last executing test programs: 1m8.407857217s ago: executing program 3 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1d, 0x0, 0x1}, {0x7c}, {0x3, 0xfd, 0x40}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x5, 0x0, 0xf8}, {0x3d}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='10 1', 0x4) 1m8.261097931s ago: executing program 3 (id=355): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x8a}, 0x80, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x8, 0x4) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) recvfrom(r0, &(0x7f0000000dc0)=""/211, 0xd3, 0x40000000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 1m7.445851281s ago: executing program 3 (id=363): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x603ca0114ad58eb3) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x76c4c6c54d3d69c, {{0x42, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x4004089) 1m7.374562143s ago: executing program 3 (id=364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20}}}}}}, 0x0) 1m7.283730915s ago: executing program 3 (id=365): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m7.283382365s ago: executing program 3 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x2, 0x1}, {0x5, 0x10}, {0xd, 0x3}}}, 0x2f}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 51.852385009s ago: executing program 32 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) sendmsg$can_bcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x2, 0x1}, {0x5, 0x10}, {0xd, 0x3}}}, 0x2f}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2.584359736s ago: executing program 1 (id=1076): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) close(0x3) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 2.509084967s ago: executing program 1 (id=1079): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) splice(r2, 0x0, r0, 0x0, 0x6, 0x8) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000000180)="15", 0x1}], 0x1, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=')', 0x1}], 0x1, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 2.123509057s ago: executing program 1 (id=1088): move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x9) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.724508787s ago: executing program 1 (id=1091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38) 1.63647034s ago: executing program 4 (id=1094): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 1.62852876s ago: executing program 1 (id=1095): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000690000/0x7000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4001, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7725, 0x90, 0x0, 0x0) 1.288362468s ago: executing program 0 (id=1101): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) 1.22343484s ago: executing program 0 (id=1103): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x0, 0x46, 0x0, 0x9}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x40, 0x107, 0x70bd26, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) 1.20510377s ago: executing program 2 (id=1104): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xffbffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x2, 0x232}, 0x28, 0x0, 0x0, 0x5, 0x7, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.176732171s ago: executing program 4 (id=1105): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x6, 0x7ffffcbd}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r2 = dup(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) inotify_init() inotify_rm_watch(r2, r1) 1.176237621s ago: executing program 2 (id=1106): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 1.147494762s ago: executing program 0 (id=1107): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x233, &(0x7f0000000740)={0x0, 0xe650, 0x8, 0x2, 0x139}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1.087710963s ago: executing program 4 (id=1108): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1567, &(0x7f0000000040)={0x0, 0xfc8b, 0xc000, 0x2000008, 0xc1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2218, 0x5bd1, 0x1c, 0x0, 0x0) 1.087507313s ago: executing program 0 (id=1109): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 1.087305403s ago: executing program 2 (id=1110): getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f00000017c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x85) pipe(&(0x7f0000000080)) lseek(r0, 0x100, 0x0) getdents(r0, 0x0, 0x0) 1.023972055s ago: executing program 5 (id=1111): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0xfff, 0x2, 0x8000000006], [0x9d8, 0x7, 0x80000000, 0xa, 0x2, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x69da, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0xf271, 0x3, 0xc3c, 0x1, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x7, 0x5, 0x930, 0x4, 0x3, 0x200000000008001, 0x8000000000000000, 0x7, 0x1, 0x6, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x4, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x7, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0xa2, 0x7, 0x0, 0x6, 0x100, 0xb, 0x100000002, 0x2, 0x4, 0x8, 0x8, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68e, 0x100000001, 0x8, 0x50000000000000, 0xe, 0x0, 0x401, 0x10000, 0x4, 0x6, 0x406, 0x3, 0x6, 0x2, 0x0, 0x1000003, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 939.437787ms ago: executing program 2 (id=1112): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10acc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@inlinecrypt}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") pread64(r0, &(0x7f0000000100)=""/93, 0x5d, 0x327) 787.61844ms ago: executing program 5 (id=1113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) sendmmsg$inet(r1, &(0x7f00000029c0)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000480)='R', 0x1}], 0x1}}], 0x1, 0x20060041) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 759.543931ms ago: executing program 0 (id=1114): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 759.030422ms ago: executing program 5 (id=1115): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000a0000000000000006000000850000002f000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000010850000000600000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e70014000000d97bfbf7", 0xe, 0x200000c4, &(0x7f0000000100)={0x11, 0x3, r3, 0x1, 0xc, 0x6, @broadcast}, 0x14) 744.508691ms ago: executing program 1 (id=1116): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000002180)=""/262, 0x106) timer_create(0x7, &(0x7f0000001340)={0x0, 0x24, 0x4, @thr={&(0x7f0000000100)="7516023ada5c98ebae6f019610f063e1e4cd72d49159c768f46561f853069fb926dacf7908f59ca9098c07f92939b4c6639247c99721d1cfd0b8f4e3cb4c1af334de76f76b2a7575c83e728c0cdae2092f61e5596f92d8c2306fb9958b38372831de1b0e23245ced0e70a6efc4ac6e0d6bf5219a1fe4009886572c60", &(0x7f0000000340)="428d7d61aa5ab55ef7c3a3bfb71c95dafe3abebcd754daf91c5f5046178feb817a2c0b3ddfa70cea595c72f90ff3ab8e5e5ba9c32ec8a40b91f4579593d78b77d6dac7d91ddaf50cf96d03116ca1a11a3fd16935184f1482325dbeb0fe857b652b03a2ee7160d7021bc05116935a3d289b5a78b519c9751e32c776594c7dff302f28312ea82bf55bb7f80c017d7af8c159f31777fb48822693f028bba52ff401ffe1e44e58b42064be18d1883a31a59b4d4e59707f1822d12e393af3eb65bc070a833105996cac454daaeffc4ec25f44df8b8310fe5a22b42fd2c0192122bf3c6f4d79e0d0f3cb54aa7e97a69ff438e880d3d1e1fbf62057033f20631081e0e36f94703fdd82c4df02a25b3bbfd300286bbe924196677d82f1039b529fe36ac87f117bd70579ed0b23fc094c11d2057902e5e356e36b662374d07c733bd24baecf92169c61c3e5ba3590aa4800e807cefc428c1c226ce8a5c80f7c739db841642fea6c8c6abf834fff3cb9a5a4fa63705243bfd872113e8d0065c1873ff55b4d1b503d698cc2af151f7426cbcd86d30f013e740a60cd6ae6908c8babea9af9ef5c6d5802e374853d955bd8b9aaf988a42a9c1ddc0ce10c98c0e8e9a88799fecee2014157f66c5167c7d2228c738abe1ad8025e576a516d6c3fc8de4f20da5887c155a1854bd8b7ba9fdd42c2b03212221e531aebb5614d93bc9ee4f89ef3fad8a2a7ada05a04ecbc010dcb285c3abb95a9d226b70874a496aed25a4f1f8a1f1b1c9f9c08390192f3f8b9420ddfabbd4dd2af736131750bc5cd536cc2e29c0a3da234c4ff650790c21183402362007fbabb3b87383680a8e553bbe8d6a8ebb7495c79a33676d7cbdf696bcf338f32933f9feda644e045b9a0ae4f82d134907bde9d5d819e807efb97ea725ed17aea84b9a9c4146b3231cd41097609baa259fdaaeac81792e456da6453939ef84d8cb439c1c6a37151f7f6b79b530bd73e265fb3a8cd8a8e3de4e3275812ff7d02c5c199285bb65b206c8a832f3d2c6e0a72baee430a3107825fac24654cca5cc9189bb17bd9cc9ccdcdff4aabc798e8f1a434120402a1739fd5c60bab8e261e2a448e4826fc172db87dd51bf53b00b78d1941c618dbd8c024b5baf2409dcfa9127fcfffa69fb09b635bb5c2c6b8d364309ee82d9a4b904355fdc9b54465f90cb71b858b117315c0f6855e930231e651a542e3ef4e2c7a64bbfa5fab87aef7a7aaa9132308eeba3a9ef45abce304bd6e17fafb13511bc5acbdcd50dc9db79c93a33a0a7dc480b4640ae7a1706866e699a3c698544cc060752f18ec02d1b3be09a3aa27f9ec76e539ffcdfba273d0073bb18ef0e4242d520d30d547f6f355f8afd1a296b1f768a6fca07b72e48c19993f735d12dcea66c5431dd081aaf75609faf5de82bb2cb81492d5ed453cb1f1f8b5f6c308f81ed3dbb010530b94a5838043e179495eae21deae55ab6d87f49536aeb72812714968530d9a09e49ded18c873414c3319c9773242119122f9ba1eedef836a0690544824fc741b16559f087b839642c10681b53745a5a2908653285e98ffb1f32732bf1470c4e24160a1ce5a438b61d78cc175e483d95f900d7de2fe1631cac42fc3a5f7f33b31e7537625129d1ad547cec2c47cf721c9931d2f097a7f30ae77adb2887f196b9baab2f3a98a489a2380548fd4f897f6d8fe3fbeb98a67f55af3847390ad5c11caad650d4303966e44ce90d2ca713252ea75f64676262d404c80330e7807267b9b135c57eaea1329f717bca1fed1f774eb118a210110ac53f3886c84444af9e8af5199d04fe94541abfcc9bec2452da8070aa7e8b15abf69402df22c39b01b9239d3c699f312397379c23bcc00c47479258c14db1a86d3e6fb3a7724fa7eb4a2beb58745847ab6081f1b816920e4f2ca7465c11c38f16c28ca55c5082329d61a6cae3c14794688dc8dfa1a2349edcced9afd369ca185e75ccd27f0679a3508399351d0ab4d8c109501c96bcf74405b4ef1f3ae0c4a8a423b0202e2195207d1f4eb7ed8832915319ab6398921c849769eca2face4d9fb2f8b7d12cf810a38b391568386eeb5603510087efb732dca4c506c879069cbb11b9169571fab97772f00a3c612aee30aca674aca44b4c3dd110d1d0c7cc33d848edac24c647c0273001060ede33ee00bb3567bed75e36a7e49c7e351c569d78a9ad4328f20f710cf7603effdfefce1602b6200f2245ad2365197041d5fe0323385978555aca19143e145facf846ae5147cb168b7672f398c53a2e8fa66793d39707a10183a5545d1f445d5080b459d7cd3e5722903e7e7d27f8287f3a2d14b27feb1eeff4383775787d6d238eb4e6415c63490e7f0679add47995b8d0bef983c107a9c911db3f370b576654693b687cd2085fd0984985197ad748472d200e1c115e38edd6c4835390d58df2ad07a3e1d8791630ad445658d121322640068eccb92ffd53841a06a21067e38bffeb67b68cbf0d9371ae3288e99f894c1f61c28623b78dff77ccd34dc48adb8d0ff254d861eb15b17dc38749969d90ea0ab9dc947000e4aff600590c6901474485e086d6ef9dfa2c261eb6943226078e54475220ea178e234019d61f8b1edab61744acb465d7daf42f7aa7289b8cc5685f1857a91686f3ad43cac79327402f481cbb662837b1c77dad7fc9a7379fc507cf1bc9f5ce5141364553d980364b8554e8d96e4849b777329cb4347ecd0ac63e61306d538fbc26e070bebe64e7f054fe3d390694f452f951efb3e98e53a29dc2663cca8f3f6ebdac212a7c228b21922c1864c47699ea3dda901b6350226a85616c772ff267954b853726e7b6dc6a664f30f4ef5fc6194c84107b5e1c670f771e6cb4840bda4cef3bb516cebfa8384776c4420325afdf1b268194417aa7b13dc64b4d9207d119cc32a98e671282bbf5c948e61fdfe57088c46728ed0dd16fd9b05b22ab988ff6236c16ef9639844c5268b932780ec76ec4227e8c47a7306cef92724b2ce59211fc913bef91e739919ba3ac4d1902ee8e35db0b8a62ac3fa5854b9eba341fd57adab98d2e8cc107668fa4f78d21dcbbee50637be2873e99a69d5b52ebfc96a1c20cd1fca5d872931cb7ce851f81a52e96379d636447839f16700b65d11cadaca5548d073410f8d2b1032e76b00487bd96815deaaf97941aa390dc592d174461a8ca2212c790dbdd8f9e041652b87c65a093ba9bb0c4bc207223370e2a88a0577fe26e6f4fa25963dd53e059d52166143a1d87754a304996e07f6496d25e1473e8ccf1fb14e7d25025a3eaddff3f6a80e75a6976ffd74833c4e235dfd7a2d90fe2d40cde6ddafd65b4fbc99bc2e938579d89a50a59787fc91d9871da8bc8abc6555e4bef51ca1c321bf9ef94d7138ed0b7c37a64b3393874ca8b966d78d18903c32e2bdb6486cbad76fa1b3c259113adcf96f0d843b2bee70ef4e3ec59be1be44a11a08d4202125d746ca4afff90626e7cb63c4ca3de63ff588506d6dcc8a82c12438b682b077ed3ce5e9cb6dbf9445f642301fcc0eb489897b8c23a30b5d2d90eccc6b1b42fddef900889a5b77560fbd8eb66e657365dd693ce0f4473b638288c9104795a15bcac8570606014cf8cf340d1c21258de060c019fca1d145460c4c1d64ea1e16cbb6b291c97d96b58f7fea1c35d1d5e750a4cd5971051fdf1a70fcc7c81806ea6b3b29a04133abf2778e24c76e4883c8a420cecd3588e2fdec37546c94ecbd91910b810846cb3dda1687ad18befd030cc71cd6fe2353d36eef4a89cea6d08cbc5cbf47a83c47c7d58c7099c978554b862683b8737454dd7ce2119c13bbde06e8d470b4977ae165458757aa86c902cc4e9328f4d06deffdce522746b1de21bee8b18058b0c2153efefa72661ed4f05cad737146909fd56eaebdebf2a2da0207991f2af183cb05f6c0d71c1396248b938f2c9848cfb6b65a25e172308bad80cbec9c97a9e52431ed628d4de602a0478c0ddb4c32c80e6317cb27c2257cdd8f63351a0c71f20067a219c1207562fb0fe4985776f0c0565c4f0afba90c8c3d624ae2a4299ead9ad731a6a575793870842451ad735d5d1124db36f7ef8c4aae6343a95fe1f50dd2d3dbf85e2fd92ce3e98fc22aff137852b3f01f2255147d386f4b8131ca7715ab0347ca16febf306616ce0040980d6b063ac2f4658a9dda975f33fb5c81d3740d318270015bea376461758ee566493cb4239eef02edad8f45bf1f6d11b5e793c9bb6036bc5da47d582a555170fe28121699a2578f37a548dc8a39c9684be0e844612f80e89ae562b05f3e33888f193fc190a0d77e1bbe2d9ff9abb4b403de131ab6af614bc93d934f78beb22b921ffa5392fd77e54f721eb823f703fb18311c937b23ac111e04569caa9e18bea488fe15a473ff47510c41cd1752e1775177785bb2d3a519b937c2fba2d5b0c00e657ea2e21295292e3f8a800525801c75ca64641271d3062cfca96cd3f023091ffbf1aea3192205ab4c3e1702ff5b78dd91dcf5e8687f9f0c71494e0d579c25ff23e81acbe3613a13c588496c01393b6a394f9eb12c3a828a510c221a27d71b2a4f09fdef2e6ea856c77f2422f20699666f9007f2fdb577b0066b8c49cce68ae8b30ae69d295080462c4a4de4e7b110b7a6655add6f2ec728001d9e28115f4d20bf553c21dd119185aea140b64713a33c27942127d6282f29a187306b473fdca8d44c0217850289927b1cb50d606f328443e20f9291f8ea4b6e460f15d06b7541a8d1f10129e19803c1df59a343bd42b02753030c644a1b5ae831cd60a67e79bf202d2eb5d7b4184a44e543c68f724769f48ab08f449fe31030dfd10c1301cc4f3dd9c77cde98962ba9da38d0090a307a11fc5951bddb427a0d484dfc9b57d1699de73845f36429ab99afab98f0fbc5c4adbdbf4c7189d7b34b350d6ebeaead99c74a737ae724290fd5ff6f65c386b9113721dcd9e88d9d8183ab68b4e41d06acdec143f8111f0a8b2d3edbd7cafeb001fd5e0e2e673f4e407792611be5274a1d23ac9f1cd1d5b96503987cd1236de12195cc87be92df6d7cbc1203b5452c79ed79dcb8bf17d816dcb8e7474fd959f4c33b9e07634d41602d0fd3470a5fd16d5a96597cb1e9202f8f944ad148df38b7562aed322081117b7e66713e98d6cb4d5cefe9e3a4e4e365d988882a79155a8257d23ae4de16237e56dd935e0178ba056764471dae072aee552fe902c90f0f19fe6bd154ea28efb79a824584d7e8c7aeb87927a0cc50042d4fbcda609fdd12a849e1f8990bea0c1d616e94528148b10a2b424fa0d2e19bb7163ecb3b33eeda2478fd2c5de54eed5025b842d35f89cda5b503e6c5f6fbed38eac09bae680f5dfa9789d4aaac77b02c7bd57b4c3273f0fdd3ea1829f190a15213c9c0ff62552192836dc15ecb5754600a7125b2a4a93f98302a93bcb62d3b3635fbe034f5bcdf92e87d80ceb5748e881c47443013356442a8ce223b30b3cd888c785db82ebc708814bff137ebe0b14930ad3273e2a82c5976ac660e10321396291fa62785ab7a0874f11110b9cd130c0761b8f472b9f10357a4d45169e09fb5f97392a1bf71aa3f484a73d9aea6f1755d9b3efed3358551c2cf5dd27ecbc1f37879dbe8c7942b77d60b7c3305176c5f1680893b061e57d1c97610ae71c003566147b15ae1f4901bfeb5f2dfe571c4abe8f510d74f34ba296151c4a83b7ee419f9fff113dc6ab948b7b15c3882d13e6746330d9749c0e1c6987fc1199d10a15cc52b81143c2e"}}, &(0x7f0000001380)=0x0) timer_delete(r2) 