last executing test programs: 4m7.207589563s ago: executing program 3 (id=1612): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) 4m7.061829508s ago: executing program 3 (id=1616): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, r0, 0x1, 0x70bd28, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) 4m6.964501881s ago: executing program 3 (id=1621): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x103002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)='X\x00', 0x2}], 0x1) read(r0, &(0x7f00000000c0)=""/85, 0x55) 4m6.781812787s ago: executing program 3 (id=1625): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4m6.424596188s ago: executing program 3 (id=1635): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) 4m6.190647376s ago: executing program 3 (id=1638): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0xfffffffffffffffd, &(0x7f00000003c0)=0x6a) 3m51.041003864s ago: executing program 32 (id=1638): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0xfffffffffffffffd, &(0x7f00000003c0)=0x6a) 2m33.314302682s ago: executing program 5 (id=4768): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @local}) 2m33.174826877s ago: executing program 5 (id=4770): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 2m33.041412631s ago: executing program 5 (id=4772): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xe3800000000000, 0x58e}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) 2m32.966529913s ago: executing program 5 (id=4774): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@nouid32}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$eJzs3d9rXFkdAPDvvcnU/khNij7UgrXYSlK0M0lj2+BDVRB9Kqj1vcZkEkImmZCZtE0omuIfIIio4JNPvgj+AYL0TxCh4L4vu8suy267+7Cwu51l7kzaNJ1JUjqZ6WY+Hzi5555773zPmSEn99x7cieAvnUuIs5HxJNarXYxIoab5WkzxWYj1fd7/OjeTD0lUavd/CCJSBpl9d3Gtr3mieZhRyPilz+L+E3yYtzK+sbidKlUXG2uF6pLK4XK+salhaXp+eJ8cXlycuLq1LWpK1PjHWnnUERc/8k7f/7DP356/T/fu/PmrffGfps0yyOetaPTGk3PZe/FlsGIWD2IYD0ymLUQAIAvg7S5/HZEXIzhGMjO5gAAAIDDpPbDofgsiagBAAAAh1aazYFN0nxzLsBQpGk+35jD+/U4npbKlep358pry7ONubIjkUvnFkrF8eZc4ZHIJfX1iSz/bP3yjvXJiDgVEX8aPpat52fKpdleX/wAAACAPnFix/j/4+HG+H+bT3tWOQAAAKBzRnbbeKR79QAAAAAOzq7jfwAAAOBQMP4HAACAQ+3nN27UU23r+69nb6+vLZZvX5otVhbzS2sz+Zny6kp+vlyez57Zt7TX65XK5ZXvx/La3UK1WKkWKusbt5bKa8vVWwvPfQU2AAAA0EWnvvXgjSQiNn9wLEvhP/6hbwy+zM5vH1w9gO4b6HUFgJ55qb//wKGS63UFgJ5L9tjedvLOfztfFwAA4GCMfqP1/f+BPa8NbKZdqiJwQFz/g/7l/j/0L/f/oX/lYiAM5KG/7fUI0Fe//1+rvVSFAACAjhvKUpLmI7LrAEORpvl8xMlsTJBL5hZKxfGI+GpE/H8495X6+kR2ZLLnnGEAAAAAAAAAAAAAAAAAAAAAAAAAoKFWS6IGAAAAHGoR6btJ9jT/iNHhC0M7rw8cST4ZzpYRcedvN/9yd7paXZ2ol3/4tLz612b55V5cwQAAAAB22hqnb43jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCTHj+6N7OVuhn3/R9HxEir+INxNFsejVxEHP8oicFtxyURMdCB+Jv3I+J0q/hJvVox0qxFq/jHehz/RAfiQz97UO9/ftTq9y+Nc9my9e/f1ayHenXt+7/0af830CJ+vezkPmOcefivQtv49yPODLbuf7biJ236n/P7jP/rX21stNtW+3vEaMu/P8lzsQrVpZVCZX3j0sLS9Hxxvrg8OTlxdera1JWp8cLcQqnY/Nkyxh+/+e8nu7X/eJv4I3u0/8I+2//5w7uPvtbI5p4enjyLP3a+9ed/uk38tPn5f6eZr28f3cpvNvLbnf3n/87u1v7ZNu3f6/Mf22f7L/7i92/tc1cAoAsq6xuL06VScbWvM6/0btRPi16LVrx2mfoJaan+vr4m9Xkh87sDeOX6mXmv29WJTE+7JQAA4AC8OAYGAAAAAAAAAAAAAAAAAAAAuq0bjxPL7Yi5mf3sxNPzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA654sAAAD//wxV0KE=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 2m32.486834308s ago: executing program 5 (id=4789): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x6404481c) 2m30.981978696s ago: executing program 5 (id=4838): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x58, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}, {0x18}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) 2m30.931632557s ago: executing program 33 (id=4838): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x58, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}, {0x18}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x58}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) 1m13.129866777s ago: executing program 6 (id=7595): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_freezer_state(r0, 0x0, 0x0) 1m13.107243128s ago: executing program 6 (id=7596): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdfffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m12.198249477s ago: executing program 6 (id=7608): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee01) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m12.11703361s ago: executing program 6 (id=7614): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x90) 1m12.062940761s ago: executing program 6 (id=7616): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x803, 0x1) 1m11.967963404s ago: executing program 6 (id=7620): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802007000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400010004000000000000002de7be80eab3b26014"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 56.804824654s ago: executing program 34 (id=7620): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802007000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400010004000000000000002de7be80eab3b26014"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 3.967666764s ago: executing program 0 (id=9888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x48, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x48}}, 0x0) 3.860899628s ago: executing program 0 (id=9891): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x80000000000006}, 0x0, 0x5bd20da1, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50) 3.607801486s ago: executing program 0 (id=9902): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 3.583115907s ago: executing program 0 (id=9903): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 3.48069465s ago: executing program 0 (id=9905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) 3.091616542s ago: executing program 0 (id=9913): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unshare(0x22020600) fchdir(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 3.065970263s ago: executing program 35 (id=9913): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) unshare(0x22020600) fchdir(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.456589984s ago: executing program 4 (id=9950): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) 1.448768444s ago: executing program 4 (id=9959): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000700)=[{r0, 0x8}], 0x1, &(0x7f0000000040), 0x0, 0x0) 1.347953097s ago: executing program 4 (id=9952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000200000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) 1.319231308s ago: executing program 8 (id=9914): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000888) preadv2(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) 1.158211613s ago: executing program 8 (id=9957): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1ae, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2bef7c0b4452e43e69aa108690000093f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704d70ed5c912892bf262449c11e04358fe042dd0a0b442c1b77214b2d03d3af9b1221037c7c73ef3198a305c307d04359d36d82eb73831e60655d8d9cf32944ba083d99b79ebe813c1d6a89a059dd96895d3d3b4e2670f11302c5fffd356d01235199011ebcdd2d7acdb8f6f2ad2da687847680c3d1d8b78dc3cb1bd4c31f235bb382b04f8fd18697d03baa36c0a05a3f7ac22760485efa4044351a5ad0a4b720b923025a5d0d566a6e5a65e24f9211ed34007ccf27d7efbf59d0182e5298cede8ab4dce1b29cc194557b4c426000073fbe6d35728c6ff025e4dd5fa4c575e0ed372ece9e1d48e893e0ded8159eb46efd9ce0600000046dd984363399fbd610979b0bc7e7f73348f6837c6a53b05", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x40) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.047985857s ago: executing program 8 (id=9962): unshare(0x6020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ftruncate(r1, 0x1000000000081) 997.877758ms ago: executing program 8 (id=9964): r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000009e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x4880}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 970.415849ms ago: executing program 2 (id=9967): r0 = syz_open_dev$loop(&(0x7f0000000ec0), 0x207, 0xa841) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x800e, 0x0, 0x0, 0x0, 0xd, "fee8a2a478fc0d9fd20000000000030000000000000005000000000000d600000000000000000000000001000100000000f100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd49900", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0xfffffffffffffffe, 0x8]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x592) 967.467209ms ago: executing program 7 (id=9968): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'geneve1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 911.662651ms ago: executing program 7 (id=9970): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f00000004c0)=[{{&(0x7f0000000680)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0x8840) 909.037021ms ago: executing program 2 (id=9971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) 856.475893ms ago: executing program 1 (id=9972): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x4, 0x2004, 0x1}) fchown(r0, 0x0, 0x0) 792.564405ms ago: executing program 7 (id=9973): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x200040c0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001f80)={0x0, 0x1c, &(0x7f0000001f00)=[@in6={0xa, 0x4e22, 0x5, @empty, 0xb}]}, &(0x7f0000001fc0)=0x10) 792.200565ms ago: executing program 2 (id=9974): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 787.871595ms ago: executing program 1 (id=9975): r0 = syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x19d}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 750.708426ms ago: executing program 2 (id=9976): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, 0x0, 0x0, 0x0) 742.731957ms ago: executing program 7 (id=9977): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 405.089747ms ago: executing program 8 (id=9978): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004040, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 404.954017ms ago: executing program 1 (id=9979): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x4e21, 0x7f, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 403.836887ms ago: executing program 2 (id=9980): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) close(r1) 403.519017ms ago: executing program 7 (id=9981): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000080), 0xff, 0x551, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r0}, 0x38) 403.364667ms ago: executing program 4 (id=9982): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0xf171}}, 0x8, 0x7, 0x101, 0x0, 0x4f5}, &(0x7f00000004c0)=0x98) 367.905418ms ago: executing program 1 (id=9983): bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 361.479789ms ago: executing program 2 (id=9984): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x8}}, {@init_itable}, {@block_validity}, {@debug}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x479, &(0x7f0000000dc0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x200e1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 252.742552ms ago: executing program 4 (id=9985): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x0, 0xe004}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x1f, 0x0, 0x0, 0x368}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) 127.338596ms ago: executing program 1 (id=9986): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000004}, 0x40004) 126.729006ms ago: executing program 4 (id=9987): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 16.57389ms ago: executing program 7 (id=9988): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 0s ago: executing program 1 (id=9989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'ip6erspan0\x00'}) kernel console output (not intermixed with test programs): 6][T22880] set_capacity_and_notify: 7 callbacks suppressed [ 287.268352][T22880] loop7: detected capacity change from 0 to 128 [ 287.785504][T22934] loop4: detected capacity change from 0 to 512 [ 287.793505][T22934] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.804017][T22934] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 287.821098][T22934] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 287.845909][T22934] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 287.876094][T22934] System zones: 0-2, 18-18, 34-35 [ 287.879063][T22948] loop0: detected capacity change from 0 to 256 [ 287.889195][T22946] loop2: detected capacity change from 0 to 1024 [ 287.895483][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.898259][T22934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.907131][T22948] FAT-fs (loop0): Filesystem has been set read-only [ 287.925600][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.930467][T22946] EXT4-fs: Ignoring removed bh option [ 287.936004][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.951646][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.961976][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.973451][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.983788][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.994235][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 287.995003][T22946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.004574][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 288.027259][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.033977][T22948] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 288.069237][T22953] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8498'. [ 288.162283][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.364517][T22983] loop7: detected capacity change from 0 to 512 [ 288.406703][T22983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.527891][T23001] loop2: detected capacity change from 0 to 128 [ 288.566958][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.702509][T23008] loop2: detected capacity change from 0 to 1024 [ 288.714014][T23008] EXT4-fs: Ignoring removed bh option [ 288.767949][T23008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.814969][T23013] syz.0.8519 (23013) used obsolete PPPIOCDETACH ioctl [ 288.840211][T23015] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8521'. [ 288.861430][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.944896][T23027] loop2: detected capacity change from 0 to 512 [ 288.962984][T23027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 288.977008][T23027] System zones: 1-12 [ 288.992849][T23027] EXT4-fs (loop2): 1 truncate cleaned up [ 289.000411][T23027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.025533][T23027] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full [ 289.047163][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.049023][T23038] netlink: 256 bytes leftover after parsing attributes in process `syz.7.8531'. [ 289.066845][T23038] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8531'. [ 289.324224][T23066] loop1: detected capacity change from 0 to 512 [ 289.367528][T23066] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.8545: Directory hole found for htree index block 0 [ 289.386156][T23066] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 289.386399][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 289.402114][ C1] EXT4-fs (loop1): initial error at time 1781953645: dx_probe:791: inode 2 [ 289.410771][ C1] EXT4-fs (loop1): last error at time 1781953645: dx_probe:791: inode 2 [ 289.451640][T23075] loop4: detected capacity change from 0 to 256 [ 289.458457][T23066] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 289.489049][T23066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.590040][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.891579][T23106] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.926582][T23106] ext4 filesystem being mounted at /1738/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.054552][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.190655][T23097] loop7: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 290.241148][T23131] netlink: 'syz.4.8576': attribute type 5 has an invalid length. [ 290.273628][T23097] loop7: p2 start 262144 is beyond EOD, truncated [ 290.477253][T23097] loop7: p5 start 262144 is beyond EOD, truncated [ 290.488846][T23141] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 290.507934][T23097] loop7: p6 start 262144 is beyond EOD, truncated [ 290.541483][T23097] loop7: p7 start 262144 is beyond EOD, truncated [ 290.549860][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 290.549878][ T28] audit: type=1400 audit(1781953646.862:2348): avc: denied { read } for pid=23146 comm="syz.0.8584" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 290.549944][ T28] audit: type=1400 audit(1781953646.862:2349): avc: denied { open } for pid=23146 comm="syz.0.8584" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 290.552848][ T28] audit: type=1400 audit(1781953646.862:2350): avc: denied { ioctl } for pid=23146 comm="syz.0.8584" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 