last executing test programs: 2.399720284s ago: executing program 4 (id=1344): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f000007b000/0x4000)=nil, 0x4000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0xf, 0x6}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612", 0x1d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2.271143797s ago: executing program 4 (id=1345): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x24, 0x2, 0x6) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c0002800800014000000004240001800901006d6173710000000014000280080002400000001708000140000000100900010073797a30000000000900020073797a320000000014000000110001000000000000000000c2a414c0813b0000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r9 = accept(r3, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x6, 0xf00, 0x1, 0x0, 0xdfa]}, &(0x7f0000000540)=0x78) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 1.598810019s ago: executing program 1 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000b0601080000000000000000020000000900020073797a3100000000050001"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.54103415s ago: executing program 1 (id=1375): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x24, 0x2, 0x6) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c0002800800014000000004240001800901006d6173710000000014000280080002400000001708000140000000100900010073797a30000000000900020073797a320000000014000000110001000000000000000000c2a414c0813b0000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r7 = accept(r3, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x6, 0xf00, 0x1, 0x0, 0xdfa]}, &(0x7f0000000540)=0x78) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 1.415224695s ago: executing program 2 (id=1382): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, &(0x7f00000001c0)) 1.309500758s ago: executing program 2 (id=1386): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000000001"], 0x40}, 0xfffe) 1.304526718s ago: executing program 4 (id=1387): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x24, 0x2, 0x6) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) sendmsg$AUDIT_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008054}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c0002800800014000000004240001800901006d6173710000000014000280080002400000001708000140000000100900010073797a30000000000900020073797a320000000014000000110001000000000000000000c2a414c0813b0000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r8 = accept(r3, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x6, 0xf00, 0x1, 0x0, 0xdfa]}, &(0x7f0000000540)=0x78) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 1.2391408s ago: executing program 2 (id=1390): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.093453285s ago: executing program 1 (id=1393): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f000007b000/0x4000)=nil, 0x4000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0xf, 0x6}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44", 0x2b}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 919.90817ms ago: executing program 1 (id=1396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x30, 0x7, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) 915.83266ms ago: executing program 0 (id=1397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000805000100070000000900020073797a3000000000140007800800124000150000050015003f100000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) 398.120867ms ago: executing program 3 (id=1402): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='lock '], 0x9) 382.428647ms ago: executing program 1 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000d00)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0x3}, 0x3, 0xc, 0x6, 0x66, 0x1e, 'syz1\x00', "f525eb6c84ec4458a739ca52f123d09a99bf776a777c0b0ed2b689d3c709f5ee", "99ad9855d1aa0302d4af8c108265ebd71b14edc7abc565395649106782908663", [{0x4, 0x5, {0x3, 0x9}}, {0x2, 0xf, {0x3, 0x7}}, {0x8, 0x5, {0x1, 0x8}}, {0x40, 0x3, {0x1}}, {0x7, 0x7, {0x0, 0xe86}}, {0x6, 0x4, {0x2, 0x8}}, {0x28a, 0x6, {0x3, 0x7}}, {0x200, 0x9, {0x3, 0x7ff}}, {0x7f, 0x85, {0x2, 0x8}}, {0x7, 0x6, {0x3, 0x5}}, {0x1, 0x49f2, {0x3, 0x9}}, {0x7fff, 0x7f, {0x2, 0x1}}, {0x9, 0x0, {0x2, 0x80}}, {0x9, 0x6, {0x1, 0x401}}, {0xfffc, 0x6, {0x3, 0x10000}}, {0xa24, 0x1, {0x3}}, {0x51d, 0xf000, {0x0, 0xe09}}, {0x6, 0x7b, {0x1, 0x7}}, {0x9, 0x8, {0x2, 0x9}}, {0x755, 0x8, {0x1, 0xb3}}, {0xae41, 0x46, {0x3, 0xfffffff8}}, {0x3, 0xf2ba, {0x3, 0x7}}, {0x7, 0x5, {0x0, 0x8}}, {0x7f, 0x6, {0x1, 0xfa1d}}, {0x1, 0x400, {0x3, 0xfffffffd}}, {0x9, 0x576, {0x1, 0xf}}, {0x101, 0x8, {0x1, 0x401}}, {0x1, 0x1, {0x0, 0x8}}, {0x4, 0xa1e, {0x0, 0x7}}, {0x6, 0xed08, {0x3, 0x40}}, {0x8, 0xa5f, {0x0, 0x7ff}}, {0xff5f, 0xc44, {0x1, 0x5}}, {0x0, 0x4, {0x0, 0xfffffff6}}, {0x7, 0x1}, {0x95, 0x0, {0x1, 0x4f95}}, {0x8000, 0x9, {0x1, 0x5}}, {0x4, 0x3, {0x2, 0x4}}, {0x1, 0x6, {0x1, 0x3}}, {0x100, 0x45d2, {0x2, 0xff}}, {0x10, 0x2}]}}}]}, 0x268}}, 0x0) 355.957568ms ago: executing program 1 (id=1404): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x24, 0x2, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b1600000000000000000200000a4000048018000180080001006f7366000c0002800800014000000004240001800901006d6173710000000014000280080002400000001708000140000000100900010073797a30000000000900020073797a320000000014000000110001000000000000000000c2a414c0813b0000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r7 = accept(r3, &(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f00000003c0)=0x80) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0x6, 0xf00, 0x1, 0x0, 0xdfa]}, &(0x7f0000000540)=0x78) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) 355.681138ms ago: executing program 3 (id=1405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000007009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000014080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 302.93629ms ago: executing program 2 (id=1406): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f000007b000/0x4000)=nil, 0x4000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80000000, 0xf, 0x6}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdb", 0x32}], 0x1}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40015) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 302.709479ms ago: executing program 0 (id=1407): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 302.17506ms ago: executing program 3 (id=1408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 224.707242ms ago: executing program 0 (id=1409): perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) io_uring_setup(0x6d0f, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x3, 0x31c}) 178.614794ms ago: executing program 3 (id=1410): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000140)) 151.635084ms ago: executing program 4 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 148.215015ms ago: executing program 3 (id=1412): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e24, 0xc, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000000000029000000390000002f020201"], 0x28}, 0x44040) 126.275905ms ago: executing program 0 (id=1413): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x18, 0x0, 0x0) 119.164836ms ago: executing program 2 (id=1414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 84.388757ms ago: executing program 4 (id=1415): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1e, &(0x7f0000001b80)=""/238, &(0x7f0000001c80)=0xee) 75.748477ms ago: executing program 0 (id=1416): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffb, 0x1, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0xfffffffe, 0x30520cf7f25f0c64, 0x0, 0x0}) 68.936497ms ago: executing program 3 (id=1417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 31.171948ms ago: executing program 4 (id=1418): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000440)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x0) 28.050828ms ago: executing program 2 (id=1419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="6ebe5ec3140551c29c5ccf5552fc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1420): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10) kernel console output (not intermixed with test programs): t tclass=blk_file permissive=1 [ 255.929033][ T6162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.129054][ T6177] loop2: detected capacity change from 0 to 512 [ 256.143883][ T6177] ext4: Unknown parameter 'euid' [ 256.154140][ T6173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.168372][ T6173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.184031][ T28] audit: type=1400 audit(2000000170.775:963): avc: denied { getopt } for pid=6172 comm="syz.1.550" lport=48 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 256.234383][ T6177] bridge0: port 3(vlan0) entered blocking state [ 256.307574][ T6177] bridge0: port 3(vlan0) entered disabled state [ 256.314214][ T6177] vlan0: entered allmulticast mode [ 256.319658][ T6177] geneve0: entered allmulticast mode [ 256.325978][ T6177] vlan0: entered promiscuous mode [ 256.332022][ T6177] geneve0: entered promiscuous mode [ 256.709417][ T6193] loop4: detected capacity change from 0 to 512 [ 256.768939][ T6193] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.553: inode has both inline data and extents flags [ 256.782060][ T6193] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 256.782487][ T6193] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.553: couldn't read orphan inode 15 (err -117) [ 256.791650][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 256.791666][ C1] EXT4-fs (loop4): initial error at time 2000000171: ext4_orphan_get:1397: inode 15 [ 256.791695][ C1] EXT4-fs (loop4): last error at time 2000000171: ext4_orphan_get:1397: inode 15 [ 256.828417][ T6193] loop4: lost filesystem error report for type 5 error -117 [ 256.833141][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.912794][ T28] audit: type=1400 audit(2000000171.455:964): avc: denied { write } for pid=6181 comm="syz.4.553" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.949639][ T6191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.554'. [ 257.058313][ T28] audit: type=1400 audit(2000000171.455:965): avc: denied { create } for pid=6181 comm="syz.4.553" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 257.527553][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.554'. [ 257.702112][ T28] audit: type=1326 audit(2000000172.285:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.2.555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 257.749097][ T6202] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.755835][ T6196] loop2: detected capacity change from 0 to 512 [ 257.816961][ T6196] EXT4-fs: Ignoring removed bh option [ 257.839498][ T6170] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 257.857066][ T6196] EXT4-fs: inline encryption not supported [ 257.883890][ T6196] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.962311][ T6196] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 258.034444][ T6196] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.555: bg 0: block 248: padding at end of block bitmap is not set [ 258.071752][ T6196] loop2: lost filesystem error report for type 5 error -117 [ 258.072068][ T6196] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.555: Failed to acquire dquot type 1 [ 258.079642][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 258.079671][ C1] EXT4-fs (loop2): last error at time 2000000172: ext4_validate_block_bitmap:441 [ 258.179202][ T6196] loop2: lost filesystem error report for type 5 error -28 [ 258.179781][ T6196] EXT4-fs (loop2): 1 truncate cleaned up [ 258.205626][ T6196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 258.229851][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.326235][ T6210] netlink: 104 bytes leftover after parsing attributes in process `syz.1.558'. [ 258.496358][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.429731][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 259.551467][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.559'. [ 259.569196][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 259.748568][ T6232] loop3: detected capacity change from 0 to 512 [ 259.839221][ T6232] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.562: corrupted in-inode xattr: invalid ea_ino [ 259.864066][ T6232] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.865543][ T6232] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.562: couldn't read orphan inode 15 (err -117) [ 259.874839][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 259.874874][ C0] EXT4-fs (loop3): initial error at time 2000000174: ext4_iget_extra_inode:5128: inode 15 [ 259.874906][ C0] EXT4-fs (loop3): last error at time 2000000174: ext4_iget_extra_inode:5128: inode 15 [ 259.926201][ T6232] loop3: lost filesystem error report for type 5 error -117 [ 259.927418][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.953840][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 259.953857][ T28] audit: type=1400 audit(2000000174.545:972): avc: denied { write } for pid=6223 comm="syz.3.562" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.068664][ T28] audit: type=1400 audit(2000000174.615:973): avc: denied { write } for pid=6223 comm="syz.3.562" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.290288][ T6238] netlink: 60 bytes leftover after parsing attributes in process `syz.4.564'. [ 260.309239][ T6238] unsupported nlmsg_type 40 [ 260.364517][ T28] audit: type=1400 audit(2000000174.935:974): avc: denied { ioctl } for pid=6237 comm="syz.4.564" path="socket:[12770]" dev="sockfs" ino=12770 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 260.455308][ T6248] 9pnet_virtio: no channels available for device 127.0.0.1 [ 260.536531][ T6244] tipc: Failed to remove unknown binding: 66,0,0/0:1111066574/1111066575 [ 260.548118][ T28] audit: type=1400 audit(2000000175.005:975): avc: denied { bind } for pid=6223 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 260.576522][ T6224] vlan2: entered promiscuous mode [ 260.600716][ T6224] bridge0: entered promiscuous mode [ 260.618111][ T6244] tipc: Failed to remove unknown binding: 66,0,0/0:1111066574/1111066575 [ 260.678581][ T6226] bridge0: port 2(bridge_slave_1) entered listening state [ 260.704841][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.741060][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.087327][ T28] audit: type=1400 audit(2000000175.675:976): avc: denied { ioctl } for pid=6261 comm="syz.1.570" path="socket:[11931]" dev="sockfs" ino=11931 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 261.117919][ T6267] loop3: detected capacity change from 0 to 512 [ 261.153690][ T6267] ext4: Unknown parameter 'noacl' [ 261.485199][ T6279] xt_hashlimit: max too large, truncated to 1048576 [ 262.402309][ T6258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.569'. [ 262.444239][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.569'. [ 264.393392][ T6300] netlink: 72 bytes leftover after parsing attributes in process `syz.0.578'. [ 264.457347][ T6294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.575'. [ 264.470441][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 264.557194][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 264.626715][ T6305] netlink: 32 bytes leftover after parsing attributes in process `syz.3.577'. [ 264.657021][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.577'. [ 265.122843][ T6312] bond3: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 265.129848][ T6312] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.472823][ T6321] loop2: detected capacity change from 0 to 512 [ 265.633668][ T6321] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 265.649385][ T6321] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 265.715651][ T6321] EXT4-fs (loop2): 1 truncate cleaned up [ 265.750229][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.583'. [ 265.771671][ T6321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.795175][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 