last executing test programs: 7m22.785866335s ago: executing program 32 (id=16): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x88c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x260, &(0x7f0000000a80)="$eJzs3b9uUmEYB+DXQgvpYmfjcBIXJ6JOrsTUxEhigmHQSZLq0hqT0wWduAyvwUvyBty72Mlj7Ielf7AOBb4DPE9Czpv8Djnvx8CB5P3g3f2Phwefjj9U379Gu11EM2JcVRF7sRWNSO5Mjltn9U5cNA4AYNX0+8Nu7h5YrLLsDrcjonUtGXzL0hAAAAAAAAAAAAC3Nmv+P07N/wPAOjP/v/7KsjvcnXx+u8z8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDPaVXdrW545O4PAJi/G+7/P6vk76nTCgBYab7/A8Dmcf8HgM3z+s3bl91eb79fFO2Ik/FoMBqkY8qfv+jtPyrO7E2fdTIaDRrn+eOUF5fz7did5E9m5jvx8EHK/2TPXvWu5K04WPzyAQAAAAAAAAAAAAAAAAAAoBY6xbmZ+/s7nX/lqbrw+wBX9u83415zacsAAAAAAAAAAAAAAAAAAACAlXb8+cvh8OjofVnf4ke2q7ci4j/n1PE1jKe1aGPZRcRSL/qrBkueW9G4HuV+ZwIAAAAAAAAAAAAAAAAAgM0z3fSbuxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyGf6//+LKyJiXCW5lwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACssd8BAAD//xg9nuE=") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) 6m58.62078909s ago: executing program 33 (id=739): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}]}}, 0x0, 0x42}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 5m37.045940364s ago: executing program 34 (id=1526): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m3.739143112s ago: executing program 35 (id=2085): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678e, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353d, 0x1}}, 0x20) r2 = dup(r1) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18) 3m58.266845631s ago: executing program 36 (id=2999): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b000000060000000500200002"], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r0, 0x0) 2m57.106066663s ago: executing program 37 (id=3587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 2m17.923269211s ago: executing program 9 (id=3966): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x185, 0xfffffffc, 0x9, 0xb0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1eb0bbc5f5527427}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m16.741940948s ago: executing program 9 (id=3975): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x1a0, 0xd0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'bond_slave_0\x00', 'wg2\x00', {0xff}, {}, 0x33, 0x80, 0xa, 0x20}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x138, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x3, "b64fedb1f3512da470042bb3204670e41b051d82f4eeb34da511c659f388"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 2m15.692879803s ago: executing program 9 (id=3984): unshare(0x28000600) mq_open(&(0x7f0000000040)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) unshare(0x8000280) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m15.204469244s ago: executing program 9 (id=3989): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m14.904966031s ago: executing program 9 (id=3995): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) unshare(0x26020480) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0xa0000012}) epoll_pwait(r1, &(0x7f0000004080)=[{}], 0x1, 0xe, 0x0, 0x0) 2m14.428710502s ago: executing program 9 (id=3998): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 2m14.297573416s ago: executing program 38 (id=3998): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 1m21.54220388s ago: executing program 0 (id=4685): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r3, &(0x7f0000000a00)}, 0x20) 1m21.413811884s ago: executing program 0 (id=4690): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) 1m21.346862955s ago: executing program 0 (id=4691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x70}, @void, @eth={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x80, 0x6558, 0x8}}}}}}, 0x2e) 1m21.046374192s ago: executing program 0 (id=4695): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) read(r0, &(0x7f00000001c0)=""/115, 0x73) 1m20.645414742s ago: executing program 0 (id=4706): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r0, @ANYRES32=r0], 0xfdef) 1m19.896705709s ago: executing program 0 (id=4705): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) close(0x3) 1m19.84500672s ago: executing program 39 (id=4705): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) close(0x3) 1m8.274618491s ago: executing program 4 (id=4829): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x11, &(0x7f00000004c0)={@remote, @empty, @void, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 1m7.632326246s ago: executing program 4 (id=4831): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a0000020050005019a8d90b4cee099f601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 1m7.458974s ago: executing program 4 (id=4834): unshare(0x22020600) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="cf", 0x1}], 0x1) 1m6.032968323s ago: executing program 4 (id=4850): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, 0x0) 1m5.878472607s ago: executing program 4 (id=4854): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r0, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000003200000000000000000000000000000070") 1m5.408724308s ago: executing program 4 (id=4860): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x914, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/4, 0x4}, 0x6}], 0x1, 0x45833af92e4b38ff, 0x0) 1m5.377143419s ago: executing program 40 (id=4860): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x914, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/4, 0x4}, 0x6}], 0x1, 0x45833af92e4b38ff, 0x0) 34.096279771s ago: executing program 7 (id=5312): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)}, {&(0x7f0000000280)="e4431f387bde313ef2ab49d09073b04783960f07059a96cb924b6ae3f273be15101f4a468423d0741f52b90d855c8d0d07073c3e0febd31c91ded38ed39c520d9fc08beb13e51d67ba770fabd5d77940806e7ec1c30965435cae23ae6ea621cbe8a878232d2c587675671507f0caac380ec722ba5e9c5218627b49eb5e9fcbf9fd6f", 0x82}], 0x2}, 0x80) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) io_uring_enter(r0, 0x124, 0x14, 0x17, 0x0, 0x0) 33.788324489s ago: executing program 7 (id=5316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_ethernet(0x36, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1}, "2200334f0000000106000001e1010203c0a80101"}}}}, 0x0) 33.607131823s ago: executing program 7 (id=5320): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 33.522052055s ago: executing program 7 (id=5323): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 33.441775816s ago: executing program 7 (id=5325): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x8008743f, 0xf0ff1f00000000) 33.28064343s ago: executing program 7 (id=5328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 33.156809983s ago: executing program 41 (id=5328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 20.363838272s ago: executing program 2 (id=5479): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000280)={0x2, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000240)={0xa, {0x1, 0xb, 0x98}}, 0xa) 18.798485159s ago: executing program 2 (id=5495): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8052, &(0x7f0000000000), 0x0, 0x4c4, &(0x7f0000001940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 17.214517987s ago: executing program 2 (id=5515): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) clock_gettime(0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8) 16.815910746s ago: executing program 2 (id=5518): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 16.666631249s ago: executing program 2 (id=5520): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000380)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0xc, 0x1}, 0x48) 16.160784441s ago: executing program 2 (id=5522): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20042, 0x40) pwrite64(r0, &(0x7f00000001c0)="df", 0x1, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 16.126309892s ago: executing program 42 (id=5522): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20042, 0x40) pwrite64(r0, &(0x7f00000001c0)="df", 0x1, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 3.640726084s ago: executing program 5 (id=5689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/usb/devices/usb1/power/control\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='on\x00', 0x3) syz_usb_connect(0x0, 0x5a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040b113420000000000000109025a0001010080fa0904000008ffffff00090581020002000000090582020002000000090583020002000000090584030002000000090501020002000000090502020002000000090503020002000000090504020002000000"], 0x0) nanosleep(&(0x7f0000000140)={0x1}, 0x0) 2.046238191s ago: executing program 5 (id=5718): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) 2.004668542s ago: executing program 6 (id=5720): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x3, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x4, 0x1f5, &(0x7f0000000680)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) 1.340374488s ago: executing program 3 (id=5731): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x43}}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}]}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.306405709s ago: executing program 5 (id=5732): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x9) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8d80, 0x87) getdents(r2, 0x0, 0x0) 1.227086041s ago: executing program 1 (id=5733): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x2c, 0xdf, 0x5, 0x202, 0x8000, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3673c498, &(0x7f0000000080)=[{&(0x7f0000000280)="c00e02002d000b13d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 1.225947141s ago: executing program 5 (id=5734): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000200000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.076246324s ago: executing program 5 (id=5735): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.054345924s ago: executing program 1 (id=5736): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) mount(0x0, 0x0, 0x0, 0x48, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4000, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, 0x0) 1.044231365s ago: executing program 3 (id=5737): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "784494fb7fedb21f", "736524da2f58936f00", "e78d845c", "134994d01be7937b"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x7ff, 0x4) 1.029135456s ago: executing program 6 (id=5738): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) 943.565507ms ago: executing program 6 (id=5739): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005000100060000000800", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 921.677298ms ago: executing program 3 (id=5741): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) 863.364519ms ago: executing program 6 (id=5742): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5352, 0x8, 0x2000, 0x99}, &(0x7f0000ffe000), &(0x7f00000004c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) 812.09726ms ago: executing program 3 (id=5744): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd06, &(0x7f0000000000)) 729.369603ms ago: executing program 3 (id=5745): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4004050) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 728.945192ms ago: executing program 8 (id=5746): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x0, 0x100) ioctl(r0, 0x5, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd08, &(0x7f0000000000)) 630.368425ms ago: executing program 3 (id=5747): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @mcast1, 0x80000009}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xfff7, 0x5, 0x800a, 0x4, 0x0, 0x8001, 0x8, 0x6, r2}, &(0x7f00000000c0)=0x20) 451.510489ms ago: executing program 1 (id=5748): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x3, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x4, 0x1f5, &(0x7f0000000680)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) 451.064969ms ago: executing program 8 (id=5749): r0 = socket$inet6(0xa, 0x2, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x80000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000680001000200f400fcffff7f00000000000000000c000200010000000500000004000b"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 450.658279ms ago: executing program 6 (id=5758): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) gettid() mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000000, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x20000, 0x8d, 0x1, 0x0, 0x0, 0x1) 344.650861ms ago: executing program 8 (id=5750): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 344.210741ms ago: executing program 6 (id=5751): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804a, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x10, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 240.739674ms ago: executing program 8 (id=5752): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000000)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@sb={'sb', 0x3d, 0x7}}]}, 0x0, 0x499, &(0x7f0000000200)="$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") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 196.961545ms ago: executing program 8 (id=5753): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=""/214, 0xd6}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 185.906605ms ago: executing program 1 (id=5754): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 181.352925ms ago: executing program 5 (id=5755): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0x20}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, 0x0) 134.952976ms ago: executing program 1 (id=5756): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x1, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) 76.687298ms ago: executing program 8 (id=5757): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast1}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 0s ago: executing program 1 (id=5759): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xe4b7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): -fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.906562][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 442.906600][ T29] audit: type=1326 audit(1788784947.016:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 442.940395][ T29] audit: type=1326 audit(1788784947.056:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 442.967319][ T29] audit: type=1326 audit(1788784947.086:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 442.994561][ T29] audit: type=1326 audit(1788784947.116:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 443.025257][ T29] audit: type=1326 audit(1788784947.136:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 443.052051][ T29] audit: type=1326 audit(1788784947.166:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 443.078591][ T29] audit: type=1326 audit(1788784947.196:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 443.108005][ T29] audit: type=1326 audit(1788784947.166:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 443.108032][ T29] audit: type=1326 audit(1788784947.226:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 443.108056][ T29] audit: type=1326 audit(1788784947.226:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18659 comm="syz.8.5101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9837cde159 code=0x7ffc0000 [ 443.190837][T18658] loop7: detected capacity change from 0 to 2048 [ 443.202392][T18658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.202535][T18658] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.272550][T18664] loop3: detected capacity change from 0 to 512 [ 443.286472][T18664] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.5102: iget: bad i_size value: 38620345925642 [ 443.286510][T18664] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.286674][T18664] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.5102: couldn't read orphan inode 15 (err -117) [ 443.286719][T18664] loop3: lost filesystem error report for type 5 error -117 [ 443.287186][T18664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.419118][T18669] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.5102: bg 0: block 5: invalid block bitmap [ 443.434154][T18669] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 364 with error 28 [ 