290.752788][T23097] loop7: p8 start 262144 is beyond EOD, truncated [ 290.759511][T23097] loop7: p9 start 262144 is beyond EOD, truncated [ 290.766023][T23097] loop7: p10 start 262144 is beyond EOD, truncated [ 290.773550][T23097] loop7: p11 start 262144 is beyond EOD, truncated [ 290.780647][T23097] loop7: p12 start 262144 is beyond EOD, truncated [ 290.787468][T23097] loop7: p13 start 262144 is beyond EOD, truncated [ 290.794118][T23097] loop7: p14 start 262144 is beyond EOD, truncated [ 290.800751][T23097] loop7: p15 start 262144 is beyond EOD, truncated [ 290.808013][T23097] loop7: p16 start 262144 is beyond EOD, truncated [ 290.814612][T23097] loop7: p17 start 262144 is beyond EOD, truncated [ 290.821248][T23097] loop7: p18 start 262144 is beyond EOD, truncated [ 290.834060][T23097] loop7: p19 start 262144 is beyond EOD, truncated [ 290.863792][T23097] loop7: p20 start 262144 is beyond EOD, truncated [ 290.873789][T23168] C: renamed from veth1_to_team (while UP) [ 290.879700][T23097] loop7: p21 start 262144 is beyond EOD, truncated [ 290.898015][T23097] loop7: p22 start 262144 is beyond EOD, truncated [ 290.906012][T23168] netlink: 'syz.4.8594': attribute type 3 has an invalid length. [ 290.913905][T23097] loop7: p23 start 262144 is beyond EOD, truncated [ 290.922283][T23168] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8594'. [ 290.932962][T23097] loop7: p24 start 262144 is beyond EOD, truncated [ 290.941996][ T28] audit: type=1400 audit(1781953647.252:2351): avc: denied { write } for pid=23173 comm="syz.1.8597" path="socket:[67625]" dev="sockfs" ino=67625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.946734][T23097] loop7: p25 start 262144 is beyond EOD, truncated [ 291.014607][T23181] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 291.014607][T23181] program syz.4.8599 not setting count and/or reply_len properly [ 291.035828][T23097] loop7: p26 start 262144 is beyond EOD, truncated [ 291.049048][T23097] loop7: p27 start 262144 is beyond EOD, truncated [ 291.064755][T23097] loop7: p28 start 262144 is beyond EOD, truncated [ 291.080993][T23097] loop7: p29 start 262144 is beyond EOD, truncated [ 291.120545][T23097] loop7: p30 start 262144 is beyond EOD, truncated [ 291.137774][T23097] loop7: p31 start 262144 is beyond EOD, truncated [ 291.161549][T23097] loop7: p32 start 262144 is beyond EOD, truncated [ 291.171226][T23097] loop7: p33 start 262144 is beyond EOD, truncated [ 291.184438][T23097] loop7: p34 start 262144 is beyond EOD, truncated [ 291.210653][T23097] loop7: p35 start 262144 is beyond EOD, truncated [ 291.232635][T23097] loop7: p36 start 262144 is beyond EOD, truncated [ 291.260136][T23097] loop7: p37 start 262144 is beyond EOD, truncated [ 291.274946][T23097] loop7: p38 start 262144 is beyond EOD, truncated [ 291.299151][T23204] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 291.299151][T23204] program syz.4.8611 not setting count and/or reply_len properly [ 291.319342][T23097] loop7: p39 start 262144 is beyond EOD, truncated [ 291.326036][T23097] loop7: p40 start 262144 is beyond EOD, truncated [ 291.333476][T23097] loop7: p41 start 262144 is beyond EOD, truncated [ 291.363475][T23097] loop7: p42 start 262144 is beyond EOD, truncated [ 291.378044][T23097] loop7: p43 start 262144 is beyond EOD, truncated [ 291.400165][T23097] loop7: p44 start 262144 is beyond EOD, truncated [ 291.400664][T23217] set match dimension is over the limit! [ 291.414903][T23097] loop7: p45 start 262144 is beyond EOD, truncated [ 291.430987][T23097] loop7: p46 start 262144 is beyond EOD, truncated [ 291.437796][ T28] audit: type=1326 audit(1781953647.732:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23219 comm="syz.2.8619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffafa23ce59 code=0x0 [ 291.466149][T23097] loop7: p47 start 262144 is beyond EOD, truncated [ 291.473992][T23097] loop7: p48 start 262144 is beyond EOD, truncated [ 291.480856][T23097] loop7: p49 start 262144 is beyond EOD, truncated [ 291.515105][T23097] loop7: p50 start 262144 is beyond EOD, truncated [ 291.532594][T23097] loop7: p51 start 262144 is beyond EOD, truncated [ 291.554175][T23097] loop7: p52 start 262144 is beyond EOD, truncated [ 291.572389][T23097] loop7: p53 start 262144 is beyond EOD, truncated [ 291.586983][T23097] loop7: p54 start 262144 is beyond EOD, truncated [ 291.613627][T23097] loop7: p55 start 262144 is beyond EOD, truncated [ 291.620572][T23097] loop7: p56 start 262144 is beyond EOD, truncated [ 291.627713][T23097] loop7: p57 start 262144 is beyond EOD, truncated [ 291.637067][T23097] loop7: p58 start 262144 is beyond EOD, truncated [ 291.644717][T23097] loop7: p59 start 262144 is beyond EOD, truncated [ 291.651641][T23097] loop7: p60 start 262144 is beyond EOD, truncated [ 291.658461][T23097] loop7: p61 start 262144 is beyond EOD, truncated [ 291.672204][T23097] loop7: p62 start 262144 is beyond EOD, truncated [ 291.680358][T23097] loop7: p63 start 262144 is beyond EOD, truncated [ 291.690237][T23097] loop7: p64 start 262144 is beyond EOD, truncated [ 291.698646][T23097] loop7: p65 start 262144 is beyond EOD, truncated [ 291.707244][T23097] loop7: p66 start 262144 is beyond EOD, truncated [ 291.714862][T23097] loop7: p67 start 262144 is beyond EOD, truncated [ 291.725027][T23097] loop7: p68 start 262144 is beyond EOD, truncated [ 291.737255][T23097] loop7: p69 start 262144 is beyond EOD, truncated [ 291.760851][T23097] loop7: p70 start 262144 is beyond EOD, truncated [ 291.771066][T23097] loop7: p71 start 262144 is beyond EOD, truncated [ 291.779843][T23097] loop7: p72 start 262144 is beyond EOD, truncated [ 291.790289][T23097] loop7: p73 start 262144 is beyond EOD, truncated [ 291.808784][ T28] audit: type=1400 audit(1781953648.102:2353): avc: denied { nlmsg_write } for pid=23262 comm="syz.1.8639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 291.809275][T23097] loop7: p74 start 262144 is beyond EOD, truncated [ 291.847674][T23097] loop7: p75 start 262144 is beyond EOD, truncated [ 291.865360][T23268] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 291.883456][T23097] loop7: p76 start 262144 is beyond EOD, truncated [ 291.892170][T23097] loop7: p77 start 262144 is beyond EOD, truncated [ 291.898987][T23097] loop7: p78 start 262144 is beyond EOD, truncated [ 291.914828][T23097] loop7: p79 start 262144 is beyond EOD, truncated [ 291.923423][T23097] loop7: p80 start 262144 is beyond EOD, truncated [ 291.930637][T23097] loop7: p81 start 262144 is beyond EOD, truncated [ 291.948726][T23097] loop7: p82 start 262144 is beyond EOD, truncated [ 291.955476][T23097] loop7: p83 start 262144 is beyond EOD, truncated [ 291.979318][T23097] loop7: p84 start 262144 is beyond EOD, truncated [ 291.992266][T23097] loop7: p85 start 262144 is beyond EOD, truncated [ 291.999518][T23097] loop7: p86 start 262144 is beyond EOD, truncated [ 292.006160][T23097] loop7: p87 start 262144 is beyond EOD, truncated [ 292.020463][T23097] loop7: p88 start 262144 is beyond EOD, truncated [ 292.029375][T23097] loop7: p89 start 262144 is beyond EOD, truncated [ 292.035980][T23097] loop7: p90 start 262144 is beyond EOD, truncated [ 292.042820][T23097] loop7: p91 start 262144 is beyond EOD, truncated [ 292.049874][T23097] loop7: p92 start 262144 is beyond EOD, truncated [ 292.060479][T23097] loop7: p93 start 262144 is beyond EOD, truncated [ 292.067920][T23097] loop7: p94 start 262144 is beyond EOD, truncated [ 292.074598][T23097] loop7: p95 start 262144 is beyond EOD, truncated [ 292.081457][T23097] loop7: p96 start 262144 is beyond EOD, truncated [ 292.088328][T23097] loop7: p97 start 262144 is beyond EOD, truncated [ 292.095048][T23097] loop7: p98 start 262144 is beyond EOD, truncated [ 292.102224][T23097] loop7: p99 start 262144 is beyond EOD, truncated [ 292.109264][T23097] loop7: p100 start 262144 is beyond EOD, truncated [ 292.116107][T23097] loop7: p101 start 262144 is beyond EOD, truncated [ 292.128903][T23097] loop7: p102 start 262144 is beyond EOD, truncated [ 292.135921][T23097] loop7: p103 start 262144 is beyond EOD, truncated [ 292.142905][T23097] loop7: p104 start 262144 is beyond EOD, truncated [ 292.150009][T23097] loop7: p105 start 262144 is beyond EOD, truncated [ 292.157778][T23288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.170607][T23097] loop7: p106 start 262144 is beyond EOD, truncated [ 292.177413][T23097] loop7: p107 start 262144 is beyond EOD, truncated [ 292.184519][T23097] loop7: p108 start 262144 is beyond EOD, truncated [ 292.191813][T23097] loop7: p109 start 262144 is beyond EOD, truncated [ 292.198680][T23097] loop7: p110 start 262144 is beyond EOD, truncated [ 292.205635][ T28] audit: type=1400 audit(1781953648.512:2354): avc: denied { write } for pid=23287 comm="syz.1.8651" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.228991][T23097] loop7: p111 start 262144 is beyond EOD, truncated [ 292.235822][T23097] loop7: p112 start 262144 is beyond EOD, truncated [ 292.243069][T23097] loop7: p113 start 262144 is beyond EOD, truncated [ 292.249916][T23097] loop7: p114 start 262144 is beyond EOD, truncated [ 292.258847][T23097] loop7: p115 start 262144 is beyond EOD, truncated [ 292.265492][T23097] loop7: p116 start 262144 is beyond EOD, truncated [ 292.272171][T23097] loop7: p117 start 262144 is beyond EOD, truncated [ 292.281528][T23097] loop7: p118 start 262144 is beyond EOD, truncated [ 292.288952][T23097] loop7: p119 start 262144 is beyond EOD, truncated [ 292.296093][T23097] loop7: p120 start 262144 is beyond EOD, truncated [ 292.302806][T23097] loop7: p121 start 262144 is beyond EOD, truncated [ 292.309548][T23097] loop7: p122 start 262144 is beyond EOD, truncated [ 292.316248][T23097] loop7: p123 start 262144 is beyond EOD, truncated [ 292.318769][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.323763][T23097] loop7: p124 start 262144 is beyond EOD, truncated [ 292.339325][T23097] loop7: p125 start 262144 is beyond EOD, truncated [ 292.351278][T23097] loop7: p126 start 262144 is beyond EOD, truncated [ 292.358362][T23097] loop7: p127 start 262144 is beyond EOD, truncated [ 292.382073][T23097] loop7: p128 start 262144 is beyond EOD, truncated [ 292.389027][T23097] loop7: p129 start 262144 is beyond EOD, truncated [ 292.395725][T23097] loop7: p130 start 262144 is beyond EOD, truncated [ 292.407584][T23097] loop7: p131 start 262144 is beyond EOD, truncated [ 292.417937][T23097] loop7: p132 start 262144 is beyond EOD, truncated [ 292.424594][T23097] loop7: p133 start 262144 is beyond EOD, truncated [ 292.436924][T23097] loop7: p134 start 262144 is beyond EOD, truncated [ 292.443638][T23097] loop7: p135 start 262144 is beyond EOD, truncated [ 292.462879][T23097] loop7: p136 start 262144 is beyond EOD, truncated [ 292.462918][T23097] loop7: p137 start 262144 is beyond EOD, truncated [ 292.462934][T23097] loop7: p138 start 262144 is beyond EOD, truncated [ 292.462951][T23097] loop7: p139 start 262144 is beyond EOD, truncated [ 292.462993][T23097] loop7: p140 start 262144 is beyond EOD, truncated [ 292.463009][T23097] loop7: p141 start 262144 is beyond EOD, [ 292.502625][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8659'. [ 292.510136][T23097] truncated [ 292.523291][T23097] loop7: p142 start 262144 is beyond EOD, truncated [ 292.536872][T23097] loop7: p143 start 262144 is beyond EOD, truncated [ 292.536900][T23097] loop7: p144 start 262144 is beyond EOD, truncated [ 292.536918][T23097] loop7: p145 start 262144 is beyond EOD, truncated [ 292.536939][T23097] loop7: p146 start 262144 is beyond EOD, truncated [ 292.536957][T23097] loop7: p147 start 262144 is beyond EOD, truncated [ 292.537001][T23097] loop7: p148 start 262144 is beyond EOD, truncated [ 292.537016][T23097] loop7: p149 start 262144 is beyond EOD, truncated [ 292.537041][T23097] loop7: p150 start 262144 is beyond EOD, truncated [ 292.537059][T23097] loop7: p151 start 262144 is beyond EOD, truncated [ 292.537149][T23097] loop7: p152 start 262144 is beyond EOD, truncated [ 292.537163][T23097] loop7: p153 start 262144 is beyond EOD, truncated [ 292.537178][T23097] loop7: p154 start 262144 is beyond EOD, truncated [ 292.537193][T23097] loop7: p155 start 262144 is beyond EOD, truncated [ 292.537281][T23097] loop7: p156 start 262144 is beyond EOD, truncated [ 292.672171][T23097] loop7: p157 start 262144 is beyond EOD, truncated [ 292.679331][T23097] loop7: p158 start 262144 is beyond EOD, truncated [ 292.707286][T23097] loop7: p159 start 262144 is beyond EOD, truncated [ 292.714720][T23097] loop7: p160 start 262144 is beyond EOD, truncated [ 292.737454][T23097] loop7: p161 start 262144 is beyond EOD, truncated [ 292.759885][T23097] loop7: p162 start 262144 is beyond EOD, truncated [ 292.773525][T23097] loop7: p163 start 262144 is beyond EOD, truncated [ 292.786235][T23097] loop7: p164 start 262144 is beyond EOD, truncated [ 292.793558][T23097] loop7: p165 start 262144 is beyond EOD, truncated [ 292.802087][T23097] loop7: p166 start 262144 is beyond EOD, truncated [ 292.817898][T23097] loop7: p167 start 262144 is beyond EOD, truncated [ 292.849755][T23097] loop7: p168 start 262144 is beyond EOD, truncated [ 292.863379][T23334] set_capacity_and_notify: 4 callbacks suppressed [ 292.863395][T23334] loop1: detected capacity change from 0 to 512 [ 292.888309][T23097] loop7: p169 start 262144 is beyond EOD, truncated [ 292.902458][T23097] loop7: p170 start 262144 is beyond EOD, truncated [ 292.911044][T23334] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 292.923876][T23097] loop7: p171 start 262144 is beyond EOD, truncated [ 292.930721][T23097] loop7: p172 start 262144 is beyond EOD, truncated [ 292.938131][T23097] loop7: p173 start 262144 is beyond EOD, truncated [ 292.945368][T23097] loop7: p174 start 262144 is beyond EOD, truncated [ 292.955284][T23334] EXT4-fs (loop1): 1 orphan inode deleted [ 292.961410][T23334] EXT4-fs (loop1): 1 truncate cleaned up [ 292.967791][T23334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.980572][T23097] loop7: p175 start 262144 is beyond EOD, truncated [ 292.982870][T23338] xt_hashlimit: size too large, truncated to 1048576 [ 292.987741][T23097] loop7: p176 start 262144 is beyond EOD, truncated [ 292.987763][T23097] loop7: p177 start 262144 is beyond EOD, truncated [ 292.987781][T23097] loop7: p178 start 262144 is beyond EOD, truncated [ 292.987801][T23097] loop7: p179 start 262144 is beyond EOD, truncated [ 292.987819][T23097] loop7: p180 start 262144 is beyond EOD, truncated [ 292.987835][T23097] loop7: p181 start 262144 is beyond EOD, truncated [ 292.987850][T23097] loop7: p182 start 262144 is beyond EOD, truncated [ 292.987869][T23097] loop7: p183 start 262144 is beyond EOD, [ 293.011736][T23334] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #12: block 7: comm syz.1.8671: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 293.019137][T23097] truncated [ 293.060365][T23334] EXT4-fs (loop1): Remounting filesystem read-only [ 293.065940][T23097] loop7: p184 start 262144 is beyond EOD, truncated [ 293.082407][T23097] loop7: p185 start 262144 is beyond EOD, truncated [ 293.089473][T23097] loop7: p186 start 262144 is beyond EOD, truncated [ 293.106521][T23097] loop7: p187 start 262144 is beyond EOD, truncated [ 293.113441][T23097] loop7: p188 start 262144 is beyond EOD, truncated [ 293.120400][T23097] loop7: p189 start 262144 is beyond EOD, truncated [ 293.138570][T23097] loop7: p190 start 262144 is beyond EOD, truncated [ 293.159109][T23097] loop7: p191 start 262144 is beyond EOD, truncated [ 293.165918][T23097] loop7: p192 start 262144 is beyond EOD, truncated [ 293.173518][T23097] loop7: p193 start 262144 is beyond EOD, truncated [ 293.182606][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.193633][T23097] loop7: p194 start 262144 is beyond EOD, truncated [ 293.213352][T23097] loop7: p195 start 262144 is beyond EOD, truncated [ 293.232918][T23097] loop7: p196 start 262144 is beyond EOD, truncated [ 293.245211][T23097] loop7: p197 start 262144 is beyond EOD, truncated [ 293.270519][T23097] loop7: p198 start 262144 is beyond EOD, truncated [ 293.288593][T23097] loop7: p199 start 262144 is beyond EOD, truncated [ 293.298822][T23097] loop7: p200 start 262144 is beyond EOD, truncated [ 293.326824][T23097] loop7: p201 start 262144 is beyond EOD, truncated [ 293.337812][T23097] loop7: p202 start 262144 is beyond EOD, truncated [ 293.353484][T23097] loop7: p203 start 262144 is beyond EOD, truncated [ 293.381138][T23097] loop7: p204 start 262144 is beyond EOD, truncated [ 293.389079][T23097] loop7: p205 start 262144 is beyond EOD, truncated [ 293.396122][T23097] loop7: p206 start 262144 is beyond EOD, truncated [ 293.410453][T23097] loop7: p207 start 262144 is beyond EOD, truncated [ 293.426327][T23097] loop7: p208 start 262144 is beyond EOD, truncated [ 293.442486][T23097] loop7: p209 start 262144 is beyond EOD, truncated [ 293.458260][T23097] loop7: p210 start 262144 is beyond