706.722383ms ago: executing program 4 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 653.863244ms ago: executing program 5 (id=1118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 276.431973ms ago: executing program 4 (id=1119): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x1c) 276.106173ms ago: executing program 5 (id=1120): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 275.725583ms ago: executing program 2 (id=1121): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6eed, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xb, 0x20082f7}) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403a00fc020000000000000000000000000000ff020000000000000000009078000000006097436700001100fe880000000000000000000000000001fe800000"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @link_local}, 0x10) io_uring_enter(r0, 0x2219, 0xd86c, 0x74, 0x0, 0x0) 215.731055ms ago: executing program 0 (id=1122): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 165.742566ms ago: executing program 4 (id=1123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000600)={0x0, 0xfffd, 0x1, '>'}, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, 0x8) 60.114239ms ago: executing program 5 (id=1124): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x401, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) lseek(r0, 0x9, 0x1) 0s ago: executing program 2 (id=1125): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000cc0)={[{@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@oldalloc}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0xb, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000d80)='./file0\x00') write$UHID_INPUT(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x81d011, 0x0, 0x1, 0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): T4010] inactive_file 266240 [ 49.739076][ T4010] active_file 73728 [ 49.751669][ T4010] unevictable 0 [ 49.786181][ T4010] hierarchical_memory_limit 314572800 [ 49.840778][ T4010] hierarchical_memsw_limit 9223372036854771712 [ 49.847453][ T4010] total_cache 339968 [ 49.851450][ T4010] total_rss 4096 [ 49.855258][ T4010] total_shmem 0 [ 49.862811][ T4010] total_mapped_file 65536 [ 49.888357][ T4010] total_dirty 0 [ 49.910220][ T4010] total_writeback 0 [ 49.931032][ T4010] total_workingset_refault_anon 86 [ 49.957985][ T4010] total_workingset_refault_file 1494 [ 49.963399][ T4010] total_swap 1245184 [ 49.967460][ T4010] total_swapcached 1605632 [ 49.971922][ T4010] total_pgpgin 5315 [ 49.975933][ T4010] total_pgpgout 5230 [ 49.979899][ T4010] total_pgfault 6053 [ 49.983821][ T4010] total_pgmajfault 40 [ 49.987954][ T4010] total_inactive_anon 8192 [ 50.007469][ T4010] total_active_anon 0 [ 50.011537][ T4010] total_inactive_file 266240 [ 50.016375][ T4010] total_active_file 73728 [ 50.020799][ T4010] total_unevictable 0 [ 50.024859][ T4010] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.178,pid=4010,uid=0 [ 50.079754][ T4010] Memory cgroup out of memory: Killed process 4010 (syz.4.178) total-vm:96236kB, anon-rss:1236kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 50.164470][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 50.265534][ T28] audit: type=1400 audit(1786907592.717:347): avc: denied { watch watch_reads } for pid=4052 comm="syz.0.195" path="/proc/105/task" dev="proc" ino=5729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 50.357724][ T4059] loop2: detected capacity change from 0 to 1024 [ 50.395888][ T4059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 50.400848][ T4060] loop3: detected capacity change from 0 to 8192 [ 50.411571][ T4059] System zones: 0-1, 3-12 [ 50.421035][ T4059] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.483994][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 50.524453][ T4076] Illegal XDP return value 2549038503 on prog (id 33) dev N/A, expect packet loss! [ 50.711497][ T4094] tipc: Failed to remove unknown binding: 66,0,0/0:4210886728/4210886729 [ 50.792180][ T4103] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 50.864089][ T4107] loop1: detected capacity change from 0 to 512 [ 50.895662][ T4107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.913662][ T4107] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.990120][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.150853][ T4123] loop0: detected capacity change from 0 to 8192 [ 51.253564][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 51.303233][ T4129] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 51.449945][ T4140] loop2: detected capacity change from 0 to 8192 [ 51.462667][ T4140] capability: warning: `syz.2.229' uses deprecated v2 capabilities in a way that may be insecure [ 51.602677][ T4152] loop0: detected capacity change from 0 to 512 [ 51.621946][ T4152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.658261][ T4152] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.007764][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.048858][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 52.142041][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 52.345653][ T49] rpcbind: server 127.0.0.1 not responding, timed out [ 52.672679][ T4213] syzkaller1: entered promiscuous mode [ 52.681069][ T4213] syzkaller1: entered allmulticast mode [ 53.069099][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 53.069114][ T28] audit: type=1400 audit(1786907595.527:373): avc: denied { connect } for pid=4235 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.243058][ T4236] loop4: detected capacity change from 0 to 512 [ 53.292039][ T4236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 53.312923][ T4236] System zones: 1-12 [ 53.340838][ T4236] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.254: error while reading EA inode 32 err=-116 [ 53.354197][ T4236] loop4: lost filesystem error report for type 5 error -117 [ 53.356021][ T4236] EXT4-fs (loop4): Remounting filesystem read-only [ 53.364595][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.364621][ C0] EXT4-fs (loop4): initial error at time 1786907595: ext4_xattr_inode_iget:446 [ 53.364802][ C0] EXT4-fs (loop4): last error at time 1786907595: ext4_xattr_inode_iget:446 [ 53.373656][ T28] audit: type=1400 audit(1786907595.827:374): avc: denied { write } for pid=4244 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.417956][ T4236] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 53.420237][ T28] audit: type=1400 audit(1786907595.827:375): avc: denied { nlmsg_write } for pid=4244 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.454860][ T4247] netlink: 'syz.3.258': attribute type 1 has an invalid length. [ 53.462746][ T4247] netlink: 'syz.3.258': attribute type 2 has an invalid length. [ 53.463221][ T4236] EXT4-fs (loop4): 1 orphan inode deleted [ 53.470482][ T4247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.258'. [ 53.547274][ T4254] loop2: detected capacity change from 0 to 1024 [ 53.549640][ T4236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.567219][ T4254] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 53.616901][ T4254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.636285][ T28] audit: type=1400 audit(1786907596.087:376): avc: denied { setopt } for pid=4263 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.665307][ T28] audit: type=1400 audit(1786907596.097:377): avc: denied { name_bind } for pid=4255 comm="syz.3.259" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.687351][ T28] audit: type=1400 audit(1786907596.117:378): avc: denied { write } for pid=4237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.710794][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.719944][ T28] audit: type=1400 audit(1786907596.157:379): avc: denied { setattr } for pid=4253 comm="syz.2.261" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.762147][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.773124][ T4259] syzkaller0: entered promiscuous mode [ 53.780280][ T4259] syzkaller0: entered allmulticast mode [ 53.793553][ T28] audit: type=1400 audit(1786907596.257:380): avc: denied { write } for pid=4271 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.856271][ T28] audit: type=1400 audit(1786907596.287:381): avc: denied { append } for pid=4274 comm="syz.2.264" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.887273][ T28] audit: type=1326 audit(1786907596.347:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4277 comm="syz.4.265" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c744ae0d9 code=0x7ffc0000 [ 54.460191][ T4310] loop3: detected capacity change from 0 to 512 [ 54.485504][ T4310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.513389][ T4310] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.725016][ T4321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.269'. [ 55.013765][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.179772][ T4351] loop0: detected capacity change from 0 to 512 [ 55.206191][ T4351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.219134][ T4351] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.326992][ T4359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.357230][ T4359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.380158][ T4359] process 'syz.4.286' launched './file1' with NULL argv: empty string added [ 55.391926][ T4366] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.285'. [ 55.405335][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.285'. [ 55.408223][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.450714][ T4371] loop0: detected capacity change from 0 to 512 [ 55.479231][ T4371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.500723][ T4371] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.518949][ T4371] capability: warning: `syz.0.288' uses 32-bit capabilities (legacy support in use) [ 55.544967][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.977548][ T4375] loop4: detected capacity change from 0 to 8192 [ 56.128959][ T4386] team0: entered allmulticast mode [ 56.134287][ T4386] team_slave_0: entered allmulticast mode [ 56.140135][ T4386] team_slave_1: entered allmulticast mode [ 56.751390][ T4416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 56.869311][ T4419] uprobe: syz.0.309:4419 failed to unregister, leaking uprobe [ 57.454221][ T4444] loop4: detected capacity change from 0 to 8192 [ 57.944247][ T4457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.973741][ T4457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.157556][ T4461] loop2: detected capacity change from 0 to 512 [ 58.189057][ T4461] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.218606][ T4465] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 58.220270][ T4461] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.319: corrupted in-inode xattr: e_value size too large [ 58.243211][ T4461] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.243640][ T4461] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.319: couldn't read orphan inode 15 (err -117) [ 58.252979][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 58.253011][ C0] EXT4-fs (loop2): initial error at time 1786907600: ext4_iget_extra_inode:5180: inode 15 [ 58.253140][ C0] EXT4-fs (loop2): last error at time 1786907600: ext4_iget_extra_inode:5180: inode 15 [ 58.261628][ T4465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.273987][ T4461] loop2: lost filesystem error report for type 5 error -117 [ 58.315071][ T4470] macvlan2: entered promiscuous mode [ 58.345845][ T4470] macvlan2: entered allmulticast mode [ 58.356747][ T4461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.378680][ T4470] bond1: entered promiscuous mode [ 58.393985][ T4470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 58.405883][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 58.405902][ T28] audit: type=1400 audit(1786907600.867:447): avc: denied { write } for pid=4460 comm="syz.2.319" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.440120][ T28] audit: type=1400 audit(1786907600.887:448): avc: denied { write } for pid=4460 comm="syz.2.319" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.464049][ T4470] bond1: left promiscuous mode [ 58.485654][ T28] audit: type=1400 audit(1786907600.897:449): avc: denied { write } for pid=4460 comm="syz.2.319" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.514541][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.556413][ T28] audit: type=1400 audit(1786907600.907:450): avc: denied { create } for pid=4460 comm="syz.2.319" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 58.654504][ T4475] netlink: 'syz.1.323': attribute type 1 has an invalid length. [ 58.662515][ T28] audit: type=1400 audit(1786907600.927:451): avc: denied { write } for pid=4460 comm="syz.2.319" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.701043][ T28] audit: type=1400 audit(1786907600.927:452): avc: denied { write } for pid=4460 comm="syz.2.319" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.733552][ T4475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.777797][ T4479] bond2: (slave geneve2): making interface the new active one [ 58.817315][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 58.829668][ T28] audit: type=1400 audit(1786907601.287:453): avc: denied { mount } for pid=4490 comm="syz.4.330" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 58.865377][ T28] audit: type=1400 audit(1786907601.327:454): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 58.903842][ T4479] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 58.927132][ T4489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.938436][ T4494] loop4: detected capacity change from 0 to 8192 [ 58.996863][ T4489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.149429][ T28] audit: type=1400 audit(1786907601.607:455): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.647753][ T28] audit: type=1400 audit(1786907602.107:456): avc: denied { watch watch_reads } for pid=4543 comm="syz.3.350" path="/63" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.679992][ T4546] loop3: detected capacity change from 0 to 128 [ 59.715136][ T4546] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.727789][ T4546] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.778572][ T3301] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.857239][ T4553] loop4: detected capacity change from 0 to 1024 [ 59.879898][ T4553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.977845][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.499171][ T4572] SELinux: failed to load policy [ 60.570265][ T4574] loop4: detected capacity change from 0 to 512 [ 60.586995][ T4574] ext4: Unknown parameter 'fsuuid' [ 60.764461][ T4580] netlink: 'syz.4.362': attribute