443.434182][T18669] EXT4-fs (loop3): This should not happen!! Data will be lost [ 443.434182][T18669] [ 443.434198][T18669] EXT4-fs (loop3): Total free blocks count 0 [ 443.434210][T18669] EXT4-fs (loop3): Free/Dirty block details [ 443.434240][T18669] EXT4-fs (loop3): free_blocks=0 [ 443.434250][T18669] EXT4-fs (loop3): dirty_blocks=364 [ 443.434264][T18669] EXT4-fs (loop3): Block reservation details [ 443.434274][T18669] EXT4-fs (loop3): i_reserved_data_blocks=364 [ 443.552183][T18664] EXT4-fs (loop3): shut down requested (1) [ 443.633523][T18672] loop3: detected capacity change from 0 to 256 [ 443.643410][T18672] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 443.788315][T18675] program syz.1.5106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.818707][T17763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.486896][T18707] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5117'. [ 444.759522][T18720] loop1: detected capacity change from 0 to 2048 [ 444.792494][T18720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.848750][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.057692][T18742] loop1: detected capacity change from 0 to 256 [ 445.067072][T18742] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.256607][T18747] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 445.256633][T18747] FAT-fs (loop1): Filesystem has been set read-only [ 445.256652][T18747] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 445.531949][T18759] xt_hashlimit: size too large, truncated to 1048576 [ 445.601153][T18761] xt_hashlimit: size too large, truncated to 1048576 [ 446.277562][T18755] syzkaller1: entered promiscuous mode [ 446.277590][T18755] syzkaller1: entered allmulticast mode [ 446.858322][ T11] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 446.858661][ T11] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 447.267027][T18793] loop1: detected capacity change from 0 to 1024 [ 447.361727][T18793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 447.362014][T18793] ext4 filesystem being mounted at /1129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.488068][ T9334] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm kworker/u8:56: lblock 0 mapped to illegal pblock 0 (length 6) [ 447.502113][ T9334] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 447.502137][ T9334] EXT4-fs (loop1): This should not happen!! Data will be lost [ 447.502137][ T9334] [ 447.515098][ T9334] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:56: lblock 8 mapped to illegal pblock 8 (length 8) [ 447.539748][ T9334] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 447.539793][ T9334] EXT4-fs (loop1): This should not happen!! Data will be lost [ 447.539793][ T9334] [ 447.554405][ T3299] EXT4-fs warning (device loop1): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 447.555000][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 447.994043][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 447.994064][ T29] audit: type=1400 audit(1788784952.106:2886): avc: denied { write } for pid=18831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.139524][ T29] audit: type=1400 audit(1788784952.246:2887): avc: denied { write } for pid=18853 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.177225][T18857] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5169'. [ 448.485398][T18862] program syz.3.5170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.552045][T18869] loop3: detected capacity change from 0 to 512 [ 448.587528][T18869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.587594][T18869] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.642578][T17007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.776988][ T29] audit: type=1326 audit(1788784952.886:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.3.5174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 448.803388][ T29] audit: type=1326 audit(1788784952.926:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.3.5174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 448.803499][ T29] audit: type=1326 audit(1788784952.926:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.3.5174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 448.861155][ T29] audit: type=1326 audit(1788784952.976:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.3.5174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 448.861185][ T29] audit: type=1326 audit(1788784952.976:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.3.5174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3e4acdec2 code=0x7ffc0000 [ 448.861210][ T29] audit: type=1326 audit(1788784952.976:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.3.5174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff3e4acdf57 code=0x7ffc0000 [ 448.861255][ T29] audit: type=1326 audit(1788784952.976:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.3.5174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff3e4a8ae51 code=0x7ffc0000 [ 448.861275][ T29] audit: type=1326 audit(1788784952.976:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18876 comm="syz.3.5174" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff3e4acef49 code=0x7ffc0000 [ 449.063464][T18887] loop1: detected capacity change from 0 to 256 [ 449.158349][T18895] loop7: detected capacity change from 0 to 128 [ 449.166512][T18895] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 449.419141][T18907] loop2: detected capacity change from 0 to 2048 [ 449.442922][T18907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.442976][T18907] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.554598][T18918] loop3: detected capacity change from 0 to 512 [ 449.554838][T18918] EXT4-fs: inline encryption not supported [ 449.571846][T18918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 449.596158][T18918] EXT4-fs (loop3): 1 truncate cleaned up [ 449.596488][T18918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.654539][T18918] EXT4-fs (loop3): shut down requested (1) [ 449.706493][T17007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.764750][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 449.903092][T18935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5192'. [ 450.158039][T13431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.198578][T18947] program syz.7.5194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.220046][T18952] FAULT_INJECTION: forcing a failure. [ 450.220046][T18952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.220075][T18952] CPU: 0 UID: 0 PID: 18952 Comm: syz.2.5195 Not tainted syzkaller #0 PREEMPT(lazy) [ 450.220094][T18952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.220174][T18952] Call Trace: [ 450.220180][T18952] [ 450.220187][T18952] __dump_stack+0x1d/0x30 [ 450.220213][T18952] dump_stack_lvl+0x95/0xd0 [ 450.220303][T18952] dump_stack+0x15/0x1b [ 450.220318][T18952] should_fail_ex+0x262/0x280 [ 450.220335][T18952] should_fail+0xb/0x20 [ 450.220396][T18952] should_fail_usercopy+0x1a/0x20 [ 450.220413][T18952] strncpy_from_user+0x27/0x250 [ 450.220437][T18952] __x64_sys_lgetxattr+0xa5/0x150 [ 450.220513][T18952] x64_sys_call+0x1da4/0x2550 [ 450.220531][T18952] do_syscall_64+0x112/0x360 [ 450.220553][T18952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.220645][T18952] RIP: 0033:0x7fb15bc9e159 [ 450.220657][T18952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.220760][T18952] RSP: 002b:00007fb15a6f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 450.220776][T18952] RAX: ffffffffffffffda RBX: 00007fb15bf25fa0 RCX: 00007fb15bc9e159 [ 450.220848][T18952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 450.220857][T18952] RBP: 00007fb15bd35024 R08: 0000000000000000 R09: 0000000000000000 [ 450.220867][T18952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.220879][T18952] R13: 00007fb15bf26038 R14: 00007fb15bf25fa0 R15: 00007ffddf546bc8 [ 450.220966][T18952] [ 450.494838][T18958] loop2: detected capacity change from 0 to 512 [ 450.541342][T18958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.541461][T18958] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.858109][T18983] FAULT_INJECTION: forcing a failure. [ 450.858109][T18983] name failslab, interval 1, probability 0, space 0, times 0 [ 450.858190][T18983] CPU: 0 UID: 0 PID: 18983 Comm: syz.1.5203 Not tainted syzkaller #0 PREEMPT(lazy) [ 450.858210][T18983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.858219][T18983] Call Trace: [ 450.858249][T18983] [ 450.858255][T18983] __dump_stack+0x1d/0x30 [ 450.858275][T18983] dump_stack_lvl+0x95/0xd0 [ 450.858291][T18983] dump_stack+0x15/0x1b [ 450.858305][T18983] should_fail_ex+0x262/0x280 [ 450.858323][T18983] should_failslab+0x8c/0xb0 [ 450.858424][T18983] __kvmalloc_node_noprof+0x168/0x5c0 [ 450.858447][T18983] ? vmemdup_user+0x2b/0xd0 [ 450.858462][T18983] ? vmemdup_user+0x2b/0xd0 [ 450.858480][T18983] ? should_fail_usercopy+0x1a/0x20 [ 450.858499][T18983] vmemdup_user+0x2b/0xd0 [ 450.858514][T18983] path_setxattrat+0x1b3/0x320 [ 450.858581][T18983] __x64_sys_lsetxattr+0x71/0x90 [ 450.858597][T18983] x64_sys_call+0x22c1/0x2550 [ 450.858614][T18983] do_syscall_64+0x112/0x360 [ 450.858652][T18983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.858668][T18983] RIP: 0033:0x7f4d28aae159 [ 450.858734][T18983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.858748][T18983] RSP: 002b:00007f4d27507028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 450.858776][T18983] RAX: ffffffffffffffda RBX: 00007f4d28d35fa0 RCX: 00007f4d28aae159 [ 450.858786][T18983] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 450.858829][T18983] RBP: 00007f4d28b45024 R08: 0000000000000003 R09: 0000000000000000 [ 450.858839][T18983] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000000 [ 450.858849][T18983] R13: 00007f4d28d36038 R14: 00007f4d28d35fa0 R15: 00007ffd95b5ea78 [ 450.858862][T18983] [ 451.158191][T13431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.607694][T19021] loop3: detected capacity change from 0 to 256 [ 451.619976][T19021] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 451.849828][T19026] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 451.849872][T19026] FAT-fs (loop3): Filesystem has been set read-only [ 451.849891][T19026] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 451.912461][T19037] FAULT_INJECTION: forcing a failure. [ 451.912461][T19037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.912498][T19037] CPU: 0 UID: 0 PID: 19037 Comm: syz.2.5217 Not tainted syzkaller #0 PREEMPT(lazy) [ 451.912520][T19037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.912529][T19037] Call Trace: [ 451.912586][T19037] [ 451.912593][T19037] __dump_stack+0x1d/0x30 [ 451.912612][T19037] dump_stack_lvl+0x95/0xd0 [ 451.912661][T19037] dump_stack+0x15/0x1b [ 451.912676][T19037] should_fail_ex+0x262/0x280 [ 451.912692][T19037] should_fail+0xb/0x20 [ 451.912786][T19037] should_fail_usercopy+0x1a/0x20 [ 451.912803][T19037] _copy_from_user+0x1c/0xb0 [ 451.912821][T19037] __x64_sys_signalfd4+0x8f/0x100 [ 451.912837][T19037] x64_sys_call+0x2059/0x2550 [ 451.912885][T19037] do_syscall_64+0x112/0x360 [ 451.912906][T19037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.913015][T19037] RIP: 0033:0x7fb15bc9e159 [ 451.913028][T19037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.913042][T19037] RSP: 002b:00007fb15a6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 451.913058][T19037] RAX: ffffffffffffffda RBX: 00007fb15bf25fa0 RCX: 00007fb15bc9e159 [ 451.913069][T19037] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 451.913079][T19037] RBP: 00007fb15bd35024 R08: 0000000000000000 R09: 0000000000000000 [ 451.913189][T19037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.913198][T19037] R13: 00007fb15bf26038 R14: 00007fb15bf25fa0 R15: 00007ffddf546bc8 [ 451.913211][T19037] [ 452.499177][T19063] loop1: detected capacity change from 0 to 2048 [ 452.517372][T19063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.517430][T19063] ext4 filesystem being mounted at /1144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.592990][T19065] loop2: detected capacity change from 0 to 1024 [ 452.604622][T19065] EXT4-fs (loop2): inodes count not valid: 1 vs 32 [ 452.800934][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5231'. [ 453.002073][T19095] program syz.2.5233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.067182][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 453.067202][ T29] audit: type=1400 audit(1788784957.176:2989): avc: denied { write } for pid=19096 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.138514][T19098] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5234'. [ 453.329379][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.546653][T19126] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 453.669016][ T29] audit: type=1400 audit(1788784957.776:2990): avc: denied { write } for pid=19102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.766064][ T29] audit: type=1400 audit(1788784957.876:2991): avc: denied { write } for pid=19140 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.968112][ T29] audit: type=1400 audit(1788784958.076:2992): avc: denied { write } for pid=19144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.023490][ T29] audit: type=1400 audit(1788784958.136:2993): avc: denied { write } for pid=19155 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.170365][ T29] audit: type=1400 audit(1788784958.276:2994): avc: denied { write } for pid=19158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.229608][ T29] audit: type=1400 audit(1788784958.336:2995): avc: denied { write } for pid=19169 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.359590][ T29] audit: type=1400 audit(1788784958.466:2996): avc: denied { write } for pid=19172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.408072][ T29] audit: type=1400 audit(1788784958.516:2997): avc: denied { write } for pid=19183 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.533952][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5248'. [ 454.646428][T19201] loop8: detected capacity change from 0 to 2048 [ 454.657491][T19201] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.657669][T19201] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.707351][ T29] audit: type=1400 audit(1788784958.816:2998): avc: denied { write } for pid=19198 comm="syz.8.5249" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.881313][T19203] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 455.062236][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.770029][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5274'. [ 455.781414][T19254] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 455.852089][T19261] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 455.852109][T19261] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 455.852160][T19261] vhci_hcd vhci_hcd.0: Device attached [ 455.852358][T19262] vhci_hcd: xmit failed -22 [ 455.852473][ T9334] vhci_hcd vhci_hcd.0: stop threads [ 455.852582][ T9334] vhci_hcd vhci_hcd.0: release socket [ 455.852594][ T9334] vhci_hcd vhci_hcd.0: disconnect device [ 455.981833][T19273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5279'. [ 455.993715][T19273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5279'. [ 456.078246][T19278] netlink: 'syz.1.5281': attribute type 7 has an invalid length. [ 456.078427][T19278] netlink: 'syz.1.5281': attribute type 7 has an invalid length. [ 456.148330][T19281] netlink: 'syz.1.5283': attribute type 8 has an invalid length. [ 456.148349][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5283'. [ 456.148445][T19281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5283'. [ 456.326752][T19268] loop8: detected capacity change from 0 to 512 [ 456.365279][T19268] EXT4-fs (loop8): orphan cleanup on readonly fs [ 456.365459][T19268] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.5278: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 456.365618][T19268] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 456.399180][T19268] EXT4-fs error (device loop8): ext4_quota_enable:7263: comm syz.8.5278: Bad quota inode: 4, type: 1 [ 456.399301][T19268] loop8: lost filesystem error report for type 5 error -117 [ 456.408859][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 456.408876][ C0] EXT4-fs (loop8): last error at time 