EOD, truncated [ 293.469425][T23097] loop7: p211 start 262144 is beyond EOD, truncated [ 293.486177][T23097] loop7: p212 start 262144 is beyond EOD, truncated [ 293.507878][T23097] loop7: p213 start 262144 is beyond EOD, truncated [ 293.521784][T23097] loop7: p214 start 262144 is beyond EOD, truncated [ 293.539315][T23097] loop7: p215 start 262144 is beyond EOD, truncated [ 293.566544][T23097] loop7: p216 start 262144 is beyond EOD, truncated [ 293.573299][T23097] loop7: p217 start 262144 is beyond EOD, truncated [ 293.581488][T23097] loop7: p218 start 262144 is beyond EOD, truncated [ 293.597895][T23097] loop7: p219 start 262144 is beyond EOD, truncated [ 293.617246][T23097] loop7: p220 start 262144 is beyond EOD, truncated [ 293.624548][T23097] loop7: p221 start 262144 is beyond EOD, truncated [ 293.638854][T23097] loop7: p222 start 262144 is beyond EOD, truncated [ 293.656550][T23097] loop7: p223 start 262144 is beyond EOD, truncated [ 293.666659][T23097] loop7: p224 start 262144 is beyond EOD, truncated [ 293.686435][T23097] loop7: p225 start 262144 is beyond EOD, truncated [ 293.694798][T23097] loop7: p226 start 262144 is beyond EOD, truncated [ 293.731420][T23097] loop7: p227 start 262144 is beyond EOD, truncated [ 293.750345][T23097] loop7: p228 start 262144 is beyond EOD, truncated [ 293.761851][T23097] loop7: p229 start 262144 is beyond EOD, truncated [ 293.773579][T23097] loop7: p230 start 262144 is beyond EOD, truncated [ 293.790751][T23097] loop7: p231 start 262144 is beyond EOD, truncated [ 293.805108][T23097] loop7: p232 start 262144 is beyond EOD, truncated [ 293.825021][T23097] loop7: p233 start 262144 is beyond EOD, truncated [ 293.839380][T23097] loop7: p234 start 262144 is beyond EOD, truncated [ 293.852640][T23097] loop7: p235 start 262144 is beyond EOD, truncated [ 293.869982][T23097] loop7: p236 start 262144 is beyond EOD, truncated [ 293.881501][T23097] loop7: p237 start 262144 is beyond EOD, truncated [ 293.902844][T23097] loop7: p238 start 262144 is beyond EOD, truncated [ 293.916969][T23097] loop7: p239 start 262144 is beyond EOD, truncated [ 293.945430][T23097] loop7: p240 start 262144 is beyond EOD, truncated [ 293.962933][T23097] loop7: p241 start 262144 is beyond EOD, truncated [ 293.975757][T23097] loop7: p242 start 262144 is beyond EOD, truncated [ 293.995660][T23097] loop7: p243 start 262144 is beyond EOD, truncated [ 294.011409][T23097] loop7: p244 start 262144 is beyond EOD, truncated [ 294.018578][T23388] loop2: detected capacity change from 0 to 1024 [ 294.030034][T23097] loop7: p245 start 262144 is beyond EOD, truncated [ 294.040222][T23388] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 294.050082][T23097] loop7: p246 start 262144 is beyond EOD, truncated [ 294.053236][T23390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 294.071614][T23097] loop7: p247 start 262144 is beyond EOD, truncated [ 294.078393][T23388] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 294.092970][T23097] loop7: p248 start 262144 is beyond EOD, truncated [ 294.112130][T23097] loop7: p249 start 262144 is beyond EOD, truncated [ 294.119347][T23388] JBD2: no valid journal superblock found [ 294.129391][T23097] loop7: p250 start 262144 is beyond EOD, truncated [ 294.142878][T23388] EXT4-fs (loop2): Could not load journal inode [ 294.158029][T23097] loop7: p251 start 262144 is beyond EOD, truncated [ 294.171688][T23097] loop7: p252 start 262144 is beyond EOD, truncated [ 294.186202][T23097] loop7: p253 start 262144 is beyond EOD, truncated [ 294.193662][T23097] loop7: p254 start 262144 is beyond EOD, truncated [ 294.203944][T23396] loop1: detected capacity change from 0 to 512 [ 294.210495][T23097] loop7: p255 start 262144 is beyond EOD, truncated [ 294.213249][T23396] EXT4-fs: Ignoring removed nobh option [ 294.227227][ T2980] loop7: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 294.228252][ T2980] loop7: p2 start 262144 is beyond EOD, [ 294.240029][T23396] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 294.322196][ T2980] truncated [ 294.329253][T23396] EXT4-fs (loop1): 1 truncate cleaned up [ 294.337012][ T2980] loop7: p5 start 262144 is beyond EOD, [ 294.342265][T23396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.345063][ T2980] truncated [ 294.381460][ T2980] loop7: p6 start 262144 is beyond EOD, truncated [ 294.389440][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.397920][ T2980] loop7: p7 start 262144 is beyond EOD, truncated [ 294.405207][ T2980] loop7: p8 start 262144 is beyond EOD, truncated [ 294.411918][ T2980] loop7: p9 start 262144 is beyond EOD, truncated [ 294.418601][ T2980] loop7: p10 start 262144 is beyond EOD, truncated [ 294.427418][ T2980] loop7: p11 start 262144 is beyond EOD, truncated [ 294.434270][ T2980] loop7: p12 start 262144 is beyond EOD, truncated [ 294.442369][ T2980] loop7: p13 start 262144 is beyond EOD, truncated [ 294.453045][ T2980] loop7: p14 start 262144 is beyond EOD, truncated [ 294.460159][ T2980] loop7: p15 start 262144 is beyond EOD, truncated [ 294.466882][ T2980] loop7: p16 start 262144 is beyond EOD, truncated [ 294.490626][ T2980] loop7: p17 start 262144 is beyond EOD, truncated [ 294.497314][ T2980] loop7: p18 start 262144 is beyond EOD, truncated [ 294.514519][ T2980] loop7: p19 start 262144 is beyond EOD, truncated [ 294.530371][ T2980] loop7: p20 start 262144 is beyond EOD, truncated [ 294.537108][ T2980] loop7: p21 start 262144 is beyond EOD, truncated [ 294.546503][ T2980] loop7: p22 start 262144 is beyond EOD, truncated [ 294.553848][ T2980] loop7: p23 start 262144 is beyond EOD, truncated [ 294.563230][ T2980] loop7: p24 start 262144 is beyond EOD, truncated [ 294.570061][ T2980] loop7: p25 start 262144 is beyond EOD, truncated [ 294.570435][T23425] netlink: 666 bytes leftover after parsing attributes in process `syz.2.8712'. [ 294.576755][ T2980] loop7: p26 start 262144 is beyond EOD, truncated [ 294.593015][ T2980] loop7: p27 start 262144 is beyond EOD, truncated [ 294.600199][ T2980] loop7: p28 start 262144 is beyond EOD, truncated [ 294.612627][ T2980] loop7: p29 start 262144 is beyond EOD, truncated [ 294.620303][ T2980] loop7: p30 start 262144 is beyond EOD, truncated [ 294.644594][ T2980] loop7: p31 start 262144 is beyond EOD, truncated [ 294.653390][ T2980] loop7: p32 start 262144 is beyond EOD, truncated [ 294.661730][ T2980] loop7: p33 start 262144 is beyond EOD, truncated [ 294.672850][ T2980] loop7: p34 start 262144 is beyond EOD, truncated [ 294.683008][ T2980] loop7: p35 start 262144 is beyond EOD, truncated [ 294.687928][T23437] netlink: 'syz.2.8718': attribute type 13 has an invalid length. [ 294.690112][ T2980] loop7: p36 start 262144 is beyond EOD, truncated [ 294.708245][T23437] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.8718'. [ 294.713365][ T2980] loop7: p37 start 262144 is beyond EOD, truncated [ 294.726840][ T2980] loop7: p38 start 262144 is beyond EOD, truncated [ 294.734822][ T2980] loop7: p39 start 262144 is beyond EOD, truncated [ 294.743201][ T2980] loop7: p40 start 262144 is beyond EOD, truncated [ 294.750602][ T2980] loop7: p41 start 262144 is beyond EOD, truncated [ 294.757309][ T2980] loop7: p42 start 262144 is beyond EOD, truncated [ 294.764535][ T2980] loop7: p43 start 262144 is beyond EOD, truncated [ 294.772183][ T2980] loop7: p44 start 262144 is beyond EOD, truncated [ 294.781713][T23446] loop1: detected capacity change from 0 to 128 [ 294.788286][ T2980] loop7: p45 start 262144 is beyond EOD, truncated [ 294.797079][ T2980] loop7: p46 start 262144 is beyond EOD, truncated [ 294.804105][ T2980] loop7: p47 start 262144 is beyond EOD, truncated [ 294.813001][ T2980] loop7: p48 start 262144 is beyond EOD, truncated [ 294.819904][ T2980] loop7: p49 start 262144 is beyond EOD, truncated [ 294.826659][ T2980] loop7: p50 start 262144 is beyond EOD, truncated [ 294.833504][ T2980] loop7: p51 start 262144 is beyond EOD, truncated [ 294.840553][ T2980] loop7: p52 start 262144 is beyond EOD, truncated [ 294.847342][ T2980] loop7: p53 start 262144 is beyond EOD, truncated [ 294.853882][ T2980] loop7: p54 start 262144 is beyond EOD, truncated [ 294.869158][ T2980] loop7: p55 start 262144 is beyond EOD, truncated [ 294.875989][ T2980] loop7: p56 start 262144 is beyond EOD, truncated [ 294.884535][ T2980] loop7: p57 start 262144 is beyond EOD, truncated [ 294.891264][ T2980] loop7: p58 start 262144 is beyond EOD, truncated [ 294.897996][ T2980] loop7: p59 start 262144 is beyond EOD, truncated [ 294.904622][ T2980] loop7: p60 start 262144 is beyond EOD, truncated [ 294.920359][ T2980] loop7: p61 start 262144 is beyond EOD, truncated [ 294.927267][ T2980] loop7: p62 start 262144 is beyond EOD, truncated [ 294.934263][ T2980] loop7: p63 start 262144 is beyond EOD, truncated [ 294.943351][ T2980] loop7: p64 start 262144 is beyond EOD, truncated [ 294.950715][ T2980] loop7: p65 start 262144 is beyond EOD, truncated [ 294.957637][ T2980] loop7: p66 start 262144 is beyond EOD, truncated [ 294.964678][ T2980] loop7: p67 start 262144 is beyond EOD, truncated [ 294.971553][ T2980] loop7: p68 start 262144 is beyond EOD, truncated [ 294.978929][ T2980] loop7: p69 start 262144 is beyond EOD, truncated [ 294.994718][ T2980] loop7: p70 start 262144 is beyond EOD, truncated [ 295.003021][ T2980] loop7: p71 start 262144 is beyond EOD, truncated [ 295.012126][ T2980] loop7: p72 start 262144 is beyond EOD, truncated [ 295.018890][ T2980] loop7: p73 start 262144 is beyond EOD, truncated [ 295.025528][ T2980] loop7: p74 start 262144 is beyond EOD, truncated [ 295.032454][ T2980] loop7: p75 start 262144 is beyond EOD, truncated [ 295.039078][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8733'. [ 295.048188][ T2980] loop7: p76 start 262144 is beyond EOD, truncated [ 295.054802][ T2980] loop7: p77 start 262144 is beyond EOD, truncated [ 295.062705][ T2980] loop7: p78 start 262144 is beyond EOD, truncated [ 295.069888][ T2980] loop7: p79 start 262144 is beyond EOD, truncated [ 295.076683][ T2980] loop7: p80 start 262144 is beyond EOD, truncated [ 295.083383][ T2980] loop7: p81 start 262144 is beyond EOD, truncated [ 295.090343][ T2980] loop7: p82 start 262144 is beyond EOD, truncated [ 295.109344][T23475] loop4: detected capacity change from 0 to 512 [ 295.115931][ T2980] loop7: p83 start 262144 is beyond EOD, truncated [ 295.122686][ T2980] loop7: p84 start 262144 is beyond EOD, truncated [ 295.129966][ T2980] loop7: p85 start 262144 is beyond EOD, truncated [ 295.138660][T23475] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 295.148944][ T2980] loop7: p86 start 262144 is beyond EOD, truncated [ 295.155616][ T2980] loop7: p87 start 262144 is beyond EOD, truncated [ 295.162578][ T2980] loop7: p88 start 262144 is beyond EOD, truncated [ 295.163097][T23475] EXT4-fs (loop4): 1 truncate cleaned up [ 295.169427][ T2980] loop7: p89 start 262144 is beyond EOD, truncated [ 295.178368][T23475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.181790][ T2980] loop7: p90 start 262144 is beyond EOD, truncated [ 295.200299][ T2980] loop7: p91 start 262144 is beyond EOD, truncated [ 295.208502][ T2980] loop7: p92 start 262144 is beyond EOD, truncated [ 295.215481][ T2980] loop7: p93 start 262144 is beyond EOD, truncated [ 295.224132][ T2980] loop7: p94 start 262144 is beyond EOD, truncated [ 295.230877][ T2980] loop7: p95 start 262144 is beyond EOD, truncated [ 295.237594][ T2980] loop7: p96 start 262144 is beyond EOD, truncated [ 295.244134][ T2980] loop7: p97 start 262144 is beyond EOD, truncated [ 295.250911][ T2980] loop7: p98 start 262144 is beyond EOD, truncated [ 295.257747][ T2980] loop7: p99 start 262144 is beyond EOD, truncated [ 295.264292][ T2980] loop7: p100 start 262144 is beyond EOD, truncated [ 295.271352][ T2980] loop7: p101 start 262144 is beyond EOD, truncated [ 295.274378][ T28] audit: type=1400 audit(1781953651.572:2355): avc: denied { write } for pid=23474 comm="syz.4.8737" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.278390][ T2980] loop7: p102 start 262144 is beyond EOD, truncated [ 295.278412][ T2980] loop7: p103 start 262144 is beyond EOD, truncated [ 295.278428][ T2980] loop7: p104 start 262144 is beyond EOD, truncated [ 295.320586][ T2980] loop7: p105 start 262144 is beyond EOD, truncated [ 295.327355][ T2980] loop7: p106 start 262144 is beyond EOD, truncated [ 295.334076][ T2980] loop7: p107 start 262144 is beyond EOD, truncated [ 295.340948][ T2980] loop7: p108 start 262144 is beyond EOD, truncated [ 295.345279][ T28] audit: type=1400 audit(1781953651.572:2356): avc: denied { write } for pid=23474 comm="syz.4.8737" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.347927][ T2980] loop7: p109 start 262144 is beyond EOD, truncated [ 295.376784][ T2980] loop7: p110 start 262144 is beyond EOD, truncated [ 295.381961][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.392725][ T28] audit: type=1400 audit(1781953651.572:2357): avc: denied { write } for pid=23474 comm="syz.4.8737" name="file7" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.406399][ T2980] loop7: p111 start 262144 is beyond EOD, truncated [ 295.421627][ T2980] loop7: p112 start 262144 is beyond EOD, truncated [ 295.433722][ T2980] loop7: p113 start 262144 is beyond EOD, truncated [ 295.447526][ T2980] loop7: p114 start 262144 is beyond EOD, truncated [ 295.454489][ T2980] loop7: p115 start 262144 is beyond EOD, truncated [ 295.461291][ T2980] loop7: p116 start 262144 is beyond EOD, truncated [ 295.468711][ T2980] loop7: p117 start 262144 is beyond EOD, truncated [ 295.475542][ T2980] loop7: p118 start 262144 is beyond EOD, truncated [ 295.482430][ T2980] loop7: p119 start 262144 is beyond EOD, truncated [ 295.489276][ T2980] loop7: p120 start 262144 is beyond EOD, truncated [ 295.496039][ T2980] loop7: p121 start 262144 is beyond EOD, truncated [ 295.504950][ T2980] loop7: p122 start 262144 is beyond EOD, truncated [ 295.512497][ T2980] loop7: p123 start 262144 is beyond EOD, truncated [ 295.519535][ T2980] loop7: p124 start 262144 is beyond EOD, truncated [ 295.528715][ T2980] loop7: p125 start 262144 is beyond EOD, truncated [ 295.535468][ T2980] loop7: p126 start 262144 is beyond EOD, truncated [ 295.550253][ T2980] loop7: p127 start 262144 is beyond EOD, truncated [ 295.566512][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.576595][ T2980] loop7: p128 start 262144 is beyond EOD, truncated [ 295.583777][ T2980] loop7: p129 start 262144 is beyond EOD, truncated [ 295.593001][ T2980] loop7: p130 start 262144 is beyond EOD, truncated [ 295.599689][ T2980] loop7: p131 start 262144 is beyond EOD, truncated [ 295.621738][ T2980] loop7: p132 start 262144 is beyond EOD, truncated [ 295.629281][ T2980] loop7: p133 start 262144 is beyond EOD, truncated [ 295.636536][ T2980] loop7: p134 start 262144 is beyond EOD, truncated [ 295.643382][ T2980] loop7: p135 start 262144 is beyond EOD, truncated [ 295.671106][ T2980] loop7: p136 start 262144 is beyond EOD, truncated [ 295.685816][ T2980] loop7: p137 start 262144 is beyond EOD, truncated [ 295.699667][ T2980] loop7: p138 start 262144 is beyond EOD, truncated [ 295.715927][ T2980] loop7: p139 start 262144 is beyond EOD, truncated [ 295.727167][ T2980] loop7: p140 start 262144 is beyond EOD, truncated [ 295.745421][ T2980] loop7: p141 start 262144 is beyond EOD, truncated [ 295.754079][ T2980] loop7: p142 start 262144 is beyond EOD, truncated [ 295.765772][ T2980] loop7: p143 start 262144 is beyond EOD, truncated [ 295.772961][ T2980] loop7: p144 start 262144 is beyond EOD, truncated [ 295.779697][ T2980] loop7: p145 start 262144 is beyond EOD, truncated [ 295.786402][ T2980] loop7: p146 start 262144 is beyond EOD, truncated [ 295.793138][ T2980] loop7: p147 start 262144 is beyond EOD, truncated [ 295.800465][ T2980] loop7: p148 start 262144 is beyond EOD, truncated [ 295.807860][ T2980] loop7: p149 start 262144 is beyond EOD, truncated [ 295.814616][ T2980] loop7: p150 start 262144 is beyond EOD, truncated [ 295.844562][ T2980] loop7: p151 start 262144 is beyond EOD, truncated [ 295.852187][ T2980] loop7: p152 start 262144 is beyond EOD, truncated [ 295.859644][ T2980] loop7: p153 start 262144 is beyond EOD, truncated [ 295.867339][ T2980] loop7: p154 start 262144 is beyond EOD, truncated [ 295.874173][ T2980] loop7: p155 start 262144 is beyond EOD, truncated [ 295.880891][ T2980] loop7: p156 start 262144 is beyond EOD, truncated [ 295.904208][ T2980] loop7: p157 start 262144 is beyond EOD, truncated [ 295.911945][ T2980] loop7: p158 start 262144 is beyond EOD, truncated [ 295.919317][ T2980] loop7: p159 start 262144 is beyond EOD, truncated [ 295.926565][ T2980] loop7: p160 start 262144 is beyond EOD, truncated [ 295.933353][ T2980] loop7: p161 start 262144 is beyond EOD, truncated [ 295.940046][ T2980] loop7: p162 start 262144 is beyond EOD, truncated [ 295.947325][ T2980] loop7: p163 start 262144 is beyond EOD, truncated [ 295.954280][ T2980] loop7: p164 start 262144 is beyond