][ T28] audit: type=1400 audit(1783599892.656:721): avc: denied { ioctl } for pid=4557 comm="syz.4.371" path="socket:[11396]" dev="sockfs" ino=11396 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.467392][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.787504][ T4572] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 64.806223][ T4572] IPv6: NLM_F_CREATE should be specified when creating new route [ 64.814716][ T4572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.822067][ T4572] IPv6: NLM_F_CREATE should be set when creating new route [ 64.829421][ T4572] IPv6: NLM_F_CREATE should be set when creating new route [ 64.836777][ T4572] IPv6: NLM_F_CREATE should be set when creating new route [ 64.853484][ T4574] netlink: 'syz.3.375': attribute type 21 has an invalid length. [ 64.862168][ T4574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.325009][ T4574] vlan2: entered promiscuous mode [ 65.349876][ T4574] bridge0: entered promiscuous mode [ 65.400173][ T4582] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.378'. [ 65.464216][ T28] audit: type=1400 audit(1783599893.786:722): avc: denied { bind } for pid=4583 comm="syz.3.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.493185][ T4582] netlink: zone id is out of range [ 65.508759][ T4582] netlink: zone id is out of range [ 65.541035][ T4582] netlink: zone id is out of range [ 65.552623][ T28] audit: type=1400 audit(1783599893.816:723): avc: denied { node_bind } for pid=4583 comm="syz.3.379" src=32768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 65.578119][ T4584] capability: warning: `syz.3.379' uses 32-bit capabilities (legacy support in use) [ 65.630078][ T4582] netlink: zone id is out of range [ 65.635423][ T4582] netlink: zone id is out of range [ 65.640746][ T4582] netlink: zone id is out of range [ 65.645937][ T4582] netlink: zone id is out of range [ 65.651159][ T4582] netlink: zone id is out of range [ 65.656295][ T4582] netlink: zone id is out of range [ 65.661502][ T4582] netlink: zone id is out of range [ 65.714113][ T28] audit: type=1400 audit(1783599894.036:724): avc: denied { read write } for pid=4583 comm="syz.3.379" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.722324][ T4590] loop4: detected capacity change from 0 to 512 [ 65.755909][ T28] audit: type=1400 audit(1783599894.036:725): avc: denied { open } for pid=4583 comm="syz.3.379" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.791918][ T4590] EXT4-fs: Ignoring removed orlov option [ 65.797908][ T4590] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.817696][ T4590] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.382: corrupted in-inode xattr: e_value size too large [ 65.825218][ T28] audit: type=1400 audit(1783599894.146:726): avc: denied { mount } for pid=4588 comm="syz.1.381" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.832488][ T4590] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.853901][ T4590] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.382: couldn't read orphan inode 15 (err -117) [ 65.863111][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 65.863144][ C0] EXT4-fs (loop4): initial error at time 1783599894: ext4_iget_extra_inode:5180: inode 15 [ 65.863175][ C0] EXT4-fs (loop4): last error at time 1783599894: ext4_iget_extra_inode:5180: inode 15 [ 65.872023][ T28] audit: type=1400 audit(1783599894.196:727): avc: denied { mounton } for pid=4588 comm="syz.1.381" path="/82/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 65.876004][ T4590] loop4: lost filesystem error report for type 5 error -117 [ 65.924546][ T4590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.953350][ T28] audit: type=1400 audit(1783599894.276:728): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.980915][ T28] audit: type=1400 audit(1783599894.276:729): avc: denied { write } for pid=4587 comm="syz.4.382" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.002710][ T28] audit: type=1400 audit(1783599894.286:730): avc: denied { write } for pid=4587 comm="syz.4.382" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.037841][ T4590] loop4: detected capacity change from 512 to 64 [ 66.044646][ T4602] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 1: comm syz.4.382: error -ENOMEM reading directory block [ 66.074935][ T3296] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 1: comm syz-executor: error -ENOMEM reading directory block [ 66.101627][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.203015][ T4609] bond1 (unregistering): Released all slaves [ 66.433689][ T4626] loop3: detected capacity change from 0 to 8192 [ 66.699990][ T4627] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.707400][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.715079][ T4627] bridge_slave_0: entered allmulticast mode [ 66.721894][ T4627] bridge_slave_0: entered promiscuous mode [ 66.729301][ T4627] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.736595][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.743921][ T4627] bridge_slave_1: entered allmulticast mode [ 66.750728][ T4627] bridge_slave_1: entered promiscuous mode [ 66.775669][ T4627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.786604][ T4627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.807784][ T4627] team0: Port device team_slave_0 added [ 66.814928][ T4627] team0: Port device team_slave_1 added [ 66.832992][ T4627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.846299][ T4627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.872508][ T4627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.910750][ T4627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.919946][ T4627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.947491][ T4627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.015056][ T4662] netlink: 'syz.3.406': attribute type 7 has an invalid length. [ 67.026690][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.043888][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.055301][ T4662] netlink: 'syz.3.406': attribute type 7 has an invalid length. [ 67.066457][ T4627] hsr_slave_0: entered promiscuous mode [ 67.076856][ T4627] hsr_slave_1: entered promiscuous mode [ 67.083036][ T4627] debugfs: 'hsr0' already exists in 'hsr' [ 67.089191][ T4627] Cannot create hsr debugfs directory [ 67.094867][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.109987][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.120719][ T4666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.129152][ T4666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.137289][ T4666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.145035][ T4666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.182172][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.191710][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.198429][ T4670] loop2: detected capacity change from 0 to 512 [ 67.250612][ T4668] tap0: tun_chr_ioctl cmd 1074025677 [ 67.256125][ T4668] tap0: linktype set to 823 [ 67.331342][ T4627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.349885][ T4627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.359566][ T4627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.369696][ T4627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.377568][ T4627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.386715][ T4627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.394933][ T4627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.404461][ T4627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.468398][ T4627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.486402][ T4627] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.505779][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.512974][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.550743][ T4627] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.561427][ T4627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.396485][ T4627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.483131][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.490259][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.639845][ T4712] syzkaller0: tun_net_xmit 1 [ 68.649667][ T4706] tipc: Started in network mode [ 68.655033][ T4706] tipc: Node identity , cluster identity 4711 [ 68.663532][ T4706] tipc: Failed to set node id, please configure manually [ 68.671604][ T4706] tipc: Enabling of bearer rejected, failed to enable media [ 68.773248][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 68.791270][ T4723] bond0: option arp_all_targets: invalid value (18446744071562199044) [ 69.352552][ T4730] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 69.473108][ T4627] veth0_vlan: entered promiscuous mode [ 69.502883][ T4627] veth1_vlan: entered promiscuous mode [ 69.532913][ T4627] veth0_macvtap: entered promiscuous mode [ 69.551926][ T4627] veth1_macvtap: entered promiscuous mode [ 69.569487][ T4627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.594018][ T4627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.606125][ T404] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.615045][ T404] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.727972][ T404] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.740997][ T404] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.895513][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 69.895532][ T28] audit: type=1326 audit(1783599898.216:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 69.981053][ T28] audit: type=1326 audit(1783599898.246:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 70.050055][ T28] audit: type=1326 audit(1783599898.246:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 70.132435][ T28] audit: type=1326 audit(1783599898.246:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4737 comm="syz.0.421" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 70.192807][ T28] audit: type=1326 audit(1783599898.286:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.2.424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 70.254439][ T4756] syzkaller0: entered promiscuous mode [ 70.267694][ T4756] syzkaller0: entered allmulticast mode [ 70.308462][ T28] audit: type=1326 audit(1783599898.286:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.2.424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 70.374393][ T28] audit: type=1326 audit(1783599898.286:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.2.424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 70.414136][ T28] audit: type=1326 audit(1783599898.296:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.2.424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 70.445135][ T28] audit: type=1326 audit(1783599898.296:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.2.424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 70.503121][ T28] audit: type=1326 audit(1783599898.296:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.2.424" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 70.578883][ T4766] loop1: detected capacity change from 0 to 1024 [ 70.601904][ T4766] ext4: Unknown parameter 'subj_type' [ 70.636818][ T4770] loop3: detected capacity change from 0 to 256 [ 70.679801][ T4770] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.736913][ T4770] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.964249][ T4776] syzkaller0: entered promiscuous mode [ 70.976124][ T4776] syzkaller0: entered allmulticast mode [ 71.063705][ T4778] loop2: detected capacity change from 0 to 164 [ 71.090136][ T4778] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 71.316966][ T4762] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 72.028917][ T4805] syzkaller0: entered promiscuous mode [ 72.034511][ T4805] syzkaller0: entered allmulticast mode [ 72.053145][ T4809] process 'syz.1.446' launched './file0' with NULL argv: empty string added [ 72.815326][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 72.824454][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 72.876667][ T4849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 72.880369][ T4847] syzkaller1: entered promiscuous mode [ 72.891565][ T4847] syzkaller1: entered allmulticast mode [ 73.026340][ T4855] loop3: detected capacity change from 0 to 512 [ 73.040900][ T4855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.058719][ T4855] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 73.110353][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.156166][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 73.166196][ T4866] loop3: detected capacity change from 0 to 512 [ 73.181654][ T4866] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.463: bg 0: block 127: padding at end of block bitmap is not set [ 73.196063][ T4866] loop3: lost filesystem error report for type 5 error -117 [ 73.196376][ T4866] EXT4-fs (loop3): Remounting filesystem read-only [ 73.203767][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 73.203791][ C1] EXT4-fs (loop3): initial error at time 1783599901: ext4_validate_block_bitmap:441 [ 73.203826][ C1] EXT4-fs (loop3): last error at time 1783599901: ext4_validate_block_bitmap:441 [ 73.250199][ T4866] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.3.463: cleanup dec ref error -117 [ 73.297433][ T4866] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.310736][ T4866] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 73.320921][ T4866] EXT4-fs (loop3): 1 orphan inode deleted [ 73.327130][ T4866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.346518][ T4871] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 73.353118][ T4871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.375725][ T4871] vhci_hcd vhci_hcd.0: Device attached [ 73.390678][ T4871] 9pnet_fd: p9_fd_create_tcp (4871): problem connecting socket to 127.0.0.1 [ 73.414748][ T4871] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 73.421377][ T4871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.430570][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.440576][ T4871] vhci_hcd vhci_hcd.0: Device attached [ 73.455590][ T4871] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 73.462172][ T4871] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.481363][ T4871] vhci_hcd vhci_hcd.0: Device attached [ 73.495500][ T4880] vhci_hcd: connection closed [ 73.495676][ T4883] vhci_hcd: connection closed [ 73.497777][ T4872] vhci_hcd: connection closed [ 73.500772][ T404] vhci_hcd vhci_hcd.0: stop threads [ 73.515593][ T4886] loop1: detected capacity change from 0 to 512 [ 73.522698][ T4886] EXT4-fs: Ignoring removed nobh option [ 73.528454][ T404] vhci_hcd vhci_hcd.0: release socket [ 73.534239][ T404] vhci_hcd vhci_hcd.0: disconnect device [ 73.540909][ T404] vhci_hcd vhci_hcd.0: stop threads [ 73.543563][ T4886] EXT4-fs (loop1): orphan cleanup on readonly fs [ 73.546295][ T404] vhci_hcd vhci_hcd.0: release socket [ 73.558551][ T404] vhci_hcd vhci_hcd.0: disconnect device [ 73.564922][ T404] vhci_hcd vhci_hcd.0: stop threads [ 73.571349][ T404] vhci_hcd vhci_hcd.0: release socket [ 73.577190][ T404] vhci_hcd vhci_hcd.0: disconnect device [ 73.583293][ T4886] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #11: block 1: comm syz.1.471: lblock 0 mapped to illegal pblock 1 (length 1) [ 73.597471][ T4886] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.597948][ T4886] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.620108][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 73.620138][ C1] EXT4-fs (loop1): initial error at time 1783599901: ext4_map_blocks:791: inode 11: block 1 [ 73.620185][ C1] EXT4-fs (loop1): last error at time 1783599901: ext4_map_blocks:791: inode 11: block 1 [ 73.647063][ T3391] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 73.654477][ T3391] usb 1-1: enqueue for inactive port 0 [ 73.660132][ T3391] usb 1-1: enqueue for inactive port 0 [ 73.665825][ T3391] usb 1-1: enqueue for inactive port 0 [ 73.668014][ T4886] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.471: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 73.689497][ T4886] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 73.689666][ T4886] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.471: ea_inode dec ref err=-117 [ 73.729835][ T4886] EXT4-fs (loop1): 1 orphan inode deleted [ 73.737714][ T3391] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 73.745277][ T4892] bond2 (unregistering): Released all slaves [ 73.751803][ T4886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.854270][ T11] IPVS: starting estimator thread 0... [ 73.879600][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.957918][ T4898] IPVS: using max 2208 ests per chain, 110400 per kthread [ 74.277890][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.361522][ T4937] loop2: detected capacity change from 0 to 164 [ 74.374400][ T4939] netlink: 'syz.0.485': attribute type 4 has an invalid length. [ 74.638792][ T4953] loop5: detected capacity change from 0 to 1024 [ 74.650163][ T4953] ext4: Unknown parameter 'subj_type' [ 75.006437][ T4967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 75.035430][ T4967] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4967 comm=syz.1.496 [ 75.195884][ T4971] loop3: detected capacity