1788784960: ext4_quota_enable:7263 [ 456.409038][T19268] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 456.442220][T19268] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 456.479419][T19268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.517956][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.578173][T19291] program syz.8.5284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.658370][T19297] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 456.828931][T19309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.829035][T19309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.861999][T19309] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 456.861999][T19309] program syz.2.5296 not setting count and/or reply_len properly [ 456.942478][T19316] netlink: 'syz.7.5298': attribute type 20 has an invalid length. [ 456.942544][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5298'. [ 456.975716][T19316] netlink: 'syz.7.5298': attribute type 20 has an invalid length. [ 456.975734][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5298'. [ 456.993104][ T9357] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.993963][ T9357] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.993990][ T9357] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.994077][ T9357] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.526566][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5307'. [ 458.100384][T19351] loop3: detected capacity change from 0 to 1024 [ 458.143776][T19351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 458.143859][T19351] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.169152][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 458.169172][ T29] audit: type=1400 audit(1788784962.286:3000): avc: denied { write } for pid=19350 comm="syz.3.5313" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.203693][T19351] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.5313: lblock 0 mapped to illegal pblock 0 (length 1) [ 458.217661][T19351] EXT4-fs (loop3): Remounting filesystem read-only [ 458.267424][T17007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 458.328453][T19362] bridge0: port 3(syz_tun) entered blocking state [ 458.328485][T19362] bridge0: port 3(syz_tun) entered disabled state [ 458.328572][T19362] syz_tun: entered allmulticast mode [ 458.328943][T19362] syz_tun: entered promiscuous mode [ 458.329740][T19362] bridge0: port 3(syz_tun) entered blocking state [ 458.329763][T19362] bridge0: port 3(syz_tun) entered forwarding state [ 458.656363][T17763] bridge0: port 3(syz_tun) entered disabled state [ 458.682548][T17763] syz_tun (unregistering): left allmulticast mode [ 458.682571][T17763] syz_tun (unregistering): left promiscuous mode [ 458.682595][T17763] bridge0: port 3(syz_tun) entered disabled state [ 458.832121][ T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.832154][ T51] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.873837][ T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.873906][ T51] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.944217][ T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.944250][ T51] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.997499][ T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.997601][ T51] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.023563][T19369] loop3: detected capacity change from 0 to 512 [ 459.110425][T19369] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.5319: invalid block [ 459.110506][T19369] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 459.122799][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 459.122831][ C0] EXT4-fs (loop3): initial error at time 1788784963: ext4_get_branch:178: inode 11: block 4294967295 [ 459.122864][ C0] EXT4-fs (loop3): last error at time 1788784963: ext4_get_branch:178: inode 11: block 4294967295 [ 459.163611][T19369] EXT4-fs error (device loop3) in ext4_process_orphan:346: IO failure [ 459.178210][T19369] loop3: lost filesystem error report for type 5 error -5 [ 459.181662][T19369] EXT4-fs (loop3): 2 truncates cleaned up [ 459.205892][T19369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.231988][ T9357] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 20000 - 0 [ 459.241060][ T9334] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 20000 - 0 [ 459.241375][ T9334] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 20000 - 0 [ 459.278645][ T9334] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 20000 - 0 [ 459.309978][ T51] bridge_slave_1: left allmulticast mode [ 459.310001][ T51] bridge_slave_1: left promiscuous mode [ 459.310191][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.333693][ T29] audit: type=1400 audit(1788784963.446:3001): avc: denied { create } for pid=19399 comm="syz.8.5332" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.355917][ T51] bridge_slave_0: left allmulticast mode [ 459.355939][ T51] bridge_slave_0: left promiscuous mode [ 459.378304][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.391650][T19401] 9p: Unknown Cache mode or invalid value 77777777777777777777 [ 459.399268][ T29] audit: type=1400 audit(1788784963.506:3002): avc: denied { mounton } for pid=19399 comm="syz.8.5332" path="/571/file0" dev="tmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.473672][ T29] audit: type=1400 audit(1788784963.576:3003): avc: denied { unlink } for pid=9246 comm="syz-executor" name="file0" dev="tmpfs" ino=3008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 459.551675][T17007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.903573][ T29] audit: type=1400 audit(1788784964.016:3004): avc: denied { write } for pid=19403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.044966][ T29] audit: type=1400 audit(1788784964.156:3005): avc: denied { write } for pid=19432 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.113852][ T29] audit: type=1400 audit(1788784964.226:3006): avc: denied { read } for pid=19436 comm="syz.8.5343" path="socket:[56313]" dev="sockfs" ino=56313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 460.190033][T19439] loop2: detected capacity change from 0 to 1024 [ 460.198180][T19439] EXT4-fs: Ignoring removed orlov option [ 460.198251][T19439] EXT4-fs: Ignoring removed orlov option [ 460.227533][T19439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.247602][T19439] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 460.258154][ T29] audit: type=1400 audit(1788784964.356:3007): avc: denied { relabelto } for pid=19438 comm="syz.2.5344" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 460.292247][ T29] audit: type=1400 audit(1788784964.406:3008): avc: denied { write } for pid=19438 comm="syz.2.5344" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 460.292275][ T29] audit: type=1400 audit(1788784964.406:3009): avc: denied { add_name } for pid=19438 comm="syz.2.5344" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 460.398453][T13431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.508343][T19449] loop2: detected capacity change from 0 to 128 [ 460.526922][T19449] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 460.541696][T19449] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.607626][T13431] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.725416][T19426] loop3: detected capacity change from 0 to 1024 [ 460.786481][T19426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 460.786775][T19426] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.945548][ T9422] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm kworker/u8:144: lblock 0 mapped to illegal pblock 0 (length 6) [ 460.945802][ T9422] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 460.945883][ T9422] EXT4-fs (loop3): This should not happen!! Data will be lost [ 460.945883][ T9422] [ 460.946110][ T9422] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:144: lblock 8 mapped to illegal pblock 8 (length 8) [ 460.946369][ T9422] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 460.946389][ T9422] EXT4-fs (loop3): This should not happen!! Data will be lost [ 460.946389][ T9422] [ 460.946674][T17007] EXT4-fs warning (device loop3): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 461.038918][T17007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 461.056589][T19459] loop1: detected capacity change from 0 to 512 [ 461.072593][T19459] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 461.072612][T19459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 461.072637][T19459] System zones: 0-1, 15-15, 18-18, 34-34 [ 461.072814][T19459] EXT4-fs (loop1): orphan cleanup on readonly fs [ 461.072907][T19459] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 461.072929][T19459] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 461.118327][T19459] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.5349: bad orphan inode 16 [ 461.118385][T19459] loop1: lost filesystem error report for type 5 error -117 [ 461.125328][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 461.125344][ C0] EXT4-fs (loop1): initial error at time 1788784965: ext4_orphan_get:1429 [ 461.125361][ C0] EXT4-fs (loop1): last error at time 1788784965: ext4_orphan_get:1429 [ 461.126198][T19459] ext4_test_bit(bit=15, block=18) = 1 [ 461.126211][T19459] is_bad_inode(inode)=0 [ 461.126217][T19459] NEXT_ORPHAN(inode)=0 [ 461.126240][T19459] max_ino=32 [ 461.126245][T19459] i_nlink=2 [ 461.126634][T19459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 461.259010][T19458] SELinux: ebitmap: truncated map [ 461.259029][T19458] SELinux: invalid class [ 461.275310][T19458] SELinux: failed to load policy [ 461.313442][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.323674][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.333707][ T51] bond0 (unregistering): Released all slaves [ 461.344651][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.356293][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 461.363564][T19444] bridge0: port 3(syz_tun) entered blocking state [ 461.363592][T19444] bridge0: port 3(syz_tun) entered disabled state [ 461.363661][T19444] syz_tun: entered allmulticast mode [ 461.400267][ T51] hsr_slave_0: left promiscuous mode [ 461.407488][ T51] hsr_slave_1: left promiscuous mode [ 461.407893][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.407983][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.431902][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.431920][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.486106][ T51] veth1_macvtap: left promiscuous mode [ 461.486178][ T51] veth0_macvtap: left promiscuous mode [ 461.486245][ T51] veth1_vlan: left promiscuous mode [ 461.486337][ T51] veth0_vlan: left promiscuous mode [ 461.782946][T19486] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 461.856139][ T51] team0 (unregistering): Port device team_slave_1 removed [ 461.868561][ T51] team0 (unregistering): Port device team_slave_0 removed [ 462.053188][T19492] loop2: detected capacity change from 0 to 128 [ 462.059988][T19492] EXT4-fs: Ignoring removed i_version option [ 462.069420][T19493] loop8: detected capacity change from 0 to 512 [ 462.081761][T19492] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 462.095092][T19492] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 462.137998][T19493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.138084][T19493] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.225850][ T51] IPVS: stop unused estimator thread 0... [ 462.256967][T13431] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 462.318868][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.357347][T19489] loop1: detected capacity change from 0 to 512 [ 462.436280][T19489] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 462.436340][T19489] loop1: lost filesystem error report for type 5 error -117 [ 462.445749][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 462.445765][ C0] EXT4-fs (loop1): initial error at time 1788784966: ext4_process_orphan:346 [ 462.445781][ C0] EXT4-fs (loop1): last error at time 1788784966: ext4_process_orphan:346 [ 462.486496][T19489] EXT4-fs (loop1): 2 truncates cleaned up [ 462.499423][T19489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.632245][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.684986][T19530] netlink: 'syz.1.5366': attribute type 19 has an invalid length. [ 462.685006][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5366'. [ 462.707424][T19390] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.707468][T19390] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.707541][T19390] bridge_slave_0: entered allmulticast mode [ 462.707966][T19390] bridge_slave_0: entered promiscuous mode [ 462.748975][T19530] netlink: 'syz.1.5366': attribute type 19 has an invalid length. [ 462.748993][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5366'. [ 462.749135][ T9422] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.749224][ T9422] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.749328][ T9422] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.749353][ T9422] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.802854][T19390] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.802884][T19390] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.802953][T19390] bridge_slave_1: entered allmulticast mode [ 462.803600][T19390] bridge_slave_1: entered promiscuous mode [ 462.896325][T19390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.906702][T19390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.975442][T19390] team0: Port device team_slave_0 added [ 462.976266][T19390] team0: Port device team_slave_1 added [ 462.990586][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 463.019777][T19539] loop1: detected capacity change from 0 to 512 [ 463.029284][T19539] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 463.045358][T19539] EXT4-fs (loop1): 1 truncate cleaned up [ 463.045798][T19539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.096474][T19390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.096490][T19390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.096516][T19390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.097240][T19390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.097252][T19390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.097271][T19390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.297570][T19390] hsr_slave_0: entered promiscuous mode [ 463.297857][T19390] hsr_slave_1: entered promiscuous mode [ 463.298103][T19390] debugfs: 'hsr0' already exists in 'hsr' [ 463.298117][T19390] Cannot create hsr debugfs directory [ 463.669958][T19390] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.702432][T18083] kernel read not supported for file /usb/usbmon/0s (pid: 18083 comm: kworker/0:8) [ 463.741424][T19390] netdevsim netdevsim5 eth7 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.787270][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 463.787289][ T29] audit: type=1400 audit(1788784967.896:3020): avc: denied { write } for pid=19555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.820714][T19390] netdevsim netdevsim5 eth6 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.864907][T19390] netdevsim netdevsim5 eth5 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 463.921413][T19595] smc: net device vlan1 applied user defined pnetid SYZ2 [ 463.932170][T19595] smc: net device vlan1 erased user defined pnetid SYZ2 [ 463.973045][ T29] audit: type=1400 audit(1788784968.086:3021): avc: denied { write } for pid=19596 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.050890][T19390] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 464.077371][T19390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.087900][T19390] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 464.107743][T19390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.115810][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 464.125549][T19390] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 464.139459][T19390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.157235][T19390] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.178812][T19390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.200912][T19605] netlink: 'syz.2.5389': attribute type 10 has an invalid length. [ 464.201185][T19605] syz_tun: left allmulticast mode [ 464.201284][T19605] bridge0: port 1(syz_tun) entered disabled state [ 464.230802][T19605] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 464.320661][T19615] SELinux: policydb version 1180827720 does not match my version range 15-35 [ 464.320686][T19615] SELinux: failed to load policy [ 464.340390][ T29] audit: type=1400 audit(1788784968.456:3022): avc: denied { read } for pid=19616 comm="syz.2.