type 3 has an invalid length. [ 60.772343][ T4580] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.362'. [ 60.817216][ T4584] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 60.831048][ T4584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.842753][ T4584] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 60.905574][ T4589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 61.127783][ T4597] bridge_slave_0: Caught tx_queue_len zero misconfig [ 61.299214][ T4599] loop0: detected capacity change from 0 to 512 [ 61.330357][ T4599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.367600][ T4599] EXT4-fs (loop0): 1 truncate cleaned up [ 61.385911][ T4599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.408757][ T4599] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 61.432675][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.319261][ T4517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.389503][ T4604] loop4: detected capacity change from 0 to 512 [ 62.419076][ T4604] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.375: bg 0: block 104: invalid block bitmap [ 62.431660][ T4604] loop4: lost filesystem error report for type 5 error -117 [ 62.433338][ T4604] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 62.440699][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 62.440742][ C0] EXT4-fs (loop4): initial error at time 1786907604: ext4_validate_block_bitmap:432 [ 62.440772][ C0] EXT4-fs (loop4): last error at time 1786907604: ext4_validate_block_bitmap:432 [ 62.475043][ T4604] loop4: lost filesystem error report for type 5 error -117 [ 62.475255][ T4604] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.375: invalid indirect mapped block 1 (level 1) [ 62.495767][ T4604] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.497250][ T4604] EXT4-fs (loop4): 1 truncate cleaned up [ 62.512661][ T4604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.636867][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.654578][ T4619] loop1: detected capacity change from 0 to 128 [ 63.012764][ T4623] loop4: detected capacity change from 0 to 512 [ 63.060861][ T4623] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.071625][ T4623] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 63.083967][ T4636] loop1: detected capacity change from 0 to 8192 [ 63.099815][ T4623] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 63.130488][ T4623] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 63.159225][ T4623] System zones: 0-2, 18-18, 34-35 [ 63.203506][ T4623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.264106][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.389098][ T4650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 63.403979][ T4654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.394'. [ 63.450413][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 63.450431][ T28] audit: type=1400 audit(1786907605.907:481): avc: denied { create } for pid=4655 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 63.649212][ T28] audit: type=1400 audit(1786907606.107:482): avc: denied { listen } for pid=4667 comm="syz.0.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.703235][ T4664] syzkaller0: entered promiscuous mode [ 63.715098][ T4664] syzkaller0: entered allmulticast mode [ 64.011399][ T4675] loop4: detected capacity change from 0 to 8192 [ 64.505271][ T4691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 65.614780][ T4733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 65.927031][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 65.958378][ T4735] loop1: detected capacity change from 0 to 512 [ 65.991816][ T4743] loop2: detected capacity change from 0 to 128 [ 65.993222][ T4735] ext4: Unknown parameter 'fsuuid' [ 66.021202][ T4743] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.045834][ T4743] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.106463][ T28] audit: type=1400 audit(1786907608.567:483): avc: denied { write } for pid=4740 comm="syz.2.438" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.261328][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.345963][ T4753] loop1: detected capacity change from 0 to 512 [ 66.370589][ T4752] xt_cluster: node mask cannot exceed total number of nodes [ 66.385265][ T4753] EXT4-fs: Ignoring removed i_version option [ 66.386036][ T4753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.422290][ T4753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.435014][ T4753] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.466034][ T4748] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 66.489951][ T4748] SELinux: failed to load policy [ 66.497721][ T4759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.538087][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.549475][ T4759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.384122][ T4785] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 67.628567][ T4793] loop1: detected capacity change from 0 to 1024 [ 67.660275][ T4793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.691226][ T28] audit: type=1400 audit(1786907610.147:484): avc: denied { write } for pid=4791 comm="syz.1.447" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.695249][ T4783] loop2: detected capacity change from 0 to 512 [ 67.731062][ T4783] ext4: Unknown parameter 'fsuuid' [ 67.849828][ T4800] SELinux: failed to load policy [ 67.923616][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.985930][ T4805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.019308][ T4798] loop4: detected capacity change from 0 to 512 [ 68.071994][ T4798] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.113474][ T4805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.181306][ T4798] EXT4-fs (loop4): 1 truncate cleaned up [ 68.223288][ T4798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.258534][ T4805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.344821][ T4798] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 68.398918][ T4798] syz.4.449 (4798) used greatest stack depth: 9728 bytes left [ 68.424243][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.446916][ T4805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.548329][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.561679][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.607375][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.637255][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.394264][ T28] audit: type=1400 audit(1786907611.847:485): avc: denied { create } for pid=4833 comm="syz.4.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 69.395777][ T4838] netlink: 'syz.2.465': attribute type 4 has an invalid length. [ 69.441625][ T28] audit: type=1400 audit(1786907611.887:486): avc: denied { sys_admin } for pid=4833 comm="syz.4.466" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 69.822903][ T4837] loop0: detected capacity change from 0 to 512 [ 69.870440][ T4837] ext4: Unknown parameter 'fsuuid' [ 69.978292][ T4852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 70.362695][ T4854] loop2: detected capacity change from 0 to 512 [ 70.410201][ T4854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.497726][ T4854] EXT4-fs (loop2): 1 truncate cleaned up [ 70.585397][ T4854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.692648][ T4854] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 70.769063][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.907134][ T4864] loop1: detected capacity change from 0 to 512 [ 71.011530][ T4864] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.087984][ T4864] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.474: corrupted in-inode xattr: e_value size too large [ 71.196455][ T4864] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.201199][ T4864] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.474: couldn't read orphan inode 15 (err -117) [ 71.210526][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 71.210576][ C1] EXT4-fs (loop1): initial error at time 1786907613: ext4_iget_extra_inode:5180: inode 15 [ 71.210739][ C1] EXT4-fs (loop1): last error at time 1786907613: ext4_iget_extra_inode:5180: inode 15 [ 71.304556][ T4864] loop1: lost filesystem error report for type 5 error -117 [ 71.307757][ T4864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.367023][ T28] audit: type=1400 audit(1786907613.827:487): avc: denied { write } for pid=4863 comm="syz.1.474" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.410314][ T28] audit: type=1400 audit(1786907613.867:488): avc: denied { write } for pid=4863 comm="syz.1.474" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.466449][ T28] audit: type=1400 audit(1786907613.897:489): avc: denied { write } for pid=4863 comm="syz.1.474" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.514457][ T28] audit: type=1400 audit(1786907613.897:490): avc: denied { write } for pid=4863 comm="syz.1.474" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.554459][ T28] audit: type=1400 audit(1786907613.907:491): avc: denied { write } for pid=4863 comm="syz.1.474" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.584507][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.359780][ T28] audit: type=1400 audit(1786907618.817:492): avc: denied { allowed } for pid=4874 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 76.386197][ T3301] bond1: (slave syz_tun): Removing an active aggregator [ 76.405561][ T3301] bond1: (slave syz_tun): Releasing backup interface [ 76.767032][ T4885] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.774233][ T4885] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.781680][ T4885] bridge_slave_0: entered allmulticast mode [ 76.788872][ T4885] bridge_slave_0: entered promiscuous mode [ 76.804288][ T4885] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.814085][ T4885] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.823269][ T4885] bridge_slave_1: entered allmulticast mode [ 76.830833][ T4885] bridge_slave_1: entered promiscuous mode [ 76.876196][ T4908] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 76.891312][ T4885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.914729][ T4881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.486'. [ 76.925230][ T4885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.942749][ T4910] loop4: detected capacity change from 0 to 512 [ 76.948205][ T4908] gretap1: entered allmulticast mode [ 76.957321][ T4908] bond1: (slave gretap1): making interface the new active one [ 76.965987][ T4908] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 76.968637][ T4910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.993067][ T4885] team0: Port device team_slave_0 added [ 77.000072][ T4885] team0: Port device team_slave_1 added [ 77.039982][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.047092][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.073374][ T4885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.087682][ T4885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.094712][ T4885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.120772][ T4906] SELinux: context truncated [ 77.120832][ T4885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.138319][ T4906] SELinux: invalid ocon [ 77.158777][ T4906] SELinux: failed to load policy [ 77.194106][ T4885] hsr_slave_0: entered promiscuous mode [ 77.200747][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.201820][ T4885] hsr_slave_1: entered promiscuous mode [ 77.216146][ T4885] debugfs: 'hsr0' already exists in 'hsr' [ 77.221945][ T4885] Cannot create hsr debugfs directory [ 77.266627][ T28] audit: type=1400 audit(1786907619.717:493): avc: denied { read } for pid=4917 comm="syz.4.482" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.305972][ T28] audit: type=1400 audit(1786907619.717:494): avc: denied { open } for pid=4917 comm="syz.4.482" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.340620][ T28] audit: type=1400 audit(1786907619.717:495): avc: denied { ioctl } for pid=4917 comm="syz.4.482" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.366985][ T4924] loop2: detected capacity change from 0 to 1024 [ 77.376337][ T4924] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 77.480276][ T4931] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.517301][ T30] bridge_slave_1: left allmulticast mode [ 77.523301][ T30] bridge_slave_1: left promiscuous mode [ 77.531448][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.539580][ T30] bridge_slave_0: left allmulticast mode [ 77.545453][ T30] bridge_slave_0: left promiscuous mode [ 77.551340][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.560481][ T30] team0: left allmulticast mode [ 77.565705][ T30] team_slave_0: left allmulticast mode [ 77.571478][ T30] team_slave_1: left allmulticast mode [ 77.609314][ T28] audit: type=1400 audit(1786907620.067:496): avc: denied { write } for pid=4933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.655004][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.665690][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.677627][ T28] audit: type=1400 audit(1786907620.137:497): avc: denied { write } for pid=4949 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.703958][ T30] bond0 (unregistering): Released all slaves [ 77.719208][ T30] bond1 (unregistering): Released all slaves [ 77.741761][ T4931] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.769304][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 77.779229][ T30] hsr_slave_0: left promiscuous mode [ 77.785182][ T30] hsr_slave_1: left promiscuous mode [ 77.791001][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.798975][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.835473][ T30] team0 (unregistering): Port device team_slave_1 removed [ 77.846040][ T30] team0 (unregistering): Port device team_slave_0 removed [ 77.889701][ T4931] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.905537][ T4885] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.914756][ T4885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.922574][ T4885] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.931441][ T4885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.940230][ T4885] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.949460][ T4885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.957381][ T4885] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.966271][ T4885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.977592][ T4931] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.021625][ T4885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.036950][ T4885] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.047143][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.054281][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.065979][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.073100][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.113029][ T28] audit: type=1400 audit(1786907620.567:498): avc: denied { write } for pid=4959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.141063][ T408] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.154529][ T3473] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.176802][ T4976] loop0: detected capacity change from 0 to 512 [ 78.203934][ T4976] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.233567][ T28] audit: type=1400 audit(1786907620.687:499): avc: denied { write } for pid=4977 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.235205][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.297289][ T4976] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.493: corrupted in-inode xattr: e_value size too large [ 78.314517][ T3473] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.325535][ T4976] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.325818][ T4976] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.493: couldn't read orphan inode 15 (err -117) [ 78.335001][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 78.335020][ C1] EXT4-fs (loop0): initial error at time 1786907620: ext4_iget_extra_inode:5180: inode 15 [ 78.335045][ C1] EXT4-fs (loop0): last error at time 1786907620: ext4_iget_extra_inode:5180: inode 15 [ 78.395798][ T4986] netlink: 28 bytes leftover after parsing attributes in process `syz.1.495'. [ 78.406591][ T4976] loop0: lost filesystem error report for type 5 error -117 [ 78.407230][ T4976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.442604][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 78.458691][ T28] audit: type=1400 audit(1786907620.917:500): avc: denied { write } for pid=4969 comm="syz.0.493" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.482963][ T28] audit: type=1400 audit(1786907620.947:501): avc: denied { write } for pid=4969 comm="syz.0.493" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.568861][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.649349][ T4885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.848709][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 78.882585][ T4885] veth0_vlan: entered promiscuous mode [ 78.920753][ T4885] veth1_vlan: entered promiscuous mode [ 78.952063][ T4885] veth0_macvtap: entered promiscuous mode [ 78.974365][ T4885] veth1_macvtap: entered promiscuous mode [ 79.002709][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.026777][ T4885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.091328][ T5046] loop2: detected capacity change from 0 to 512 [ 79.107347][ T340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.134683][ T5046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.148810][ T340] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.170745][ T340] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.194687][ T340] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.245786][ T5037] SELinux: context truncated [ 79.250541][ T5037] SELinux: invalid ocon [ 79.259297][ T5037] SELinux: failed to load policy [ 79.293992][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.340767][ T5042] loop1: detected capacity change from 0 to 512 [ 79.371581][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 79.388934][ T5042] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.399538][ T5042] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 79.436982][ T5042] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 79.450345][ T5042] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 79.462825][ T5042] System zones: 0-2, 18-18, 34-35 [ 79.497872][ T5042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.559971][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 79.569599][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.609053][ T5077] program syz.0.517 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.692132][ T5079] loop1: detected capacity change from 0 to 512 [ 79.800840][ T5079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.871976][ T5079] EXT4-fs (loop1): 1 truncate cleaned up [ 79.896800][ T5079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.956097][ T5079] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 79.991437][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.507298][ T5115] loop5: detected capacity change from 0 to 512 [ 80.569414][ T5115] ext4: Unknown parameter 'fsuuid' [ 80.658821][ T5120] loop4: detected capacity change from 0 to 512 [ 80.700198][ T5120] EXT4-fs: inline encryption not supported [ 80.743119][ T5120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.779383][ T5120] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.791486][ T5120] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.530: inode #15: comm syz.4.530: iget: illegal inode # [ 80.804317][ T5120] loop4: lost filesystem error report for type 5 error -117 [ 80.804394][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 80.807056][ T5124] loop2: detected capacity change from 0 to 512 [ 80.811735][ C0] EXT4-fs (loop4): initial error at time 1786907623: ext4_orphan_get:1399 [ 80.811766][ C0] EXT4-fs (loop4): last error at time 1786907623: ext4_orphan_get:1399 [ 80.812342][ T5120] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.530: couldn't read orphan inode 15 (err -117) [ 80.856693][ T5120] loop4: lost filesystem error report for type 5 error -117 [ 80.858178][ T5120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.889577][ T5124] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.905019][ T5124] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 80.922458][ T5120] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 80.935599][ T5120] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 80.960355][ T5124] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 81.009019][ T5124] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 81.030633][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.042733][ T5124] System zones: 0-2, 18-18, 34-35 [ 81.167907][ T5135] loop1: detected capacity change from 0 to 256 [ 81.180284][ T5124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.329247][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 81.370796][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.480016][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 81.480111][ T28] audit: type=1400 audit(1786907623.917:518): avc: denied { ioctl } for pid=5143 comm="syz.2.529" path="socket:[10622]" dev="sockfs" ino=10622 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.516346][ T5148] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5148 comm=syz.5.531 [ 81.550629][ T28] audit: type=1400 audit(1786907624.007:519): avc: denied { nlmsg_write } for pid=5145 comm="syz.5.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 81.580750][ T28] audit: type=1400 audit(1786907624.007:520): avc: denied { write } for pid=5152 comm="syz.1.532" path="socket:[10000]" dev="sockfs" ino=10000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.605835][ T28] audit: type=1400 audit(1786907624.067:521): avc: denied { setopt } for pid=5154 comm="syz.2.533" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.695751][ T5162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.706821][ T5162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.817784][ T28] audit: type=1400 audit(1786907624.277:522): avc: denied { connect } for pid=5168 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.908616][ T5173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.932306][ T5173] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.054218][ T28] audit: type=1400 audit(1786907624.507:523): avc: denied { write } for pid=5172 comm="syz.5.541" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.097653][ T28] audit: type=1400 audit(1786907624.547:524): avc: denied { write } for pid=5172 comm="syz.5.541" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.354460][ T4885] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 82.366400][ T4885] CPU: 0 UID: 0 PID: 4885 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 82.366428][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.366453][ T4885] Call Trace: [ 82.366460][ T4885] [ 82.366468][ T4885] __dump_stack+0x1d/0x30 [ 82.366505][ T4885] dump_stack_lvl+0x95/0xd0 [ 82.366526][ T4885] dump_stack+0x15/0x1b [ 82.366545][ T4885] dump_header+0x80/0x240 [ 82.366573][ T4885] oom_kill_process+0x295/0x350 [ 82.366764][ T4885] out_of_memory+0x981/0xbc0 [ 82.366797][ T4885] try_charge_memcg+0x621/0xa00 [ 82.366830][ T4885] charge_memcg+0x6d/0x120 [ 82.366917][ T4885] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 82.366964][ T4885] swap_cache_alloc_folio+0x47b/0x5e0 [ 82.367000][ T4885] swap_cluster_readahead+0x2b1/0x460 [ 82.367077][ T4885] swapin_readahead+0xd8/0x8a0 [ 82.367121][ T4885] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 82.367240][ T4885] ? hrtimer_start_range_ns+0x108/0x120 [ 82.367276][ T4885] ? __rcu_read_unlock+0x4e/0x70 [ 82.367321][ T4885] ? swap_cache_get_folio+0x1f7/0x200 [ 82.367352][ T4885] do_swap_page+0x2a2/0x1ec0 [ 82.367394][ T4885] ? __schedule+0x799/0xd10 [ 82.367491][ T4885] ? __rcu_read_lock+0x36/0x50 [ 82.367518][ T4885] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 82.367557][ T4885] handle_mm_fault+0xb3c/0x2da0 [ 82.367607][ T4885] do_user_addr_fault+0x634/0x1060 [ 82.367678][ T4885] ? trace_page_fault_user+0x1f/0xa0 [ 82.367769][ T4885] exc_page_fault+0x62/0xa0 [ 82.367793][ T4885] asm_exc_page_fault+0x26/0x30 [ 82.367841][ T4885] RIP: 0033:0x7f67a7c39257 [ 82.367862][ T4885] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 82.367880][ T4885] RSP: 002b:00007ffdc7438750 EFLAGS: 00010202 [ 82.367906][ T4885] RAX: 0000000000000000 RBX: 00005555889aa500 RCX: 00007f67a7c39257 [ 82.367924][ T4885] RDX: 00007ffdc7438790 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.367946][ T4885] RBP: 00007ffdc74387fc R08: 0000000000000000 R09: 0000000000000000 [ 82.367963][ T4885] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 82.367977][ T4885] R13: 00000000000927c0 R14: 00000000000140c0 R15: 00007ffdc7438850 [ 82.367995][ T4885] [ 82.369694][ T4885] memory: usage 307200kB, limit 307200kB, failcnt 101 [ 82.600264][ T4885] memory+swap: usage 171632kB, limit 9007199254740988kB, failcnt 0 [ 82.608445][ T4885] kmem: usage 167016kB, limit 9007199254740988kB, failcnt 0 [ 82.615891][ T4885] Memory cgroup stats for /syz5: [ 82.616180][ T4885] cache 28672 [ 82.624635][ T4885] rss 0 [ 82.627566][ T4885] shmem 0 [ 82.630676][ T4885] mapped_file 0 [ 82.634318][ T4885] dirty 0 [ 82.637424][ T4885] writeback 0 [ 82.640848][ T4885] workingset_refault_anon 56 [ 82.646232][ T4885] workingset_refault_file 0 [ 82.651279][ T4885] swap 454656 [ 82.654657][ T4885] swapcached 684032 [ 82.658614][ T4885] pgpgin 1022 [ 82.662130][ T4885] pgpgout 1015 [ 82.666083][ T4885] pgfault 1706 [ 82.669562][ T4885] pgmajfault 25 [ 82.673173][ T4885] inactive_anon 0 [ 82.677032][ T4885] active_anon 0 [ 82.680671][ T4885] inactive_file 20480 [ 82.684952][ T4885] active_file 8192 [ 82.688983][ T4885] unevictable 0 [ 82.692613][ T4885] hierarchical_memory_limit 314572800 [ 82.699114][ T4885] hierarchical_memsw_limit 9223372036854771712 [ 82.705842][ T4885] total_cache 28672 [ 82.709767][ T4885] total_rss 0 [ 82.713240][ T4885] total_shmem 0 [ 82.717150][ T4885] total_mapped_file 0 [ 82.721232][ T4885] total_dirty 0 [ 82.724843][ T4885] total_writeback 0 [ 82.728779][ T4885] total_workingset_refault_anon 56 [ 82.734100][ T4885] total_workingset_refault_file 0 [ 82.739351][ T4885] total_swap 454656 [ 82.743224][ T4885] total_swapcached 684032 [ 82.782989][ T4885] total_pgpgin 1022 [ 82.787517][ T4885] total_pgpgout 1015 [ 82.791441][ T4885] total_pgfault 1706 [ 82.795924][ T4885] total_pgmajfault 25 [ 82.800085][ T4885] total_inactive_anon 0 [ 82.804248][ T4885] total_active_anon 0 [ 82.808468][ T4885] total_inactive_file 20480 [ 82.813031][ T4885] total_active_file 8192 [ 82.817689][ T4885] total_unevictable 0 [ 82.821706][ T4885] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.541,pid=5172,uid=0 [ 82.836872][ T4885] Memory cgroup out of memory: Killed process 5172 (syz.5.541) total-vm:96236kB, anon-rss:1244kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 82.871353][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.938668][ T5181] set_capacity_and_notify: 1 callbacks suppressed [ 82.938702][ T5181] loop0: detected capacity change from 0 to 512 [ 82.964059][ T5183] loop4: detected capacity change from 0 to 512 [ 82.979692][ T5181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.998017][ T5183] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.039206][ T5183] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.544: corrupted in-inode xattr: e_value size too large [ 83.077244][ T5183] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.077663][ T5183] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.544: couldn't read orphan inode 15 (err -117) [ 83.087561][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 83.087589][ C0] EXT4-fs (loop4): initial error at time 1786907625: ext4_iget_extra_inode:5180: inode 15 [ 83.087692][ C0] EXT4-fs (loop4): last error at time 1786907625: ext4_iget_extra_inode:5180: inode 15 [ 83.089047][ T5181] SELinux: context truncated [ 83.119606][ T5185] loop5: detected capacity change from 0 to 512 [ 83.126032][ T5181] SELinux: invalid ocon [ 83.133364][ T5181] SELinux: failed to load policy [ 83.149181][ T5183] loop4: lost filesystem error report for type 5 error -117 [ 83.160942][ T5183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.193672][ T5185] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.218704][ T28] audit: type=1400 audit(1786907625.667:525): avc: denied { write } for pid=5182 comm="syz.4.544" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.270892][ T28] audit: type=1400 audit(1786907625.707:526): avc: denied { write } for pid=5182 comm="syz.4.544" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.321595][ T5185] EXT4-fs (loop5): 1 truncate cleaned up [ 83.340041][ T28] audit: type=1400 audit(1786907625.707:527): avc: denied { write } for pid=5182 comm="syz.4.544" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.391948][ T5185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.461431][ T5185] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 83.500742][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.510643][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.575327][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.608527][ T5207] net_ratelimit: 2038 callbacks suppressed [ 83.608545][ T5207] Set syz1 is full, maxelem 2076 reached [ 83.641515][ T5207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.661755][ T5207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.715427][ T5213] loop1: detected capacity change from 0 