265.810802][ T6329] syzkaller0: entered promiscuous mode [ 265.822130][ T6329] syzkaller0: entered allmulticast mode [ 265.911402][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 266.042729][ T6339] netlink: 36 bytes leftover after parsing attributes in process `syz.2.582'. [ 266.121999][ T6337] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 266.141076][ T6340] tipc: Enabled bearer , priority 0 [ 266.149211][ T6326] tipc: Resetting bearer [ 266.156331][ T6326] tipc: Disabling bearer [ 266.171452][ T6337] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 266.186107][ T28] audit: type=1400 audit(2000000180.765:977): avc: denied { write } for pid=6318 comm="syz.2.582" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.210416][ T28] audit: type=1400 audit(2000000180.765:978): avc: denied { create } for pid=6318 comm="syz.2.582" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 266.280785][ T6346] loop4: detected capacity change from 0 to 736 [ 266.287513][ T6346] iso9660: Unknown parameter 'iide' [ 266.297523][ T6344] netlink: 'syz.1.585': attribute type 21 has an invalid length. [ 266.306042][ T6344] netlink: 132 bytes leftover after parsing attributes in process `syz.1.585'. [ 266.375054][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.524479][ T6354] netlink: 'syz.2.588': attribute type 2 has an invalid length. [ 266.532420][ T28] audit: type=1400 audit(2000000181.115:979): avc: denied { listen } for pid=6350 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 266.558297][ T28] audit: type=1400 audit(2000000181.145:980): avc: denied { connect } for pid=6350 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 266.607944][ T28] audit: type=1400 audit(2000000181.195:981): avc: denied { write } for pid=6350 comm="syz.2.588" path="socket:[12922]" dev="sockfs" ino=12922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 266.633049][ T28] audit: type=1400 audit(2000000181.195:982): avc: denied { accept } for pid=6350 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 266.652849][ T28] audit: type=1400 audit(2000000181.195:983): avc: denied { setattr } for pid=6350 comm="syz.2.588" name="NETLINK" dev="sockfs" ino=12916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.177300][ T6363] SELinux: policydb string S does not match my string SE Linux [ 267.210598][ T6363] SELinux: failed to load policy [ 267.325110][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 267.422668][ T3411] IPVS: starting estimator thread 0... [ 267.552486][ T6373] lo speed is unknown, defaulting to 1000 [ 267.589577][ T6370] IPVS: using max 2592 ests per chain, 129600 per kthread [ 267.864719][ T6378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.593'. [ 267.944253][ T6373] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.182094][ T6359] loop3: detected capacity change from 0 to 512 [ 268.264852][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.593'. [ 268.306131][ T6380] lo speed is unknown, defaulting to 1000 [ 268.338248][ T6382] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 268.419371][ T6382] netlink: 'syz.0.594': attribute type 2 has an invalid length. [ 268.455142][ T6359] EXT4-fs: Ignoring removed bh option [ 268.517091][ T6373] gre0 speed is unknown, defaulting to 1000 [ 268.655209][ T6380] ip6_vti0 speed is unknown, defaulting to 1000 [ 268.829356][ T6380] gre0 speed is unknown, defaulting to 1000 [ 268.858489][ T6388] loop2: detected capacity change from 0 to 128 [ 269.019759][ T6359] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 269.071170][ T6359] EXT4-fs (loop3): 1 truncate cleaned up [ 269.269355][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.644346][ T28] audit: type=1326 audit(2000000185.235:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7fc00000 [ 270.670199][ T28] audit: type=1326 audit(2000000185.235:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96442c6bd7 code=0x7fc00000 [ 271.075383][ T6405] netlink: 'syz.4.598': attribute type 2 has an invalid length. [ 271.647537][ T28] audit: type=1326 audit(2000000185.235:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f964426e1d9 code=0x7fc00000 [ 271.672921][ T28] audit: type=1326 audit(2000000185.235:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f964426e29d code=0x7fc00000 [ 272.052551][ T28] audit: type=1326 audit(2000000185.235:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6387 comm="syz.2.595" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f96442cce59 code=0x7fc00000 [ 272.141607][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.229395][ T6409] loop3: detected capacity change from 0 to 1024 [ 272.249138][ T6409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 272.249200][ T6409] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.275753][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 272.276400][ T6413] vlan0: left allmulticast mode [ 272.276478][ T6413] geneve0: left allmulticast mode [ 272.276546][ T6413] vlan0: left promiscuous mode [ 272.276578][ T6413] geneve0: left promiscuous mode [ 272.277546][ T6413] bridge0: port 3(vlan0) entered disabled state [ 272.313508][ T6413] bridge_slave_1: left promiscuous mode [ 272.314228][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.331001][ T6413] bridge_slave_0: left allmulticast mode [ 272.331078][ T6413] bridge_slave_0: left promiscuous mode [ 272.331412][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.350130][ T6419] smc: removing ib device lyz2 [ 273.091406][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.122644][ T6449] loop4: detected capacity change from 0 to 512 [ 273.133766][ T6447] loop2: detected capacity change from 0 to 512 [ 273.149325][ T6449] msdos: Bad value for 'uid' [ 273.151227][ T6447] ext4: Unknown parameter 'noacl' [ 273.159074][ T6449] msdos: Bad value for 'uid' [ 273.162596][ T6449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6449 comm=syz.4.606 [ 273.483901][ T6449] netlink: 'syz.4.606': attribute type 1 has an invalid length. [ 273.506558][ T6449] netlink: 5 bytes leftover after parsing attributes in process `syz.4.606'. [ 273.643678][ T6457] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 273.653522][ T6457] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.662686][ T6457] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 273.681792][ T6457] xt_hashlimit: max too large, truncated to 1048576 [ 273.818606][ T6458] loop4: detected capacity change from 0 to 512 [ 273.934173][ T6458] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.794779][ T6458] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 274.953743][ T6458] Quota error (device loop4): write_blk: dquota write failed [ 275.049798][ T6458] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 275.059041][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 275.059057][ C0] EXT4-fs (loop4): initial error at time 2000000189: ext4_mb_generate_buddy:1317 [ 275.059078][ C0] EXT4-fs (loop4): last error at time 2000000189: ext4_mb_generate_buddy:1317 [ 275.083747][ T6458] Quota error (device loop4): write_blk: dquota write failed [ 275.091193][ T6458] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 275.101114][ T6458] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.606: Failed to acquire dquot type 1 [ 275.112350][ T6458] loop4: lost filesystem error report for type 5 error -28 [ 275.123215][ T6458] EXT4-fs (loop4): 1 truncate cleaned up [ 275.188090][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.265113][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.268459][ T6474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.607'. [ 277.640441][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.607'. [ 278.380641][ T28] audit: type=1400 audit(2000000000.390:989): avc: denied { bind } for pid=6470 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.558969][ T6473] netlink: 6308 bytes leftover after parsing attributes in process `syz.0.609'. [ 279.379853][ T28] audit: type=1400 audit(2000000000.900:990): avc: denied { listen } for pid=6470 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 282.185986][ T28] audit: type=1400 audit(2000000003.700:991): avc: denied { ioctl } for pid=6493 comm="syz.2.614" path="socket:[13379]" dev="sockfs" ino=13379 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 283.216335][ T28] audit: type=1400 audit(2000000003.720:992): avc: denied { setopt } for pid=6493 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 285.071050][ T6506] loop2: detected capacity change from 0 to 512 [ 286.265758][ T6522] netlink: 6308 bytes leftover after parsing attributes in process `syz.2.619'. [ 286.314989][ T6524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43032 sclass=netlink_route_socket pid=6524 comm=syz.4.620 [ 286.376520][ T28] audit: type=1400 audit(2000000008.710:993): avc: denied { bind } for pid=6518 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 287.374712][ T28] audit: type=1400 audit(2000000008.730:994): avc: denied { listen } for pid=6518 comm="syz.3.