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 464.436574][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.446476][T19390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.478976][T19621] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5392'. [ 464.499152][T19390] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.519295][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.519328][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.556803][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.556835][ T9357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.780878][T19390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.854701][ T29] audit: type=1400 audit(1788784968.956:3023): avc: denied { write } for pid=19618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.923494][T19390] veth0_vlan: entered promiscuous mode [ 464.944418][T19390] veth1_vlan: entered promiscuous mode [ 464.970881][ T29] audit: type=1400 audit(1788784969.076:3024): avc: denied { write } for pid=19673 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.013709][T19390] veth0_macvtap: entered promiscuous mode [ 465.037881][T19390] veth1_macvtap: entered promiscuous mode [ 465.069937][T19679] team_slave_1: Caught tx_queue_len zero misconfig [ 465.089443][T19677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5403'. [ 465.110831][T19390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.121791][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 465.139805][T19390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.222412][ T9422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.222475][ T9422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.222531][ T9422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.222595][ T9422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.350411][ T29] audit: type=1326 audit(1788784969.456:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.3.5408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 465.384592][ T29] audit: type=1326 audit(1788784969.496:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.3.5408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 465.384675][ T29] audit: type=1326 audit(1788784969.496:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.3.5408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 465.384710][ T29] audit: type=1326 audit(1788784969.496:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.3.5408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 465.442282][ T29] audit: type=1326 audit(1788784969.556:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19691 comm="syz.3.5408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff3e4ace159 code=0x7ffc0000 [ 465.743879][T19713] loop2: detected capacity change from 0 to 1024 [ 465.757819][T19713] EXT4-fs: Ignoring removed bh option [ 465.782322][T19713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 465.782386][T19713] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.816003][T19714] loop5: detected capacity change from 0 to 2048 [ 465.828726][T19713] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 3: comm syz.2.5423: lblock 3 mapped to illegal pblock 3 (length 3) [ 465.853166][T19713] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 465.857612][T19713] EXT4-fs (loop2): This should not happen!! Data will be lost [ 465.857612][T19713] [ 465.886942][T19713] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.5423: lblock 3 mapped to illegal pblock 3 (length 1) [ 465.910111][T19713] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.5423: lblock 3 mapped to illegal pblock 3 (length 1) [ 465.925376][T19713] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.5423: lblock 3 mapped to illegal pblock 3 (length 1) [ 465.942202][T19713] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.5423: lblock 3 mapped to illegal pblock 3 (length 1) [ 465.959748][T19713] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.5423: lblock 3 mapped to illegal pblock 3 (length 1) [ 465.961774][T19714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.961838][T19714] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.978778][T19713] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.5423: lblock 3 mapped to illegal pblock 3 (length 1) [ 466.021802][T19722] EXT4-fs error (device loop2): ext4_ext_remove_space:2977: inode #15: comm syz.2.5423: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 466.047139][T19722] EXT4-fs error (device loop2) in ext4_setattr:6247: Corrupt filesystem [ 466.056651][T19713] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #15: block 3: comm syz.2.5423: lblock 3 mapped to illegal pblock 3 (length 1) [ 466.236294][T19667] loop8: detected capacity change from 0 to 1024 [ 466.344762][T19667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 466.345022][T19667] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.384560][T19733] size and base must be multiples of 4 kiB [ 466.384579][T19733] CPU: 0 UID: 0 PID: 19733 Comm: syz.3.5415 Not tainted syzkaller #0 PREEMPT(lazy) [ 466.384599][T19733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.384609][T19733] Call Trace: [ 466.384682][T19733] [ 466.384688][T19733] __dump_stack+0x1d/0x30 [ 466.384707][T19733] dump_stack_lvl+0x95/0xd0 [ 466.384723][T19733] dump_stack+0x15/0x1b [ 466.384816][T19733] mtrr_del+0xbf/0xd0 [ 466.384833][T19733] mtrr_ioctl+0xb62/0xfb0 [ 466.384928][T19733] ? __pfx_mtrr_ioctl+0x10/0x10 [ 466.384945][T19733] ? proc_reg_poll+0x101/0x1a0 [ 466.384961][T19733] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 466.385021][T19733] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 466.385038][T19733] __se_sys_ioctl+0xce/0x140 [ 466.385099][T19733] __x64_sys_ioctl+0x43/0x50 [ 466.385119][T19733] x64_sys_call+0x239d/0x2550 [ 466.385175][T19733] do_syscall_64+0x112/0x360 [ 466.385198][T19733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.385214][T19733] RIP: 0033:0x7ff3e4ace159 [ 466.385227][T19733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.385277][T19733] RSP: 002b:00007ff3e3527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 466.385311][T19733] RAX: ffffffffffffffda RBX: 00007ff3e4d55fa0 RCX: 00007ff3e4ace159 [ 466.385322][T19733] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 466.385332][T19733] RBP: 00007ff3e4b65024 R08: 0000000000000000 R09: 0000000000000000 [ 466.385421][T19733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.385431][T19733] R13: 00007ff3e4d56038 R14: 00007ff3e4d55fa0 R15: 00007ffc273dc258 [ 466.385451][T19733] [ 466.660042][T13431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 466.714731][ T51] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 466.731816][ T51] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 466.731844][ T51] EXT4-fs (loop8): This should not happen!! Data will be lost [ 466.731844][ T51] [ 466.757853][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 466.899712][T19390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.963168][T19743] loop2: detected capacity change from 0 to 512 [ 466.978490][T19755] FAULT_INJECTION: forcing a failure. [ 466.978490][T19755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.978520][T19755] CPU: 0 UID: 0 PID: 19755 Comm: syz.8.5422 Not tainted syzkaller #0 PREEMPT(lazy) [ 466.978600][T19755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.978609][T19755] Call Trace: [ 466.978615][T19755] [ 466.978622][T19755] __dump_stack+0x1d/0x30 [ 466.978641][T19755] dump_stack_lvl+0x95/0xd0 [ 466.978657][T19755] dump_stack+0x15/0x1b [ 466.978739][T19755] should_fail_ex+0x262/0x280 [ 466.978756][T19755] should_fail+0xb/0x20 [ 466.978770][T19755] should_fail_usercopy+0x1a/0x20 [ 466.978787][T19755] _copy_from_user+0x1c/0xb0 [ 466.978813][T19755] ___sys_recvmsg+0xaa/0x3a0 [ 466.978832][T19755] do_recvmmsg+0x1e5/0x560 [ 466.978850][T19755] __x64_sys_recvmmsg+0xe5/0x170 [ 466.978944][T19755] x64_sys_call+0x77f/0x2550 [ 466.979011][T19755] do_syscall_64+0x112/0x360 [ 466.979033][T19755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.979114][T19755] RIP: 0033:0x7f9837cde159 [ 466.979126][T19755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.979140][T19755] RSP: 002b:00007f9836737028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 466.979157][T19755] RAX: ffffffffffffffda RBX: 00007f9837f65fa0 RCX: 00007f9837cde159 [ 466.979167][T19755] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 466.979232][T19755] RBP: 00007f9837d75024 R08: 0000000000000000 R09: 0000000000000000 [ 466.979242][T19755] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 466.979296][T19755] R13: 00007f9837f66038 R14: 00007f9837f65fa0 R15: 00007ffcc502e1d8 [ 466.979310][T19755] [ 467.229373][T19743] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 467.229454][T19743] loop2: lost filesystem error report for type 5 error -117 [ 467.238669][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 467.238685][ C0] EXT4-fs (loop2): initial error at time 1788784971: ext4_process_orphan:346 [ 467.238701][ C0] EXT4-fs (loop2): last error at time 1788784971: ext4_process_orphan:346 [ 467.275793][T19743] EXT4-fs (loop2): 2 truncates cleaned up [ 467.308000][T19743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.419137][T19769] syz_tun: entered allmulticast mode [ 467.424912][T19769] syz_tun: left allmulticast mode [ 467.501766][T13431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.878639][T19808] loop5: detected capacity change from 0 to 512 [ 467.913293][T19808] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 467.913316][T19808] loop5: lost filesystem error report for type 5 error -12 [ 467.921932][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 467.921948][ C0] EXT4-fs (loop5): initial error at time 1788784972: ext4_process_orphan:346 [ 467.921976][ C0] EXT4-fs (loop5): last error at time 1788784972: ext4_process_orphan:346 [ 467.937863][T19808] EXT4-fs (loop5): 2 truncates cleaned up [ 467.938285][T19808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.170727][T19814] loop8: detected capacity change from 0 to 512 [ 468.205802][T19814] EXT4-fs error (device loop8) in ext4_process_orphan:346: Corrupt filesystem [ 468.205882][T19814] loop8: lost filesystem error report for type 5 error -117 [ 468.215181][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 468.215196][ C0] EXT4-fs (loop8): initial error at time 1788784972: ext4_process_orphan:346 [ 468.215231][ C0] EXT4-fs (loop8): last error at time 1788784972: ext4_process_orphan:346 [ 468.253168][T19814] EXT4-fs (loop8): 2 truncates cleaned up [ 468.264009][T19814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.823722][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.878373][T19390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.977132][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 468.977151][ T29] audit: type=1326 audit(1788784973.086:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 469.010493][ T29] audit: type=1326 audit(1788784973.126:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 469.010580][ T29] audit: type=1326 audit(1788784973.126:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 469.069243][ T29] audit: type=1326 audit(1788784973.186:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4d28a6e98e code=0x7ffc0000 [ 469.069343][ T29] audit: type=1326 audit(1788784973.186:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 469.069367][ T29] audit: type=1400 audit(1788784973.186:3069): avc: denied { setattr } for pid=19828 comm="syz.1.5446" name="file0" dev="tmpfs" ino=6173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 469.069386][ T29] audit: type=1326 audit(1788784973.186:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 469.069407][ T29] audit: type=1326 audit(1788784973.186:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 469.069432][ T29] audit: type=1326 audit(1788784973.186:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 469.285829][ T29] audit: type=1326 audit(1788784973.396:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 469.929760][T19883] loop1: detected capacity change from 0 to 128 [ 469.943670][T19883] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.956300][T19883] ext4 filesystem being mounted at /1177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.024966][T19888] loop3: detected capacity change from 0 to 2048 [ 470.044106][T19888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.044178][T19888] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.229115][T19890] loop5: detected capacity change from 0 to 8192 [ 470.238451][T19890] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.380027][T19909] netlink: 'syz.8.5465': attribute type 49 has an invalid length. [ 470.399617][T19909] bond0: (slave bond_slave_0): Releasing backup interface [ 470.431051][T19909] bond_slave_0: entered allmulticast mode [ 470.757514][T19929] loop8: detected capacity change from 0 to 512 [ 470.768164][T19929] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 470.785693][T19929] EXT4-fs (loop8): 1 truncate cleaned up [ 470.800697][T19929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.836838][T19929] EXT4-fs (loop8): shut down requested (0) [ 470.843146][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.889434][T19932] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.5469: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 470.912185][T17007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.980375][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.392893][T19961] size and base must be multiples of 4 kiB [ 471.392912][T19961] CPU: 0 UID: 0 PID: 19961 Comm: syz.8.5476 Not tainted syzkaller #0 PREEMPT(lazy) [ 471.392974][T19961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.392983][T19961] Call Trace: [ 471.392988][T19961] [ 471.392994][T19961] __dump_stack+0x1d/0x30 [ 471.393014][T19961] dump_stack_lvl+0x95/0xd0 [ 471.393081][T19961] dump_stack+0x15/0x1b [ 471.393095][T19961] mtrr_del+0xbf/0xd0 [ 471.393111][T19961] mtrr_ioctl+0xb62/0xfb0 [ 471.393130][T19961] ? __pfx_mtrr_ioctl+0x10/0x10 [ 471.393195][T19961] ? proc_reg_poll+0x101/0x1a0 [ 471.393219][T19961] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 471.393267][T19961] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 471.393329][T19961] __se_sys_ioctl+0xce/0x140 [ 471.393424][T19961] __x64_sys_ioctl+0x43/0x50 [ 471.393444][T19961] x64_sys_call+0x239d/0x2550 [ 471.393462][T19961] do_syscall_64+0x112/0x360 [ 471.393540][T19961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.393556][T19961] RIP: 0033:0x7f9837cde159 [ 471.393568][T19961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.393582][T19961] RSP: 002b:00007f9836737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.393621][T19961] RAX: ffffffffffffffda RBX: 00007f9837f65fa0 RCX: 00007f9837cde159 [ 471.393631][T19961] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 471.393641][T19961] RBP: 00007f9837d75024 R08: 0000000000000000 R09: 0000000000000000 [ 471.393651][T19961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.393660][T19961] R13: 00007f9837f66038 R14: 00007f9837f65fa0 R15: 00007ffcc502e1d8 [ 471.393673][T19961] [ 471.699567][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 471.708583][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 471.997205][T19985] ip_tables: iptables: counters copy to user failed while replacing table [ 472.216188][T19998] netlink: 'syz.3.5483': attribute type 1 has an invalid length. [ 472.230335][T19995] loop8: detected capacity change from 0 to 2048 [ 472.242739][T19995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.242792][T19995] ext4 filesystem being mounted at /624/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.450131][T20013] FAULT_INJECTION: forcing a failure. [ 472.450131][T20013] name failslab, interval 1, probability 0, space 0, times 0 [ 472.450158][T20013] CPU: 0 UID: 0 PID: 20013 Comm: syz.3.5487 Not tainted syzkaller #0 PREEMPT(lazy) [ 