to 128 [ 83.793441][ T5209] loop5: detected capacity change from 0 to 512 [ 83.840414][ T5209] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.850887][ T5209] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 83.872189][ T5209] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 83.883468][ T5209] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 83.897206][ T5209] System zones: 0-2, 18-18, 34-35 [ 83.928440][ T5209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.978173][ T5220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.987292][ T5216] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 83.992011][ T5220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.039390][ T5222] loop1: detected capacity change from 0 to 128 [ 84.058987][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.088341][ T5222] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.234107][ T49] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 84.253098][ T5240] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 84.340448][ T5246] loop0: detected capacity change from 0 to 2048 [ 84.385222][ T5246] loop0: p1 < > p4 [ 84.391387][ T5246] loop0: p4 size 722688 extends beyond EOD, truncated [ 84.745252][ T5299] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5299 comm=syz.0.573 [ 85.313623][ T5356] loop2: detected capacity change from 0 to 164 [ 85.331444][ T5356] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 85.392298][ T5359] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5359 comm=syz.1.585 [ 85.410553][ T5356] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.473265][ T5356] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.550052][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.557416][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.589442][ T5376] loop1: detected capacity change from 0 to 512 [ 85.599569][ T5376] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.592: iget: bad i_size value: 38620345925642 [ 85.624965][ T5376] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.626147][ T5376] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.592: couldn't read orphan inode 15 (err -117) [ 85.635646][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 85.635668][ C0] EXT4-fs (loop1): initial error at time 1786907628: ext4_orphan_get:1399: inode 15 [ 85.635706][ C0] EXT4-fs (loop1): last error at time 1786907628: ext4_orphan_get:1399: inode 15 [ 85.672705][ T5376] loop1: lost filesystem error report for type 5 error -117 [ 85.674210][ T5368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.675008][ T5376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.708818][ T5368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.767276][ T5376] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.592: bg 0: block 5: invalid block bitmap [ 85.780623][ T5376] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1856 with error 28 [ 85.793365][ T5376] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.793365][ T5376] [ 85.803143][ T5376] EXT4-fs (loop1): Total free blocks count 0 [ 85.809274][ T5376] EXT4-fs (loop1): Free/Dirty block details [ 85.815247][ T5376] EXT4-fs (loop1): free_blocks=0 [ 85.820538][ T5376] EXT4-fs (loop1): dirty_blocks=1860 [ 85.825882][ T5376] EXT4-fs (loop1): Block reservation details [ 85.832222][ T5376] EXT4-fs (loop1): i_reserved_data_blocks=1860 [ 85.836308][ T5356] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.875643][ T5379] EXT4-fs (loop1): shut down requested (0) [ 85.884446][ T408] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.893001][ T408] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.910214][ T408] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.938137][ T408] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.985782][ T5356] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.009839][ T5382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.603'. [ 86.043719][ T5387] netlink: 'syz.1.595': attribute type 1 has an invalid length. [ 86.061310][ T5387] bond3: entered promiscuous mode [ 86.066693][ T5387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.111471][ T5385] loop5: detected capacity change from 0 to 512 [ 86.163372][ T5387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 86.210571][ T5387] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 86.254438][ T5387] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 86.261013][ T5385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 86.272668][ T5387] bond3: (slave xfrm1): making interface the new active one [ 86.280788][ T5385] System zones: 1-12 [ 86.291801][ T5387] xfrm1: entered promiscuous mode [ 86.309062][ T5385] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.594: error while reading EA inode 32 err=-116 [ 86.322712][ T5385] loop5: lost filesystem error report for type 5 error -117 [ 86.324388][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 86.326057][ T5385] EXT4-fs (loop5): Remounting filesystem read-only [ 86.331723][ C0] EXT4-fs (loop5): initial error at time 1786907628: ext4_xattr_inode_iget:446 [ 86.331756][ C0] EXT4-fs (loop5): last error at time 1786907628: ext4_xattr_inode_iget:446 [ 86.380537][ T5387] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 86.381091][ T5385] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 86.401310][ T5385] EXT4-fs (loop5): 1 orphan inode deleted [ 86.420123][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.420521][ T5385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.469710][ T408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.485761][ T408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.502106][ T408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.531580][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 86.531596][ T28] audit: type=1400 audit(1786907628.987:557): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 86.586956][ T5402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.635468][ T5402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.691992][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.706422][ T28] audit: type=1400 audit(1786907629.167:558): avc: denied { create } for pid=5410 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.727445][ T5411] lo speed is unknown, defaulting to 1000 [ 86.734338][ T5411] lo speed is unknown, defaulting to 1000 [ 86.745119][ T5411] lo speed is unknown, defaulting to 1000 [ 86.755851][ T28] audit: type=1400 audit(1786907629.167:559): avc: denied { write } for pid=5410 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 86.851252][ T28] audit: type=1400 audit(1786907629.307:560): avc: denied { create } for pid=5417 comm="syz.2.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.874810][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.882086][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.903039][ T28] audit: type=1400 audit(1786907629.307:561): avc: denied { write } for pid=5417 comm="syz.2.607" path="socket:[11547]" dev="sockfs" ino=11547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.904859][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 87.010883][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.021317][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.041197][ T28] audit: type=1400 audit(1786907629.497:562): avc: denied { execute } for pid=5425 comm="syz.4.610" path="/136/cpuacct.usage_sys" dev="tmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.101780][ T5411] infiniband syz0: set active [ 87.106732][ T5411] infiniband syz0: added lo [ 87.114585][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.134444][ T5426] syzkaller0: entered promiscuous mode [ 87.143573][ T3400] lo speed is unknown, defaulting to 1000 [ 87.149454][ T408] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.149560][ T408] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.149610][ T408] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.187134][ T5411] RDS/IB: syz0: added [ 87.203381][ T5411] smc: adding ib device syz0 with port count 1 [ 87.213679][ T5411] smc: ib device syz0 port 1 has no pnetid [ 87.220527][ T5411] lo speed is unknown, defaulting to 1000 [ 87.228228][ T3400] lo speed is unknown, defaulting to 1000 [ 87.240646][ T28] audit: type=1400 audit(1786907629.697:563): avc: denied { bind } for pid=5433 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.328660][ T28] audit: type=1400 audit(1786907629.727:564): avc: denied { setopt } for pid=5433 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.628980][ T5411] lo speed is unknown, defaulting to 1000 [ 87.745667][ T5411] lo speed is unknown, defaulting to 1000 [ 87.833916][ T5442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 87.846020][ T5442] System zones: 1-12 [ 87.847300][ T5444] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.882604][ T5442] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.616: error while reading EA inode 32 err=-116 [ 87.895404][ T5411] lo speed is unknown, defaulting to 1000 [ 87.902669][ T5442] loop1: lost filesystem error report for type 5 error -117 [ 87.908617][ T5442] EXT4-fs (loop1): Remounting filesystem read-only [ 87.916645][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 87.916825][ C0] EXT4-fs (loop1): initial error at time 1786907630: ext4_xattr_inode_iget:446 [ 87.917005][ C0] EXT4-fs (loop1): last error at time 1786907630: ext4_xattr_inode_iget:446 [ 87.961955][ T5411] lo speed is unknown, defaulting to 1000 [ 87.964336][ T5444] EXT4-fs (loop2): 1 truncate cleaned up [ 87.972854][ T5442] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 87.979364][ T5444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.010953][ T5442] EXT4-fs (loop1): 1 orphan inode deleted [ 88.036767][ T5444] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 88.074061][ T5442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.149561][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.219128][ T5457] set_capacity_and_notify: 3 callbacks suppressed [ 88.220483][ T5457] loop0: detected capacity change from 0 to 256 [ 88.251466][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.382247][ T5457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 88.445755][ T5467] loop0: detected capacity change from 0 to 8192 [ 88.622460][ T28] audit: type=1400 audit(1786907631.077:565): avc: denied { write } for pid=5471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.689770][ T28] audit: type=1400 audit(1786907631.147:566): avc: denied { write } for pid=5490 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.921935][ T5511] loop5: detected capacity change from 0 to 512 [ 88.946946][ T5511] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.993076][ T5511] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.631: corrupted in-inode xattr: e_value size too large [ 89.009780][ T5511] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.014412][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 89.023531][ T5511] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.631: couldn't read orphan inode 15 (err -117) [ 89.023792][ T5511] loop5: lost filesystem error report for type 5 error -117 [ 89.030244][ C0] EXT4-fs (loop5): initial error at time 1786907631: ext4_iget_extra_inode:5180: inode 15 [ 89.030279][ C0] EXT4-fs (loop5): last error at time 1786907631: ext4_iget_extra_inode:5180: inode 15 [ 89.132539][ T5511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.228820][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.307486][ T5530] lo speed is unknown, defaulting to 1000 [ 89.409739][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 89.581488][ T5540] team_slave_1: entered promiscuous mode [ 89.810754][ T5539] team_slave_1: left promiscuous mode [ 90.201410][ T5570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.648'. [ 91.216926][ T5616] loop2: detected capacity change from 0 to 512 [ 91.250062][ T5613] lo speed is unknown, defaulting to 1000 [ 91.306510][ T5616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.346930][ T5616] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.483910][ T5616] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.658: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 91.568801][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 91.568816][ T28] audit: type=1400 audit(1786907634.027:631): avc: denied { write } for pid=5629 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.598829][ T5607] loop5: detected capacity change from 0 to 256 [ 91.632179][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.665348][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 91.901658][ T28] audit: type=1400 audit(1786907634.357:632): avc: denied { write } for pid=5643 comm="syz.1.664" name="raw" dev="proc" ino=4026532549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 91.985194][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.654'. [ 92.242398][ T28] audit: type=1400 audit(1786907634.697:633): avc: denied { write } for pid=5646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.350519][ T28] audit: type=1400 audit(1786907634.807:634): avc: denied { write } for pid=5675 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.469472][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 92.518866][ T5668] loop0: detected capacity change from 0 to 512 [ 92.683251][ T5668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 92.697074][ T28] audit: type=1400 audit(1786907635.157:635): avc: denied { write } for pid=5681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.714331][ T5668] System zones: 1-12 [ 92.754533][ T5668] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.670: error while reading EA inode 32 err=-116 [ 92.768288][ T5668] loop0: lost filesystem error report for type 5 error -117 [ 92.772304][ T5668] EXT4-fs (loop0): Remounting filesystem read-only [ 92.781226][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 92.781346][ C0] EXT4-fs (loop0): initial error at time 1786907635: ext4_xattr_inode_iget:446 [ 92.781692][ C0] EXT4-fs (loop0): last error at time 1786907635: ext4_xattr_inode_iget:446 [ 92.815420][ T28] audit: type=1400 audit(1786907635.257:636): avc: denied { write } for pid=5698 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.839767][ T5668] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 92.858272][ T5668] EXT4-fs (loop0): 1 orphan inode deleted [ 92.895862][ T5668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.031800][ T28] audit: type=1400 audit(1786907635.487:637): avc: denied { watch } for pid=5712 comm="syz.4.678" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 93.066569][ T5717] loop2: detected capacity change from 0 to 256 [ 93.076633][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 93.108210][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.274820][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.685'. [ 93.488717][ T5729] loop0: detected