change from 0 to 128 [ 75.227100][ T4977] bridge_slave_0: left allmulticast mode [ 75.234452][ T4977] bridge_slave_0: left promiscuous mode [ 75.247543][ T4977] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.257388][ T4971] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.273092][ T4971] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.274703][ T4977] bridge_slave_1: left allmulticast mode [ 75.318176][ T4977] bridge_slave_1: left promiscuous mode [ 75.324349][ T4977] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.340386][ T4977] bond0: (slave bond_slave_0): Releasing backup interface [ 75.367262][ T4977] bond0: (slave bond_slave_1): Releasing backup interface [ 75.383588][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 75.383604][ T28] audit: type=1400 audit(1783599904.703:954): avc: denied { read } for pid=4970 comm="syz.3.497" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.413304][ T28] audit: type=1400 audit(1783599904.713:955): avc: denied { open } for pid=4970 comm="syz.3.497" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.440577][ T4977] team0: Port device team_slave_0 removed [ 75.449615][ T28] audit: type=1400 audit(1783599904.723:956): avc: denied { ioctl } for pid=4970 comm="syz.3.497" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.485015][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.486824][ T4977] team0: Port device team_slave_1 removed [ 75.540536][ T4977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.558404][ T4977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.578431][ T28] audit: type=1400 audit(1783599904.903:957): avc: denied { create } for pid=4997 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 75.609662][ T4977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.617339][ T4977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.638459][ T4977] net_ratelimit: 62 callbacks suppressed [ 75.638480][ T4977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.696557][ T4981] team0: Port device xfrm0 added [ 75.718586][ T4983] tipc: Started in network mode [ 75.723666][ T4983] tipc: Node identity 720e0047d0af, cluster identity 4711 [ 75.748260][ T4983] tipc: Enabled bearer , priority 0 [ 75.867796][ T28] audit: type=1400 audit(1783599905.193:958): avc: denied { nlmsg_read } for pid=5021 comm="syz.2.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.914412][ T28] audit: type=1400 audit(1783599905.243:959): avc: denied { name_bind } for pid=5023 comm="syz.0.514" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 75.979561][ T28] audit: type=1400 audit(1783599905.243:960): avc: denied { ioctl } for pid=5021 comm="syz.2.513" path="socket:[13321]" dev="sockfs" ino=13321 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.030664][ T28] audit: type=1400 audit(1783599905.343:961): avc: denied { cmd } for pid=5030 comm="syz.2.517" path="socket:[13337]" dev="sockfs" ino=13337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.069259][ T5037] --map-set only usable from mangle table [ 76.083670][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 76.102365][ T3391] IPVS: starting estimator thread 0... [ 76.103717][ T28] audit: type=1400 audit(1783599905.343:962): avc: denied { setopt } for pid=5030 comm="syz.2.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.218213][ T5041] IPVS: using max 2256 ests per chain, 112800 per kthread [ 76.241821][ T5045] loop1: detected capacity change from 0 to 2048 [ 76.290531][ T5045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.304855][ T28] audit: type=1400 audit(1783599905.633:963): avc: denied { write } for pid=5044 comm="syz.1.522" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.434027][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 76.450971][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 76.480876][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 76.480876][ T12] [ 76.494019][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 76.504837][ T12] EXT4-fs (loop1): Free/Dirty block details [ 76.512707][ T12] EXT4-fs (loop1): free_blocks=66060288 [ 76.519880][ T12] EXT4-fs (loop1): dirty_blocks=32 [ 76.525100][ T12] EXT4-fs (loop1): Block reservation details [ 76.532300][ T12] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 76.540643][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 76.553496][ T3302] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 76.748803][ T3404] tipc: Node number set to 2728460359 [ 76.879950][ T5083] 9p: Bad value for 'wfdno' [ 76.885215][ T5083] netlink: 60 bytes leftover after parsing attributes in process `syz.1.536'. [ 76.911173][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.925329][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.009408][ T5087] sctp: [Deprecated]: syz.5.537 (pid 5087) Use of int in max_burst socket option. [ 77.009408][ T5087] Use struct sctp_assoc_value instead [ 77.189645][ T5101] loop5: detected capacity change from 0 to 512 [ 77.223168][ T5101] EXT4-fs: Ignoring removed i_version option [ 77.330771][ T5101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.345888][ T5101] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.484450][ T5101] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.533011][ T4627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.799076][ T4819] Bluetooth: hci0: command 0x1003 tx timeout [ 77.817596][ T3519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.204714][ T5151] tipc: Failed to remove unknown binding: 66,0,0/0:2723674446/2723674448 [ 79.215612][ T5143] 9pnet: p9_errstr2errno: server reported unknown error [ 79.227620][ T5151] tipc: Failed to remove unknown binding: 66,0,0/0:2723674446/2723674447 [ 79.230190][ T5151] tipc: Failed to remove unknown binding: 66,0,0/0:2723674446/2723674448 [ 79.247212][ T5151] tipc: Failed to remove unknown binding: 66,0,0/0:2723674446/2723674447 [ 79.410194][ T5159] loop0: detected capacity change from 0 to 128 [ 79.417036][ T5164] netlink: 20 bytes leftover after parsing attributes in process `syz.5.566'. [ 79.453781][ T5159] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.469430][ T5159] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.558433][ T5171] sctp: [Deprecated]: syz.5.569 (pid 5171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.558433][ T5171] Use struct sctp_sack_info instead [ 79.717769][ T5175] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 79.861607][ T5175] team0: Device wg2 is of different type [ 79.945667][ T5180] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 79.973711][ T5175] syz.0.571 (5175) used greatest stack depth: 9728 bytes left [ 80.070639][ T5185] sctp: [Deprecated]: syz.1.575 (pid 5185) Use of int in max_burst socket option. [ 80.070639][ T5185] Use struct sctp_assoc_value instead [ 80.137300][ T5188] syz.2.563 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.447482][ T5204] loop1: detected capacity change from 0 to 512 [ 80.471964][ T5204] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.583: bg 0: block 127: padding at end of block bitmap is not set [ 80.502860][ T5204] loop1: lost filesystem error report for type 5 error -117 [ 80.507579][ T5204] EXT4-fs (loop1): Remounting filesystem read-only [ 80.507634][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 80.528485][ C1] EXT4-fs (loop1): initial error at time 1783599911: ext4_validate_block_bitmap:441 [ 80.537943][ C1] EXT4-fs (loop1): last error at time 1783599911: ext4_validate_block_bitmap:441 [ 80.604818][ T5204] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.1.583: cleanup dec ref error -28 [ 80.623865][ T5204] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 80.634444][ T5204] EXT4-fs (loop1): 1 orphan inode deleted [ 80.641076][ T5204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.657874][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 80.657895][ T28] audit: type=1400 audit(1783599911.986:1002): avc: denied { append } for pid=5207 comm="syz.5.584" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.695495][ T28] audit: type=1400 audit(1783599911.986:1003): avc: denied { ioctl } for pid=5207 comm="syz.5.584" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 80.736333][ T5210] netlink: 72 bytes leftover after parsing attributes in process `syz.2.585'. [ 80.736577][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.795456][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.587'. [ 80.886222][ T5218] syz_tun: entered promiscuous mode [ 80.938680][ T5222] team0: Port device xfrm0 removed [ 80.953969][ T5222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.016450][ T5223] team0: Port device xfrm0 