472.450229][T20013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.450245][T20013] Call Trace: [ 472.450251][T20013] [ 472.450257][T20013] __dump_stack+0x1d/0x30 [ 472.450281][T20013] dump_stack_lvl+0x95/0xd0 [ 472.450296][T20013] dump_stack+0x15/0x1b [ 472.450311][T20013] should_fail_ex+0x262/0x280 [ 472.450329][T20013] ? selinux_genfs_get_sid+0x49/0x190 [ 472.450348][T20013] should_failslab+0x8c/0xb0 [ 472.450417][T20013] __kmalloc_cache_noprof+0x7a/0x400 [ 472.450469][T20013] ? selinux_genfs_get_sid+0x49/0x190 [ 472.450488][T20013] selinux_genfs_get_sid+0x49/0x190 [ 472.450506][T20013] inode_doinit_with_dentry+0x606/0x7b0 [ 472.450602][T20013] selinux_d_instantiate+0x27/0x40 [ 472.450619][T20013] security_d_instantiate+0x76/0x90 [ 472.450636][T20013] d_make_persistent+0x49/0x110 [ 472.450657][T20013] __debugfs_create_file+0x14e/0x2b0 [ 472.450700][T20013] debugfs_create_file_full+0x3f/0x60 [ 472.450716][T20013] ? __pfx_br_dev_setup+0x10/0x10 [ 472.450731][T20013] ref_tracker_dir_debugfs+0x10e/0x220 [ 472.450753][T20013] alloc_netdev_mqs+0x1a9/0xa90 [ 472.450801][T20013] br_add_bridge+0x35/0xc0 [ 472.450842][T20013] br_ioctl_stub+0x3e3/0x8f0 [ 472.450863][T20013] ? ioctl_has_perm+0x273/0x2c0 [ 472.450879][T20013] ? __pfx_br_ioctl_stub+0x10/0x10 [ 472.450920][T20013] sock_ioctl+0x39a/0x610 [ 472.450937][T20013] ? __pfx_sock_ioctl+0x10/0x10 [ 472.450952][T20013] __se_sys_ioctl+0xce/0x140 [ 472.450973][T20013] __x64_sys_ioctl+0x43/0x50 [ 472.451058][T20013] x64_sys_call+0x239d/0x2550 [ 472.451076][T20013] do_syscall_64+0x112/0x360 [ 472.451098][T20013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.451176][T20013] RIP: 0033:0x7ff3e4ace159 [ 472.451234][T20013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.451248][T20013] RSP: 002b:00007ff3e3527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.451264][T20013] RAX: ffffffffffffffda RBX: 00007ff3e4d55fa0 RCX: 00007ff3e4ace159 [ 472.451301][T20013] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 472.451323][T20013] RBP: 00007ff3e4b65024 R08: 0000000000000000 R09: 0000000000000000 [ 472.451333][T20013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.451342][T20013] R13: 00007ff3e4d56038 R14: 00007ff3e4d55fa0 R15: 00007ffc273dc258 [ 472.451356][T20013] [ 472.861474][T20023] size and base must be multiples of 4 kiB [ 472.861492][T20023] CPU: 0 UID: 0 PID: 20023 Comm: syz.5.5488 Not tainted syzkaller #0 PREEMPT(lazy) [ 472.861512][T20023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 472.861522][T20023] Call Trace: [ 472.861527][T20023] [ 472.861533][T20023] __dump_stack+0x1d/0x30 [ 472.861627][T20023] dump_stack_lvl+0x95/0xd0 [ 472.861660][T20023] dump_stack+0x15/0x1b [ 472.861674][T20023] mtrr_del+0xbf/0xd0 [ 472.861691][T20023] mtrr_ioctl+0xb62/0xfb0 [ 472.861803][T20023] ? __pfx_mtrr_ioctl+0x10/0x10 [ 472.861820][T20023] ? proc_reg_poll+0x101/0x1a0 [ 472.861837][T20023] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 472.861854][T20023] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 472.861947][T20023] __se_sys_ioctl+0xce/0x140 [ 472.861971][T20023] __x64_sys_ioctl+0x43/0x50 [ 472.861990][T20023] x64_sys_call+0x239d/0x2550 [ 472.862103][T20023] do_syscall_64+0x112/0x360 [ 472.862211][T20023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.862227][T20023] RIP: 0033:0x7f09ba2be159 [ 472.862240][T20023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.862254][T20023] RSP: 002b:00007f09b8d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.862270][T20023] RAX: ffffffffffffffda RBX: 00007f09ba545fa0 RCX: 00007f09ba2be159 [ 472.862362][T20023] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 472.862373][T20023] RBP: 00007f09ba355024 R08: 0000000000000000 R09: 0000000000000000 [ 472.862382][T20023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.862392][T20023] R13: 00007f09ba546038 R14: 00007f09ba545fa0 R15: 00007ffd35a3fb38 [ 472.862405][T20023] [ 473.308522][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.423509][T20048] loop8: detected capacity change from 0 to 1024 [ 473.440717][T20048] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 473.451509][T20050] FAULT_INJECTION: forcing a failure. [ 473.451509][T20050] name failslab, interval 1, probability 0, space 0, times 0 [ 473.451533][T20050] CPU: 0 UID: 0 PID: 20050 Comm: syz.5.5498 Not tainted syzkaller #0 PREEMPT(lazy) [ 473.451552][T20050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 473.451636][T20050] Call Trace: [ 473.451642][T20050] [ 473.451649][T20050] __dump_stack+0x1d/0x30 [ 473.451668][T20050] dump_stack_lvl+0x95/0xd0 [ 473.451685][T20050] dump_stack+0x15/0x1b [ 473.451708][T20050] should_fail_ex+0x262/0x280 [ 473.451725][T20050] ? security_inode_alloc+0x37/0x100 [ 473.451781][T20050] should_failslab+0x8c/0xb0 [ 473.451801][T20050] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 473.451821][T20050] ? security_inode_alloc+0x37/0x100 [ 473.451840][T20050] security_inode_alloc+0x37/0x100 [ 473.451909][T20050] inode_init_always_gfp+0x495/0x4e0 [ 473.451925][T20050] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 473.452065][T20050] alloc_inode+0x58/0x170 [ 473.452108][T20050] new_inode+0x1d/0xe0 [ 473.452123][T20050] __debugfs_create_file+0x97/0x2b0 [ 473.452139][T20050] debugfs_create_file_full+0x3f/0x60 [ 473.452155][T20050] ? __pfx_br_dev_setup+0x10/0x10 [ 473.452170][T20050] ref_tracker_dir_debugfs+0x10e/0x220 [ 473.452235][T20050] alloc_netdev_mqs+0x1a9/0xa90 [ 473.452266][T20050] br_add_bridge+0x35/0xc0 [ 473.452285][T20050] br_ioctl_stub+0x3e3/0x8f0 [ 473.452306][T20050] ? ioctl_has_perm+0x273/0x2c0 [ 473.452389][T20050] ? __pfx_br_ioctl_stub+0x10/0x10 [ 473.452410][T20050] sock_ioctl+0x39a/0x610 [ 473.452450][T20050] ? __pfx_sock_ioctl+0x10/0x10 [ 473.452465][T20050] __se_sys_ioctl+0xce/0x140 [ 473.452486][T20050] __x64_sys_ioctl+0x43/0x50 [ 473.452530][T20050] x64_sys_call+0x239d/0x2550 [ 473.452548][T20050] do_syscall_64+0x112/0x360 [ 473.452622][T20050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.452639][T20050] RIP: 0033:0x7f09ba2be159 [ 473.452651][T20050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.452667][T20050] RSP: 002b:00007f09b8d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.452683][T20050] RAX: ffffffffffffffda RBX: 00007f09ba545fa0 RCX: 00007f09ba2be159 [ 473.452693][T20050] RDX: 00002000000001c0 RSI: 00000000000089a0 RDI: 0000000000000004 [ 473.452703][T20050] RBP: 00007f09ba355024 R08: 0000000000000000 R09: 0000000000000000 [ 473.452713][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.452722][T20050] R13: 00007f09ba546038 R14: 00007f09ba545fa0 R15: 00007ffd35a3fb38 [ 473.452751][T20050] [ 473.452771][T20050] debugfs: out of free dentries, can not create file 'netdev@ffff8881035e65e0' [ 473.538849][T20048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.831513][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.010507][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 474.010526][ T29] audit: type=1400 audit(1788784978.116:3100): avc: denied { write } for pid=20041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.161279][T20078] FAULT_INJECTION: forcing a failure. [ 474.161279][T20078] name failslab, interval 1, probability 0, space 0, times 0 [ 474.161309][T20078] CPU: 0 UID: 0 PID: 20078 Comm: syz.1.5505 Not tainted syzkaller #0 PREEMPT(lazy) [ 474.161406][T20078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.161416][T20078] Call Trace: [ 474.161422][T20078] [ 474.161428][T20078] __dump_stack+0x1d/0x30 [ 474.161448][T20078] dump_stack_lvl+0x95/0xd0 [ 474.161464][T20078] dump_stack+0x15/0x1b [ 474.161514][T20078] should_fail_ex+0x262/0x280 [ 474.161533][T20078] ? security_file_alloc+0x32/0xf0 [ 474.161553][T20078] should_failslab+0x8c/0xb0 [ 474.161574][T20078] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 474.161626][T20078] ? security_file_alloc+0x32/0xf0 [ 474.161648][T20078] security_file_alloc+0x32/0xf0 [ 474.161667][T20078] init_file+0x5b/0x1b0 [ 474.161760][T20078] alloc_empty_file+0x85/0x1e0 [ 474.161775][T20078] alloc_file_pseudo+0x92/0x120 [ 474.161791][T20078] anon_inode_getfile_fmode+0xa5/0x140 [ 474.161807][T20078] do_signalfd4+0x156/0x320 [ 474.161834][T20078] __x64_sys_signalfd+0xbe/0xf0 [ 474.161849][T20078] x64_sys_call+0x115b/0x2550 [ 474.161925][T20078] do_syscall_64+0x112/0x360 [ 474.161947][T20078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.161963][T20078] RIP: 0033:0x7f4d28aae159 [ 474.161976][T20078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.162014][T20078] RSP: 002b:00007f4d27507028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 474.162030][T20078] RAX: ffffffffffffffda RBX: 00007f4d28d35fa0 RCX: 00007f4d28aae159 [ 474.162041][T20078] RDX: 0000000000000008 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 474.162051][T20078] RBP: 00007f4d28b45024 R08: 0000000000000000 R09: 0000000000000000 [ 474.162061][T20078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.162076][T20078] R13: 00007f4d28d36038 R14: 00007f4d28d35fa0 R15: 00007ffd95b5ea78 [ 474.162090][T20078] [ 474.188137][ T29] audit: type=1400 audit(1788784978.306:3101): avc: denied { write } for pid=20076 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.331255][T20040] loop2: detected capacity change from 0 to 512 [ 474.496939][T20040] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.5495: bg 0: block 5: invalid block bitmap [ 474.497062][T20040] loop2: lost filesystem error report for type 5 error -117 [ 474.509688][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 474.509703][ C0] EXT4-fs (loop2): initial error at time 1788784978: ext4_validate_block_bitmap:436 [ 474.509719][ C0] EXT4-fs (loop2): last error at time 1788784978: ext4_validate_block_bitmap:436 [ 474.547805][T20040] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 474.547865][T20040] loop2: lost filesystem error report for type 5 error -117 [ 474.567870][T20040] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.5495: invalid indirect mapped block 3 (level 2) [ 474.567991][T20040] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 474.589649][T20040] EXT4-fs (loop2): 1 orphan inode deleted [ 474.589686][T20040] EXT4-fs (loop2): 1 truncate cleaned up [ 474.618452][T20093] program syz.3.5508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.641910][T20040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.657919][T20090] loop5: detected capacity change from 0 to 128 [ 474.672778][T20090] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 474.686639][T20090] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.715831][ T29] audit: type=1400 audit(1788784978.826:3102): avc: denied { write } for pid=20088 comm="syz.5.5510" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.808199][T20101] loop1: detected capacity change from 0 to 764 [ 474.871504][T13431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.892437][T20107] loop8: detected capacity change from 0 to 512 [ 474.905714][T20107] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 474.923341][T20107] EXT4-fs (loop8): 1 truncate cleaned up [ 474.923608][T20107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.948307][ T29] audit: type=1400 audit(1788784979.056:3103): avc: denied { write } for pid=20106 comm="syz.8.5514" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.001341][T20111] FAULT_INJECTION: forcing a failure. [ 475.001341][T20111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.001370][T20111] CPU: 0 UID: 0 PID: 20111 Comm: syz.2.5515 Not tainted syzkaller #0 PREEMPT(lazy) [ 475.001438][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.001448][T20111] Call Trace: [ 475.001453][T20111] [ 475.001460][T20111] __dump_stack+0x1d/0x30 [ 475.001545][T20111] dump_stack_lvl+0x95/0xd0 [ 475.001635][T20111] dump_stack+0x15/0x1b [ 475.001650][T20111] should_fail_ex+0x262/0x280 [ 475.001667][T20111] should_fail+0xb/0x20 [ 475.001712][T20111] should_fail_usercopy+0x1a/0x20 [ 475.001730][T20111] _copy_from_user+0x1c/0xb0 [ 475.001748][T20111] set_user_sigmask+0x60/0x140 [ 475.001763][T20111] __se_sys_ppoll+0x1b4/0x220 [ 475.001780][T20111] __x64_sys_ppoll+0x67/0x80 [ 475.001815][T20111] x64_sys_call+0x15a5/0x2550 [ 475.001833][T20111] do_syscall_64+0x112/0x360 [ 475.001855][T20111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.001883][T20111] RIP: 0033:0x7fb15bc9e159 [ 475.001895][T20111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.001911][T20111] RSP: 002b:00007fb15a6f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 475.001927][T20111] RAX: ffffffffffffffda RBX: 00007fb15bf25fa0 RCX: 00007fb15bc9e159 [ 475.001938][T20111] RDX: 0000200000000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.001948][T20111] RBP: 00007fb15bd35024 R08: 0000000000000008 R09: 0000000000000000 [ 475.001958][T20111] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000000 [ 475.001975][T20111] R13: 00007fb15bf26038 R14: 00007fb15bf25fa0 R15: 00007ffddf546bc8 [ 475.001988][T20111] [ 475.220726][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5516'. [ 475.290668][T20118] futex_wake_op: syz.3.5517 tries to shift op by 144; fix this program [ 475.321587][T20118] vcan0 speed is unknown, defaulting to 1000 [ 475.322358][T20118] vcan0 speed is unknown, defaulting to 1000 [ 475.322704][T20118] vcan0 speed is unknown, defaulting to 1000 [ 475.418597][ T29] audit: type=1400 audit(1788784979.526:3104): avc: denied { write } for pid=20091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.538485][ T29] audit: type=1400 audit(1788784979.646:3105): avc: denied { write } for pid=20127 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.719433][T20118] infiniband syz0: set down [ 475.719550][T20118] infiniband syz0: added vcan0 [ 475.719692][ T11] vcan0 speed is unknown, defaulting to 1000 [ 475.766079][T20118] RDS/IB: syz0: added [ 475.766176][T20118] smc: adding ib device syz0 with port count 1 [ 475.766272][T20118] smc: ib device syz0 port 1 has no pnetid [ 475.766361][T17602] vcan0 speed is unknown, defaulting to 1000 [ 475.797224][T20118] vcan0 speed is unknown, defaulting to 1000 [ 475.827675][T13431] bond0: (slave syz_tun): Releasing backup interface [ 475.867504][T19390] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.081039][ T29] audit: type=1400 audit(1788784980.186:3106): avc: denied { write } for pid=20133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.231104][ T29] audit: type=1400 audit(1788784980.336:3107): avc: denied { write } for pid=20161 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.283297][T20118] vcan0 speed is unknown, defaulting to 1000 [ 476.309165][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.448983][ T29] audit: type=1400 audit(1788784980.556:3108): avc: denied { setopt } for pid=20165 comm="syz.8.5527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.521238][T20152] vcan0 speed is unknown, defaulting to 1000 [ 476.620265][T20163] loop1: detected capacity change from 0 to 512 [ 476.690502][T20163] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.5526: bg 0: block 5: invalid block bitmap [ 476.690662][T20163] loop1: lost filesystem error report for type 5 error -117 [ 476.703352][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 476.703367][ C0] EXT4-fs (loop1): initial error at time 1788784980: ext4_validate_block_bitmap:436 [ 476.703383][ C0] EXT4-fs (loop1): last error at time 1788784980: ext4_validate_block_bitmap:436 [ 476.740582][T20163] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 476.759760][T20163] loop1: lost filesystem error report for type 5 error -117 [ 476.763770][T20163] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5526: invalid indirect mapped block 3 (level 2) [ 476.763842][T20163] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 476.787737][T20163] EXT4-fs (loop1): 1 orphan inode deleted [ 476.787807][T20163] EXT4-fs (loop1): 1 truncate cleaned up [ 476.817965][T20118] vcan0 speed is unknown, defaulting to 1000 [ 476.833914][T20163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.913086][ T29] audit: type=1400 audit(1788784981.016:3109): avc: denied { write } for pid=20168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.984534][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.061863][T20189] FAULT_INJECTION: forcing a failure. [ 477.061863][T20189] name failslab, interval 1, probability 0, space 0, times 0 [ 477.061902][T20189] CPU: 0 UID: 0 PID: 20189 Comm: syz.1.5530 