capacity change from 0 to 512 [ 93.528514][ T5729] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.543144][ T5729] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 93.568796][ T5729] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 93.583137][ T5729] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 93.595537][ T5729] System zones: 0-2, 18-18, 34-35 [ 93.616140][ T5729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.662230][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.697159][ T5749] loop4: detected capacity change from 0 to 512 [ 93.726509][ T5751] tipc: Started in network mode [ 93.734454][ T5749] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.692: iget: bad i_size value: 38620345925642 [ 93.736944][ T5751] tipc: Node identity ac141441, cluster identity 4711 [ 93.754329][ T5751] tipc: Enabled bearer , priority 10 [ 93.772726][ T5749] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.784384][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 93.800910][ C1] EXT4-fs (loop4): initial error at time 1786907636: ext4_orphan_get:1399: inode 15 [ 93.806076][ T5749] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.692: couldn't read orphan inode 15 (err -117) [ 93.811304][ C1] EXT4-fs (loop4): last error at time 1786907636: ext4_orphan_get:1399: inode 15 [ 93.861390][ T5749] loop4: lost filesystem error report for type 5 error -117 [ 93.862205][ T5749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.892545][ T5746] loop2: detected capacity change from 0 to 512 [ 93.897687][ T5747] loop0: detected capacity change from 0 to 512 [ 93.973412][ T28] audit: type=1400 audit(1786907636.427:638): avc: denied { write } for pid=5748 comm="syz.4.692" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.051002][ T5747] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.073948][ T5749] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.692: bg 0: block 5: invalid block bitmap [ 94.077241][ T5747] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 94.090815][ T5749] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1004 with error 28 [ 94.101968][ T5746] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 94.114088][ T5749] EXT4-fs (loop4): This should not happen!! Data will be lost [ 94.114088][ T5749] [ 94.131342][ T5749] EXT4-fs (loop4): Total free blocks count 0 [ 94.137715][ T5749] EXT4-fs (loop4): Free/Dirty block details [ 94.143903][ T5749] EXT4-fs (loop4): free_blocks=0 [ 94.148971][ T5749] EXT4-fs (loop4): dirty_blocks=1008 [ 94.154599][ T5749] EXT4-fs (loop4): Block reservation details [ 94.154877][ T5746] System zones: 1-12 [ 94.184946][ T5749] EXT4-fs (loop4): i_reserved_data_blocks=1008 [ 94.194149][ T5747] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 94.216815][ T5746] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.690: error while reading EA inode 32 err=-116 [ 94.226069][ T5747] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 94.242065][ T5747] System zones: 0-2, 18-18, 34-35 [ 94.268317][ T5746] loop2: lost filesystem error report for type 5 error -117 [ 94.274826][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 94.290796][ C1] EXT4-fs (loop2): initial error at time 1786907636: ext4_xattr_inode_iget:446 [ 94.300795][ C1] EXT4-fs (loop2): last error at time 1786907636: ext4_xattr_inode_iget:446 [ 94.304596][ T5747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.326916][ T5749] EXT4-fs (loop4): shut down requested (0) [ 94.339242][ T5746] EXT4-fs (loop2): Remounting filesystem read-only [ 94.362257][ T5746] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 94.392590][ T5765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.697'. [ 94.395386][ T5746] EXT4-fs (loop2): 1 orphan inode deleted [ 94.421518][ T28] audit: type=1400 audit(1786907636.877:639): avc: denied { append } for pid=5766 comm="syz.1.699" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.428470][ T5746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.487157][ T5772] netlink: 'syz.1.701': attribute type 39 has an invalid length. [ 94.519775][ T28] audit: type=1400 audit(1786907636.877:640): avc: denied { read } for pid=5766 comm="syz.1.699" path="socket:[12005]" dev="sockfs" ino=12005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.667461][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.668478][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.691059][ T5774] netlink: 16 bytes leftover after parsing attributes in process `syz.5.697'. [ 94.700402][ T5774] netlink: 12 bytes leftover after parsing attributes in process `syz.5.697'. [ 94.755240][ T3400] tipc: Node number set to 2886997057 [ 94.970643][ T5787] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 94.987656][ T5787] team0 (unregistering): Port device team_slave_0 removed [ 94.998044][ T5787] team0 (unregistering): Failed to send options change via netlink (err -105) [ 95.009106][ T5787] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 95.020956][ T5787] team0 (unregistering): Port device team_slave_1 removed [ 95.132415][ T5776] lo speed is unknown, defaulting to 1000 [ 95.250921][ T5798] loop0: detected capacity change from 0 to 512 [ 95.347683][ T5798] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.710: iget: bad i_size value: 38620345925642 [ 95.385735][ T5798] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.386306][ T5798] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.710: couldn't read orphan inode 15 (err -117) [ 95.395738][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 95.395760][ C0] EXT4-fs (loop0): initial error at time 1786907637: ext4_orphan_get:1399: inode 15 [ 95.395791][ C0] EXT4-fs (loop0): last error at time 1786907637: ext4_orphan_get:1399: inode 15 [ 95.440769][ T5803] loop1: detected capacity change from 0 to 512 [ 95.523866][ T5798] loop0: lost filesystem error report for type 5 error -117 [ 95.525426][ T5798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.699800][ T5803] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.782725][ T5803] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 95.792614][ T5798] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.710: bg 0: block 5: invalid block bitmap [ 95.856967][ T5798] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 312 with error 28 [ 95.866277][ T5803] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 95.869455][ T5798] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.869455][ T5798] [ 95.869624][ T5798] EXT4-fs (loop0): Total free blocks count 0 [ 95.869702][ T5798] EXT4-fs (loop0): Free/Dirty block details [ 95.869719][ T5798] EXT4-fs (loop0): free_blocks=0 [ 95.869736][ T5798] EXT4-fs (loop0): dirty_blocks=316 [ 95.869753][ T5798] EXT4-fs (loop0): Block reservation details [ 95.869768][ T5798] EXT4-fs (loop0): i_reserved_data_blocks=316 [ 95.880091][ T5798] EXT4-fs (loop0): shut down requested (0) [ 95.952073][ T5803] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 95.976731][ T5803] System zones: 0-2, 18-18, 34-35 [ 96.177606][ T5832] loop2: detected capacity change from 0 to 1024 [ 96.193825][ T5832] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.210162][ T5835] loop4: detected capacity change from 0 to 256 [ 96.217575][ T5832] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 96.244248][ T5832] jbd2_journal_init_inode: Cannot locate journal superblock [ 96.244985][ T5815] loop5: detected capacity change from 0 to 512 [ 96.258097][ T5832] EXT4-fs (loop2): Could not load journal inode [ 96.354588][ T5803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.399481][ T5815] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 96.519091][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.573499][ T5815] EXT4-fs (loop5): 1 truncate cleaned up [ 96.628923][ T5815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.653557][ T5850] lo speed is unknown, defaulting to 1000 [ 96.690500][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 96.690529][ T28] audit: type=1400 audit(1786907639.147:664): avc: denied { write } for pid=5814 comm="syz.5.717" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.755661][ T28] audit: type=1400 audit(1786907639.167:665): avc: denied { link } for pid=5814 comm="syz.5.717" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.790045][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.925163][ T5867] loop2: detected capacity change from 0 to 512 [ 96.945879][ T5867] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.731: iget: bad i_size value: 38620345925642 [ 96.969129][ T5867] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.969352][ T5867] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.731: couldn't read orphan inode 15 (err -117) [ 96.978544][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 96.978570][ C1] EXT4-fs (loop2): initial error at time 1786907639: ext4_orphan_get:1399: inode 15 [ 96.978609][ C1] EXT4-fs (loop2): last error at time 1786907639: ext4_orphan_get:1399: inode 15 [ 97.123119][ T5867] loop2: lost filesystem error report for type 5 error -117 [ 97.123809][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.152382][ T5864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 97.187914][ T5864] System zones: 1-12 [ 97.216171][ T28] audit: type=1326 audit(1786907639.677:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5849 comm="syz.1.726" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5a8b9e0d9 code=0x0 [ 97.261121][ T28] audit: type=1400 audit(1786907639.677:667): avc: denied { write } for pid=5866 comm="syz.2.731" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.323089][ T5864] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.730: error while reading EA inode 32 err=-116 [ 97.350040][ T5864] loop4: lost filesystem error report for type 5 error -117 [ 97.359213][ T5864] EXT4-fs (loop4): Remounting filesystem read-only [ 97.369369][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 97.369605][ C1] EXT4-fs (loop4): initial error at time 1786907639: ext4_xattr_inode_iget:446 [ 97.369903][ C1] EXT4-fs (loop4): last error at time 1786907639: ext4_xattr_inode_iget:446 [ 97.430913][ T5867] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.731: bg 0: block 5: invalid block bitmap [ 97.439753][ T5864] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 97.464296][ T5867] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 428 with error 28 [ 97.480343][ T5864] EXT4-fs (loop4): 1 orphan inode deleted [ 97.499616][ T5867] EXT4-fs (loop2): This should not happen!! Data will be lost [ 97.499616][ T5867] [ 97.505891][ T5864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.530416][ T5867] EXT4-fs (loop2): Total free blocks count 0 [ 97.550408][ T5867] EXT4-fs (loop2): Free/Dirty block details [ 97.577365][ T5867] EXT4-fs (loop2): free_blocks=0 [ 97.589031][ T5867] EXT4-fs (loop2): dirty_blocks=432 [ 97.600362][ T5867] EXT4-fs (loop2): Block reservation details [ 97.615228][ T5867] EXT4-fs (loop2): i_reserved_data_blocks=432 [ 97.640585][ T5872] EXT4-fs (loop2): shut down requested (0) [ 97.656672][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.031037][ T28] audit: type=1400 audit(1786907640.487:668): avc: denied { write } for pid=5888 comm="syz.2.737" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 98.082562][ T28] audit: type=1400 audit(1786907640.487:669): avc: denied { open } for pid=5888 comm="syz.2.737" path="/149/tracing/events/irq_vectors/local_timer_exit/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 98.195101][ T5895] EXT4-fs: Ignoring removed i_version option [ 98.207251][ T5895] EXT4-fs: Ignoring removed oldalloc option [ 98.512665][ T5895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.531945][ T5899] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.544896][ T28] audit: type=1400 audit(1786907640.997:670): avc: denied { write } for pid=5894 comm="syz.2.740" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.591317][ T5899] EXT4-fs (loop1): 1 truncate cleaned up [ 98.597977][ T5899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.806201][ T5912] set_capacity_and_notify: 3 callbacks suppressed [ 98.806222][ T5912] loop4: detected capacity change from 0 to 764 [ 98.977612][ T5912] netlink: zone id is out of range [ 98.991921][ T5912] netlink: zone id is out of range [ 99.016403][ T5912] netlink: zone id is out of range [ 99.028765][ T5912] netlink: zone id is out of range [ 99.040806][ T5912] netlink: zone id is out of range [ 99.051646][ T5912] netlink: zone id is out of range [ 99.062744][ T5912] netlink: zone id is out of range [ 99.073176][ T5912] netlink: zone id is out of range [ 99.077982][ T5911] lo speed is unknown, defaulting to 1000 [ 99.098122][ T5912] netlink: zone id is out of range [ 99.098136][ T5912] netlink: zone id is out of range [ 99.139316][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.193288][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.366429][ T28] audit: type=1400 audit(1786907641.827:671): avc: denied { create } for pid=5913 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.850845][ T5939] loop4: detected capacity change from 0 to 1024 [ 99.878565][ T5939] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.905829][ T28] audit: type=1400 audit(1786907642.357:672): avc: denied { write } for pid=5938 comm="syz.4.758" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.930299][ T5939] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.758: lblock 0 mapped to illegal pblock 0 (length 1) [ 99.952766][ T28] audit: type=1400 audit(1786907642.357:673): avc: denied { read write } for pid=5938 comm="syz.4.758" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.984539][ T5939] EXT4-fs (loop4): Remounting filesystem read-only [ 99.992600][ T5939] EXT4-fs (loop4): shut down requested (2) [ 100.153950][ T5966] ip6tnl0: Caught tx_queue_len zero misconfig [ 100.270860][ T5971] mmap: syz.5.768 (5971) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.331448][ T5975] loop2: detected capacity change from 0 to 512 [ 100.376210][ T5975] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.450914][ T5982] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.770: corrupted xattr block 33: invalid header [ 100.464441][ T5982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.473710][ T5982] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.770: corrupted xattr block 33: invalid header [ 100.487412][ T5982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.496710][ T5982] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.770: corrupted xattr block 33: invalid header [ 100.510265][ T5982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.510869][ T5975] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.770: corrupted xattr block 33: invalid header [ 100.533099][ T5975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.542741][ T5975] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.770: corrupted xattr block 33: invalid header [ 100.556467][ T5975] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.770: corrupted xattr block 33: invalid header [ 100.570120][ T5975] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 100.731461][ T3302] EXT4-fs unmount: 3 callbacks suppressed [ 100.731481][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.950223][ T5992] loop5: detected capacity change from 0 to 1024 [ 101.006830][ T5997] lo speed is unknown, defaulting to 1000 [ 101.062996][ T5992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.075594][ T5992] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.098994][ T5992] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.776: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.112649][ T5992] EXT4-fs (loop5): Remounting filesystem read-only [ 101.120830][ T5992] EXT4-fs (loop5): shut down requested (2) [ 101.155116][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.518503][ T6044] loop5: detected capacity change from 0 to 512 [ 101.552495][ T6044] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.781: iget: bad i_size value: 38620345925642 [ 101.578805][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.787'. [ 101.594461][ T6044] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.594749][ T6044] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.781: couldn't read orphan inode 15 (err -117) [ 101.615790][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 101.615818][ C1] EXT4-fs (loop5): initial error at time 1786907644: ext4_orphan_get:1399: inode 15 [ 101.615851][ C1] EXT4-fs (loop5): last error at time 1786907644: ext4_orphan_get:1399: inode 15 [ 101.645491][ T6044] loop5: lost filesystem error report for type 5 error -117 [ 101.647279][ T6044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.761204][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 101.761220][ T28] audit: type=1400 audit(1786907644.217:688): avc: denied { create } for pid=6052 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 101.792093][ T28] audit: type=1400 audit(1786907644.247:689): avc: denied { read } for pid=6052 comm="syz.2.789" path="socket:[13396]" dev="sockfs" ino=13396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 101.825563][ T6044] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.781: bg 0: block 5: invalid block bitmap [ 101.843106][ T6044] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 832 with error 28 [ 101.855983][ T6044] EXT4-fs (loop5): This should not happen!! Data will be lost [ 101.855983][ T6044] [ 101.866086][ T6044] EXT4-fs (loop5): Total free blocks count 0 [ 101.911493][ T6044] EXT4-fs (loop5): Free/Dirty block details [ 101.924670][ T6044] EXT4-fs (loop5): free_blocks=0 [ 101.933653][ T6057] loop0: detected capacity change from 0 to 164 [ 101.936152][ T6044] EXT4-fs (loop5): dirty_blocks=836 [ 101.959539][ T6044] EXT4-fs (loop5): Block reservation details [ 101.983052][ T6064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.983968][ T6044] EXT4-fs (loop5): i_reserved_data_blocks=836 [ 102.010273][ T6065] loop2: detected capacity change from 0 to 764 [ 102.052291][ T6044] EXT4-fs (loop5): shut down requested (0) [ 102.061101][ T6064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.079516][ T6057] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 102.132577][ T6068] loop4: detected capacity change from 0 to 512 [ 102.141580][ T6068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.175713][ T6068] EXT4-fs: Ignoring removed i_version option [ 102.210701][ T6068] EXT4-fs (loop4): 1 orphan inode deleted [ 102.306754][ T6068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.518873][ T28] audit: type=1400 audit(1786907644.947:690): avc: denied { listen } for pid=6071 comm="syz.2.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.539318][ T28] audit: type=1400 audit(1786907644.977:691): avc: denied { write } for pid=6071 comm="syz.2.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.595773][ T6085] loop0: detected capacity change from 0 to 256 [ 102.616443][ T6085] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.649208][ T6085] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.210211][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.253011][ T28] audit: type=1400 audit(1786907645.707:692): avc: denied { read write } for pid=6103 comm="syz.4.808" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.295994][ T28] audit: type=1400 audit(1786907645.707:693): avc: denied { open } for pid=6103 comm="syz.4.808" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 103.342392][ T28] audit: type=1400 audit(1786907645.797:694): avc: denied { ioctl } for pid=6106 comm="syz.2.819" path="socket:[13487]" dev="sockfs" ino=13487 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.367133][ T28] audit: type=1400 audit(1786907645.797:695): avc: denied { write } for pid=6106 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.398117][ T28] audit: type=1400 audit(1786907645.797:696): avc: denied { read } for pid=6106 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 103.912246][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 103.973941][ T28] audit: type=1400 audit(1786907646.387:697): avc: denied { bind } for pid=6126 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.007640][ T6133] loop2: detected capacity change from 0 to 512 [ 104.149992][ T6135] net_ratelimit: 278 callbacks suppressed [ 104.150012][ T6135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.239743][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.821'. [ 104.413250][ T6146] loop1: detected capacity change from 0 to 512 [ 104.423942][ T6146] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.440107][ T6146] EXT4-fs (loop1): 1 truncate cleaned up [ 104.446645][ T6146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.585116][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.811906][ T6163] loop4: detected capacity change from 0 to 512 [ 104.842240][ T6163] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.830: iget: bad i_size value: 38620345925642 [ 104.855076][ T6163] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.856628][ T6163] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.830: couldn't read orphan inode 15 (err -117) [ 104.865899][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 104.865943][ C1] EXT4-fs (loop4): initial error at time 1786907647: ext4_orphan_get:1399: inode 15 [ 104.866009][ C1] EXT4-fs (loop4): last error at time 1786907647: ext4_orphan_get:1399: inode 15 [ 104.972253][ T6163] loop4: lost filesystem error report for type 5 error -117 [ 104.972971][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.981553][ T6166] lo speed is unknown, defaulting to 1000 [ 105.201139][ T6163] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.830: bg 0: block 5: invalid block bitmap [ 105.216355][ T6173] loop0: detected capacity change from 0 to 512 [ 105.319784][ T6173] EXT4-fs: Ignoring removed i_version option [ 105.326147][ T6173] EXT4-fs: Ignoring removed oldalloc option [ 105.339764][ T6163] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1224 with error 28 [ 105.356164][ T6173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.369482][ T6163] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.369482][ T6163] [ 105.396371][ T6163] EXT4-fs (loop4): Total free blocks count 0 [ 105.417367][ T6163] EXT4-fs (loop4): Free/Dirty block details [ 105.452031][ T6163] EXT4-fs (loop4): free_blocks=0 [ 105.463535][ T6163] EXT4-fs (loop4): dirty_blocks=1228 [ 105.487996][ T6163] EXT4-fs (loop4): Block reservation details [ 105.594481][ T6163] EXT4-fs (loop4): i_reserved_data_blocks=1228 [ 105.657785][ T6163] EXT4-fs (loop4): shut down requested (0) [ 106.177589][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.177938][ T6164] loop2: detected capacity change from 0 to 512 [ 106.462120][ T6164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.811578][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 106.811594][ T28] audit: type=1400 audit(1786907649.267:717): avc: denied { read } for pid=6191 comm="syz.4.840" path="socket:[13624]" dev="sockfs" ino=13624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 106.948238][ T28] audit: type=1400 audit(1786907649.397:718): avc: denied { create } for pid=6200 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 106.972636][ T28] audit: type=1400 audit(1786907649.397:719): avc: denied { setopt } for pid=6200 comm="syz.5.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 106.973503][ T6164] EXT4-fs (loop2): 1 truncate cleaned up [ 107.182052][ T6164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.302437][ T6207] loop0: detected capacity change from 0 to 1024 [ 107.343064][ T6209] loop1: detected capacity change from 0 to 4096 [ 107.351365][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.389094][ T28] audit: type=1400 audit(1786907649.827:720): avc: denied { write } for pid=6206 comm="syz.0.844" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.421367][ T28] audit: type=1400 audit(1786907649.837:721): avc: denied { execute } for pid=6206 comm="syz.0.844" path="/155/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.435831][ T6209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.445546][ T28] audit: type=1400 audit(1786907649.847:722): avc: denied { write } for pid=6162 comm="syz.2.829" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.461975][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.487291][ T28] audit: type=1400 audit(1786907649.847:723): avc: denied { link } for pid=6162 comm="syz.2.829" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.509302][ T28] audit: type=1400 audit(1786907649.957:724): avc: denied { write } for pid=6208 comm="syz.1.845" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.549924][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.561553][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.604006][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 107.616007][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 107.953396][ T28] audit: type=1400 audit(1786907650.407:725): avc: denied { ioctl } for pid=6240 comm="syz.1.856" path="socket:[13126]" dev="sockfs" ino=13126 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 108.023946][ T28] audit: type=1400 audit(1786907650.447:726): avc: denied { write } for pid=6240 comm="syz.1.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 108.862589][ T6245] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 109.262041][ T6276] loop0: detected capacity change from 0 to 1024 [ 109.300471][ T6276] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.314542][ T6276] EXT4-fs: Ignoring removed orlov option [ 109.356601][ T6276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.541415][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.560173][ T3413] lo speed is unknown, defaulting to 1000 [ 109.566205][ T6259] lo speed is unknown, defaulting to 1000 [ 109.602490][ T6282] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 109.609145][ T6282] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.646317][ T6282] vhci_hcd vhci_hcd.0: Device attached [ 109.661122][ T6288] loop0: detected capacity change from 0 to 1024 [ 109.674419][ T6282] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.700416][ T6288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.732957][ T6283] vhci_hcd: connection closed [ 109.733556][ T408] vhci_hcd vhci_hcd.1: stop threads [ 109.744481][ T408] vhci_hcd vhci_hcd.1: release socket [ 109.750331][ T408] vhci_hcd vhci_hcd.1: disconnect device [ 109.868091][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.021079][ T6302] loop0: detected capacity change from 0 to 764 [ 110.032099][ T6302] netlink: zone id is out of range [ 110.038466][ T6302] netlink: zone id is out of range [ 110.044196][ T6302] netlink: zone id is out of range [ 110.058948][ T6302] netlink: zone id is out of range [ 110.073526][ T6302] netlink: zone id is out of range [ 110.097858][ T6302] netlink: zone id is out of range [ 110.112815][ T6302] netlink: zone id is out of range [ 110.132791][ T6302] netlink: zone id is out of range [ 110.145943][ T6302] netlink: zone id is out of range [ 110.161101][ T6302] netlink: zone id is out of range [ 111.975738][ T6326] lo speed is unknown, defaulting to 1000 [ 111.977158][ T6307] loop1: detected capacity change from 0 to 512 [ 112.202469][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 112.202485][ T28] audit: type=1400 audit(1786907654.657:730): avc: denied { mount } for pid=6347 comm="syz.2.898" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.322366][ T28] audit: type=1400 audit(1786907654.777:731): avc: denied { read } for pid=6353 comm="syz.0.