added [ 81.033264][ T5224] tipc: Started in network mode [ 81.038297][ T5224] tipc: Node identity 4ea64aed5bbf, cluster identity 4711 [ 81.057700][ T5224] tipc: Enabled bearer , priority 0 [ 81.225737][ T28] audit: type=1400 audit(1783599912.536:1004): avc: denied { create } for pid=5225 comm="syz.0.591" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.271586][ T5232] loop2: detected capacity change from 0 to 1024 [ 81.281762][ T5233] loop5: detected capacity change from 0 to 128 [ 81.292117][ T5232] EXT4-fs: Ignoring removed bh option [ 81.305991][ T5235] tipc: Enabling of bearer rejected, failed to enable media [ 81.311546][ T28] audit: type=1400 audit(1783599912.606:1005): avc: denied { unlink } for pid=3295 comm="syz-executor" name="file0" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 81.316026][ T5233] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.359560][ T5233] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.375065][ T5199] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 81.383226][ T5232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.407345][ T28] audit: type=1400 audit(1783599912.716:1006): avc: denied { write } for pid=5231 comm="syz.2.593" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.434535][ T28] audit: type=1400 audit(1783599912.726:1007): avc: denied { execute } for pid=5231 comm="syz.2.593" path="/113/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.484755][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.639024][ T28] audit: type=1400 audit(1783599912.966:1008): avc: denied { connect } for pid=5240 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.780437][ T5254] 9p: Bad value for 'wfdno' [ 81.790994][ T5254] netlink: 60 bytes leftover after parsing attributes in process `syz.5.601'. [ 81.839071][ T28] audit: type=1400 audit(1783599913.096:1009): avc: denied { bind } for pid=5255 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.867267][ T28] audit: type=1400 audit(1783599913.186:1010): avc: denied { write } for pid=5255 comm="syz.3.602" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.021315][ T35] tipc: Node number set to 353979117 [ 83.257402][ T5273] netlink: 72 bytes leftover after parsing attributes in process `syz.5.606'. [ 83.470191][ T5275] team0: Port device xfrm0 removed [ 83.478593][ T5275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.514973][ T12] tipc: Resetting bearer [ 83.813229][ T5283] loop3: detected capacity change from 0 to 128 [ 83.984194][ T5283] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.040914][ T5283] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.141014][ T5290] 9pnet: p9_errstr2errno: server reported unknown error [ 84.256800][ T28] audit: type=1400 audit(1783599915.576:1011): avc: denied { read } for pid=5294 comm="syz.0.615" lport=33905 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.328139][ T5307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 84.379284][ T5306] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 84.618015][ T5317] loop2: detected capacity change from 0 to 128 [ 84.685655][ T5317] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.729740][ T5317] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.855786][ T5340] syzkaller0: entered promiscuous mode [ 84.865963][ T5340] syzkaller0: entered allmulticast mode [ 84.876319][ T5336] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 84.936184][ T5336] team0: Port device wg2 added [ 85.340617][ T5364] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 85.845613][ T5368] loop1: detected capacity change from 0 to 128 [ 85.994580][ T5368] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.049231][ T5382] loop0: detected capacity change from 0 to 2048 [ 86.065268][ T5368] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.091827][ T5382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.110262][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 86.110276][ T28] audit: type=1400 audit(1783599917.436:1017): avc: denied { write } for pid=5381 comm="syz.0.651" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.269171][ T3440] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 86.284434][ T3440] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 86.297204][ T3440] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.297204][ T3440] [ 86.310929][ T3440] EXT4-fs (loop0): Total free blocks count 0 [ 86.318959][ T5391] loop1: detected capacity change from 0 to 128 [ 86.325536][ T3440] EXT4-fs (loop0): Free/Dirty block details [ 86.335123][ T3440] EXT4-fs (loop0): free_blocks=66060288 [ 86.363794][ T3440] EXT4-fs (loop0): dirty_blocks=32 [ 86.373908][ T3440] EXT4-fs (loop0): Block reservation details [ 86.387753][ T3440] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 86.408094][ T3440] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 86.437644][ T3295] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 86.451986][ T28] audit: type=1400 audit(1783599917.766:1018): avc: denied { connect } for pid=5394 comm="syz.5.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.666388][ T5395] vlan2: entered allmulticast mode [ 86.671722][ T5395] bond0: entered allmulticast mode [ 86.724761][ T3411] hid_parser_main: 22 callbacks suppressed [ 86.724883][ T3411] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 86.742268][ T5408] loop3: detected capacity change from 0 to 128 [ 86.762392][ T3411] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.860542][ T5414] loop2: detected capacity change from 0 to 2048 [ 86.941113][ T5414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.951670][ T5420] fido_id[5420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.990063][ T28] audit: type=1400 audit(1783599918.296:1019): avc: denied { write } for pid=5413 comm="syz.2.664" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.051927][ T28] audit: type=1400 audit(1783599918.376:1020): avc: denied { listen } for pid=5427 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.122035][ T28] audit: type=1400 audit(1783599918.396:1021): avc: denied { accept } for pid=5427 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.136891][ T40] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 87.173105][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 87.187278][ T5432] loop0: detected capacity change from 0 to 512 [ 87.204100][ T40] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.204100][ T40] [ 87.214257][ T5432] EXT4-fs: Ignoring removed i_version option [ 87.226601][ T40] EXT4-fs (loop2): Total free blocks count 0 [ 87.239201][ T40] EXT4-fs (loop2): Free/Dirty block details [ 87.256816][ T40] EXT4-fs (loop2): free_blocks=66060288 [ 87.268655][ T40] EXT4-fs (loop2): dirty_blocks=32 [ 87.277289][ T40] EXT4-fs (loop2): Block reservation details [ 87.289697][ T40] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 87.300997][ T40] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 87.302221][ T5432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.330665][ T5432] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.349476][ T3300] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 87.390002][ T28] audit: type=1400 audit(1783599918.706:1022): avc: denied { write } for pid=5431 comm="syz.0.668" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.470553][ T5432] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.523864][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.565640][ T5439] bridge_slave_0: left allmulticast mode [ 87.578949][ T5439] bridge_slave_0: left promiscuous mode [ 87.587050][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.603837][ T5439] bridge_slave_1: left allmulticast mode [ 87.609901][ T5439] bridge_slave_1: left promiscuous mode [ 87.616945][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.643811][ T5439] bond0: (slave bond_slave_0): Releasing backup interface [ 87.660000][ T5439] bond0: (slave bond_slave_1): Releasing backup interface [ 87.672068][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.679677][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.688762][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.696235][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.710363][ T5439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.925694][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 87.935394][ T5458] loop5: detected capacity change from 0 to 128 [ 87.946923][ T35] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.119436][ T28] audit: type=1400 audit(1783599919.446:1023): avc: denied { bind } for pid=5461 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.778156][ T5491] team0: Port device xfrm0 removed [ 91.870446][ T5491] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.073788][ T5498] loop2: detected capacity change from 0 to 512 [ 92.111160][ T28] audit: type=1326 audit(1783599923.436:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 92.150253][ T3440] tipc: Resetting bearer [ 92.172671][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'. [ 92.192860][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.688'. [ 92.207824][ T28] audit: type=1326 audit(1783599923.436:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 92.336437][ T28] audit: type=1326 audit(1783599923.436:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 92.465612][ T28] audit: type=1326 audit(1783599923.436:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 92.599958][ T28] audit: type=1326 audit(1783599923.466:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 92.704690][ T5518] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.696'. [ 92.733843][ T28] audit: type=1326 audit(1783599923.466:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 92.848189][ T28] audit: type=1326 audit(1783599923.466:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 92.897931][ T5521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.699'. [ 92.963563][ T28] audit: type=1326 audit(1783599923.466:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 92.996087][ T5521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5521 comm=syz.5.699 [ 93.032373][ T5525] loop1: detected capacity change from 0 to 256 [ 93.077949][ T5525] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 93.097877][ T28] audit: type=1326 audit(1783599923.466:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 93.124898][ T5525] FAT-fs (loop1): Can't find a valid FAT filesystem [ 93.191089][ T28] audit: type=1326 audit(1783599923.466:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5496 comm="syz.2.688" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 93.316319][ T5535] loop1: detected capacity change from 0 to 4096 [ 93.326897][ T5535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.342764][ T5535] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 93.359820][ T5535] System zones: 0-5 [ 93.365587][ T5535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.406180][ T5535] EXT4-fs (loop1): shut down requested (0) [ 93.504806][ T5539] syzkaller1: entered promiscuous mode [ 93.515983][ T5539] syzkaller1: entered allmulticast mode [ 93.599689][ T5543] loop2: detected capacity change from 0 to 1024 [ 93.618240][ T5543] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 93.642824][ T5543] JBD2: no valid journal superblock found [ 93.651109][ T5543] EXT4-fs (loop2): Could not load journal inode [ 93.748256][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.758851][ T49] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 94.234189][ T5563] loop5: detected capacity change from 0 to 512 [ 94.345345][ T5566] loop1: detected capacity change from 0 to 128 [ 94.372222][ T5563] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 94.387623][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 94.394132][ C1] EXT4-fs (loop5): initial error at time 1783599925: ext4_mb_generate_buddy:1317 [ 94.403586][ C1] EXT4-fs (loop5): last error at time 1783599925: ext4_mb_generate_buddy:1317 [ 94.482950][ T5566] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.532985][ T5563] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.715: invalid indirect mapped block 4278190080 (level 0) [ 94.565965][ T5566] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.628687][ T5563] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.646053][ T5563] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.715: invalid indirect mapped block 1 (level 1) [ 94.753651][ T5563] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.773929][ T5563] EXT4-fs (loop5): 1 truncate cleaned up [ 94.791084][ T5563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.951021][ T5580] loop2: detected capacity change from 0 to 512 [ 94.966859][ T5580] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.988941][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.012200][ T5580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.029763][ T5580] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.721: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 95.069457][ T4627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.085509][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.138165][ T5589] loop1: detected capacity change from 0 to 8192 [ 95.150770][ T5591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.724'. [ 95.168745][ T5589] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.377968][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.728'. [ 95.953008][ T5615] loop0: detected capacity change from 0 to 128 [ 96.080256][ T5615] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.218440][ T5615] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.546408][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.604546][ T5627] loop0: detected capacity change from 0 to 512 [ 96.629501][ T5627] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 96.647525][ T5627] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.735: invalid indirect mapped block 4278190080 (level 0) [ 96.647661][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 96.647678][ C0] EXT4-fs (loop0): initial error at time 1783599927: ext4_mb_generate_buddy:1317 [ 96.647701][ C0] EXT4-fs (loop0): last error at time 1783599927: ext4_mb_generate_buddy:1317 [ 96.686420][ T5627] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 96.688029][ T5627] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.735: invalid indirect mapped block 1 (level 1) [ 96.710473][ T5627] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 96.713263][ T5627] EXT4-fs (loop0): 1 truncate cleaned up [ 96.728690][ T5627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.908656][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.982709][ T5637] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 96.995276][ T5636] netlink: 'syz.1.749': attribute type 2 has an invalid length. [ 97.054626][ T5636] 0: entered promiscuous mode [ 97.225032][ T5647] loop1: detected capacity change from 0 to 256 [ 97.266102][ T5650] loop2: detected capacity change from 0 to 512 [ 97.294194][ T5645] loop3: detected capacity change from 0 to 1024 [ 97.304059][ T5645] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 97.324101][ T5645] JBD2: no valid journal superblock found [ 97.326923][ T5650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.343684][ T5645] EXT4-fs (loop3): Could not load journal inode [ 97.394545][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 97.394563][ T28] audit: type=1400 audit(1783599928.716:1108): avc: denied { create } for pid=5654 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 97.422396][ T5655] netlink: 24 bytes leftover after parsing attributes in process `syz.5.745'. [ 97.452831][ T5650] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.488117][ T28] audit: type=1400 audit(1783599928.756:1109): avc: denied { write } for pid=5654 comm="syz.5.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 97.498013][ T5660] loop3: detected capacity change from 0 to 128 [ 97.546841][ T28] audit: type=1400 audit(1783599928.846:1110): avc: denied { listen } for pid=5658 comm="syz.1.