Not tainted syzkaller #0 PREEMPT(lazy) [ 477.061921][T20189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.061930][T20189] Call Trace: [ 477.061936][T20189] [ 477.061942][T20189] __dump_stack+0x1d/0x30 [ 477.061961][T20189] dump_stack_lvl+0x95/0xd0 [ 477.062041][T20189] dump_stack+0x15/0x1b [ 477.062055][T20189] should_fail_ex+0x262/0x280 [ 477.062078][T20189] should_failslab+0x8c/0xb0 [ 477.062169][T20189] __kvmalloc_node_noprof+0x168/0x5c0 [ 477.062192][T20189] ? listxattr+0x60/0x280 [ 477.062210][T20189] ? listxattr+0x60/0x280 [ 477.062229][T20189] listxattr+0x60/0x280 [ 477.062325][T20189] ? restore_fpregs_from_fpstate+0x61/0x110 [ 477.062343][T20189] __x64_sys_flistxattr+0xc7/0x120 [ 477.062360][T20189] x64_sys_call+0x2206/0x2550 [ 477.062378][T20189] do_syscall_64+0x112/0x360 [ 477.062412][T20189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.062438][T20189] RIP: 0033:0x7f4d28aae159 [ 477.062450][T20189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.062464][T20189] RSP: 002b:00007f4d27507028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 477.062553][T20189] RAX: ffffffffffffffda RBX: 00007f4d28d35fa0 RCX: 00007f4d28aae159 [ 477.062564][T20189] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000003 [ 477.062573][T20189] RBP: 00007f4d28b45024 R08: 0000000000000000 R09: 0000000000000000 [ 477.062583][T20189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.062592][T20189] R13: 00007f4d28d36038 R14: 00007f4d28d35fa0 R15: 00007ffd95b5ea78 [ 477.062606][T20189] [ 477.271360][T20191] loop8: detected capacity change from 0 to 512 [ 477.288357][T20118] vcan0 speed is unknown, defaulting to 1000 [ 477.305755][T20191] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.5531: iget: bad i_size value: 38620345925642 [ 477.305797][T20191] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 477.318524][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 477.318539][ C0] EXT4-fs (loop8): initial error at time 1788784981: ext4_orphan_get:1403: inode 15 [ 477.318559][ C0] EXT4-fs (loop8): last error at time 1788784981: ext4_orphan_get:1403: inode 15 [ 477.329383][T20191] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.5531: couldn't read orphan inode 15 (err -117) [ 477.329405][T20191] loop8: lost filesystem error report for type 5 error -117 [ 477.370004][T20191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.477932][T20198] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.5531: bg 0: block 5: invalid block bitmap [ 477.491947][T20198] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 428 with error 28 [ 477.491973][T20198] EXT4-fs (loop8): This should not happen!! Data will be lost [ 477.491973][T20198] [ 477.491986][T20198] EXT4-fs (loop8): Total free blocks count 0 [ 477.491997][T20198] EXT4-fs (loop8): Free/Dirty block details [ 477.492007][T20198] EXT4-fs (loop8): free_blocks=0 [ 477.492059][T20198] EXT4-fs (loop8): dirty_blocks=432 [ 477.492086][T20198] EXT4-fs (loop8): Block reservation details [ 477.492103][T20198] EXT4-fs (loop8): i_reserved_data_blocks=432 [ 477.660794][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.682216][T20118] vcan0 speed is unknown, defaulting to 1000 [ 477.777649][T20152] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.777685][T20152] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.777745][T20152] bridge_slave_0: entered allmulticast mode [ 477.778172][T20152] bridge_slave_0: entered promiscuous mode [ 477.814285][T20152] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.814317][T20152] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.814433][T20152] bridge_slave_1: entered allmulticast mode [ 477.814723][T20152] bridge_slave_1: entered promiscuous mode [ 477.909407][T20152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.926545][T20152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.020868][T20152] team0: Port device team_slave_0 added [ 478.032341][T20152] team0: Port device team_slave_1 added [ 478.097070][T20152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.097089][T20152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.097115][T20152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.143286][T20152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.143303][T20152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.143330][T20152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.254442][T20152] hsr_slave_0: entered promiscuous mode [ 478.254896][T20152] hsr_slave_1: entered promiscuous mode [ 478.255126][T20152] debugfs: 'hsr0' already exists in 'hsr' [ 478.255141][T20152] Cannot create hsr debugfs directory [ 478.659003][T20152] netdevsim netdevsim6 eth12 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 478.698616][T20152] netdevsim netdevsim6 eth11 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 478.744635][T20152] netdevsim netdevsim6 eth10 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 478.800395][T20152] netdevsim netdevsim6 eth9 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 478.944707][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'. [ 478.944727][T20246] netlink: 316 bytes leftover after parsing attributes in process `syz.3.5546'. [ 478.944744][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'. [ 478.944765][T20246] netlink: 316 bytes leftover after parsing attributes in process `syz.3.5546'. [ 479.053085][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 479.053106][ T29] audit: type=1400 audit(1788784983.166:3135): avc: denied { connect } for pid=20247 comm="syz.8.5547" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 479.083672][T20152] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 479.109263][T20152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.127840][T20152] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 479.146741][ T29] audit: type=1326 audit(1788784983.256:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="syz.5.5545" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f09ba2be159 code=0x7ffc0000 [ 479.177578][T20152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.185954][T20152] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 479.224139][T20152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.233002][T20152] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 479.265015][T20255] SELinux: DCCP has been removed, pid=20255 comm=syz.8.5549 [ 479.273358][T20152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 479.288073][T20255] netlink: 'syz.8.5549': attribute type 12 has an invalid length. [ 479.288097][T20255] netlink: 'syz.8.5549': attribute type 29 has an invalid length. [ 479.288108][T20255] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5549'. [ 479.288121][T20255] netlink: 'syz.8.5549': attribute type 1 has an invalid length. [ 479.288131][T20255] netlink: 'syz.8.5549': attribute type 2 has an invalid length. [ 479.343510][ T29] audit: type=1400 audit(1788784983.456:3137): avc: denied { write } for pid=20229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.447252][T20251] loop3: detected capacity change from 0 to 128 [ 479.527608][ T29] audit: type=1400 audit(1788784983.636:3138): avc: denied { write } for pid=20268 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.574262][T20251] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 479.590776][T20251] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.617306][T20272] loop5: detected capacity change from 0 to 1024 [ 479.624568][ T29] audit: type=1400 audit(1788784983.726:3139): avc: denied { mounton } for pid=20270 comm="syz.5.5552" path="/34/trace/set_event" dev="tracefs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 479.651452][T20272] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 479.667148][T20272] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.5552: lblock 2 mapped to illegal pblock 2 (length 1) [ 479.667182][T20272] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.681151][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 479.681166][ C0] EXT4-fs (loop5): initial error at time 1788784983: ext4_map_blocks:790: inode 3: block 2 [ 479.681189][ C0] EXT4-fs (loop5): last error at time 1788784983: ext4_map_blocks:790: inode 3: block 2 [ 479.717591][T20272] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 479.717616][T20272] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.5552: lblock 0 mapped to illegal pblock 48 (length 1) [ 479.717643][T20272] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.743602][T20272] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 479.743643][T20272] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.5552: Failed to acquire dquot type 0 [ 479.743664][T20272] loop5: lost filesystem error report for type 5 error -117 [ 479.773873][T20272] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 479.773925][T20272] loop5: lost filesystem error report for type 5 error -117 [ 479.794970][T20272] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.5552: mark_inode_dirty error [ 479.794996][T20272] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 479.815873][T20272] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 479.815926][T20272] EXT4-fs (loop5): 1 orphan inode deleted [ 479.816158][T20272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.861837][ T51] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 479.876450][ T51] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 479.876469][ T51] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 479.885953][T20272] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.886106][T20272] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.5552: Invalid inode table block 1 in block_group 0 [ 479.886125][T20272] loop5: lost filesystem error report for type 5 error -117 [ 479.886213][T20272] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 479.886259][T20272] loop5: lost filesystem error report for type 5 error -117 [ 479.886475][T20272] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz.5.5552: mark_inode_dirty error [ 479.886496][T20272] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 479.886648][T20272] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz.5.5552: Invalid inode table block 1 in block_group 0 [ 479.886668][T20272] loop5: lost filesystem error report for type 5 error -117 [ 480.039197][T20152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.091693][T17007] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.112052][T20152] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.143991][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.144033][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.167119][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.167153][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.254442][T20288] device-mapper: ioctl: Invalid ioctl structure: name ýÿÿÿ, dev 3000000000 [ 480.379889][ T29] audit: type=1400 audit(1788784984.486:3140): avc: denied { write } for pid=20300 comm="syz.8.5561" path="socket:[59047]" dev="sockfs" ino=59047 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 480.415163][T20152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.439556][ T29] audit: type=1326 audit(1788784984.546:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20314 comm="syz.1.5562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d28aae159 code=0x7ffc0000 [ 480.524013][T20320] netlink: 75 bytes leftover after parsing attributes in process `syz.5.5563'. [ 480.583528][T20152] veth0_vlan: entered promiscuous mode [ 480.598272][T20152] veth1_vlan: entered promiscuous mode [ 480.664107][T20152] veth0_macvtap: entered promiscuous mode [ 480.684398][T20152] veth1_macvtap: entered promiscuous mode [ 480.722933][T20343] sd 0:0:1:0: PR command failed: 1026 [ 480.722958][T20343] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 480.723035][T20343] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 480.767812][T20152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.790093][T20152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.821488][ T9357] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.821524][ T9357] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.821621][ T9357] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.821646][ T9357] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.001956][T20354] loop1: detected capacity change from 0 to 1024 [ 481.040410][T20354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.153844][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.165761][T20365] loop3: detected capacity change from 0 to 512 [ 481.204618][T20365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.316990][T17007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.390604][T20383] futex_wake_op: syz.1.5581 tries to shift op by 144; fix this program [ 481.428622][T20383] rdma_rxe: rxe_newlink: failed to add vcan0 [ 481.468018][T20389] FAULT_INJECTION: forcing a failure. [ 481.468018][T20389] name failslab, interval 1, probability 0, space 0, times 0 [ 481.468098][T20389] CPU: 0 UID: 0 PID: 20389 Comm: syz.5.5583 Not tainted syzkaller #0 PREEMPT(lazy) [ 481.468143][T20389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.468153][T20389] Call Trace: [ 481.468159][T20389] [ 481.468165][T20389] __dump_stack+0x1d/0x30 [ 481.468192][T20389] dump_stack_lvl+0x95/0xd0 [ 481.468208][T20389] dump_stack+0x15/0x1b [ 481.468270][T20389] should_fail_ex+0x262/0x280 [ 481.468287][T20389] ? sk_prot_alloc+0x3f/0x180 [ 481.468345][T20389] should_failslab+0x8c/0xb0 [ 481.468370][T20389] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 481.468390][T20389] ? sk_prot_alloc+0x3f/0x180 [ 481.468422][T20389] ? security_inode_alloc+0x37/0x100 [ 481.468441][T20389] sk_prot_alloc+0x3f/0x180 [ 481.468495][T20389] sk_alloc+0x34/0x3e0 [ 481.468515][T20389] smc_create+0xb7/0x480 [ 481.468530][T20389] __sock_create+0x2e5/0x580 [ 481.468588][T20389] __sys_socket+0xaf/0x180 [ 481.468667][T20389] __x64_sys_socket+0x3f/0x50 [ 481.468684][T20389] x64_sys_call+0x246e/0x2550 [ 481.468738][T20389] do_syscall_64+0x112/0x360 [ 481.468816][T20389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.468848][T20389] RIP: 0033:0x7f09ba2be159 [ 481.468861][T20389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.468875][T20389] RSP: 002b:00007f09b8d17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 481.468891][T20389] RAX: ffffffffffffffda RBX: 00007f09ba545fa0 RCX: 00007f09ba2be159 [ 481.468902][T20389] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 481.468911][T20389] RBP: 00007f09ba355024 R08: 0000000000000000 R09: 0000000000000000 [ 481.468942][T20389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.468952][T20389] R13: 00007f09ba546038 R14: 00007f09ba545fa0 R15: 00007ffd35a3fb38 [ 481.468966][T20389] [ 482.403858][T20444] FAULT_INJECTION: forcing a failure. [ 482.403858][T20444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.403905][T20444] CPU: 0 UID: 0 PID: 20444 Comm: syz.8.5599 Not tainted syzkaller #0 PREEMPT(lazy) [ 482.403924][T20444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.403981][T20444] Call Trace: [ 482.403986][T20444] [ 482.403993][T20444] __dump_stack+0x1d/0x30 [ 482.404012][T20444] dump_stack_lvl+0x95/0xd0 [ 482.404129][T20444] dump_stack+0x15/0x1b [ 482.404144][T20444] should_fail_ex+0x262/0x280 [ 482.404161][T20444] should_fail+0xb/0x20 [ 482.404175][T20444] should_fail_usercopy+0x1a/0x20 [ 482.404300][T20444] _copy_to_user+0x20/0xa0 [ 482.404326][T20444] bpf_verifier_vlog+0x3c5/0x5a0 [ 482.404404][T20444] btf_verifier_log+0xb2/0xf0 [ 482.404423][T20444] ? __btf_verifier_log+0x7f/0xb0 [ 482.404441][T20444] btf_func_proto_log+0x2ef/0x4a0 [ 482.404514][T20444] __btf_verifier_log_type+0x275/0x330 [ 482.404535][T20444] btf_func_proto_check_meta+0xa0/0x100 [ 482.404597][T20444] btf_parse_type_sec+0x291/0x1520 [ 482.404621][T20444] ? btf_parse_hdr+0x43a/0x440 [ 482.404642][T20444] ? btf_parse_str_sec+0x1ae/0x1b0 [ 482.404809][T20444] btf_new_fd+0x2ec/0x670 [ 482.404824][T20444] bpf_btf_load+0x116/0x130 [ 482.404843][T20444] __sys_bpf+0xbce/0xc30 [ 482.404909][T20444] ? do_futex+0x390/0x460 [ 482.404932][T20444] __x64_sys_bpf+0x69/0x80 [ 482.404947][T20444] x64_sys_call+0xf26/0x2550 [ 482.404989][T20444] do_syscall_64+0x112/0x360 [ 482.405011][T20444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.405073][T20444] RIP: 0033:0x7f9837cde159 [ 