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.713641][ T6307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.393680][ T6371] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 113.395143][ T6307] EXT4-fs: error -4 creating inode table initialization thread [ 113.400237][ T6371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 113.416312][ T6371] vhci_hcd vhci_hcd.0: Device attached [ 113.418988][ T6371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.442402][ T6381] lo speed is unknown, defaulting to 1000 [ 113.498907][ T6382] vhci_hcd: connection closed [ 113.515884][ T340] vhci_hcd vhci_hcd.5: stop threads [ 113.516481][ T6307] EXT4-fs (loop1): mount failed [ 113.530696][ T340] vhci_hcd vhci_hcd.5: release socket [ 113.530718][ T340] vhci_hcd vhci_hcd.5: disconnect device [ 114.226298][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 115.279424][ T6457] loop5: detected capacity change from 0 to 256 [ 115.298153][ T6461] netlink: 'syz.2.937': attribute type 3 has an invalid length. [ 115.324274][ T6461] netlink: 'syz.2.937': attribute type 3 has an invalid length. [ 115.385666][ T6464] loop2: detected capacity change from 0 to 128 [ 115.627284][ T6473] loop4: detected capacity change from 0 to 512 [ 115.660824][ T6473] EXT4-fs: Ignoring removed orlov option [ 115.694189][ T6473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.720262][ T6473] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.981990][ T6481] loop5: detected capacity change from 0 to 164 [ 116.060063][ T6481] rock: corrupted directory entry. extent=134217760 out of volume (nzones=41) [ 116.115203][ T6492] loop1: detected capacity change from 0 to 512 [ 116.130100][ T6492] EXT4-fs: Ignoring removed i_version option [ 116.143095][ T6492] EXT4-fs: Ignoring removed oldalloc option [ 116.182579][ T6492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.240097][ T28] audit: type=1400 audit(1786907658.697:732): avc: denied { write } for pid=6491 comm="syz.1.947" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.396264][ T6501] loop0: detected capacity change from 0 to 1024 [ 116.434705][ T6501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.492499][ T28] audit: type=1400 audit(1786907658.917:733): avc: denied { write } for pid=6500 comm="syz.0.951" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.495133][ T6506] ip6t_srh: unknown srh invflags 4000 [ 116.632622][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.004642][ T28] audit: type=1326 audit(1786907659.457:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6516 comm="syz.4.958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c744ae0d9 code=0x0 [ 117.036968][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.317415][ T28] audit: type=1400 audit(1786907659.777:735): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 117.795336][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.968'. [ 117.920483][ T6558] loop5: detected capacity change from 0 to 1024 [ 117.989114][ T6558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.010943][ T28] audit: type=1400 audit(1786907660.467:736): avc: denied { write } for pid=6557 comm="syz.5.972" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.110755][ T4885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.113023][ T6570] ip6t_srh: unknown srh invflags 4000 [ 118.157734][ T28] audit: type=1400 audit(1786907660.617:737): avc: denied { bind } for pid=6571 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.196574][ T28] audit: type=1400 audit(1786907660.647:738): avc: denied { listen } for pid=6571 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.220222][ T28] audit: type=1400 audit(1786907660.647:739): avc: denied { accept } for pid=6571 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.291769][ T6580] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 118.306998][ T6580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.333996][ T6580] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 118.368712][ T6580] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 118.418585][ T3473] net_ratelimit: 134 callbacks suppressed [ 118.418602][ T3473] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 118.440508][ T28] audit: type=1326 audit(1786907660.897:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.0.983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f333f60e0d9 code=0x0 [ 118.556327][ T340] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 118.975048][ T6597] loop4: detected capacity change from 0 to 512 [ 118.991919][ T6597] EXT4-fs: Ignoring removed orlov option [ 119.024625][ T6597] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.046126][ T6597] EXT4-fs: inline encryption not supported [ 119.098108][ T6597] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.984: corrupted in-inode xattr: e_value size too large [ 119.112485][ T6597] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.112686][ T6597] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.984: couldn't read orphan inode 15 (err -117) [ 119.121952][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 119.121975][ C0] EXT4-fs (loop4): initial error at time 1786907661: ext4_iget_extra_inode:5180: inode 15 [ 119.122013][ C0] EXT4-fs (loop4): last error at time 1786907661: ext4_iget_extra_inode:5180: inode 15 [ 119.124469][ T28] audit: type=1400 audit(1786907661.557:741): avc: denied { setopt } for pid=6601 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.135688][ T6597] loop4: lost filesystem error report for type 5 error -117 [ 119.181303][ T6597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.223345][ T6605] loop5: detected capacity change from 0 to 7 [ 119.231086][ T28] audit: type=1400 audit(1786907661.687:742): avc: denied { view } for pid=6589 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 119.250510][ T28] audit: type=1400 audit(1786907661.697:743): avc: denied { open } for pid=6606 comm="syz.2.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.302020][ T6609] netlink: 'syz.0.992': attribute type 4 has an invalid length. [ 119.316272][ T28] audit: type=1400 audit(1786907661.697:744): avc: denied { kernel } for pid=6606 comm="syz.2.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 119.331240][ T6611] netlink: 168 bytes leftover after parsing attributes in process `syz.1.993'. [ 119.344707][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.356336][ T3385] lo speed is unknown, defaulting to 1000 [ 119.362134][ T3385] syz0: Port: 1 Link DOWN [ 119.368396][ T3385] lo speed is unknown, defaulting to 1000 [ 119.393422][ T6613] loop1: detected capacity change from 0 to 512 [ 120.007790][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1002'. [ 120.029148][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1002'. [ 120.395842][ T6622] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 120.455900][ T408] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.474125][ T408] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.506436][ T408] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.535725][ T408] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.566705][ T6644] loop4: detected capacity change from 0 to 1024 [ 120.627824][ T6644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.657380][ T6655] netlink: 'syz.5.1010': attribute type 10 has an invalid length. [ 120.746357][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.863392][ T6665] loop4: detected capacity change from 0 to 128 [ 121.565788][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'. [ 121.950601][ T6694] loop5: detected capacity change from 0 to 128 [ 122.445133][ T6680] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 122.516511][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.523818][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.759220][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.769505][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.803880][ T6685] geneve1: left promiscuous mode [ 122.813444][ T6685] geneve2: left promiscuous mode [ 122.818585][ T6685] geneve2: left allmulticast mode [ 122.824213][ T6685] bond1: left allmulticast mode [ 122.835102][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.849212][ T30] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 1038 - 0 [ 122.884810][ T408] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.898090][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 122.898109][ T28] audit: type=1326 audit(1786907665.347:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a7c7e0d9 code=0x7ffc0000 [ 122.931845][ T408] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 1038 - 0 [ 122.941531][ T408] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.951052][ T408] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 1038 - 0 [ 122.960390][ T28] audit: type=1326 audit(1786907665.347:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a7c7e0d9 code=0x7ffc0000 [ 122.990119][ T408] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.999547][ T408] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 1038 - 0 [ 123.008896][ T28] audit: type=1326 audit(1786907665.347:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a7c7e0d9 code=0x7ffc0000 [ 123.044469][ T28] audit: type=1326 audit(1786907665.357:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a7c7e0d9 code=0x7ffc0000 [ 123.105167][ T28] audit: type=1326 audit(1786907665.357:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f67a7c7e0d9 code=0x7ffc0000 [ 123.169067][ T28] audit: type=1326 audit(1786907665.397:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a7c7e0d9 code=0x7ffc0000 [ 123.195420][ T28] audit: type=1326 audit(1786907665.457:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67a7c7e0d9 code=0x7ffc0000 [ 123.223621][ T28] audit: type=1326 audit(1786907665.457:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f67a7c7de42 code=0x7ffc0000 [ 123.262771][ T28] audit: type=1326 audit(1786907665.457:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f67a7c7ded7 code=0x7ffc0000 [ 123.288532][ T28] audit: type=1326 audit(1786907665.457:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.5.1034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f67a7c3add1 code=0x7ffc0000 [ 123.613822][ T6744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1044'. [ 124.547903][ T6788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1061'. [ 124.614564][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 124.767317][ T6794] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.793030][ T6794] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.898035][ T6794] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.909744][ T6794] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.011991][ T6794] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.023316][ T6794] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.109731][ T6794] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.120687][ T6794] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.200023][ T408] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.208381][ T408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.222783][ T408] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.247791][ T408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.282841][ T340] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.291265][ T340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.303793][ T340] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.326902][ T340] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.843206][ T6845] loop5: detected capacity change from 0 to 256 [ 126.156110][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'. [ 126.381941][ T6861] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 126.403168][ T6861] bond1: (slave sit1): Error -95 calling set_mac_address [ 126.587095][ T6835] syz.2.1078 (6835) used greatest stack depth: 9656 bytes left [ 126.614241][ T6886] loop2: detected capacity change from 0 to 256 [ 126.701945][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 127.099605][ T6915] loop2: detected capacity change from 0 to 512 [ 127.112473][ T6915] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.133755][ T6915] EXT4-fs (loop2): 1 truncate cleaned up [ 127.164712][ T6915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.239822][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.390243][ T6929] loop2: detected capacity change from 0 to 512 [ 127.417607][ T6929] EXT4-fs: Ignoring removed orlov option [ 127.477413][ T6929] EXT4-fs: Ignoring removed mblk_io_submit option [ 127.514577][ T6929] EXT4-fs: inline encryption not supported [ 127.569351][ T6929] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1112: corrupted in-inode xattr: e_value size too large [ 127.583666][ T6929] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.586881][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 127.644886][ C0] EXT4-fs (loop2): initial error at time 1786907670: ext4_iget_extra_inode:5180: inode 15 [ 127.654531][ T6929] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1112: couldn't read orphan inode 15 (err -117) [ 127.654929][ C0] [ 127.665953][ T6929] loop2: lost filesystem error report for type 5 error -117 [ 127.666671][ T6929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.759731][ C0] EXT4-fs (loop2): last error at time 1786907670: ext4_orphan_get:1404 [ 127.909559][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.939453][ T6949] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1122'. [ 127.998723][ T6949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.088819][ T6949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.107627][ T6949] bond0 (unregistering): Released all slaves [ 128.146577][ T6951] team_slave_1: entered promiscuous mode [ 128.154613][ T6950] team_slave_1: left promiscuous mode [ 128.184916][ T3399] ================================================================== [ 128.193048][ T3399] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 128.200100][ T3399] [ 128.202426][ T3399] read-write to 0xffff888237c2a8e4 of 4 bytes by task 279 on cpu 0: [ 128.210399][ T3399] wq_worker_running+0x9b/0x120 [ 128.215269][ T3399] schedule_timeout+0xca/0x180 [ 128.220047][ T3399] msleep+0x4f/0x90 [ 128.223870][ T3399] nsim_fib_event+0x4996/0x4dc0 [ 128.228732][ T3399] nsim_fib_event_work+0x133/0x200 [ 128.233870][ T3399] process_scheduled_works+0x4d4/0x9a0 [ 128.239349][ T3399] worker_thread+0x569/0x750 [ 128.244039][ T3399] kthread+0x221/0x270 [ 128.248111][ T3399] ret_from_fork+0x146/0x330 [ 128.252712][ T3399] ret_from_fork_asm+0x1a/0x30 [ 128.257486][ T3399] [ 128.259815][ T3399] read to 0xffff888237c2a8e4 of 4 bytes by task 3399 on cpu 1: [ 128.267367][ T3399] kick_pool+0x49/0x2d0 [ 128.271536][ T3399] __queue_work+0x8e9/0xb90 [ 128.276054][ T3399] queue_work_on+0xa9/0x140 [ 128.280570][ T3399] process_srcu+0xa39/0xd90 [ 128.285098][ T3399] process_scheduled_works+0x4d4/0x9a0 [ 128.290575][ T3399] worker_thread+0x569/0x750 [ 128.295184][ T3399] kthread+0x221/0x270 [ 128.299253][ T3399] ret_from_fork+0x146/0x330 [ 128.303858][ T3399] ret_from_fork_asm+0x1a/0x30 [ 128.308646][ T3399] [ 128.310968][ T3399] value changed: 0x00000000 -> 0x00000001 [ 128.316684][ T3399] [ 128.319007][ T3399] Reported by Kernel Concurrency Sanitizer on: [ 128.325153][ T3399] CPU: 1 UID: 0 PID: 3399 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.334534][ T3399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.344591][ T3399] Workqueue: rcu_gp process_srcu [ 128.349549][ T3399] ================================================================== [ 128.704745][ T6960] loop2: detected capacity change from 0 to 512 [ 128.736337][ T6960] EXT4-fs: Ignoring removed oldalloc option [ 128.766139][ T6960] EXT4-fs: Ignoring removed oldalloc option [ 128.907527][ T6960] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1125: corrupted in-inode xattr: invalid ea_ino [ 128.932954][ T6960] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 128.934674][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 128.954537][ C0] EXT4-fs (loop2): initial error at time 1786907671: ext4_iget_extra_inode:5180: inode 15 [ 128.966794][ C0] EXT4-fs (loop2): last error at time 1786907671: ext4_iget_extra_inode:5180: inode 15 [ 129.004182][ T6960] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1125: couldn't read orphan inode 15 (err -117) [ 129.022074][ T6960] loop2: lost filesystem error report for type 5 error -117 [ 129.055576][ T6960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.131389][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 129.131408][ T28] audit: type=1400 audit(1786907671.587:882): avc: denied { write } for pid=6959 comm="syz.2.1125" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.159791][ T28] audit: type=1400 audit(1786907671.587:883): avc: denied { create } for pid=6959 comm="syz.2.1125" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 129.202083][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.