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.577803][ T5663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5663 comm=syz.5.745 [ 97.686974][ T5660] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.726663][ T5660] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.289117][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.390265][ T28] audit: type=1326 audit(1783599929.716:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cf6bde59 code=0x7ffc0000 [ 98.425441][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.435208][ T28] audit: type=1326 audit(1783599929.716:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cf6bde59 code=0x7ffc0000 [ 98.468012][ T28] audit: type=1326 audit(1783599929.716:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cf6bde59 code=0x7ffc0000 [ 98.512781][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 98.559117][ T28] audit: type=1326 audit(1783599929.716:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cf6bde59 code=0x7ffc0000 [ 98.586273][ T28] audit: type=1326 audit(1783599929.716:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cf6bde59 code=0x7ffc0000 [ 98.616027][ T28] audit: type=1326 audit(1783599929.716:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f73cf6bde59 code=0x7ffc0000 [ 98.641730][ T28] audit: type=1326 audit(1783599929.716:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5668 comm="syz.1.748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73cf6bde59 code=0x7ffc0000 [ 98.694142][ T3440] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.028129][ T5697] loop5: detected capacity change from 0 to 1024 [ 99.040403][ T5697] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 99.069140][ T5697] JBD2: no valid journal superblock found [ 99.075376][ T5697] EXT4-fs (loop5): Could not load journal inode [ 99.236680][ T5709] loop5: detected capacity change from 0 to 128 [ 99.255169][ T5709] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.310608][ T5709] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.379553][ T5707] loop2: detected capacity change from 0 to 512 [ 99.706424][ T5715] : renamed from bond_slave_1 [ 99.831063][ T5707] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.765: invalid block [ 99.869716][ T5707] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.872587][ T5707] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.765: invalid indirect mapped block 4294967295 (level 1) [ 99.885917][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 99.886215][ C0] EXT4-fs (loop2): initial error at time 1783599931: ext4_get_branch:178: inode 11: block 4294967295 [ 99.887303][ C0] EXT4-fs (loop2): last error at time 1783599931: ext4_get_branch:178: inode 11: block 4294967295 [ 99.980761][ T5707] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.989578][ T5707] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.765: invalid indirect mapped block 4294967295 (level 1) [ 100.041672][ T5707] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 100.054514][ T5707] EXT4-fs (loop2): 2 truncates cleaned up [ 100.107529][ T5707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.196941][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.197847][ T5721] 9pnet_fd: p9_fd_create_unix (5721): problem connecting socket: ./file0: -111 [ 100.208870][ T4627] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.383792][ T5729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.772'. [ 100.456384][ T5727] loop2: detected capacity change from 0 to 512 [ 100.858052][ T5741] loop5: detected capacity change from 0 to 512 [ 100.898956][ T5741] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 100.977172][ T5741] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 100.994397][ T5741] EXT4-fs (loop5): 1 truncate cleaned up [ 101.005584][ T5741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.084240][ T5741] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 101.160689][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.167954][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.204758][ T5752] bridge0: entered allmulticast mode [ 101.227755][ T5753] bridge_slave_1: left allmulticast mode [ 101.256423][ T5753] bridge_slave_1: left promiscuous mode [ 101.279220][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.317552][ T5753] bridge_slave_0: left allmulticast mode [ 101.323380][ T5753] bridge_slave_0: left promiscuous mode [ 101.330662][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.540928][ T5772] netlink: 'syz.0.799': attribute type 2 has an invalid length. [ 101.614822][ T5772] 0: entered promiscuous mode [ 101.756911][ T5768] loop2: detected capacity change from 0 to 8192 [ 101.859909][ T5779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.881888][ T5779] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.901328][ T5779] EXT4-fs (loop0): 1 truncate cleaned up [ 101.908646][ T5779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.944590][ T4627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.976775][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.992102][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 102.992118][ T28] audit: type=1400 audit(1783599934.316:1145): avc: denied { read } for pid=5815 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.077373][ T28] audit: type=1400 audit(1783599934.396:1146): avc: denied { create } for pid=5817 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.232922][ T5828] xt_hashlimit: size too large, truncated to 1048576 [ 103.279372][ T5830] set_capacity_and_notify: 1 callbacks suppressed [ 103.279406][ T5830] loop5: detected capacity change from 0 to 128 [ 103.370537][ T5830] serio: Serial port ptm0 [ 103.518672][ T5830] serio: Serial port ptm0 [ 103.639216][ T5853] loop1: detected capacity change from 0 to 8192 [ 103.672921][ T5846] netlink: 125768 bytes leftover after parsing attributes in process `syz.3.816'. [ 103.686890][ T28] audit: type=1326 audit(1783599935.006:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 103.728284][ T28] audit: type=1326 audit(1783599935.006:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 103.763021][ T28] audit: type=1326 audit(1783599935.006:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 103.789008][ T28] audit: type=1326 audit(1783599935.006:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 103.853277][ T28] audit: type=1326 audit(1783599935.046:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7e1a64de59 code=0x7ffc0000 [ 103.880520][ T28] audit: type=1326 audit(1783599935.056:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e1a60e68e code=0x7ffc0000 [ 103.906546][ T28] audit: type=1326 audit(1783599935.056:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e1a60e68e code=0x7ffc0000 [ 103.947011][ T28] audit: type=1326 audit(1783599935.056:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5842 comm="syz.0.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e1a60e68e code=0x7ffc0000 [ 104.063099][ T5868] loop1: detected capacity change from 0 to 128 [ 104.081903][ T5868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 104.094353][ T5868] System zones: 1-3, 19-19, 35-36 [ 104.101130][ T5868] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.115285][ T5868] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.145263][ T5872] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.823'. [ 104.154971][ T5862] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.823'. [ 104.186041][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.197294][ T5871] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.823'. [ 104.294713][ T5877] bridge0: entered allmulticast mode [ 104.404980][ T5884] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 104.416247][ T5883] netlink: 'syz.2.829': attribute type 2 has an invalid length. [ 104.456946][ T5883] 0: entered promiscuous mode [ 104.470078][ T5888] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.838'. [ 104.483379][ T5880] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.838'. [ 104.496895][ T5885] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.838'. [ 104.509965][ T5890] loop5: detected capacity change from 0 to 512 [ 104.531552][ T5890] EXT4-fs: Ignoring removed i_version option [ 104.545792][ T5890] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.571632][ T5890] EXT4-fs (loop5): 1 truncate cleaned up [ 104.584566][ T5890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.723993][ T4627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.762909][ T5900] netlink: 'syz.1.833': attribute type 4 has an invalid length. [ 104.899022][ T5900] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.833'. [ 105.087299][ T5915] netlink: 24 bytes leftover after parsing attributes in process `syz.3.837'. [ 105.133224][ T5915] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5915 comm=syz.3.837 [ 105.200109][ T5919] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 105.214429][ T5919] bond2: entered promiscuous mode [ 105.221333][ T5919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.249081][ T5919] bond2: (slave bridge2): making interface the new active one [ 105.256753][ T5919] bridge2: entered promiscuous mode [ 105.264971][ T5919] bridge2: left promiscuous mode [ 105.795662][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.855'. [ 105.797389][ T5935] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 105.816907][ T5932] netlink: 'syz.5.845': attribute type 2 has an invalid length. [ 105.838729][ T5934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.873904][ T5932] 0: entered promiscuous mode [ 105.895610][ T5934] macvlan2: entered promiscuous mode [ 105.905907][ T5934] macvlan2: entered allmulticast mode [ 105.925345][ T5940] netlink: 'syz.1.848': attribute type 10 has an invalid length. [ 105.985847][ T5942] netlink: 'syz.5.849': attribute type 4 has an invalid length. [ 106.056606][ T5948] 9pnet_fd: p9_fd_create_unix (5948): problem connecting socket: ./file0: -111 [ 107.196431][ T5980] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 107.255000][ T5980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.305199][ T5982] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 107.363523][ T5982] bond1: entered allmulticast mode [ 107.383576][ T5985] loop0: detected capacity change from 0 to 512 [ 107.433937][ T5985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.451210][ T5980] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 107.463428][ T5985] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.499926][ T5991] loop5: detected capacity change from 0 to 128 [ 107.528852][ T5991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 107.548829][ T5991] System zones: 1-3, 19-19, 35-36 [ 107.562977][ T5992] netlink: 'syz.3.865': attribute type 4 has an invalid length. [ 107.572833][ T5991] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.587855][ T5991] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.692451][ T4627] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.962357][ T6009] bond3: entered promiscuous mode [ 107.982645][ T6009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.055807][ T6009] veth9: entered promiscuous mode [ 108.062531][ T6009] bond3: (slave veth9): Enslaving as an active interface with an up link [ 108.080403][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 108.080420][ T28] audit: type=1326 audit(1783599939.406:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.123412][ T28] audit: type=1326 audit(1783599939.406:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.152707][ T28] audit: type=1326 audit(1783599939.406:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.178681][ T28] audit: type=1326 audit(1783599939.406:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.206344][ T28] audit: type=1326 audit(1783599939.406:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.245503][ T28] audit: type=1326 audit(1783599939.406:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.273956][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.297374][ T28] audit: type=1326 audit(1783599939.406:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.324649][ T28] audit: type=1326 audit(1783599939.406:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.385232][ T28] audit: type=1326 audit(1783599939.406:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.448623][ T28] audit: type=1326 audit(1783599939.406:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6019 comm="syz.2.875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf333de59 code=0x7ffc0000 [ 108.755839][ T3440] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.765417][ T3440] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.787926][ T3440] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.812013][ T3440] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.890786][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.898057][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.959073][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.970561][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.041047][ T6056] macvlan2: left promiscuous mode [ 109.046301][ T6056] macvlan2: left allmulticast mode [ 109.054598][ T404] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.063851][ T404] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.073320][ T404] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.083104][ T404] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.164645][ T6067] loop0: detected capacity change from 0 to 512 [ 109.186595][ T6067] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.891: inode has both inline data and extents flags [ 109.202642][ T6067] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.203469][ T6067] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.891: couldn't read orphan inode 15 (err -117) [ 109.212861][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 109.212885][ C1] EXT4-fs (loop0): initial error at time 1783599940: ext4_orphan_get:1399: inode 15 [ 109.212934][ C1] EXT4-fs (loop0): last error at time 1783599940: ext4_orphan_get:1399: inode 15 [ 109.278792][ T6067] loop0: lost filesystem error report for type 5 error -117 [ 109.279428][ T6067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.416170][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.456481][ T6085] __nla_validate_parse: 7 callbacks suppressed [ 109.456527][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.899'. [ 109.505758][ T6085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6085 comm=syz.1.899 [ 109.621367][ T6091] netlink: 48 bytes leftover after parsing attributes in process `syz.1.900'. [ 109.663149][ T6093] netlink: 'syz.1.901': attribute type 12 has an invalid length. [ 109.909643][ T6098] tipc: Resetting bearer [ 110.064962][ T6098] vlan2: left allmulticast mode [ 110.070158][ T6098] bond0: left allmulticast mode [ 110.084048][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.125655][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.156986][ T6111] xt_hashlimit: size too large, truncated to 1048576 [ 110.166370][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.735038][ T6109] loop2: detected capacity change from 0 to 1024 [ 110.781952][ T6122] tipc: Failed to remove unknown binding: 66,0,0/0:986970556/986970557 [ 110.816065][ T6109] EXT4-fs (loop2): filesystem is read-only [ 110.891456][ T6129] tipc: Failed to remove unknown binding: 66,0,0/0:986970556/986970557 [ 110.926684][ T6130] loop1: detected capacity change from 0 to 128 [ 111.047958][ T6130] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.083083][ T6130] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.719493][ T6153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.730589][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.741292][ T6153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.766366][ T6156] xt_hashlimit: size too large, truncated to 1048576 [ 111.816109][ T6153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.832364][ T6153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.897859][ T6153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.914731][ T6153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.998695][ T6153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.017887][ T6153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.095301][ T404] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.115023][ T404] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.138386][ T404] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.148678][ T404] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.174859][ T404] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.222991][ T404] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.261998][ T404] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.271219][ T404] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.336227][ T6181] sctp: [Deprecated]: syz.3.933 (pid 6181) Use of int in maxseg socket option. [ 112.336227][ T6181] Use struct sctp_assoc_value instead [ 112.570732][ T6203] xt_hashlimit: size too large, truncated to 1048576 [ 112.595066][ T6204] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 112.625703][ T6204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.676690][ T6204] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 112.729379][ T6204] bond2: entered allmulticast mode [ 112.751873][ T6214] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 112.853099][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'. [ 112.877916][ T6218] bridge1: port 1(dummy0) entered blocking state [ 112.884468][ T6218] bridge1: port 1(dummy0) entered disabled state [ 112.891226][ T6218] dummy0: entered allmulticast mode [ 112.897392][ T6218] dummy0: entered promiscuous mode [ 112.905802][ T6218] netlink: 'syz.0.945': attribute type 10 has an invalid length. [ 112.913745][ T6218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.945'. [ 112.923567][ T6218] bridge1: port 1(dummy0) entered blocking state [ 112.930039][ T6218] bridge1: port 1(dummy0) entered forwarding state [ 112.938325][ T6218] dummy0: left allmulticast mode [ 112.943665][ T6218] bridge1: port 1(dummy0) entered disabled state [ 113.073102][ T30] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 113.171715][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 113.199482][ T6232] team1: entered promiscuous mode [ 113.210624][ T6232] team1: entered allmulticast mode [ 113.217856][ T6232] 8021q: adding VLAN 0 to HW filter on device team1 [ 113.225211][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 113.231651][ T6234] netlink: 'syz.3.949': attribute type 12 has an invalid length. [ 113.260311][ T6235] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 113.304175][ T6235] team2: entered promiscuous mode [ 113.317697][ T6235] team2: entered allmulticast mode [ 113.331184][ T6235] 8021q: adding VLAN 0 to HW filter on device team2 [ 113.507632][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.955'. [ 113.810001][ T6253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.903774][ T6253] bond2 (unregistering): Released all slaves [ 113.927436][ T6248] loop0: detected capacity change from 0 to 1024 [ 114.060560][ T6248] EXT4-fs (loop0): filesystem is read-only [ 114.069032][ T6264] loop1: detected capacity change from 0 to 512 [ 114.089210][ T6264] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.959: inode has both inline data and extents flags [ 114.110051][ T6264] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.110210][ T6264] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.959: couldn't read orphan inode 15 (err -117) [ 114.119498][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 114.119539][ C1] EXT4-fs (loop1): initial error at time 1783599945: ext4_orphan_get:1399: inode 15 [ 114.119570][ C1] EXT4-fs (loop1): last error at time 1783599945: ext4_orphan_get:1399: inode 15 [ 114.157131][ T6264] loop1: lost filesystem error report for type 5 error -117 [ 114.181740][ T6264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.244853][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 114.244868][ T28] audit: type=1400 audit(1783599945.566:1263): avc: denied { write } for pid=6262 comm="syz.1.959" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.387990][ T6260] bond1: left promiscuous mode [ 114.397219][ T6260] bridge1: left promiscuous mode [ 114.413802][ T6260] vlan2: left promiscuous mode [ 114.459868][ T6260] bridge0: left promiscuous mode [ 114.479178][ T6260] bond2: left promiscuous mode [ 114.491273][ T6260] bond3: left promiscuous mode [ 114.506383][ T6260] veth9: left promiscuous mode [ 114.516415][ T3440] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.552168][ T3440] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.591655][ T3440] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.616466][ T3440] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.634673][ T3440] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.646237][ T3440] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.655298][ T3440] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.664440][ T3440] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.825622][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.907501][ T28] audit: type=1400 audit(1783599946.226:1264): avc: denied { write } for pid=6280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.006356][ T28] audit: type=1400 audit(1783599946.326:1265): avc: denied { write } for pid=6299 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.114789][ T28] audit: type=1400 audit(1783599946.436:1266): avc: denied { read append } for pid=6305 comm="syz.0.976" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.177011][ T6312] loop5: detected capacity change from 0 to 1024 [ 115.191480][ T6312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.207742][ T28] audit: type=1400 audit(1783599946.436:1267): avc: denied { open } for pid=6305 comm="syz.0.976" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.231713][ T28] audit: type=1400 audit(1783599946.466:1268): avc: denied { ioctl } for pid=6305 comm="syz.0.976" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.257758][ T6312] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.293986][ T28] audit: type=1400 audit(1783599946.606:1269): avc: denied { write } for pid=6310 comm="syz.5.967" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.355172][ T3440] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 6) [ 115.430516][ T28] audit: type=1400 audit(1783599946.606:1270): avc: denied { read write } for pid=6310 comm="syz.5.967" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.463186][ T3440] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 115.489840][ T3440] EXT4-fs (loop5): This should not happen!! Data will be lost [ 115.489840][ T3440] [ 115.507957][ T28] audit: type=1400 audit(1783599946.606:1271): avc: denied { open } for pid=6310 comm="syz.5.967" path="/110/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.566610][ T40] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 115.569661][ T6323] loop0: detected capacity change from 0 to 1024 [ 115.632966][ T28] audit: type=1400 audit(1783599946.696:1272): avc: denied { write } for pid=6304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.656506][ T40] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 115.694325][ T40] EXT4-fs (loop5): This should not happen!! Data will be lost [ 115.694325][ T40] [ 115.791858][ T6323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.844951][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.600452][ T6312] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.967: bg 0: block 112: padding at end of block bitmap is not set [ 116.734171][ T6312] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1396 with max blocks 2048 with error 28 [ 116.825863][ T6312] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.825863][ T6312] [ 116.863746][ T6312] EXT4-fs (loop5): Total free blocks count 0 [ 116.889471][ T6312] EXT4-fs (loop5): Free/Dirty block details [ 116.907335][ T6312] EXT4-fs (loop5): free_blocks=0 [ 117.058161][ T4627] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 117.158333][ T6368] dummy0: left promiscuous mode [ 117.206374][ T6368] vlan2: left allmulticast mode [ 117.230550][ T6368] veth0_macvtap: left allmulticast mode [ 117.252607][ T6368] syzkaller0: left promiscuous mode [ 117.273991][ T6368] syzkaller0: left allmulticast mode [ 117.301860][ T6368] bond1: left allmulticast mode [ 117.319843][ T6368] team1: left promiscuous mode [ 117.337476][ T6368] team1: left allmulticast mode [ 117.353489][ T6368] team2: left promiscuous mode [ 117.368944][ T6368] team2: left allmulticast mode [ 117.477933][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.980'. [ 117.609441][ T6382] loop1: detected capacity change from 0 to 512 [ 117.631106][ T6382] EXT4-fs (loop1): unable to read superblock [ 117.965926][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 117.991291][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 118.256060][ T6393] ================================================================== [ 118.264203][ T6393] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 118.270743][ T6393] [ 118.273090][ T6393] write to 0xffff8881004a8850 of 8 bytes by task 6388 on cpu 0: [ 118.280921][ T6393] dentry_kill+0x139/0x500 [ 118.285370][ T6393] finish_dput+0x16/0x1d0 [ 118.289731][ T6393] dput+0x48/0x50 [ 118.293392][ T6393] path_openat+0xd29/0x2000 [ 118.297930][ T6393] do_file_open+0x16c/0x290 [ 118.302465][ T6393] do_sys_openat2+0xa0/0x130 [ 118.307294][ T6393] __x64_sys_openat+0xf2/0x120 [ 118.312090][ T6393] x64_sys_call+0x1e39/0x3020 [ 118.316794][ T6393] do_syscall_64+0x136/0x3c0 [ 118.321430][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.327356][ T6393] [ 118.329699][ T6393] read to 0xffff8881004a8850 of 8 bytes by task 6393 on cpu 1: [ 118.337261][ T6393] fast_dput+0x64/0x2e0 [ 118.341445][ T6393] dput+0x1f/0x50 [ 118.345111][ T6393] vfs_mkdir+0xb4/0x3e0 [ 118.349283][ T6393] filename_mkdirat+0x138/0x300 [ 118.354187][ T6393] __se_sys_mkdir+0x31/0xf0 [ 118.358711][ T6393] __x64_sys_mkdir+0x31/0x40 [ 118.363328][ T6393] x64_sys_call+0x2eab/0x3020 [ 118.368034][ T6393] do_syscall_64+0x136/0x3c0 [ 118.372659][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.378578][ T6393] [ 118.380914][ T6393] value changed: 0xffff88823777bfe8 -> 0x0000000000000000 [ 118.388039][ T6393] [ 118.390385][ T6393] Reported by Kernel Concurrency Sanitizer on: [ 118.396574][ T6393] CPU: 1 UID: 0 PID: 6393 Comm: syz.3.984 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.405808][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 118.415896][ T6393] ================================================================== [ 119.745362][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 119.745381][ T28] audit: type=1400 audit(1783599951.066:1279): avc: denied { write } for pid=6394 comm="syz.1.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1