EOD, truncated [ 295.963019][ T2980] loop7: p165 start 262144 is beyond EOD, truncated [ 295.970131][ T2980] loop7: p166 start 262144 is beyond EOD, truncated [ 295.970159][ T2980] loop7: p167 start 262144 is beyond EOD, truncated [ 295.970178][ T2980] loop7: p168 start 262144 is beyond EOD, truncated [ 295.970198][ T2980] loop7: p169 start 262144 is beyond EOD, truncated [ 295.970214][ T2980] loop7: p170 start 262144 is beyond EOD, truncated [ 295.970264][ T2980] loop7: p171 start 262144 is beyond EOD, truncated [ 295.970281][ T2980] loop7: p172 start 262144 is beyond EOD, truncated [ 295.970298][ T2980] loop7: p173 start 262144 is beyond EOD, truncated [ 295.970316][ T2980] loop7: p174 start 262144 is beyond EOD, truncated [ 295.970332][ T2980] loop7: p175 start 262144 is beyond EOD, truncated [ 295.970347][ T2980] loop7: p176 start 262144 is beyond EOD, truncated [ 295.970364][ T2980] loop7: p177 start 262144 is beyond EOD, truncated [ 295.970431][ T2980] loop7: p178 start 262144 is beyond EOD, truncated [ 295.970465][ T2980] loop7: p179 start 262144 is beyond EOD, truncated [ 295.970526][ T2980] loop7: p180 start 262144 is beyond EOD, truncated [ 295.970540][ T2980] loop7: p181 start 262144 is beyond EOD, truncated [ 295.970564][ T2980] loop7: p182 start 262144 is beyond EOD, truncated [ 295.970582][ T2980] loop7: p183 start 262144 is beyond EOD, truncated [ 295.970600][ T2980] loop7: p184 start 262144 is beyond EOD, truncated [ 295.970617][ T2980] loop7: p185 start 262144 is beyond EOD, truncated [ 295.970657][ T2980] loop7: p186 start 262144 is beyond EOD, truncated [ 295.970671][ T2980] loop7: p187 start 262144 is beyond EOD, truncated [ 295.970685][ T2980] loop7: p188 start 262144 is beyond EOD, truncated [ 295.970700][ T2980] loop7: p189 start 262144 is beyond EOD, truncated [ 295.970753][ T2980] loop7: p190 start 262144 is beyond EOD, truncated [ 295.970767][ T2980] loop7: p191 start 262144 is beyond EOD, truncated [ 295.970781][ T2980] loop7: p192 start 262144 is beyond EOD, truncated [ 295.970795][ T2980] loop7: p193 start 262144 is beyond EOD, truncated [ 295.970817][ T2980] loop7: p194 start 262144 is beyond EOD, truncated [ 295.970836][ T2980] loop7: p195 start 262144 is beyond EOD, truncated [ 295.970854][ T2980] loop7: p196 start 262144 is beyond EOD, truncated [ 295.970906][ T2980] loop7: p197 start 262144 is beyond EOD, truncated [ 295.970939][ T2980] loop7: p198 start 262144 is beyond EOD, truncated [ 295.970957][ T2980] loop7: p199 start 262144 is beyond EOD, truncated [ 295.970973][ T2980] loop7: p200 start 262144 is beyond EOD, truncated [ 295.971003][ T2980] loop7: p201 start 262144 is beyond EOD, truncated [ 295.971017][ T2980] loop7: p202 start 262144 is beyond EOD, truncated [ 295.971032][ T2980] loop7: p203 start 262144 is beyond EOD, truncated [ 295.971049][ T2980] loop7: p204 start 262144 is beyond EOD, truncated [ 295.971067][ T2980] loop7: p205 start 262144 is beyond EOD, truncated [ 295.971083][ T2980] loop7: p206 start 262144 is beyond EOD, truncated [ 295.971100][ T2980] loop7: p207 start 262144 is beyond EOD, truncated [ 295.971213][ T2980] loop7: p208 start 262144 is beyond EOD, truncated [ 295.971231][ T2980] loop7: p209 start 262144 is beyond EOD, truncated [ 295.971247][ T2980] loop7: p210 start 262144 is beyond EOD, truncated [ 295.971264][ T2980] loop7: p211 start 262144 is beyond EOD, truncated [ 295.971292][ T2980] loop7: p212 start 262144 is beyond EOD, truncated [ 295.971307][ T2980] loop7: p213 start 262144 is beyond EOD, truncated [ 295.971322][ T2980] loop7: p214 start 262144 is beyond EOD, truncated [ 295.971502][ T2980] loop7: p215 start 262144 is beyond EOD, truncated [ 295.971521][ T2980] loop7: p216 start 262144 is beyond EOD, truncated [ 295.971563][ T2980] loop7: p217 start 262144 is beyond EOD, truncated [ 295.971580][ T2980] loop7: p218 start 262144 is beyond EOD, truncated [ 295.971635][ T2980] loop7: p219 start 262144 is beyond EOD, truncated [ 295.971726][ T2980] loop7: p220 start 262144 is beyond EOD, truncated [ 295.971748][ T2980] loop7: p221 start 262144 is beyond EOD, truncated [ 295.971768][ T2980] loop7: p222 start 262144 is beyond EOD, truncated [ 295.971785][ T2980] loop7: p223 start 262144 is beyond EOD, truncated [ 295.971801][ T2980] loop7: p224 start 262144 is beyond EOD, truncated [ 295.971860][ T2980] loop7: p225 start 262144 is beyond EOD, truncated [ 295.971877][ T2980] loop7: p226 start 262144 is beyond EOD, truncated [ 295.971894][ T2980] loop7: p227 start 262144 is beyond EOD, truncated [ 295.971910][ T2980] loop7: p228 start 262144 is beyond EOD, truncated [ 295.971927][ T2980] loop7: p229 start 262144 is beyond EOD, truncated [ 295.971944][ T2980] loop7: p230 start 262144 is beyond EOD, truncated [ 295.972009][ T2980] loop7: p231 start 262144 is beyond EOD, truncated [ 295.972026][ T2980] loop7: p232 start 262144 is beyond EOD, truncated [ 295.972042][ T2980] loop7: p233 start 262144 is beyond EOD, truncated [ 295.972137][ T2980] loop7: p234 start 262144 is beyond EOD, truncated [ 295.972154][ T2980] loop7: p235 start 262144 is beyond EOD, truncated [ 295.972170][ T2980] loop7: p236 start 262144 is beyond EOD, truncated [ 295.972187][ T2980] loop7: p237 start 262144 is beyond EOD, truncated [ 295.972204][ T2980] loop7: p238 start 262144 is beyond EOD, truncated [ 295.972221][ T2980] loop7: p239 start 262144 is beyond EOD, truncated [ 295.972237][ T2980] loop7: p240 start 262144 is beyond EOD, truncated [ 295.972267][ T2980] loop7: p241 start 262144 is beyond EOD, truncated [ 295.972283][ T2980] loop7: p242 start 262144 is beyond EOD, truncated [ 295.972300][ T2980] loop7: p243 start 262144 is beyond EOD, truncated [ 295.972359][ T2980] loop7: p244 start 262144 is beyond EOD, truncated [ 295.972376][ T2980] loop7: p245 start 262144 is beyond EOD, truncated [ 295.972394][ T2980] loop7: p246 start 262144 is beyond EOD, truncated [ 295.972437][ T2980] loop7: p247 start 262144 is beyond EOD, truncated [ 295.972454][ T2980] loop7: p248 start 262144 is beyond EOD, truncated [ 295.972471][ T2980] loop7: p249 start 262144 is beyond EOD, truncated [ 295.972487][ T2980] loop7: p250 start 262144 is beyond EOD, truncated [ 295.972504][ T2980] loop7: p251 start 262144 is beyond EOD, truncated [ 295.972527][ T2980] loop7: p252 start 262144 is beyond EOD, truncated [ 295.972543][ T2980] loop7: p253 start 262144 is beyond EOD, truncated [ 295.972607][ T2980] loop7: p254 start 262144 is beyond EOD, truncated [ 295.972623][ T2980] loop7: p255 start 262144 is beyond EOD, truncated [ 296.028543][ T4875] udevd[4875]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 296.031691][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 296.273306][ T4875] udevd[4875]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 296.278086][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 296.449034][T23543] loop7: detected capacity change from 0 to 512 [ 296.449739][T23543] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 296.451206][T23543] EXT4-fs (loop7): 1 truncate cleaned up [ 296.457458][T23543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.602149][T23558] vlan4: entered promiscuous mode [ 296.613954][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 296.613970][ T28] audit: type=1400 audit(1781953652.912:2359): avc: denied { write } for pid=23540 comm="syz.7.8764" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.001063][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.019962][T23570] sock: sock_set_timeout: `syz.4.8779' (pid 23570) tries to set negative timeout [ 297.046402][T23572] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8782'. [ 297.101026][T23578] loop7: detected capacity change from 0 to 1024 [ 297.133104][T23578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.150896][ T28] audit: type=1400 audit(1781953653.452:2360): avc: denied { write } for pid=23577 comm="syz.7.8773" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.195688][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.196955][T23590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8786'. [ 297.314829][ T28] audit: type=1400 audit(1781953653.612:2361): avc: denied { ioctl } for pid=23602 comm="syz.4.8793" path="socket:[69222]" dev="sockfs" ino=69222 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 297.557502][ T28] audit: type=1400 audit(1781953653.862:2362): avc: denied { listen } for pid=23636 comm="syz.1.8810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.753998][T20514] IPVS: starting estimator thread 0... [ 297.810793][ T28] audit: type=1400 audit(1781953654.102:2363): avc: denied { map } for pid=23661 comm="syz.7.8823" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 297.839475][T23660] loop1: detected capacity change from 0 to 2048 [ 297.847451][T23664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 297.854030][T23664] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.866705][T23658] IPVS: using max 2592 ests per chain, 129600 per kthread [ 297.871608][T23664] vhci_hcd vhci_hcd.0: Device attached [ 297.883666][T23673] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 297.890230][T23673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 297.905501][T23660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.916350][T23681] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8826'. [ 297.928328][ T28] audit: type=1400 audit(1781953654.232:2364): avc: denied { write } for pid=23659 comm="syz.1.8822" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.951853][T23673] vhci_hcd vhci_hcd.0: Device attached [ 297.967050][T23664] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 297.973605][T23664] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 297.986887][T23664] vhci_hcd vhci_hcd.0: Device attached [ 297.996219][T23674] vhci_hcd: connection closed [ 297.996486][T23683] vhci_hcd: connection closed [ 297.996534][ T12] vhci_hcd vhci_hcd.4: stop threads [ 297.996553][ T12] vhci_hcd vhci_hcd.4: release socket [ 297.996575][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 298.024001][T23665] vhci_hcd: connection closed [ 298.036344][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.070377][ T12] vhci_hcd vhci_hcd.4: stop threads [ 298.076708][ T12] vhci_hcd vhci_hcd.4: release socket [ 298.082456][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 298.110927][ T12] vhci_hcd vhci_hcd.4: stop threads [ 298.116644][ T12] vhci_hcd vhci_hcd.4: release socket [ 298.117284][T20514] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 298.122441][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 298.142702][T20514] usb 9-1: enqueue for inactive port 0 [ 298.158872][T20514] usb 9-1: enqueue for inactive port 0 [ 298.174979][T20514] usb 9-1: enqueue for inactive port 0 [ 298.268330][T20514] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 298.710726][T23775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.840754][T23793] loop7: detected capacity change from 0 to 1024 [ 298.859292][T23793] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.953377][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.001273][T23800] loop2: detected capacity change from 0 to 128 [ 299.039462][T23800] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.069531][T23800] ext4 filesystem being mounted at /1757/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.101726][T23807] loop7: detected capacity change from 0 to 1764 [ 299.117934][ T28] audit: type=1400 audit(1781953655.422:2365): avc: denied { mounton } for pid=23803 comm="syz.7.8885" path="/132/file0/file0" dev="loop7" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 299.172525][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.223580][T23815] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8891'. [ 299.241599][T23817] loop2: detected capacity change from 0 to 512 [ 299.260092][T23817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 299.294328][T23817] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 299.316774][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 299.326707][ C1] EXT4-fs (loop2): initial error at time 1781953655: ext4_mb_generate_buddy:1317 [ 299.338774][ C1] EXT4-fs (loop2): last error at time 1781953655: ext4_mb_generate_buddy:1317 [ 299.362449][T23817] EXT4-fs (loop2): 1 truncate cleaned up [ 299.369566][T23817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.382622][ T28] audit: type=1400 audit(1781953655.662:2366): avc: denied { read } for pid=23823 comm="syz.1.8893" laddr=fe80::b lport=56631 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.451296][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.876875][T23892] loop7: detected capacity change from 0 to 2048 [ 299.911667][T23897] netlink: 'syz.0.8929': attribute type 3 has an invalid length. [ 299.922360][T23892] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.974248][T23892] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.8927: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 300.105875][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.255023][T20509] kernel read not supported for file /4033/net/if_inet6 (pid: 20509 comm: kworker/0:8) [ 300.277553][ T28] audit: type=1400 audit(1781953656.572:2367): avc: denied { create } for pid=23943 comm="syz.7.8953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ax25_socket permissive=1 [ 300.301549][T23948] tmpfs: Bad value for 'mpol' [ 300.426186][T23949] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.433431][T23949] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.475132][T23971] loop1: detected capacity change from 0 to 256 [ 300.483083][T23971] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 300.510775][T23949] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 300.512134][T23974] sg_write: data in/out 414685/338 bytes for SCSI command 0x0-- guessing data in; [ 300.512134][T23974] program syz.7.8965 not setting count and/or reply_len properly [ 300.553385][T23976] bond0: left promiscuous mode [ 300.571690][T23976] bond_slave_0: left promiscuous mode [ 300.594283][T23976] bond_slave_1: left promiscuous mode [ 300.611059][T23976] bond0: left allmulticast mode [ 300.624277][ T28] audit: type=1326 audit(1781953656.922:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23979 comm="syz.7.8968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff65b7dce59 code=0x0 [ 300.626287][T23976] bond_slave_0: left allmulticast mode [ 300.656749][T23976] bond_slave_1: left allmulticast mode [ 300.662403][T23976] team0: left allmulticast mode [ 300.668815][T23976] team_slave_0: left allmulticast mode [ 300.678287][T23976] team_slave_1: left allmulticast mode [ 300.684526][T23976] veth0: left allmulticast mode [ 300.696353][T23976] veth0_to_bond: left allmulticast mode [ 300.702345][T23976] macvlan0: left promiscuous mode [ 300.703770][T23985] loop4: detected capacity change from 0 to 1764 [ 300.707577][T23976] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 300.721371][T23976] geneve2: left promiscuous mode [ 300.726569][T23976] geneve2: left allmulticast mode [ 300.731958][T23976] vlan3: left promiscuous mode [ 300.737144][T23976] geneve3: left allmulticast mode [ 300.862269][T23997] loop2: detected capacity change from 0 to 1764 [ 301.065115][T24021] loop1: detected capacity change from 0 to 1024 [ 301.078394][T24021] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.120485][T24021] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 301.132429][T24021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 301.160467][T24021] ext4 filesystem being mounted at /1852/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.203884][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 301.287803][T24057] loop2: detected capacity change from 0 to 128 [ 301.309665][T24055] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 301.347770][T24055] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 301.359382][T24055] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 301.372849][T24055] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: inode #5: comm syz.1.9004: unexpected bad inode w/o EXT4_IGET_BAD [ 301.393719][T24055] loop1: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 301.395110][T24055] EXT4-fs (loop1): no journal found [ 301.404351][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 301.404374][ C0] EXT4-fs (loop1): initial error at time 1781953657: ext4_get_journal_inode:5900: inode 5 [ 301.404407][ C0] EXT4-fs (loop1): last error at time 1781953657: ext4_get_journal_inode:5900: inode 5 [ 301.437237][T24055] EXT4-fs (loop1): can't get journal size [ 301.676014][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 301.676033][ T28] audit: type=1400 audit(1781953657.972:2371): avc: denied { setopt } for pid=24092 comm="syz.7.9020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 301.880758][ T28] audit: type=1400 audit(1781953658.162:2372): avc: denied { map } for pid=24097 