482.405086][T20444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.405101][T20444] RSP: 002b:00007f9836737028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.405117][T20444] RAX: ffffffffffffffda RBX: 00007f9837f65fa0 RCX: 00007f9837cde159 [ 482.405204][T20444] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 482.405215][T20444] RBP: 00007f9837d75024 R08: 0000000000000000 R09: 0000000000000000 [ 482.405239][T20444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.405254][T20444] R13: 00007f9837f66038 R14: 00007f9837f65fa0 R15: 00007ffcc502e1d8 [ 482.405268][T20444] [ 482.762334][T20452] loop8: detected capacity change from 0 to 512 [ 482.809070][T20452] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.809216][T20452] ext4 filesystem being mounted at /653/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.023956][ T9246] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.297472][T20480] loop1: detected capacity change from 0 to 512 [ 483.467081][T20489] zero sized request [ 483.471326][T20488] FAULT_INJECTION: forcing a failure. [ 483.471326][T20488] name failslab, interval 1, probability 0, space 0, times 0 [ 483.471348][T20488] CPU: 0 UID: 0 PID: 20488 Comm: syz.1.5611 Not tainted syzkaller #0 PREEMPT(lazy) [ 483.471375][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.471384][T20488] Call Trace: [ 483.471391][T20488] [ 483.471397][T20488] __dump_stack+0x1d/0x30 [ 483.471418][T20488] dump_stack_lvl+0x95/0xd0 [ 483.471495][T20488] dump_stack+0x15/0x1b [ 483.471510][T20488] should_fail_ex+0x262/0x280 [ 483.471527][T20488] ? do_getname+0x2e/0x1c0 [ 483.471541][T20488] should_failslab+0x8c/0xb0 [ 483.471612][T20488] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 483.471642][T20488] ? do_getname+0x2e/0x1c0 [ 483.471656][T20488] do_getname+0x2e/0x1c0 [ 483.471670][T20488] __se_sys_renameat2+0x38/0x1c0 [ 483.471732][T20488] __x64_sys_renameat2+0x67/0x80 [ 483.471747][T20488] x64_sys_call+0x1f7d/0x2550 [ 483.471765][T20488] do_syscall_64+0x112/0x360 [ 483.471788][T20488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.471842][T20488] RIP: 0033:0x7f4d28aae159 [ 483.471855][T20488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.471868][T20488] RSP: 002b:00007f4d27507028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 483.471884][T20488] RAX: ffffffffffffffda RBX: 00007f4d28d35fa0 RCX: 00007f4d28aae159 [ 483.471895][T20488] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 483.471964][T20488] RBP: 00007f4d28b45024 R08: 0000000000000004 R09: 0000000000000000 [ 483.471974][T20488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.471983][T20488] R13: 00007f4d28d36038 R14: 00007f4d28d35fa0 R15: 00007ffd95b5ea78 [ 483.471996][T20488] [ 483.994150][T20477] loop6: detected capacity change from 0 to 512 [ 484.068845][T20477] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 484.068905][T20477] loop6: lost filesystem error report for type 5 error -117 [ 484.078151][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 484.078166][ C0] EXT4-fs (loop6): initial error at time 1788784988: ext4_process_orphan:346 [ 484.078215][ C0] EXT4-fs (loop6): last error at time 1788784988: ext4_process_orphan:346 [ 484.118549][T20477] EXT4-fs (loop6): 2 truncates cleaned up [ 484.156110][T20477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.269429][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 484.269450][ T29] audit: type=1400 audit(1788784988.376:3183): avc: denied { write } for pid=20512 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.675262][ T29] audit: type=1400 audit(1788784988.786:3184): avc: denied { write } for pid=20518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.782565][ T29] audit: type=1400 audit(1788784988.896:3185): avc: denied { write } for pid=20534 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.837161][T20152] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.082760][ T29] audit: type=1326 audit(1788784989.196:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20541 comm="syz.5.5622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ba2be159 code=0x7fc00000 [ 485.110629][ T29] audit: type=1326 audit(1788784989.226:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20541 comm="syz.5.5622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f09ba2be159 code=0x7fc00000 [ 485.143236][ T29] audit: type=1326 audit(1788784989.256:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20541 comm="syz.5.5622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09ba2be159 code=0x7fc00000 [ 485.371784][ T29] audit: type=1400 audit(1788784989.486:3189): avc: denied { write } for pid=20542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.459791][ T29] audit: type=1400 audit(1788784989.566:3190): avc: denied { write } for pid=20580 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.654481][T20582] loop8: detected capacity change from 0 to 256 [ 485.882382][ T29] audit: type=1400 audit(1788784989.996:3191): avc: denied { write } for pid=20585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.014724][ T29] audit: type=1400 audit(1788784990.126:3192): avc: denied { write } for pid=20617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.055126][T20611] loop8: detected capacity change from 0 to 128 [ 486.117860][T20611] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 486.137710][T20611] ext4 filesystem being mounted at /664/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.224286][ T9246] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.304276][ T9] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0009/input/input7 [ 486.325917][ T9] asus 0018:0B05:0101.0009: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 486.325949][ T9] asus 0018:0B05:0101.0009: Asus failed to start multitouch: -5 [ 486.363648][ T9] asus 0018:0B05:0101.0009: probe with driver asus failed with error -5 [ 486.469359][T20643] fido_id[20643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 486.495829][T20653] FAULT_INJECTION: forcing a failure. [ 486.495829][T20653] name failslab, interval 1, probability 0, space 0, times 0 [ 486.495900][T20653] CPU: 0 UID: 0 PID: 20653 Comm: syz.1.5654 Not tainted syzkaller #0 PREEMPT(lazy) [ 486.495976][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.495986][T20653] Call Trace: [ 486.495991][T20653] [ 486.495996][T20653] __dump_stack+0x1d/0x30 [ 486.496022][T20653] dump_stack_lvl+0x95/0xd0 [ 486.496038][T20653] dump_stack+0x15/0x1b [ 486.496106][T20653] should_fail_ex+0x262/0x280 [ 486.496123][T20653] ? __register_sysctl_table+0x52/0xbe0 [ 486.496138][T20653] should_failslab+0x8c/0xb0 [ 486.496258][T20653] __kmalloc_noprof+0xd0/0x4d0 [ 486.496325][T20653] ? __register_sysctl_table+0x52/0xbe0 [ 486.496341][T20653] __register_sysctl_table+0x52/0xbe0 [ 486.496357][T20653] register_pidns_sysctls+0xd9/0x130 [ 486.496375][T20653] copy_pid_ns+0x396/0x640 [ 486.496441][T20653] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 486.496538][T20653] ? create_new_namespaces+0x38/0x420 [ 486.496640][T20653] create_new_namespaces+0x168/0x420 [ 486.496662][T20653] unshare_nsproxy_namespaces+0x115/0x150 [ 486.496685][T20653] ksys_unshare+0x42b/0x710 [ 486.496709][T20653] __x64_sys_unshare+0x1f/0x30 [ 486.496727][T20653] x64_sys_call+0x1e33/0x2550 [ 486.496744][T20653] do_syscall_64+0x112/0x360 [ 486.496766][T20653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.496864][T20653] RIP: 0033:0x7f4d28aae159 [ 486.496877][T20653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.496891][T20653] RSP: 002b:00007f4d27507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 486.496907][T20653] RAX: ffffffffffffffda RBX: 00007f4d28d35fa0 RCX: 00007f4d28aae159 [ 486.496963][T20653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 486.496973][T20653] RBP: 00007f4d28b45024 R08: 0000000000000000 R09: 0000000000000000 [ 486.497011][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.497020][T20653] R13: 00007f4d28d36038 R14: 00007f4d28d35fa0 R15: 00007ffd95b5ea78 [ 486.497033][T20653] [ 487.017115][T20679] netlink: 'syz.1.5662': attribute type 1 has an invalid length. [ 487.046386][T20674] loop6: detected capacity change from 0 to 128 [ 487.067143][T20679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.110119][T20674] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 487.125378][T20683] bond2: (slave gretap1): making interface the new active one [ 487.142728][T20683] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 487.155948][T20674] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 487.256379][T20152] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.617071][T20725] tls_set_device_offload: netdev not found [ 487.910386][T20740] loop1: detected capacity change from 0 to 128 [ 487.975073][T20740] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 487.991049][T20740] ext4 filesystem being mounted at /1232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 488.059975][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 488.226559][T20767] netlink: 'syz.6.5685': attribute type 3 has an invalid length. [ 488.226579][T20767] netlink: 196 bytes leftover after parsing attributes in process `syz.6.5685'. [ 488.287266][T20770] vcan0 speed is unknown, defaulting to 1000 [ 488.459457][T20784] tls_set_device_offload: netdev not found [ 488.500863][T20786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.501006][T20786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.778605][T20813] netlink: 'syz.6.5695': attribute type 4 has an invalid length. [ 488.822738][T20813] netlink: 'syz.6.5695': attribute type 4 has an invalid length. [ 488.848118][T20819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5697'. [ 488.938835][T20825] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 489.155862][T20861] syzkaller1: entered promiscuous mode [ 489.155894][T20861] syzkaller1: entered allmulticast mode [ 489.207194][T20866] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5708'. [ 489.296670][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 489.296749][ T29] audit: type=1326 audit(1788784993.406:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20873 comm="syz.1.5713" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d28aae159 code=0x0 [ 490.172024][T20896] netlink: 'syz.3.5721': attribute type 1 has an invalid length. [ 490.189506][T20899] loop1: detected capacity change from 0 to 512 [ 490.200561][T20899] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 49, start 00000603) [ 490.200592][T20899] FAT-fs (loop1): Filesystem has been set read-only [ 490.200696][T20899] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000603) [ 490.228023][T20896] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.324341][T20902] loop1: detected capacity change from 0 to 1024 [ 490.358277][T20902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.373020][ T29] audit: type=1400 audit(1788784994.486:3218): avc: denied { write } for pid=20901 comm="syz.1.5723" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.447943][T20909] ref_ctr_offset mismatch. inode: 0x448 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080 [ 490.489541][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.550184][T20893] loop6: detected capacity change from 0 to 256 [ 490.584867][T20913] syzkaller1: entered promiscuous mode [ 490.584905][T20913] syzkaller1: entered allmulticast mode [ 490.667894][T20917] FAULT_INJECTION: forcing a failure. [ 490.667894][T20917] name failslab, interval 1, probability 0, space 0, times 0 [ 490.667942][T20917] CPU: 1 UID: 0 PID: 20917 Comm: syz.3.5729 Not tainted syzkaller #0 PREEMPT(lazy) [ 490.667977][T20917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.667994][T20917] Call Trace: [ 490.668004][T20917] [ 490.668014][T20917] __dump_stack+0x1d/0x30 [ 490.668045][T20917] dump_stack_lvl+0x95/0xd0 [ 490.668068][T20917] dump_stack+0x15/0x1b [ 490.668089][T20917] should_fail_ex+0x262/0x280 [ 490.668118][T20917] ? mas_alloc_nodes+0x1a2/0x210 [ 490.668154][T20917] should_failslab+0x8c/0xb0 [ 490.668190][T20917] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 490.668220][T20917] ? mas_alloc_nodes+0x1a2/0x210 [ 490.668253][T20917] mas_alloc_nodes+0x1a2/0x210 [ 490.668282][T20917] mas_preallocate+0x2ca/0x500 [ 490.668323][T20917] commit_merge+0x39d/0x840 [ 490.668353][T20917] vma_modify+0x9eb/0xd50 [ 490.668378][T20917] vma_modify_flags+0x1be/0x250 [ 490.668410][T20917] mlock_fixup+0x166/0x460 [ 490.668447][T20917] apply_vma_lock_flags+0x1c7/0x290 [ 490.668487][T20917] do_mlock+0x3a0/0x510 [ 490.668522][T20917] ? __se_sys_futex+0x2f6/0x370 [ 490.668555][T20917] ? xfd_validate_state+0x45/0xf0 [ 490.668585][T20917] ? restore_fpregs_from_fpstate+0x61/0x110 [ 490.668609][T20917] __x64_sys_mlock+0x4d/0x70 [ 490.668637][T20917] x64_sys_call+0x2232/0x2550 [ 490.668670][T20917] do_syscall_64+0x112/0x360 [ 490.668708][T20917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.668736][T20917] RIP: 0033:0x7ff3e4ace159 [ 490.668755][T20917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.668774][T20917] RSP: 002b:00007ff3e3527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 490.668798][T20917] RAX: ffffffffffffffda RBX: 00007ff3e4d55fa0 RCX: 00007ff3e4ace159 [ 490.668815][T20917] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 490.668830][T20917] RBP: 00007ff3e4b65024 R08: 0000000000000000 R09: 0000000000000000 [ 490.668843][T20917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.668859][T20917] R13: 00007ff3e4d56038 R14: 00007ff3e4d55fa0 R15: 00007ffc273dc258 [ 490.668882][T20917] [ 490.788505][T20921] netlink: 'syz.3.5731': attribute type 1 has an invalid length. [ 490.825404][T20921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 490.918106][T20921] bond2: (slave gretap1): making interface the new active one [ 490.925741][T20921] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 491.046081][T20934] loop1: detected capacity change from 0 to 512 [ 491.046418][T20934] EXT4-fs: Ignoring removed oldalloc option [ 491.053794][T20934] EXT4-fs (loop1): 1 truncate cleaned up [ 491.054196][T20934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.088461][T20934] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.5736: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 491.109661][T20934] EXT4-fs (loop1): Remounting filesystem read-only [ 491.116368][ T29] audit: type=1400 audit(1788784995.196:3219): avc: denied { write } for pid=20933 comm="syz.1.5736" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.164189][ T29] audit: type=1400 audit(1788784995.276:3220): avc: denied { listen } for pid=20944 comm="syz.8.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 491.168168][T20942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.303656][T20961] device-mapper: ioctl: only supply one of name or uuid, cmd(6) [ 491.357743][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5745'. [ 491.357778][T20968] netlink: 'syz.3.5745': attribute type 30 has an invalid length. [ 491.367276][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5745'. [ 491.367314][T20968] netlink: 'syz.3.5745': attribute type 30 has an invalid length. [ 491.382287][ T9421] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.384285][ T9422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.384333][ T9422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.384423][ T9422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.390414][ T29] audit: type=1400 audit(1788784995.506:3221): avc: denied { write } for pid=20954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.483610][ T29] audit: type=1400 audit(1788784995.586:3222): avc: denied { write } for pid=20976 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.620594][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.640573][ T29] audit: type=1400 audit(1788784995.746:3223): avc: denied { write } for pid=20981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.670021][ T29] audit: type=1400 audit(1788784995.786:3224): avc: denied { accept } for pid=20992 comm="syz.8.