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 287.430189][ T6529] ip6_vti0 speed is unknown, defaulting to 1000 [ 287.467944][ T6529] gre0 speed is unknown, defaulting to 1000 [ 289.729613][ T6545] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 290.711191][ T6542] loop2: detected capacity change from 0 to 164 [ 291.727731][ T6542] isofs_fill_super: bread failed, dev=loop2, iso_blknum=41, block=82 [ 291.802085][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'. [ 291.911996][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.629'. [ 291.990827][ T28] audit: type=1400 audit(2000000014.320:995): avc: denied { create } for pid=6541 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 292.038691][ T6561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'. [ 292.157720][ T28] audit: type=1326 audit(2000000014.400:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 292.330961][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.628'. [ 292.356193][ T28] audit: type=1326 audit(2000000014.400:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 292.503340][ T28] audit: type=1326 audit(2000000014.410:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 292.541312][ T6565] loop3: detected capacity change from 0 to 512 [ 292.589711][ T6565] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.602832][ T6552] loop4: detected capacity change from 0 to 512 [ 292.663420][ T6559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 292.678723][ T6565] EXT4-fs (loop3): 1 orphan inode deleted [ 292.684582][ T6565] EXT4-fs (loop3): 1 truncate cleaned up [ 292.690712][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.703424][ T28] audit: type=1326 audit(2000000014.410:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 292.854664][ T28] audit: type=1326 audit(2000000014.410:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 292.960575][ T28] audit: type=1326 audit(2000000014.460:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 293.029031][ T28] audit: type=1326 audit(2000000014.460:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 293.085459][ T28] audit: type=1326 audit(2000000014.460:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96442ccbc2 code=0x7ffc0000 [ 293.113364][ T28] audit: type=1326 audit(2000000014.460:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="syz.2.625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96442ccbc2 code=0x7ffc0000 [ 293.583834][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 295.359730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.800478][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.084905][ T6593] netlink: 80 bytes leftover after parsing attributes in process `syz.0.634'. [ 296.277664][ T6596] loop3: detected capacity change from 0 to 512 [ 296.293949][ T6596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.324694][ T6596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 296.337647][ T6596] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.298645][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 297.363105][ T6608] loop4: detected capacity change from 0 to 512 [ 297.440256][ T6608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 297.475456][ T6608] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 297.638642][ T6608] loop4: detected capacity change from 0 to 512 [ 297.830203][ T6608] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.638: invalid indirect mapped block 256 (level 2) [ 298.059056][ T6608] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 298.068944][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 298.084644][ C0] EXT4-fs (loop4): initial error at time 2000000020: ext4_free_branches:1023: inode 11 [ 298.094361][ C0] EXT4-fs (loop4): last error at time 2000000020: ext4_free_branches:1023: inode 11 [ 298.105706][ T6608] EXT4-fs (loop4): 2 truncates cleaned up [ 298.701898][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 298.712549][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.639'. [ 298.783115][ T6615] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.832337][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 298.845666][ T6608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.885106][ T6623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.637'. [ 298.886081][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.918544][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 298.928395][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 298.928412][ T28] audit: type=1400 audit(2000000021.260:1089): avc: denied { read write } for pid=6619 comm="syz.0.641" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 298.958924][ T28] audit: type=1400 audit(2000000021.260:1090): avc: denied { open } for pid=6619 comm="syz.0.641" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 298.958959][ T28] audit: type=1400 audit(2000000021.260:1091): avc: denied { ioctl } for pid=6619 comm="syz.0.641" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 298.958992][ T28] audit: type=1400 audit(2000000021.280:1092): avc: denied { write } for pid=6607 comm="syz.4.638" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.960243][ T6615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.995415][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 299.045263][ T6627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.638: bg 0: block 5: invalid block bitmap [ 299.091935][ T6627] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 299.107183][ T6629] loop3: detected capacity change from 0 to 128 [ 299.119327][ T6627] EXT4-fs (loop4): This should not happen!! Data will be lost [ 299.119327][ T6627] [ 299.130705][ T6627] EXT4-fs (loop4): Total free blocks count 0 [ 299.138738][ T6627] EXT4-fs (loop4): Free/Dirty block details [ 299.145301][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.152876][ T6627] EXT4-fs (loop4): free_blocks=0 [ 299.158988][ T6627] EXT4-fs (loop4): dirty_blocks=1968 [ 299.164992][ T6623] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 299.168579][ T6627] EXT4-fs (loop4): Block reservation details [ 299.186029][ T6623] FAT-fs (loop3): Filesystem has been set read-only [ 299.193344][ T6627] EXT4-fs (loop4): i_reserved_data_blocks=1968 [ 299.197827][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.202788][ T6629] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 299.251374][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.260552][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.263465][ T6623] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 52) [ 299.269790][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.269831][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.323952][ T6623] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 52) [ 299.422867][ T30] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1964 with error 28 [ 299.473832][ T3296] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 299.522547][ T6632] netlink: 32 bytes leftover after parsing attributes in process `syz.1.642'. [ 299.532155][ T6636] loop3: detected capacity change from 0 to 1024 [ 299.541276][ T6632] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'. [ 299.562086][ T6636] EXT4-fs: test_dummy_encryption option not supported [ 299.775473][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 300.780045][ T28] audit: type=1400 audit(2000000023.120:1093): avc: denied { map } for pid=6643 comm="syz.0.646" path="socket:[13596]" dev="sockfs" ino=13596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 301.687953][ T6648] loop3: detected capacity change from 0 to 512 [ 301.820997][ T6650] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 302.798444][ T6648] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 302.888343][ T841] gre0 speed is unknown, defaulting to 1000 [ 303.844412][ T841] syz1: Port: 1 Link DOWN [ 303.849350][ T9] gre0 speed is unknown, defaulting to 1000 [ 305.027460][ T6673] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.076544][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.651'. [ 305.570352][ T6673] block device autoloading is deprecated and will be removed. [ 305.603841][ T6669] SET target dimension over the limit! [ 307.474836][ T6669] loop4: detected capacity change from 0 to 512 [ 308.370413][ T6669] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 308.589997][ T6671] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 309.497419][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.653'. [ 309.853525][ T6688] loop4: detected capacity change from 0 to 128 [ 309.988962][ T28] audit: type=1400 audit(2000000032.240:1094): avc: denied { write } for pid=6693 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.061292][ T28] audit: type=1326 audit(2000000032.400:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da589ce59 code=0x7ffc0000 [ 310.093104][ T6703] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 310.132084][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 310.157042][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 310.167974][ T28] audit: type=1326 audit(2000000032.420:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da589ce59 code=0x7ffc0000 [ 310.223308][ T28] audit: type=1326 audit(2000000032.440:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da589ce59 code=0x7ffc0000 [ 310.275598][ T28] audit: type=1326 audit(2000000032.440:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4da589bcc7 code=0x7ffc0000 [ 310.335474][ T28] audit: type=1326 audit(2000000032.450:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da589ce59 code=0x7ffc0000 [ 310.361394][ T28] audit: type=1326 audit(2000000032.460:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da589ce59 code=0x7ffc0000 [ 310.387030][ T28] audit: type=1326 audit(2000000032.460:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da589ce59 code=0x7ffc0000 [ 310.412986][ T28] audit: type=1326 audit(2000000032.460:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f4da589ce59 code=0x7ffc0000 [ 310.413017][ T28] audit: type=1326 audit(2000000032.460:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6687 comm="syz.4.654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da589ce59 code=0x7ffc0000 [ 310.510033][ T6712] loop2: detected capacity change from 0 to 512 [ 310.517820][ T6712] EXT4-fs warning (device loop2): read_mmp_block:111: Error -117 while reading MMP block 0 [ 310.564050][ T6712] loop2: detected capacity change from 0 to 512 [ 310.579531][ T6712] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.952061][ T6726] loop4: detected capacity change from 0 to 1024 [ 310.981228][ T6712] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 311.710945][ T6712] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.661: Failed to acquire dquot type 1 [ 311.730751][ T6712] loop2: lost filesystem error report for type 5 error -28 [ 311.731475][ T6712] EXT4-fs (loop2): 1 truncate cleaned up [ 311.738897][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 311.738916][ C1] EXT4-fs (loop2): initial error at time 2000000033: ext4_mb_generate_buddy:1317 [ 311.738960][ C1] EXT4-fs (loop2): last error at time 2000000034: ext4_acquire_dquot:7034 [ 312.082136][ T6712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.101616][ T6726] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 312.720450][ T6726] System zones: 0-1, 3-36 [ 312.782222][ T6726] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.664: bad orphan inode 134217728 [ 312.793235][ T6712] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 312.805237][ T6726] loop4: lost filesystem error report for type 5 error -117 [ 312.805951][ T6726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.159164][ T6712] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 314.167158][ T6712] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 314.456656][ T6712] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 314.497967][ T6734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.665'. [ 314.624772][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.686814][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.665'. [ 314.742189][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.982195][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.669'. [ 315.008935][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 315.008961][ T28] audit: type=1326 audit(2000000037.340:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 315.205100][ T6743] loop3: detected capacity change from 0 to 512 [ 315.462088][ T6761] loop4: detected capacity change from 0 to 512 [ 315.462437][ T6761] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.547535][ T28] audit: type=1326 audit(2000000037.340:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 315.590863][ T6761] EXT4-fs (loop4): orphan cleanup on readonly fs [ 315.597269][ T6761] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 315.607204][ T6761] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.668: attempt to clear invalid blocks 2 len 1 [ 315.620046][ T6761] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 315.620514][ T6761] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, [ 315.629714][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 315.629734][ C1] EXT4-fs (loop4): initial error at time 2000000037: ext4_clear_blocks:876: inode 13 [ 315.629772][ C1] EXT4-fs (loop4): last error at time 2000000037: ext4_clear_blocks:876: inode 13 [ 315.663185][ T6761] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 315.675867][ T6761] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.668: invalid indirect mapped block 1819239214 (level 0) [ 315.689825][ T6761] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 315.725589][ T6763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=6763 comm=syz.0.670 [ 315.763779][ T6763] netlink: 180 bytes leftover after parsing attributes in process `syz.0.670'. [ 315.774662][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 315.800460][ T6763] 9pnet_fd: Insufficient options for proto=fd [ 315.814253][ T6761] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.668: invalid indirect mapped block 1819239214 (level 1) [ 315.828175][ T6761] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 315.841722][ T28] audit: type=1326 audit(2000000037.340:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96442cce59 code=0x7ffc0000 [ 315.882010][ T28] audit: type=1326 audit(2000000037.340:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f964428d68e code=0x7ffc0000 [ 315.908501][ T6761] EXT4-fs (loop4): 1 truncate cleaned up [ 315.914690][ T6761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.928047][ T6761] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.965606][ T28] audit: type=1326 audit(2000000037.340:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f964428d68e code=0x7ffc0000 [ 316.015460][ T6743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 316.026001][ T28] audit: type=1326 audit(2000000037.340:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f964428d68e code=0x7ffc0000 [ 316.052225][ T28] audit: type=1326 audit(2000000037.340:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f964428d68e code=0x7ffc0000 [ 316.078273][ T28] audit: type=1326 audit(2000000037.340:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f964428d68e code=0x7ffc0000 [ 316.104113][ T28] audit: type=1326 audit(2000000037.340:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f964428d68e code=0x7ffc0000 [ 316.186469][ T28] audit: type=1326 audit(2000000037.340:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.2.