comm="syz.7.9022" path="socket:[71081]" dev="sockfs" ino=71081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 302.358020][T24078] syz.2.9013 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 302.372405][T24078] CPU: 0 UID: 0 PID: 24078 Comm: syz.2.9013 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 302.372439][T24078] Tainted: [W]=WARN [ 302.372446][T24078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.372457][T24078] Call Trace: [ 302.372465][T24078] [ 302.372475][T24078] __dump_stack+0x1d/0x30 [ 302.372503][T24078] dump_stack_lvl+0x95/0xd0 [ 302.372588][T24078] dump_stack+0x15/0x1b [ 302.372611][T24078] dump_header+0x80/0x240 [ 302.372637][T24078] oom_kill_process+0x295/0x350 [ 302.372675][T24078] out_of_memory+0x981/0xbc0 [ 302.372704][T24078] try_charge_memcg+0x621/0xa00 [ 302.372739][T24078] charge_memcg+0x6d/0x120 [ 302.372884][T24078] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 302.372914][T24078] swap_cache_alloc_folio+0x47b/0x5e0 [ 302.373086][T24078] swap_cluster_readahead+0x3d2/0x460 [ 302.373189][T24078] swapin_readahead+0xd8/0x8a0 [ 302.373225][T24078] ? _raw_spin_unlock+0x9/0x30 [ 302.373253][T24078] ? swap_put_entries_cluster+0x49c/0x4c0 [ 302.373280][T24078] ? __entry_text_end+0x10258/0x102179 [ 302.373360][T24078] ? __rcu_read_unlock+0x4e/0x70 [ 302.373388][T24078] ? swap_cache_get_folio+0x1f7/0x200 [ 302.373413][T24078] do_swap_page+0x2a2/0x1ec0 [ 302.373472][T24078] ? __css_rstat_updated+0xbb/0x280 [ 302.373503][T24078] ? __rcu_read_lock+0x36/0x50 [ 302.373525][T24078] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 302.373609][T24078] handle_mm_fault+0xb3c/0x2da0 [ 302.373647][T24078] do_user_addr_fault+0x634/0x1060 [ 302.373674][T24078] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 302.373772][T24078] ? trace_page_fault_user+0x1f/0xa0 [ 302.373877][T24078] exc_page_fault+0x62/0xa0 [ 302.373916][T24078] asm_exc_page_fault+0x26/0x30 [ 302.373971][T24078] RIP: 0033:0x7ffafa10a80c [ 302.373987][T24078] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 302.374006][T24078] RSP: 002b:00007ffdd1561220 EFLAGS: 00010202 [ 302.374059][T24078] RAX: 0000000000000000 RBX: 00007ffafa4b7080 RCX: 000055555719f808 [ 302.374073][T24078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.374085][T24078] RBP: 00007ffafa4b7da0 R08: 0000000000000000 R09: 0000000000000000 [ 302.374132][T24078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000049ce6 [ 302.374147][T24078] R13: 00007ffafa4b5fac R14: 00000000000499e0 R15: 00007ffdd1561320 [ 302.374167][T24078] [ 302.374217][T24078] memory: usage 307200kB, limit 307200kB, failcnt 835 [ 302.622441][T24078] memory+swap: usage 308252kB, limit 9007199254740988kB, failcnt 0 [ 302.630420][T24078] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 302.637741][T24078] Memory cgroup stats for /syz2: [ 302.638008][T24078] cache 69632 [ 302.646327][T24078] rss 0 [ 302.649130][T24078] shmem 0 [ 302.652079][T24078] mapped_file 0 [ 302.655701][T24078] dirty 0 [ 302.658878][T24078] writeback 0 [ 302.662180][T24078] workingset_refault_anon 1457 [ 302.667007][T24078] workingset_refault_file 702 [ 302.671736][T24078] swap 1077248 [ 302.675282][T24078] swapcached 12488704 [ 302.679296][T24078] pgpgin 138385 [ 302.682761][T24078] pgpgout 138367 [ 302.686342][T24078] pgfault 273491 [ 302.689971][T24078] pgmajfault 278 [ 302.693539][T24078] inactive_anon 0 [ 302.697254][T24078] active_anon 0 [ 302.700746][T24078] inactive_file 69632 [ 302.704733][T24078] active_file 4096 [ 302.708599][T24078] unevictable 0 [ 302.712066][T24078] hierarchical_memory_limit 314572800 [ 302.717682][T24078] hierarchical_memsw_limit 9223372036854771712 [ 302.723972][T24078] total_cache 69632 [ 302.727872][T24078] total_rss 0 [ 302.731213][T24078] total_shmem 0 [ 302.734707][T24078] total_mapped_file 0 [ 302.738818][T24078] total_dirty 0 [ 302.742319][T24078] total_writeback 0 [ 302.746270][T24078] total_workingset_refault_anon 1457 [ 302.751615][T24078] total_workingset_refault_file 702 [ 302.757008][T24078] total_swap 1077248 [ 302.760997][T24078] total_swapcached 12488704 [ 302.765549][T24078] total_pgpgin 138385 [ 302.772555][T24078] total_pgpgout 138367 [ 302.776826][T24078] total_pgfault 273491 [ 302.781015][T24078] total_pgmajfault 278 [ 302.785193][T24078] total_inactive_anon 0 [ 302.789428][T24078] total_active_anon 0 [ 302.793504][T24078] total_inactive_file 69632 [ 302.798072][T24078] total_active_file 4096 [ 302.802520][T24078] total_unevictable 0 [ 302.806779][T24078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9013,pid=24078,uid=0 [ 302.822791][T24078] Memory cgroup out of memory: Killed process 24078 (syz.2.9013) total-vm:96152kB, anon-rss:1232kB, file-rss:22100kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 303.128750][T24133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9039'. [ 303.166720][T24133] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9039'. [ 303.200824][T24133] netlink: 'syz.2.9039': attribute type 6 has an invalid length. [ 303.216357][T24148] netlink: 'syz.0.9047': attribute type 1 has an invalid length. [ 303.234602][T24133] netlink: 'syz.2.9039': attribute type 5 has an invalid length. [ 303.252888][T24133] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9039'. [ 303.295650][T24155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9048'. [ 303.430091][T24177] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 303.446919][T24185] Dead loop on virtual device ip6_vti0 (net 39), fix it urgently! [ 303.578389][T24200] netlink: 138320 bytes leftover after parsing attributes in process `syz.0.9071'. [ 303.607062][T24200] netlink: zone id is out of range [ 303.622333][T24200] netlink: zone id is out of range [ 303.639956][T24200] netlink: zone id is out of range [ 303.656139][T24200] netlink: zone id is out of range [ 303.668953][T24200] netlink: zone id is out of range [ 303.679971][T24200] netlink: zone id is out of range [ 303.691469][T24200] netlink: zone id is out of range [ 303.708813][T24200] netlink: zone id is out of range [ 303.729202][T24200] netlink: zone id is out of range [ 303.766479][T24229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9085'. [ 303.787860][T24229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9085'. [ 303.824918][T24239] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.860308][T24239] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.9089: corrupted in-inode xattr: e_value size too large [ 303.883341][T24239] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 303.883534][T24239] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.9089: couldn't read orphan inode 15 (err -117) [ 303.892879][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 303.892896][ C0] EXT4-fs (loop4): initial error at time 1781953660: ext4_iget_extra_inode:5180: inode 15 [ 303.892932][ C0] EXT4-fs (loop4): last error at time 1781953660: ext4_iget_extra_inode:5180: inode 15 [ 303.932696][T24237] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.933063][ T28] audit: type=1326 audit(1781953660.212:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24232 comm="syz.2.9087" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffafa23ce59 code=0x0 [ 303.947998][T24239] loop4: lost filesystem error report for type 5 error -117 [ 303.969050][T24237] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.036132][T24239] EXT4-fs: Ignoring removed bh option [ 304.054479][T24239] System zones: 1-12 [ 304.061709][T24239] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 304.196199][T24246] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.203355][T24246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.234746][T24246] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.242196][T24246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.285150][T24246] vlan0: left promiscuous mode [ 304.310520][T24246] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 304.332844][T24246] macvlan2: left allmulticast mode [ 304.339607][T24246] vlan1: left allmulticast mode [ 304.344557][T24246] veth0_vlan: left allmulticast mode [ 304.353428][T24246] vlan2: left allmulticast mode [ 304.359206][T24246] gretap0: left allmulticast mode [ 304.367852][T24246] vlan3: left promiscuous mode [ 304.372712][T24246] bond0: left promiscuous mode [ 304.381367][T24246] geneve3: left promiscuous mode [ 304.386525][T24246] geneve3: left allmulticast mode [ 304.392906][T24246] vlan4: left allmulticast mode [ 304.399854][T24246] bond0: left allmulticast mode [ 304.405092][T24246] bond_slave_0: left allmulticast mode [ 304.411110][T24246] bond_slave_1: left allmulticast mode [ 304.417166][T24246] vxcan2: left allmulticast mode [ 304.743256][T24311] set_capacity_and_notify: 5 callbacks suppressed [ 304.743276][T24311] loop1: detected capacity change from 0 to 4096 [ 304.932472][ T28] audit: type=1400 audit(1781953661.232:2374): avc: denied { mount } for pid=24328 comm="syz.4.9131" name="/" dev="ramfs" ino=71462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.998275][T24336] loop1: detected capacity change from 0 to 256 [ 305.030721][T24340] usb usb8: usbfs: process 24340 (syz.7.9135) did not claim interface 2 before use [ 305.059029][T24336] FAT-fs (loop1): Directory bread(block 64) failed [ 305.072493][T24336] FAT-fs (loop1): Directory bread(block 65) failed [ 305.087368][T24336] FAT-fs (loop1): Directory bread(block 66) failed [ 305.095040][T24336] FAT-fs (loop1): Directory bread(block 67) failed [ 305.103767][T24336] FAT-fs (loop1): Directory bread(block 68) failed [ 305.111262][T24336] FAT-fs (loop1): Directory bread(block 69) failed [ 305.118318][T24336] FAT-fs (loop1): Directory bread(block 70) failed [ 305.131961][T24336] FAT-fs (loop1): Directory bread(block 71) failed [ 305.143160][T24336] FAT-fs (loop1): Directory bread(block 72) failed [ 305.150231][T24336] FAT-fs (loop1): Directory bread(block 73) failed [ 305.251880][T24364] loop4: detected capacity change from 0 to 1024 [ 305.260479][T24364] EXT4-fs: Ignoring removed orlov option [ 305.279661][ T28] audit: type=1400 audit(1781953661.582:2375): avc: denied { write } for pid=24362 comm="syz.4.9147" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 305.311125][T24361] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.318450][T24361] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.382776][T24374] loop7: detected capacity change from 0 to 164 [ 305.400756][T24361] bond_slave_0: left promiscuous mode [ 305.409966][T24361] bond_slave_1: left promiscuous mode [ 305.608088][T24394] netlink: 'syz.1.9158': attribute type 178 has an invalid length. [ 305.711831][T24410] loop1: detected capacity change from 0 to 512 [ 305.732966][T24410] ext4 filesystem being mounted at /1889/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 305.753274][T24410] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.9166: corrupted inode contents [ 305.766289][T24410] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #2: comm syz.1.9166: mark_inode_dirty error [ 305.780417][T24410] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #2: comm syz.1.9166: corrupted inode contents [ 305.799450][ T28] audit: type=1400 audit(1781953662.102:2376): avc: denied { write } for pid=24409 comm="syz.1.9166" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.017775][T24448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9183'. [ 306.044762][T24448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9183'. [ 306.057728][T24454] loop2: detected capacity change from 0 to 736 [ 306.103431][T20531] kernel read not supported for file /4133/net/netstat (pid: 20531 comm: kworker/0:14) [ 306.175768][T24466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9192'. [ 306.182509][T24464] loop4: detected capacity change from 0 to 4096 [ 306.316600][T24487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.329216][T24487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.473362][T24513] loop2: detected capacity change from 0 to 512 [ 306.491518][T24513] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.520333][T24513] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.9214: corrupted in-inode xattr: e_value size too large [ 306.544506][T24513] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 306.544682][T24513] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9214: couldn't read orphan inode 15 (err -117) [ 306.554024][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 306.554046][ C0] EXT4-fs (loop2): initial error at time 1781953662: ext4_iget_extra_inode:5180: inode 15 [ 306.554092][ C0] EXT4-fs (loop2): last error at time 1781953662: ext4_iget_extra_inode:5180: inode 15 [ 306.593410][T24513] loop2: lost filesystem error report for type 5 error -117 [ 306.653346][T24513] EXT4-fs: Ignoring removed bh option [ 306.676637][T24513] System zones: 1-12 [ 306.682710][T24513] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 306.740354][ T28] audit: type=1400 audit(1781953663.042:2377): avc: denied { write } for pid=24523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.801073][ T28] audit: type=1400 audit(1781953663.062:2378): avc: denied { write } for pid=24546 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.883622][ T28] audit: type=1400 audit(1781953663.182:2379): avc: denied { write } for pid=24548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.931376][ T28] audit: type=1400 audit(1781953663.222:2380): avc: denied { mount } for pid=24565 comm="syz.0.9229" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 306.981144][T24569] gre0 speed is unknown, defaulting to 1000 [ 306.997848][T24569] gre0 speed is unknown, defaulting to 1000 [ 307.002661][ T28] audit: type=1400 audit(1781953663.222:2381): avc: denied { remount } for pid=24565 comm="syz.0.9229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 307.009309][T24569] gre0 speed is unknown, defaulting to 1000 [ 307.043035][ T28] audit: type=1400 audit(1781953663.262:2382): avc: denied { write } for pid=24567 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.065390][ T28] audit: type=1400 audit(1781953663.332:2383): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 307.126056][ T28] audit: type=1400 audit(1781953663.412:2384): avc: denied { lock } for pid=24581 comm="syz.4.9234" path="socket:[71874]" dev="sockfs" ino=71874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 307.196196][ T28] audit: type=1400 audit(1781953663.492:2385): avc: denied { ioctl } for pid=24593 comm="syz.4.9240" path="socket:[71901]" dev="sockfs" ino=71901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.323248][T24569] infiniband syz1: set down [ 307.327899][T20531] gre0 speed is unknown, defaulting to 1000 [ 307.334087][T24569] infiniband syz1: added gre0 [ 307.362171][T24569] RDS/IB: syz1: added [ 307.369098][T24569] smc: adding ib device syz1 with port count 1 [ 307.380185][T24569] smc: ib device syz1 port 1 has no pnetid [ 307.390795][T24569] gre0 speed is unknown, defaulting to 1000 [ 307.419932][T20531] gre0 speed is unknown, defaulting to 1000 [ 307.491916][T24569] gre0 speed is unknown, defaulting to 1000 [ 307.608045][T24569] gre0 speed is unknown, defaulting to 1000 [ 307.702757][T24569] gre0 speed is unknown, defaulting to 1000 [ 307.714161][T24630] loop4: detected capacity change from 0 to 8192 [ 307.759448][T24630] loop4: p2 p3 p4 [ 307.763440][T24630] loop4: p2 start 65537 is beyond EOD, truncated [ 307.778692][T24630] loop4: p3 start 65280 is beyond EOD, truncated [ 307.798459][T24630] loop4: p4 size 50331904 extends beyond EOD, truncated [ 307.810620][T24569] gre0 speed is unknown, defaulting to 1000 [ 307.884434][T24569] gre0 speed is unknown, defaulting to 1000 [ 308.301922][T24691] loop7: detected capacity change from 0 to 512 [ 308.312978][ T28] audit: type=1400 audit(1781953664.622:2386): avc: denied { write } for pid=24673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.312992][T24691] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 308.347989][T24691] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a001c018, mo2=0082] [ 308.363384][T24691] System zones: 1-12 [ 308.375719][T24691] EXT4-fs (loop7): 1 truncate cleaned up [ 308.475533][T24707] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.482860][T24707] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.648895][T24707] net_ratelimit: 8 callbacks suppressed [ 308.648913][T24707] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 308.700373][T24726] tap0: tun_chr_ioctl cmd 1074025677 [ 308.705930][T24726] tap0: linktype set to 784 [ 309.165882][T24773] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 309.449014][T24816] program syz.2.9325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.479763][T24820] gre0 speed is unknown, defaulting to 1000 [ 309.648123][T24837] gre0 speed is unknown, defaulting to 1000 [ 309.668676][T24846] netlink: 'syz.1.9340': attribute type 7 has an invalid length. [ 309.700997][T24846] netlink: 'syz.1.9340': attribute