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 491.709856][ T29] audit: type=1400 audit(1788784995.816:3225): avc: denied { write } for pid=20998 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.756271][T21003] loop1: detected capacity change from 0 to 256 [ 491.763826][ T29] audit: type=1400 audit(1788784995.886:3226): avc: denied { associate } for pid=21006 comm="syz.8.5750" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 491.818963][T21008] loop8: detected capacity change from 0 to 512 [ 491.831143][T21008] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 491.964756][T21017] loop1: detected capacity change from 0 to 512 [ 491.995614][T21017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.995738][T21017] ext4 filesystem being mounted at /1246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.035494][T21023] syzkaller1: entered promiscuous mode [ 492.035526][T21023] syzkaller1: entered allmulticast mode [ 492.052143][T21017] support for the xor transformation has been removed. [ 492.070491][T21005] ================================================================== [ 492.070525][T21005] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 492.070555][T21005] [ 492.070565][T21005] write to 0xffff8881075df9a0 of 8 bytes by task 21009 on cpu 1: [ 492.070588][T21005] shmem_file_splice_read+0x401/0x590 [ 492.070610][T21005] splice_direct_to_actor+0x261/0x680 [ 492.070630][T21005] do_splice_direct+0x119/0x1a0 [ 492.070654][T21005] do_sendfile+0x37d/0x640 [ 492.070678][T21005] __x64_sys_sendfile64+0x105/0x150 [ 492.070719][T21005] x64_sys_call+0x1015/0x2550 [ 492.070751][T21005] do_syscall_64+0x112/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 492.070779][T21005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.070801][T21005] [ 492.070809][T21005] write to 0xffff8881075df9a0 of 8 bytes by task 21005 on cpu 0: [ 492.070831][T21005] shmem_file_splice_read+0x401/0x590 [ 492.070855][T21005] splice_direct_to_actor+0x261/0x680 [ 492.070879][T21005] do_splice_direct+0x119/0x1a0 [ 492.070902][T21005] do_sendfile+0x37d/0x640 [ 492.070921][T21005] __x64_sys_sendfile64+0x105/0x150 [ 492.070955][T21005] x64_sys_call+0x1015/0x2550 [ 492.070989][T21005] do_syscall_64+0x112/0x360 [ 492.071023][T21005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.071051][T21005] [ 492.071057][T21005] value changed: 0x000000000000387a -> 0x000000000000387d [ 492.071072][T21005] [ 492.071076][T21005] Reported by Kernel Concurrency Sanitizer on: [ 492.071088][T21005] CPU: 0 UID: 0 PID: 21005 Comm: syz.6.5751 Not tainted syzkaller #0 PREEMPT(lazy) [ 492.071116][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.071133][T21005] ================================================================== [ 492.076948][ T3299] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 492.077322][ T3299] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 492.421892][T12640] syz_tun (unregistering): left allmulticast mode [ 492.422017][T12640] bridge0: port 3(syz_tun) entered disabled state [ 492.440826][ T9422] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.505712][ T9422] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.595967][ T4617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.612240][ T9422] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.671971][ T9422] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.757956][ T51] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 20000 - 0 [ 492.764512][ T9421] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 20000 - 0 [ 492.776298][ T9422] bridge_slave_1: left allmulticast mode [ 492.776480][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.789720][ T9422] bridge_slave_0: left allmulticast mode [ 492.789867][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.980855][ T9422] bond2 (unregistering): (slave gretap1): Releasing active interface [ 493.010455][ T9422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.021495][ T9422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.030437][ T9422] bond0 (unregistering): Released all slaves [ 493.035739][ T9422] bond1 (unregistering): Released all slaves [ 493.038283][ T9422] bond2 (unregistering): Released all slaves [ 493.073365][ T9421] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.074543][ T9421] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.114510][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.123242][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.165041][ T9422] team0 (unregistering): Port device team_slave_1 removed [ 493.174109][ T9422] team0 (unregistering): Port device team_slave_0 removed [ 493.200711][ T9421] smc: removing ib device syz0 [ 493.210023][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 493.357380][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 493.414234][ T9422] IPVS: stop unused estimator thread 0... [ 493.468380][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 493.479082][ T9422] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.494626][ T9422] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.554376][ T9422] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.610156][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 493.625212][ T9422] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.690560][ T9357] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.709374][ T9422] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.721023][ T9357] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.721109][ T9357] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.738734][ T9357] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.754301][ T9422] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.783869][ T9422] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.826376][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 493.836343][ T9422] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.906216][ T9357] netdevsim netdevsim6 eth26: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.921731][ T9422] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.951428][ T9334] netdevsim netdevsim6 eth27: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.951799][ T9334] netdevsim netdevsim6 eth25: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.951893][ T9334] netdevsim netdevsim6 eth28: set [1, 0] type 2 family 0 port 20000 - 0 [ 493.982251][ T9422] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.032356][ T9422] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.061294][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 494.069242][ T9422] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.097182][ T9357] netdevsim netdevsim8 eth29: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.107677][ T9422] bridge_slave_1: left allmulticast mode [ 494.107703][ T9422] bridge_slave_1: left promiscuous mode [ 494.107827][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.120370][ T9422] bridge_slave_0: left allmulticast mode [ 494.120402][ T9422] bridge_slave_0: left promiscuous mode [ 494.120511][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.147115][ T9422] bridge_slave_1: left allmulticast mode [ 494.147141][ T9422] bridge_slave_1: left promiscuous mode [ 494.147305][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.154528][ T9422] bridge_slave_0: left allmulticast mode [ 494.154551][ T9422] bridge_slave_0: left promiscuous mode [ 494.154636][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.177496][ T9422] bridge_slave_1: left allmulticast mode [ 494.177684][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.185183][ T9422] bridge_slave_0: left allmulticast mode [ 494.185308][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.273394][ T9422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.283191][ T9422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.292608][ T9422] bond0 (unregistering): Released all slaves [ 494.312591][ T9422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.322703][ T9422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.332227][ T9422] bond0 (unregistering): Released all slaves [ 494.334147][ T9422] bond1 (unregistering): Released all slaves [ 494.359184][ T9422] bond1 (unregistering): (slave geneve2): Releasing active interface [ 494.375833][ T9422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.385281][ T9422] bond0 (unregistering): Released all slaves [ 494.387190][ T9422] bond1 (unregistering): Released all slaves [ 494.397861][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 494.402480][ T51] netdevsim netdevsim8 eth31: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.402530][ T51] netdevsim netdevsim8 eth30: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.402580][ T51] netdevsim netdevsim8 eth32: set [1, 0] type 2 family 0 port 20000 - 0 [ 494.444202][ T9422] tipc: Disabling bearer [ 494.444237][ T9422] tipc: Left network mode [ 494.457480][ T9422] IPVS: stopping backup sync thread 19254 ... [ 494.465936][ T9422] hsr_slave_0: left promiscuous mode [ 494.471983][ T9422] hsr_slave_1: left promiscuous mode [ 494.472487][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.472511][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.493575][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.493601][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.509385][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 494.509413][ T29] audit: type=1400 audit(1788784998.616:3247): avc: denied { write } for pid=21144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.539067][ T29] audit: type=1400 audit(1788784998.636:3248): avc: denied { write } for pid=21155 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.563273][ T9422] hsr_slave_0: left promiscuous mode [ 494.568662][ T9422] hsr_slave_1: left promiscuous mode [ 494.569258][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.569274][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.574323][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.574341][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.603919][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.616093][ T9422] veth1_macvtap: left promiscuous mode [ 494.616126][ T9422] veth0_macvtap: left promiscuous mode [ 494.616289][ T9422] veth1_vlan: left promiscuous mode [ 494.616404][ T9422] veth0_vlan: left promiscuous mode [ 494.632883][ T9422] veth1_macvtap: left promiscuous mode [ 494.632913][ T9422] veth0_macvtap: left promiscuous mode [ 494.633024][ T9422] veth1_vlan: left promiscuous mode [ 494.633126][ T9422] veth0_vlan: left promiscuous mode [ 494.730890][ T9422] team0 (unregistering): Port device team_slave_1 removed [ 494.738244][ T9422] team0 (unregistering): Port device team_slave_0 removed [ 494.782974][ T9422] team0 (unregistering): Port device team_slave_1 removed [ 494.790581][ T9422] team0 (unregistering): Port device team_slave_0 removed [ 494.828818][ T9422] team0 (unregistering): Port device team_slave_1 removed [ 494.836160][ T9422] team0 (unregistering): Port device team_slave_0 removed [ 494.865148][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 494.955797][ T29] audit: type=1400 audit(1788784999.066:3249): avc: denied { write } for pid=21160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.979069][ T29] audit: type=1400 audit(1788784999.086:3250): avc: denied { write } for pid=21171 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.991893][ T3023] 8021q: adding VLAN 0 to HW filter on device eth25 [ 495.067613][ T29] audit: type=1400 audit(1788784999.176:3251): avc: denied { write } for pid=21174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.090751][ T29] audit: type=1400 audit(1788784999.196:3252): avc: denied { write } for pid=21185 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.102102][ T3023] 8021q: adding VLAN 0 to HW filter on device eth26 [ 495.177402][ T29] audit: type=1400 audit(1788784999.286:3253): avc: denied { write } for pid=21191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.200677][ T29] audit: type=1400 audit(1788784999.306:3254): avc: denied { write } for pid=21202 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.212597][ T3023] 8021q: adding VLAN 0 to HW filter on device eth27 [ 495.301249][ T29] audit: type=1400 audit(1788784999.406:3255): avc: denied { write } for pid=21205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.341899][ T29] audit: type=1400 audit(1788784999.456:3256): avc: denied { write } for pid=21216 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.375767][ T3023] 8021q: adding VLAN 0 to HW filter on device eth28 [ 495.477117][ T3023] 8021q: adding VLAN 0 to HW filter on device eth29 [ 495.500382][ T9422] IPVS: stop unused estimator thread 0... [ 495.584002][ T3023] 8021q: adding VLAN 0 to HW filter on device eth31 [ 495.691603][ T3023] 8021q: adding VLAN 0 to HW filter on device eth32 [ 495.789910][ T3023] 8021q: adding VLAN 0 to HW filter on device eth30 [ 500.372198][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.372414][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 500.422482][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.422532][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 500.472033][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.472128][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 500.494051][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.494111][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 500.546612][ T9357] netdevsim netdevsim1 eth33: set [1, 0] type 2 family 0 port 20000 - 0 [ 500.555478][ T9357] netdevsim netdevsim1 eth35: set [1, 0] type 2 family 0 port 20000 - 0 [ 500.555586][ T9357] netdevsim netdevsim1 eth36: set [1, 0] type 2 family 0 port 20000 - 0 [ 500.573437][ T9422] netdevsim netdevsim1 eth34: set [1, 0] type 2 family 0 port 20000 - 0 [ 500.582616][ T51] bridge_slave_1: left promiscuous mode [ 500.582838][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.588924][ T51] bridge_slave_0: left allmulticast mode [ 500.588946][ T51] bridge_slave_0: left promiscuous mode [ 500.589058][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.624683][ T51] bond2 (unregistering): (slave gretap1): Releasing active interface [ 500.644921][ T51] bond0 (unregistering): left promiscuous mode [ 500.644952][ T51] bond_slave_0: left promiscuous mode [ 500.645040][ T51] bond_slave_1: left promiscuous mode [ 500.656922][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.671918][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.681137][ T51] bond0 (unregistering): Released all slaves [ 500.683142][ T51] bond1 (unregistering): Released all slaves [ 500.685925][ T51] bond2 (unregistering): Released all slaves [ 500.724327][ T51] tipc: Left network mode [ 500.729855][ T51] batadv0: left promiscuous mode [ 500.735174][ T51] hsr_slave_0: left promiscuous mode [ 500.741539][ T51] hsr_slave_1: left promiscuous mode [ 500.742177][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.756544][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.767059][ T51] team0 (unregistering): Port device batadv1 removed [ 500.789473][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 500.789499][ T29] audit: type=1400 audit(1788785004.896:3273): avc: denied { write } for pid=21361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.817950][ T29] audit: type=1400 audit(1788785004.926:3274): avc: denied { write } for pid=21372 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.820534][ T51] team0 (unregistering): Port device team_slave_1 removed [ 500.842438][ T51] team0 (unregistering): Port device team_slave_0 removed [ 500.868063][ T3023] 8021q: adding VLAN 0 to HW filter on device eth34 [ 500.963633][ T29] audit: type=1400 audit(1788785005.076:3275): avc: denied { write } for pid=21377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.987274][ T29] audit: type=1400 audit(1788785005.096:3276): avc: denied { write } for pid=21388 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.998053][ T3023] 8021q: adding VLAN 0 to HW filter on device eth35 [ 501.073028][ T29] audit: type=1400 audit(1788785005.186:3277): avc: denied { write } for pid=21391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.096488][ T29] audit: type=1400 audit(1788785005.186:3278): avc: denied { write } for pid=21402 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.109176][ T3023] 8021q: adding VLAN 0 to HW filter on device eth33 [ 501.128920][ T51] IPVS: stop unused estimator thread 0... [ 501.189399][ T29] audit: type=1400 audit(1788785005.296:3279): avc: denied { write } for pid=21405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.213165][ T29] audit: type=1400 audit(1788785005.296:3280): avc: denied { write } for pid=21416 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.223468][ T3023] 8021q: adding VLAN 0 to HW filter on device eth36