type 5 has an invalid length. [ 309.709219][T24846] __nla_validate_parse: 1 callbacks suppressed [ 309.709235][T24846] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9340'. [ 309.778535][T24855] set_capacity_and_notify: 1 callbacks suppressed [ 309.778551][T24855] loop7: detected capacity change from 0 to 256 [ 309.937477][T24864] SELinux: invalid class [ 309.944458][T24864] SELinux: failed to load policy [ 310.223361][T24900] C: renamed from veth1_to_team [ 310.231805][T24900] netlink: 'syz.0.9363': attribute type 4 has an invalid length. [ 310.252371][T24900] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9363'. [ 310.262394][T24900] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 310.305022][T24907] nr0: tun_chr_ioctl cmd 1074025677 [ 310.319946][T24907] nr0: linktype set to 825 [ 310.375804][T24909] gtp0: entered allmulticast mode [ 310.470007][T24923] loop7: detected capacity change from 0 to 1024 [ 310.493933][T24923] EXT4-fs: Ignoring removed orlov option [ 310.497269][T24934] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.9378'. [ 310.519585][T24934] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.9378'. [ 310.557594][T24940] netlink: 'syz.4.9379': attribute type 1 has an invalid length. [ 310.572948][T24940] netlink: 'syz.4.9379': attribute type 2 has an invalid length. [ 310.583341][T24940] netlink: 'syz.4.9379': attribute type 3 has an invalid length. [ 310.592065][T24940] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9379'. [ 310.833921][T24964] netlink: 22 bytes leftover after parsing attributes in process `syz.7.9391'. [ 310.939315][T24970] loop7: detected capacity change from 0 to 1024 [ 310.955454][T24970] EXT4-fs: Ignoring removed orlov option [ 311.166508][T24960] loop4: detected capacity change from 0 to 512 [ 311.220908][T24960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.262762][T24960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 311.276079][T24960] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.440350][T24960] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.9389: Allocating blocks 41-42 which overlap fs metadata [ 311.459550][T24960] loop4: lost filesystem error report for type 5 error -117 [ 311.466971][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 311.484921][ C1] EXT4-fs (loop4): initial error at time 1781953667: ext4_mb_mark_diskspace_used:4222 [ 311.496385][ C1] EXT4-fs (loop4): last error at time 1781953667: ext4_mb_mark_diskspace_used:4222 [ 311.530347][T24960] EXT4-fs (loop4): Remounting filesystem read-only [ 311.558676][T24960] EXT4-fs (loop4): 1 truncate cleaned up [ 311.596426][T24960] EXT4-fs mount: 22 callbacks suppressed [ 311.596447][T24960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.649411][T25006] loop2: detected capacity change from 0 to 8192 [ 311.661735][T25010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9410'. [ 311.672913][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.682906][T25006] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.787774][T25023] gre0 speed is unknown, defaulting to 1000 [ 311.830710][T25026] netlink: 'syz.0.9417': attribute type 7 has an invalid length. [ 311.843648][T25026] netlink: 'syz.0.9417': attribute type 5 has an invalid length. [ 311.852172][T25026] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9417'. [ 311.984020][T25038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9431'. [ 312.235955][T25064] loop7: detected capacity change from 0 to 512 [ 312.264039][T25064] EXT4-fs: Ignoring removed bh option [ 312.287705][T25064] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 312.297913][T25064] EXT4-fs (loop7): 1 truncate cleaned up [ 312.304223][T25064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.318914][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 312.318930][ T28] audit: type=1400 audit(1781953668.622:2401): avc: denied { write } for pid=25063 comm="syz.7.9434" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.347412][T25064] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9434: bg 0: block 465: padding at end of block bitmap is not set [ 312.621194][ T28] audit: type=1400 audit(1781953668.922:2402): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 315.172061][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.211321][T25098] SELinux: security policydb version 15 (MLS) not backwards compatible [ 315.219743][ T28] audit: type=1400 audit(1781953672.525:2403): avc: denied { append } for pid=25101 comm="syz.1.9449" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 315.253136][T25098] SELinux: failed to load policy [ 315.375905][T25116] loop1: detected capacity change from 0 to 512 [ 315.396725][T25116] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 315.441755][T25116] EXT4-fs (loop1): 1 truncate cleaned up [ 315.456839][T25116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.524389][ T28] audit: type=1400 audit(1781953672.815:2404): avc: denied { write } for pid=25115 comm="syz.1.9456" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.545654][T25116] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.9456: invalid indirect mapped block 4294901760 (level 0) [ 315.554538][T24729] kernel write not supported for file /snd/seq (pid: 24729 comm: kworker/1:16) [ 315.572010][T25126] loop7: detected capacity change from 0 to 128 [ 315.581105][T25116] EXT4-fs (loop1): Remounting filesystem read-only [ 315.637409][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.733888][T25150] loop4: detected capacity change from 0 to 512 [ 315.767213][T25150] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 315.778296][T25147] loop7: detected capacity change from 0 to 4096 [ 315.785501][T25150] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 315.819631][T25147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.835253][ T28] audit: type=1400 audit(1781953673.145:2405): avc: denied { write } for pid=25146 comm="syz.7.9470" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.877218][T25163] program syz.4.9476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.910416][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.053681][T25187] loop2: detected capacity change from 0 to 512 [ 316.070439][T25187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 316.097733][T25187] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 316.126380][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 316.132909][ C0] EXT4-fs (loop2): initial error at time 1781953673: ext4_mb_generate_buddy:1317 [ 316.142084][ C0] EXT4-fs (loop2): last error at time 1781953673: ext4_mb_generate_buddy:1317 [ 316.151537][T25187] EXT4-fs (loop2): 1 truncate cleaned up [ 316.164343][T25187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.181206][T25200] loop4: detected capacity change from 0 to 512 [ 316.189570][T25200] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.282130][T25209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9496'. [ 316.300761][T25213] loop4: detected capacity change from 0 to 128 [ 316.406085][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.558055][ T28] audit: type=1326 audit(1781953673.865:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.1.9514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 316.583997][ T28] audit: type=1326 audit(1781953673.865:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.1.9514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 316.620410][ T28] audit: type=1326 audit(1781953673.865:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.1.9514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 316.647689][ T28] audit: type=1326 audit(1781953673.865:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.1.9514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 316.674132][ T28] audit: type=1326 audit(1781953673.865:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25246 comm="syz.1.9514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 316.776903][T25260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9519'. [ 316.937395][T25280] loop1: detected capacity change from 0 to 512 [ 316.952674][T25280] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.9528: inode has both inline data and extents flags [ 316.969715][T25280] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 316.969934][T25280] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.9528: couldn't read orphan inode 15 (err -117) [ 316.979124][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 316.979150][ C0] EXT4-fs (loop1): initial error at time 1781953674: ext4_orphan_get:1399: inode 15 [ 316.979199][ C0] EXT4-fs (loop1): last error at time 1781953674: ext4_orphan_get:1399: inode 15 [ 317.034317][T25280] loop1: lost filesystem error report for type 5 error -117 [ 317.034789][T25280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.071149][T25280] EXT4-fs (loop1): shut down requested (2) [ 317.169109][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.242844][T25307] tipc: Resetting bearer [ 317.265585][T25307] macvlan0: left promiscuous mode [ 317.276867][T25307] netlink: 'syz.4.9540': attribute type 1 has an invalid length. [ 317.299062][T25307] netlink: 'syz.4.9540': attribute type 2 has an invalid length. [ 317.412322][T25330] program syz.0.9551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.531153][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 317.531171][ T28] audit: type=1326 audit(1781953674.835:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 317.565101][T25316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.571534][ T28] audit: type=1326 audit(1781953674.835:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 317.599391][ T28] audit: type=1326 audit(1781953674.835:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 317.601023][T25316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.625866][ T28] audit: type=1326 audit(1781953674.835:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 317.659759][ T28] audit: type=1326 audit(1781953674.845:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 317.686331][ T28] audit: type=1326 audit(1781953674.945:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49b6fcce59 code=0x7ffc0000 [ 317.712250][ T28] audit: type=1326 audit(1781953674.945:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f49b6fccbc2 code=0x7ffc0000 [ 317.745330][ T28] audit: type=1326 audit(1781953674.945:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f49b6fccc57 code=0x7ffc0000 [ 317.777605][ T28] audit: type=1326 audit(1781953674.945:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f49b6f89b51 code=0x7ffc0000 [ 317.827743][ T28] audit: type=1326 audit(1781953674.945:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25349 comm="syz.1.9561" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f49b6fcdc49 code=0x7ffc0000 [ 317.965476][T25371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9571'. [ 318.679169][T25416] loop1: detected capacity change from 0 to 512 [ 318.688852][T25416] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 318.697508][T25416] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.9591: invalid block [ 318.722403][T25416] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 318.722704][T25416] EXT4-fs (loop1): 1 truncate cleaned up [ 318.732012][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 318.732031][ C0] EXT4-fs (loop1): initial error at time 1781953676: ext4_get_branch:178: inode 13: block 1024 [ 318.732074][ C0] EXT4-fs (loop1): last error at time 1781953676: ext4_get_branch:178: inode 13: block 1024 [ 318.760998][T25421] Invalid ELF header magic: != ELF [ 318.765729][T25416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.797213][T25416] EXT4-fs error (device loop1): __ext4_remount:6844: comm syz.1.9591: Abort forced by user [ 318.826676][T25416] EXT4-fs (loop1): Remounting filesystem read-only [ 318.851505][T25416] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 318.917224][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.002388][T25433] loop2: detected capacity change from 0 to 512 [ 319.046132][T25433] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 319.404672][T20531] kernel write not supported for file bpf-map (pid: 20531 comm: kworker/0:14) [ 319.452815][T25469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.533155][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.145658][T25525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9638'. [ 320.205448][T25531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9640'. [ 320.260903][T25535] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 320.330786][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.340106][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.351717][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.360931][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.368875][T25541] loop7: unable to read partition table [ 320.376253][T25541] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 320.389857][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.399095][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.408270][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.417452][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.426394][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.435766][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.445455][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.454665][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.464097][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.473386][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.523916][T25555] set_capacity_and_notify: 6 callbacks suppressed [ 320.523933][T25555] loop4: detected capacity change from 0 to 1024 [ 320.557993][T25560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.565276][T25560] IPv6: NLM_F_CREATE should be set when creating new route [ 320.572619][T25560] IPv6: NLM_F_CREATE should be set when creating new route [ 320.580250][T25555] EXT4-fs: inline encryption not supported [ 320.584142][T25560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.613967][T25555] EXT4-fs (loop4): orphan cleanup on readonly fs [ 320.621632][T25555] EXT4-fs (loop4): 1 truncate cleaned up [ 320.635840][T25555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.704047][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.723516][T25576] loop7: detected capacity change from 0 to 8192 [ 321.037603][T25599] can0: slcan on ttyS3. [ 321.042248][T25603] usb usb8: usbfs: process 25603 (syz.7.9671) did not claim interface 0 before use [ 321.054949][T25604] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9674'. [ 321.119241][T25599] can0 (unregistered): slcan off ttyS3. [ 321.127283][T25599] can0: slcan on ttyS3. [ 321.151186][T25617] loop4: detected capacity change from 0 to 128 [ 321.166558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.168850][T25617] FAT-fs (loop4): Directory bread(block 32) failed [ 321.188232][T25598] can0 (unregistered): slcan off ttyS3. [ 321.226198][T25617] FAT-fs (loop4): Directory bread(block 33) failed [ 321.237960][T25617] FAT-fs (loop4): Directory bread(block 34) failed [ 321.244557][T25617] FAT-fs (loop4): Directory bread(block 35) failed [ 321.252735][T25617] FAT-fs (loop4): Directory bread(block 36) failed [ 321.261287][T25617] FAT-fs (loop4): Directory bread(block 37) failed [ 321.268387][T25617] FAT-fs (loop4): Directory bread(block 38) failed [ 321.275188][T25617] FAT-fs (loop4): Directory bread(block 39) failed [ 321.284390][T25608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.298629][T25608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.330420][T25617] FAT-fs (loop4): Directory bread(block 40) failed [ 321.349670][T25617] FAT-fs (loop4): Directory bread(block 41) failed [ 321.628677][T25665] gre0 speed is unknown, defaulting to 1000 [ 321.872825][T25671] netlink: 'syz.2.9691': attribute type 13 has an invalid length. [ 321.883286][T25671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9691'. [ 321.893918][T25671] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 322.419347][T25719] loop1: detected capacity change from 0 to 512 [ 322.458914][T25719] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.512705][T25717] loop7: detected capacity change from 0 to 4096 [ 322.541021][T25717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.562249][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 322.562266][ T28] audit: type=1400 audit(1781953679.865:2476): avc: denied { write } for pid=25716 comm="syz.7.9712" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 322.599407][T25726] loop1: detected capacity change from 0 to 8192 [ 322.608037][T25726] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 322.941383][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.074845][T25743] loop7: detected capacity change from 0 to 512 [ 323.088123][T25743] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.143291][T25743] EXT4-fs (loop7): 1 orphan inode deleted [ 323.164450][T25743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.208869][ T28] audit: type=1400 audit(1781953680.515:2477): avc: denied { watch watch_reads } for pid=25742 comm="syz.7.9720" path="/283/file0" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.249583][ T28] audit: type=1400 audit(1781953680.515:2478): avc: denied { write } for pid=25742 comm="syz.7.9720" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.252395][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.312949][ T28] audit: type=1400 audit(1781953680.615:2479): avc: denied { getopt } for pid=25752 comm="syz.4.9727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 323.414921][T25762] loop2: detected capacity change from 0 to 512 [ 323.454224][T25762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 323.491582][T25762] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 323.516395][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 323.522912][ C1] EXT4-fs (loop2): initial error at time 1781953680: ext4_mb_generate_buddy:1317 [ 323.532274][ C1] EXT4-fs (loop2): last error at time 1781953680: ext4_mb_generate_buddy:1317 [ 323.551913][T25767] loop4: detected capacity change from 0 to 512 [ 323.579259][T25762] EXT4-fs (loop2): 1 truncate cleaned up [ 323.591833][T25767] EXT4-fs: Ignoring removed bh option [ 323.594106][T25762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.613778][T25762] EXT4-fs error (device loop2) in ext4_setattr:6172: error 28 [ 323.622278][T25767] EXT4-fs: inline encryption not supported [ 323.632769][T25767] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 323.665558][T25767] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 323.666340][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.681586][T25767] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9732: bg 0: block 248: padding at end of block bitmap is not set [ 323.703455][T25767] loop4: lost filesystem error report for type 5 error -117 [ 323.703810][T25767] Quota error (device loop4): write_blk: dquota write failed [ 323.711159][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 323.711181][ C0] EXT4-fs (loop4): last error at time 1781953681: ext4_validate_block_bitmap:441 [ 323.735016][T25767] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 323.745500][T25767] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.9732: Failed to acquire dquot type 1 [ 323.756891][T25767] loop4: lost filesystem error report for type 5 error -28 [ 323.761097][T25767] EXT4-fs (loop4): 1 truncate cleaned up [ 323.811178][T25767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 323.828323][ T28] audit: type=1400 audit(1781953681.135:2480): avc: denied { write } for pid=24729 comm="kworker/1:16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=74707 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 323.930284][T25803] bond1: entered promiscuous mode [ 323.954448][T25807] loop7: detected capacity change from 0 to 512 [ 323.964142][T25807] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 323.987956][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 324.018457][T25807] EXT4-fs error (device loop7): __ext4_iget:5533: inode #11: block 2: comm syz.7.9749: invalid block [ 324.031522][T25807] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 324.036403][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 324.052053][ C1] EXT4-fs (loop7): initial error at time 1781953681: __ext4_iget:5533: inode 11: block 2 [ 324.057934][T25807] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.9749: couldn't read orphan inode 11 (err -117) [ 324.061941][ C1] EXT4-fs (loop7): last error at time 1781953681: __ext4_iget:5533: inode 11: block 2 [ 324.089902][T25807] loop7: lost filesystem error report for type 5 error -117 [ 324.141277][T25821] bond0: entered promiscuous mode [ 324.177414][T25807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.199378][T25821] bond_slave_0: entered promiscuous mode [ 324.212295][T25821] bond_slave_1: entered promiscuous mode [ 324.213115][T25822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.239194][T25821] bond0: left promiscuous mode [ 324.255706][T25821] bond_slave_0: left promiscuous mode [ 324.259890][T25807] Invalid ELF header magic: != ELF [ 324.262707][ T28] audit: type=1400 audit(1781953681.555:2481): avc: denied { write } for pid=25805 comm="syz.7.9749" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.274812][T25822] ext4 filesystem being mounted at /1918/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.299074][T25821] bond_slave_1: left promiscuous mode [ 324.305256][ T28] audit: type=1400 audit(1781953681.555:2482): avc: denied { module_load } for pid=25805 comm="syz.7.9749" path="/288/bus/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 324.366967][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.376091][ T28] audit: type=1400 audit(1781953681.675:2483): avc: denied { write } for pid=25817 comm="syz.2.9755" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.405967][T25822] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9755: bg 0: block 345: padding at end of block bitmap is not set [ 324.432045][T25822] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 1 with error 28 [ 324.450861][T25838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9764'. [ 324.466490][T25822] EXT4-fs (loop2): This should not happen!! Data will be lost [ 324.466490][T25822] [ 324.486447][T25822] EXT4-fs (loop2): Total free blocks count 0 [ 324.499054][T25822] EXT4-fs (loop2): Free/Dirty block details [ 324.513174][T25822] EXT4-fs (loop2): free_blocks=0 [ 324.530815][T25822] EXT4-fs (loop2): dirty_blocks=16 [ 324.553216][T25822] EXT4-fs (loop2): Block reservation details [ 324.554737][T20531] hid_parser_main: 6 callbacks suppressed [ 324.554765][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.570998][T25822] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 324.583088][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.598865][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.630680][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.647833][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.665642][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.679724][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 324.692098][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.704231][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.710256][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.712183][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.760143][T20531] hid-generic 0006:0008:0001.000B: unknown main item tag 0x0 [ 324.797434][T20531] hid-generic 0006:0008:0001.000B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 324.859743][T25866] fido_id[25866]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 325.078809][T25891] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.198038][T25905] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 325.239078][T25905] EXT4-fs (loop7): 1 truncate cleaned up [ 325.260614][T25905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.276073][T25909] syz.4.9798: attempt to access beyond end of device [ 325.276073][T25909] loop4: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 325.298594][T25909] syz.4.9798: attempt to access beyond end of device [ 325.298594][T25909] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 325.312417][T25909] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 325.321139][T25909] syz.4.9798: attempt to access beyond end of device [ 325.321139][T25909] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 325.337194][T25909] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 325.338976][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.345791][T25909] syz.4.9798: attempt to access beyond end of device [ 325.345791][T25909] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 325.363776][T25918] program syz.0.9803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.368532][T25909] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 325.406134][T25909] syz.4.9798: attempt to access beyond end of device [ 325.406134][T25909] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 325.455118][T25909] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 325.465492][T25909] syz.4.9798: attempt to access beyond end of device [ 325.465492][T25909] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 325.479136][T25909] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 325.496971][T25909] syz.4.9798: attempt to access beyond end of device [ 325.496971][T25909] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 325.522730][T25909] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 325.531597][T25909] syz.4.9798: attempt to access beyond end of device [ 325.531597][T25909] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 325.545286][T25909] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 325.556094][T25909] syz.4.9798: attempt to access beyond end of device [ 325.556094][T25909] loop4: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 325.579229][T25909] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 325.703294][T25943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9812'. [ 325.726050][T25943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9812'. [ 325.746293][T25943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9812'. [ 325.759642][T25943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9812'. [ 325.810045][T25956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9818'. [ 326.039235][T25983] program syz.2.9830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.149188][T26002] netlink: 'syz.4.9838': attribute type 12 has an invalid length. [ 326.262492][T26019] dummy0: entered allmulticast mode [ 326.277047][T26018] dummy0: left allmulticast mode [ 326.299678][T26026] netlink: 'syz.1.9850': attribute type 2 has an invalid length. [ 326.438106][T26034] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 326.760447][T26086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9880'. [ 326.849941][T26098] set_capacity_and_notify: 6 callbacks suppressed [ 326.849960][T26098] loop7: detected capacity change from 0 to 512 [ 326.890963][T26098] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 326.902951][T26098] EXT4-fs (loop7): 1 truncate cleaned up [ 326.909120][T26098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.924299][T26104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9887'. [ 326.981111][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.986897][T26109] loop2: detected capacity change from 0 to 128 [ 327.004457][T26109] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.027597][T26109] ext4 filesystem being mounted at /1940/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.063240][T26117] loop1: detected capacity change from 0 to 128 [ 327.067797][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.084448][T26121] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9895'. [ 327.097010][T26121] bond0: entered promiscuous mode [ 327.102202][T26117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c028, mo2=0002] [ 327.110588][T26117] System zones: 1-3, 19-19, 35-36 [ 327.115918][T26121] bond_slave_0: entered promiscuous mode [ 327.137169][T26117] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.150885][T26121] bond_slave_1: entered promiscuous mode [ 327.160136][T26117] ext4 filesystem being mounted at /2053/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.166463][T26121] bond0: left promiscuous mode [ 327.182387][T26117] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.9892: No space for directory leaf checksum. Please run e2fsck -D. [ 327.182937][T26121] bond_slave_0: left promiscuous mode [ 327.203482][T26121] bond_slave_1: left promiscuous mode [ 327.209590][T26117] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.9892: Directory block failed checksum [ 327.242148][T26117] EXT4-fs (loop1): Remounting filesystem read-only [ 327.249633][T26117] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.9892: No space for directory leaf checksum. Please run e2fsck -D. [ 327.307183][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.622263][T26155] netlink: 'syz.4.9910': attribute type 2 has an invalid length. [ 327.633260][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9910'. [ 327.676184][T26157] loop1: detected capacity change from 0 to 8192 [ 328.053144][T26163] gre0 speed is unknown, defaulting to 1000 [ 328.186962][T26163] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.194182][T26163] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.201620][T26163] bridge_slave_0: entered allmulticast mode [ 328.208329][T26163] bridge_slave_0: entered promiscuous mode [ 328.215801][T26163] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.223043][T26163] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.230551][T26163] bridge_slave_1: entered allmulticast mode [ 328.237409][T26163] bridge_slave_1: entered promiscuous mode [ 328.264566][T26163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.285842][T26163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.321179][T26163] team0: Port device team_slave_0 added [ 328.339985][T26163] team0: Port device team_slave_1 added [ 328.378559][T26163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.385813][T26163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.412006][T26163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.423498][T26163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.430659][T26163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.457991][T26163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.474570][T26163] hsr_slave_0: entered promiscuous mode [ 328.475008][T26163] hsr_slave_1: entered promiscuous mode [ 328.475385][T26163] debugfs: 'hsr0' already exists in 'hsr' [ 328.475403][T26163] Cannot create hsr debugfs directory [ 328.513964][T26198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9922'. [ 328.627527][T26212] netlink: 'syz.2.9928': attribute type 83 has an invalid length. [ 328.658967][T26163] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 328.671590][T26163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.679682][T26163] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 328.694612][T26163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.703017][T26163] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 328.712001][T26163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.723171][T26163] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 328.734391][T26163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.770749][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 328.770767][ T28] audit: type=1400 audit(1781953686.075:2500): avc: denied { bind } for pid=26228 comm="syz.7.9935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 328.818547][T26163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.847878][T26163] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.860825][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.867980][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.880013][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.887283][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.946830][T26240] 9p: Bad value for 'wfdno' [ 328.972921][ T28] audit: type=1400 audit(1781953686.275:2501): avc: denied { recv } for pid=26241 comm="modprobe" saddr=10.128.0.163 src=38734 daddr=10.128.0.204 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 329.104874][T26163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.379095][T26163] veth0_vlan: entered promiscuous mode [ 329.389563][T26163] veth1_vlan: entered promiscuous mode [ 329.403875][T26163] veth0_macvtap: entered promiscuous mode [ 329.422682][T26163] veth1_macvtap: entered promiscuous mode [ 329.444950][T26163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.456151][T26163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.470364][ T310] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.480188][ T310] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.505069][ T310] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.514188][ T310] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.583564][T26295] loop2: detected capacity change from 0 to 256 [ 329.616049][T26295] FAT-fs (loop2): Directory bread(block 64) failed [ 329.627387][T26295] FAT-fs (loop2): Directory bread(block 65) failed [ 329.639419][T26295] FAT-fs (loop2): Directory bread(block 66) failed [ 329.669937][T26295] FAT-fs (loop2): Directory bread(block 67) failed [ 329.701138][T26295] FAT-fs (loop2): Directory bread(block 68) failed [ 329.714655][T26295] FAT-fs (loop2): Directory bread(block 69) failed [ 329.721732][T26295] FAT-fs (loop2): Directory bread(block 70) failed [ 329.728769][T26295] FAT-fs (loop2): Directory bread(block 71) failed [ 329.735453][T26295] FAT-fs (loop2): Directory bread(block 72) failed [ 329.743084][T26295] FAT-fs (loop2): Directory bread(block 73) failed [ 329.785154][T26306] program syz.8.9957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 330.032665][T26333] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9971'. [ 330.534448][T26352] loop7: detected capacity change from 0 to 1024 [ 330.581655][T26358] loop2: detected capacity change from 0 to 1024 [ 330.656248][T26358] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 330.677888][T26358] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.9984: lblock 2 mapped to illegal pblock 2 (length 1) [ 330.702032][T26358] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 330.702444][T26358] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 330.711541][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 330.711564][ C1] EXT4-fs (loop2): initial error at time 1781953688: ext4_map_blocks:791: inode 3: block 2 [ 330.711620][ C1] EXT4-fs (loop2): last error at time 1781953688: ext4_map_blocks:791: inode 3: block 2 [ 330.738413][T26359] loop8: detected capacity change from 0 to 8192 [ 330.754248][T26358] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.9984: lblock 0 mapped to illegal pblock 48 (length 1) [ 330.787166][T26352] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 330.787758][T26358] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 330.813718][T26358] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 330.851197][T26358] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.9984: Failed to acquire dquot type 0 [ 330.862948][T26358] loop2: lost filesystem error report for type 5 error -117 [ 330.864369][T26358] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 330.864404][T21756] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 330.871756][T26358] loop2: lost filesystem error report for type 5 error -117 [ 330.891044][T26358] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.9984: mark_inode_dirty error [ 330.914484][T26371] ================================================================== [ 330.922627][T26371] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 330.931616][T26371] [ 330.933965][T26371] read-write to 0xffff88811aa250f0 of 8 bytes by task 26359 on cpu 0: [ 330.942148][T26371] __filemap_add_folio+0x66e/0x880 [ 330.945713][T26358] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 330.947287][T26371] filemap_add_folio+0x1d3/0x350 [ 330.947325][T26371] __filemap_get_folio_mpol+0x32e/0x840 [ 330.947358][T26371] cont_write_begin+0x58b/0x920 [ 330.947393][T26371] fat_write_begin+0x52/0xe0 [ 330.976404][T26371] cont_write_begin+0x18d/0x920 [ 330.981276][T26371] fat_write_begin+0x52/0xe0 [ 330.985881][T26371] generic_cont_expand_simple+0xb0/0x150 [ 330.991530][T26371] fat_cont_expand+0x3e/0x170 [ 330.996222][T26371] fat_setattr+0x2a4/0x850 [ 331.000647][T26371] notify_change+0x842/0x8c0 [ 331.005251][T26371] do_ftruncate+0x344/0x410 [ 331.009765][T26371] __x64_sys_ftruncate+0x65/0xc0 [ 331.014729][T26371] x64_sys_call+0x2beb/0x3020 [ 331.019502][T26371] do_syscall_64+0x136/0x3c0 [ 331.024211][T26371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.030136][T26371] [ 331.032473][T26371] read to 0xffff88811aa250f0 of 8 bytes by task 26371 on cpu 1: [ 331.040105][T26371] filemap_write_and_wait_range+0x59/0x370 [ 331.045931][T26371] generic_file_read_iter+0xf4/0x320 [ 331.051232][T26371] copy_splice_read+0x47a/0x6b0 [ 331.056090][T26371] splice_direct_to_actor+0x27c/0x680 [ 331.061510][T26371] do_splice_direct+0x119/0x1a0 [ 331.066370][T26371] do_sendfile+0x37d/0x640 [ 331.070867][T26371] __x64_sys_sendfile64+0x105/0x150 [ 331.076075][T26371] x64_sys_call+0x2dc4/0x3020 [ 331.080785][T26371] do_syscall_64+0x136/0x3c0 [ 331.085475][T26371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.091376][T26371] [ 331.093700][T26371] value changed: 0x000000000000002f -> 0x0000000000000030 [ 331.100989][T26371] [ 331.103320][T26371] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.109484][T26371] CPU: 1 UID: 0 PID: 26371 Comm: syz.8.9978 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 331.120464][T26371] Tainted: [W]=WARN [ 331.124359][T26371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.134609][T26371] ================================================================== [ 331.156750][ T28] audit: type=1400 audit(1781953688.455:2502): avc: denied { write } for pid=3285 comm="syz-executor" path="pipe:[2408]" dev="pipefs" ino=2408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 331.205642][T26358] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 331.229800][T26358] EXT4-fs (loop2): 1 orphan inode deleted [ 331.247278][T26358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.249601][ T68] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 331.347855][ T68] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 331.393351][ T68] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 331.534695][ T8567] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.545599][ T8567] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.2222: Invalid inode table block 1 in block_group 0 [ 331.558953][ T8567] loop2: lost filesystem error report for type 5 error -117 [ 331.559137][ T8567] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 331.578972][ T8567] loop2: lost filesystem error report for type 5 error -117 [ 331.579152][ T8567] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz.2.2222: mark_inode_dirty error [ 331.597806][ T8567] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 331.669339][ T310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.689351][ T310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.700072][ T310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53370 - 0 [ 331.711784][ T310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 41213 - 0 [ 331.769348][ T310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.780001][ T310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.790331][ T310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53370 - 0 [ 331.801235][ T310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 41213 - 0 [ 331.850613][ T310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.861067][ T310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.871950][ T310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53370 - 0 [ 331.882588][ T310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 41213 - 0 [ 331.929125][ T310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.939525][ T310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.949976][ T310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53370 - 0 [ 331.960564][ T310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 41213 - 0 [ 332.026240][ T310] bridge_slave_1: left allmulticast mode [ 332.032052][ T310] bridge_slave_1: left promiscuous mode [ 332.037963][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.045577][ T310] bridge_slave_0: left allmulticast mode [ 332.051481][ T310] bridge_slave_0: left promiscuous mode [ 332.057327][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.065735][ T310] pim6reg: left allmulticast mode [ 332.120786][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.131029][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.141032][ T310] bond0 (unregistering): Released all slaves [ 332.148552][ T310] bond1 (unregistering): Released all slaves [ 332.209403][ T310] tipc: Left network mode [ 332.232222][ T28] audit: type=1400 audit(1781953689.535:2503): avc: denied { write } for pid=26379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.258269][ T28] audit: type=1400 audit(1781953689.565:2504): avc: denied { write } for pid=26390 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.280488][ T310] hsr_slave_0: left promiscuous mode [ 332.286194][ T310] hsr_slave_1: left promiscuous mode [ 332.297156][ T310] veth1_macvtap: left promiscuous mode [ 332.302933][ T310] veth0_macvtap: left promiscuous mode [ 332.308696][ T310] veth1_vlan: left promiscuous mode [ 332.313935][ T310] veth0_vlan: left promiscuous mode [ 332.356128][ T310] team0 (unregistering): Port device vlan0 removed [ 332.379293][ T310] team0 (unregistering): Port device team_slave_1 removed [ 332.389059][ T310] team0 (unregistering): Port device team_slave_0 removed [ 332.410866][ T310] team0 (unregistering): Port device veth0 removed [ 332.425464][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 332.498231][ T28] audit: type=1400 audit(1781953689.805:2505): avc: denied { write } for pid=26393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.535729][ T28] audit: type=1400 audit(1781953689.835:2506): avc: denied { write } for pid=26404 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.568764][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 332.667957][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 332.774518][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 332.789920][ T310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.800403][ T310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.851816][ T310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.862317][ T310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.899729][ T310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.910522][ T310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.969839][ T310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.980169][ T310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.086416][ T310] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.138800][ T310] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.189404][ T310] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.209911][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 333.259624][ T310] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.312329][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 333.352867][ T310] batadv1: left allmulticast mode [ 333.358476][ T310] batadv1: left promiscuous mode [ 333.363635][ T310] bridge0: port 3(batadv1) entered disabled state [ 333.372111][ T310] bridge_slave_1: left allmulticast mode [ 333.377919][ T310] bridge_slave_1: left promiscuous mode [ 333.383670][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.391936][ T310] bridge_slave_0: left allmulticast mode [ 333.398462][ T310] bridge_slave_0: left promiscuous mode [ 333.404210][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.413864][ T310] bridge_slave_1: left allmulticast mode [ 333.419703][ T310] bridge_slave_1: left promiscuous mode [ 333.425365][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.433716][ T310] bridge_slave_0: left allmulticast mode [ 333.439898][ T310] bridge_slave_0: left promiscuous mode [ 333.445588][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.455298][ T310] batman_adv: batadv0: Interface deactivated: geneve2 [ 333.514154][ T68] smc: removing ib device syz1 [ 333.528756][ T310] batman_adv: batadv0: Removing interface: geneve2 [ 333.548995][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.559917][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.571331][ T310] bond0 (unregistering): Released all slaves [ 333.580993][ T310] bond1 (unregistering): Released all slaves [ 333.626332][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.637165][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.648126][ T310] bond0 (unregistering): Released all slaves [ 333.657373][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 333.776495][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 333.861145][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 333.861163][ T28] audit: type=1400 audit(1781953691.165:2519): avc: denied { write } for pid=26498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.892254][ T28] audit: type=1400 audit(1781953691.185:2520): avc: denied { write } for pid=26509 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 333.896113][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 333.989578][ T28] audit: type=1400 audit(1781953691.295:2521): avc: denied { write } for pid=26512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.013509][ T28] audit: type=1400 audit(1781953691.315:2522): avc: denied { write } for pid=26523 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.024099][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 334.122311][ T28] audit: type=1400 audit(1781953691.425:2523): avc: denied { write } for pid=26528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.145702][ T28] audit: type=1400 audit(1781953691.425:2524): avc: denied { write } for pid=26539 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.156700][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 334.237048][ T310] 0: left promiscuous mode [ 334.245162][ T28] audit: type=1400 audit(1781953691.545:2525): avc: denied { write } for pid=26542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.282802][ T28] audit: type=1400 audit(1781953691.585:2526): avc: denied { write } for pid=26553 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.296985][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 334.317006][ T310] tipc: Disabling bearer [ 334.322354][ T310] tipc: Left network mode [ 334.328455][ T310] IPVS: stopping backup sync thread 22634 ... [ 334.338592][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.346035][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.353908][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.361793][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.372993][ T310] hsr_slave_0: left promiscuous mode [ 334.379198][ T28] audit: type=1400 audit(1781953691.685:2527): avc: denied { write } for pid=26555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.402458][ T310] hsr_slave_1: left promiscuous mode [ 334.409202][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.417016][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.424347][ T28] audit: type=1400 audit(1781953691.725:2528): avc: denied { write } for pid=26566 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.447904][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.455533][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.469123][ T310] hsr0: left allmulticast mode [ 334.474058][ T310] veth1_macvtap: left promiscuous mode [ 334.480312][ T310] veth0_macvtap: left promiscuous mode [ 334.486037][ T310] veth1_vlan: left promiscuous mode [ 334.492736][ T310] veth1_macvtap: left promiscuous mode [ 334.498262][ T310] veth0_macvtap: left promiscuous mode [ 334.503804][ T310] veth1_vlan: left promiscuous mode [ 334.510130][ T310] veth0_vlan: left promiscuous mode [ 334.595390][ T310] team0 (unregistering): Port device vlan0 removed [ 334.620940][ T310] team0 (unregistering): Port device team_slave_1 removed [ 334.632177][ T310] team0 (unregistering): Port device team_slave_0 removed [ 334.658606][ T310] team0 (unregistering): Port device veth0 removed [ 334.701026][ T310] team0 (unregistering): Port device team_slave_1 removed [ 334.710122][ T310] team0 (unregistering): Port device team_slave_0 removed [ 335.199979][ T310] IPVS: stop unused estimator thread 0... [ 335.288824][ T310] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.339111][ T310] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.379178][ T310] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.418940][ T310] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.497464][ T310] bridge_slave_1: left allmulticast mode [ 335.503210][ T310] bridge_slave_1: left promiscuous mode [ 335.509012][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.516998][ T310] bridge_slave_0: left allmulticast mode [ 335.522820][ T310] bridge_slave_0: left promiscuous mode [ 335.528530][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.569276][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.580094][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.589620][ T310] bond0 (unregistering): Released all slaves [ 335.631098][ T310] hsr_slave_0: left promiscuous mode [ 335.637422][ T310] hsr_slave_1: left promiscuous mode [ 335.643293][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.651103][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.659172][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.667097][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.677990][ T310] veth1_macvtap: left promiscuous mode [ 335.683578][ T310] veth0_macvtap: left promiscuous mode [ 335.689383][ T310] veth1_vlan: left promiscuous mode [ 335.694807][ T310] veth0_vlan: left promiscuous mode [ 335.752751][ T310] team0 (unregistering): Port device team_slave_1 removed [ 335.762455][ T310] team0 (unregistering): Port device team_slave_0 removed [ 335.793631][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 335.915340][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 336.018041][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 336.118646][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24