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f964428d68e code=0x7ffc0000 [ 316.242355][ T6743] EXT4-fs (loop3): 1 truncate cleaned up [ 316.257587][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.288656][ T6774] loop2: detected capacity change from 0 to 512 [ 316.315633][ T6774] EXT4-fs: Ignoring removed oldalloc option [ 316.321848][ T6774] EXT4-fs: Ignoring removed nobh option [ 316.330729][ T6774] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.673: iget: bad extra_isize 90 (inode size 256) [ 316.346565][ T6774] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 316.346889][ T6774] EXT4-fs (loop2): Remounting filesystem read-only [ 316.356065][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 316.356105][ C0] EXT4-fs (loop2): initial error at time 2000000038: ext4_xattr_inode_iget:441: inode 11 [ 316.356137][ C0] EXT4-fs (loop2): last error at time 2000000038: ext4_xattr_inode_iget:441: inode 11 [ 316.389010][ T6774] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 316.399699][ T6774] EXT4-fs (loop2): 1 orphan inode deleted [ 316.406010][ T6774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.446476][ T6777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.676'. [ 316.482495][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.570970][ T6784] SELinux: policydb magic number 0x202001e does not match expected magic number 0xf97cff8c [ 317.581583][ T6784] SELinux: failed to load policy [ 318.289646][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.314672][ T6797] syzkaller0: entered promiscuous mode [ 318.325579][ T6797] syzkaller0: entered allmulticast mode [ 318.363168][ T6797] tipc: Enabled bearer , priority 0 [ 318.380073][ T6795] tipc: Resetting bearer [ 318.393832][ T6795] tipc: Disabling bearer [ 318.991758][ T6799] loop3: detected capacity change from 0 to 512 [ 319.586244][ T6799] EXT4-fs: Ignoring removed nobh option [ 319.884035][ T6799] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 319.924037][ T6799] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 320.224027][ T6824] syz_tun: entered allmulticast mode [ 320.831829][ T6824] IPv6: addrconf: prefix option has invalid lifetime [ 320.838693][ T6824] IPv6: addrconf: prefix option has invalid lifetime [ 321.439757][ T6835] syzkaller1: entered promiscuous mode [ 321.585641][ T6835] syzkaller1: entered allmulticast mode [ 321.750257][ T28] kauditd_printk_skb: 274 callbacks suppressed [ 321.750312][ T28] audit: type=1400 audit(2000000044.090:1439): avc: denied { connect } for pid=6832 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.535662][ T28] audit: type=1400 audit(2000000044.800:1440): avc: denied { accept } for pid=6832 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.707999][ T6828] netlink: 32 bytes leftover after parsing attributes in process `syz.2.683'. [ 322.716992][ T6828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.683'. [ 323.002188][ T28] audit: type=1400 audit(2000000045.340:1441): avc: denied { read } for pid=6873 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.210911][ T6876] loop3: detected capacity change from 0 to 512 [ 323.231031][ T6876] EXT4-fs: dax option not supported [ 323.297133][ T6876] SET target dimension over the limit! [ 323.511279][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.706'. [ 323.888701][ T6874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6874 comm=syz.1.706 [ 323.962328][ T6885] loop2: detected capacity change from 0 to 128 [ 324.047331][ T28] audit: type=1400 audit(2000000046.380:1442): avc: denied { write } for pid=6887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.188918][ T28] audit: type=1400 audit(2000000046.520:1443): avc: denied { write } for pid=6900 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.479338][ T6884] ip6_vti0 speed is unknown, defaulting to 1000 [ 324.533724][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.702'. [ 324.593597][ T6908] netlink: 'syz.0.702': attribute type 21 has an invalid length. [ 324.616151][ T6919] loop4: detected capacity change from 0 to 256 [ 324.797667][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'. [ 324.805211][ T6884] gre0 speed is unknown, defaulting to 1000 [ 324.832613][ T28] audit: type=1400 audit(2000000047.170:1444): avc: denied { write } for pid=6914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.717895][ T6946] loop3: detected capacity change from 0 to 512 [ 325.742155][ T6946] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 325.767112][ T28] audit: type=1400 audit(2000000047.870:1445): avc: denied { write } for pid=6942 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.853394][ T6946] EXT4-fs (loop3): 1 truncate cleaned up [ 325.874461][ T6946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.982586][ T28] audit: type=1400 audit(2000000048.250:1446): avc: denied { write } for pid=6936 comm="syz.3.718" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.044262][ T6947] bridge_slave_1: left allmulticast mode [ 326.066132][ T6941] ip6_vti0 speed is unknown, defaulting to 1000 [ 326.530208][ T6941] gre0 speed is unknown, defaulting to 1000 [ 326.729249][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.839293][ T6951] loop2: detected capacity change from 0 to 512 [ 326.853450][ T6951] EXT4-fs: Ignoring removed nobh option [ 326.881976][ T6951] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 326.914564][ T6951] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 326.964208][ T6963] loop3: detected capacity change from 0 to 512 [ 326.995592][ T6961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.720'. [ 327.014944][ T6963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a857e02c, mo2=0102] [ 327.024630][ T6961] netlink: 24 bytes leftover after parsing attributes in process `syz.4.720'. [ 327.049296][ T6963] System zones: 1-12 [ 327.053990][ T6963] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.723: invalid indirect mapped block 8 (level 2) [ 327.071293][ T6963] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 327.072265][ T6963] EXT4-fs (loop3): Remounting filesystem read-only [ 327.081697][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 327.081721][ C0] EXT4-fs (loop3): initial error at time 2000000049: ext4_free_branches:1023: inode 11 [ 327.081755][ C0] EXT4-fs (loop3): last error at time 2000000049: ext4_free_branches:1023: inode 11 [ 327.114720][ T6963] EXT4-fs (loop3): 1 truncate cleaned up [ 327.121245][ T6963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.148958][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.173302][ T6941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.719'. [ 327.268919][ T6974] loop2: detected capacity change from 0 to 512 [ 327.289200][ T6978] loop3: detected capacity change from 0 to 1024 [ 327.299024][ T6974] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #2: comm syz.2.729: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 5, max 4(4), depth 0(0) [ 327.318048][ T6978] EXT4-fs: test_dummy_encryption option not supported [ 327.361661][ T6974] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 327.368890][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 327.384521][ C0] EXT4-fs (loop2): initial error at time 2000000049: ext4_ext_check_inode:521: inode 2 [ 327.394242][ C0] EXT4-fs (loop2): last error at time 2000000049: ext4_ext_check_inode:521: inode 2 [ 327.409866][ T6974] EXT4-fs (loop2): get root inode failed [ 327.417635][ T6974] EXT4-fs (loop2): mount failed [ 327.549415][ T6986] loop2: detected capacity change from 0 to 256 [ 327.700632][ T6987] loop3: detected capacity change from 0 to 512 [ 327.860208][ T6987] EXT4-fs (loop3): 1 orphan inode deleted [ 327.888038][ T6987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.909029][ T6987] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.136954][ T30] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 329.177225][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 329.532788][ T6999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.741'. [ 329.607700][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.741'. [ 329.617664][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.660387][ T7001] loop3: detected capacity change from 0 to 512 [ 329.667664][ T7001] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 329.727820][ T7001] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 329.763056][ T7001] loop3: detected capacity change from 0 to 512 [ 329.799614][ T7001] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.733: invalid indirect mapped block 256 (level 2) [ 329.818743][ T7001] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 329.818879][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 329.821852][ T7001] EXT4-fs (loop3): 2 truncates cleaned up [ 329.828340][ C1] EXT4-fs (loop3): initial error at time 2000000052: ext4_free_branches:1023: inode 11 [ 329.828370][ C1] EXT4-fs (loop3): last error at time 2000000052: ext4_free_branches:1023: inode 11 [ 329.901001][ T7001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.960866][ T28] audit: type=1400 audit(2000000052.290:1447): avc: denied { write } for pid=7000 comm="syz.3.733" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.011118][ T7009] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.733: bg 0: block 5: invalid block bitmap [ 330.040867][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.747'. [ 330.051594][ T7009] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 330.120340][ T7009] EXT4-fs (loop3): This should not happen!! Data will be lost [ 330.120340][ T7009] [ 330.168376][ T7009] EXT4-fs (loop3): Total free blocks count 0 [ 330.176754][ T7021] tmpfs: Bad value for 'mpol' [ 330.195083][ T7009] EXT4-fs (loop3): Free/Dirty block details [ 330.231771][ T7009] EXT4-fs (loop3): free_blocks=0 [ 330.245224][ T7009] EXT4-fs (loop3): dirty_blocks=1964 [ 330.340569][ T7009] EXT4-fs (loop3): Block reservation details [ 330.347235][ T7009] EXT4-fs (loop3): i_reserved_data_blocks=1964 [ 330.366979][ T7017] loop4: detected capacity change from 0 to 512 [ 330.402003][ T7017] EXT4-fs: Ignoring removed nobh option [ 330.426798][ T7017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 330.440307][ T404] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1960 with error 28 [ 330.526340][ T7027] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 330.545576][ T7017] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 331.284711][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 332.213366][ T7035] veth0_virt_wifi: entered allmulticast mode [ 332.404004][ T7031] loop4: detected capacity change from 0 to 512 [ 332.667525][ T7041] loop3: detected capacity change from 0 to 256 [ 333.742831][ T7044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.748'. [ 334.135388][ T7031] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 334.270734][ T7044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.748'. [ 334.545150][ T28] audit: type=1400 audit(2000000056.880:1448): avc: denied { ioctl } for pid=7067 comm="syz.4.758" path="socket:[14996]" dev="sockfs" ino=14996 ioctlcmd=0x89fd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 334.731243][ T7074] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 334.856475][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.759'. [ 337.568575][ T7115] loop4: detected capacity change from 0 to 128 [ 338.439928][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 338.612403][ T7118] loop2: detected capacity change from 0 to 512 [ 338.687244][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.687244][ T39] loop4: rw=1, sector=145, nr_sectors = 96 limit=128 [ 338.702523][ T7118] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 338.719502][ T7129] IPVS: Unknown mcast interface: vcan0 [ 338.725317][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.725317][ T39] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 338.752673][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.752673][ T39] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 338.766393][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.766393][ T39] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 338.779833][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.779833][ T39] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 338.793488][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.793488][ T39] loop4: rw=1, sector=313, nr_sectors = 8 limit=128 [ 338.806995][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.806995][ T39] loop4: rw=1, sector=329, nr_sectors = 8 limit=128 [ 338.824985][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.824985][ T39] loop4: rw=1, sector=345, nr_sectors = 8 limit=128 [ 338.846477][ T7132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.774'. [ 338.855481][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.855481][ T39] loop4: rw=1, sector=361, nr_sectors = 8 limit=128 [ 338.874027][ T39] kworker/u8:2: attempt to access beyond end of device [ 338.874027][ T39] loop4: rw=1, sector=377, nr_sectors = 8 limit=128 [ 338.920370][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 338.931486][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 339.220372][ T107] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 339.791191][ T7153] netlink: 32 bytes leftover after parsing attributes in process `syz.4.781'. [ 339.796880][ T7154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.780'. [ 339.821950][ T7153] netlink: 24 bytes leftover after parsing attributes in process `syz.4.781'. [ 339.980420][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.779'. [ 339.991767][ T7155] netlink: 'syz.2.779': attribute type 21 has an invalid length. [ 340.088272][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.780'. [ 343.973970][ T7178] netlink: 32 bytes leftover after parsing attributes in process `syz.0.799'. [ 344.190530][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'. [ 344.984944][ T7190] loop3: detected capacity change from 0 to 128 [ 345.027032][ T7206] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 345.301016][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 345.320325][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 345.653978][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 346.481311][ T30] bio_check_eod: 91 callbacks suppressed [ 346.481327][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.481327][ T30] loop3: rw=1, sector=145, nr_sectors = 96 limit=128 [ 346.482719][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 346.487145][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.487145][ T30] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 346.487182][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.487182][ T30] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 346.487218][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.487218][ T30] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 346.487256][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.487256][ T30] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 346.487349][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.487349][ T30] loop3: rw=1, sector=313, nr_sectors = 8 limit=128 [ 346.487385][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.487385][ T30] loop3: rw=1, sector=329, nr_sectors = 8 limit=128 [ 346.487419][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.487419][ T30] loop3: rw=1, sector=345, nr_sectors = 8 limit=128 [ 346.487510][ T30] kworker/u8:1: attempt to access beyond end of device [ 346.487510][ T30] loop3: rw=1, sector=361, nr_sectors = 8 limit=128 [ 346.563955][ T7225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.800'. [ 346.837728][ T7224] SET target dimension over the limit! [ 346.936634][ T7229] loop4: detected capacity change from 0 to 1024 [ 347.164369][ T7229] EXT4-fs: test_dummy_encryption option not supported [ 347.211103][ T7231] random: crng reseeded on system resumption [ 347.217212][ T28] audit: type=1400 audit(2000000069.550:1449): avc: denied { append } for pid=7230 comm="syz.1.804" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 347.426616][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.800'. [ 347.529959][ T30] kworker/u8:1: attempt to access beyond end of device [ 347.529959][ T30] loop3: rw=1, sector=377, nr_sectors = 8 limit=128 [ 347.979221][ T7235] loop4: detected capacity change from 0 to 512 [ 348.082123][ T7235] EXT4-fs (loop4): 1 orphan inode deleted [ 348.103974][ T7235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.126580][ T7235] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.200253][ T28] audit: type=1400 audit(2000000070.510:1450): avc: denied { read } for pid=7226 comm="syz.4.801" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 348.227109][ T2096] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 348.520464][ T2096] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 348.547198][ T7244] ALSA: seq fatal error: cannot create timer (-19) [ 348.612096][ T28] audit: type=1400 audit(2000000070.510:1451): avc: denied { open } for pid=7226 comm="syz.4.801" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 348.760723][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 348.770457][ T7244] tipc: Cannot configure node identity twice [ 349.461255][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'. [ 349.472745][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'. [ 349.484836][ T7255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'. [ 350.075137][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.417495][ T7279] block device autoloading is deprecated and will be removed. [ 352.345530][ T7274] loop2: detected capacity change from 0 to 128 [ 352.488105][ T7294] loop0: detected capacity change from 0 to 1024 [ 352.527719][ T7294] EXT4-fs: Ignoring removed bh option [ 352.697004][ T7294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.739397][ T2096] bio_check_eod: 91 callbacks suppressed [ 352.739415][ T2096] kworker/u8:7: attempt to access beyond end of device [ 352.739415][ T2096] loop2: rw=1, sector=145, nr_sectors = 96 limit=128 [ 352.782311][ T28] audit: type=1400 audit(2000000075.110:1452): avc: denied { write } for pid=7285 comm="syz.0.817" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 352.822527][ T2096] kworker/u8:7: attempt to access beyond end of device [ 352.822527][ T2096] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 352.858049][ T7294] qrtr: Invalid version 46 [ 352.865917][ T2096] kworker/u8:7: attempt to access beyond end of device [ 352.865917][ T2096] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 352.905164][ T2096] kworker/u8:7: attempt to access beyond end of device [ 352.905164][ T2096] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 352.949031][ T2096] kworker/u8:7: attempt to access beyond end of device [ 352.949031][ T2096] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 352.990704][ T2096] kworker/u8:7: attempt to access beyond end of device [ 352.990704][ T2096] loop2: rw=1, sector=313, nr_sectors = 8 limit=128 [ 353.034550][ T2096] kworker/u8:7: attempt to access beyond end of device [ 353.034550][ T2096] loop2: rw=1, sector=329, nr_sectors = 8 limit=128 [ 353.075163][ T2096] kworker/u8:7: attempt to access beyond end of device [ 353.075163][ T2096] loop2: rw=1, sector=345, nr_sectors = 8 limit=128 [ 353.111887][ T2096] kworker/u8:7: attempt to access beyond end of device [ 353.111887][ T2096] loop2: rw=1, sector=361, nr_sectors = 8 limit=128 [ 353.148398][ T2096] kworker/u8:7: attempt to access beyond end of device [ 353.148398][ T2096] loop2: rw=1, sector=377, nr_sectors = 8 limit=128 [ 353.489379][ T7313] __nla_validate_parse: 17 callbacks suppressed [ 353.489442][ T7313] netlink: 68 bytes leftover after parsing attributes in process `syz.4.825'. [ 353.964542][ T7322] loop2: detected capacity change from 0 to 512 [ 353.986954][ T7322] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.826: corrupted inode contents [ 353.998824][ T7322] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.000024][ T7322] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.826: mark_inode_dirty error [ 354.009249][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 354.009270][ C0] EXT4-fs (loop2): initial error at time 2000000076: ext4_do_update_inode:5690: inode 16 [ 354.009298][ C0] EXT4-fs (loop2): last error at time 2000000076: ext4_do_update_inode:5690: inode 16 [ 354.046379][ T7322] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.047777][ T7322] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.826: corrupted inode contents [ 354.068726][ T7322] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.069287][ T7322] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.826: mark_inode_dirty error [ 354.089650][ T7322] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.092175][ T7322] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.826: corrupted inode contents [ 354.113610][ T7322] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.113930][ T7322] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 354.131776][ T7322] loop2: lost filesystem error report for type 5 error -117 [ 354.132556][ T7322] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.826: corrupted inode contents [ 354.151653][ T7322] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.152079][ T7322] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.826: mark_inode_dirty error [ 354.172229][ T7322] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 354.172601][ T7322] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 354.190709][ T7322] loop2: lost filesystem error report for type 5 error -117 [ 354.191639][ T7322] EXT4-fs (loop2): 1 truncate cleaned up [ 354.205657][ T7322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.218234][ T7322] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.261075][ T2096] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 354.362938][ T2096] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 354.624658][ T7326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.823'. [ 354.634565][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.823'. [ 355.139842][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.246443][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.356432][ T7338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.828'. [ 355.385105][ T7337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.827'. [ 355.393887][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.828'. [ 355.429343][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 355.505922][ T7336] loop3: detected capacity change from 0 to 128 [ 355.978811][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.063131][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.371341][ T7357] loop4: detected capacity change from 0 to 256 [ 356.592519][ T7363] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.981504][ T7365] xt_NFQUEUE: number of total queues is 0 [ 358.432889][ T7371] netlink: 68 bytes leftover after parsing attributes in process `syz.0.839'. [ 358.984206][ T7381] loop3: detected capacity change from 0 to 512 [ 359.087354][ T28] audit: type=1400 audit(2000000081.420:1453): avc: denied { read } for pid=7388 comm="syz.2.844" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 359.274746][ T7381] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.842: corrupted inode contents [ 359.289002][ T7381] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 359.292245][ T7381] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.842: mark_inode_dirty error [ 359.304375][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 359.304506][ C1] EXT4-fs (loop3): initial error at time 2000000081: ext4_do_update_inode:5690: inode 16 [ 359.304733][ C1] EXT4-fs (loop3): last error at time 2000000081: ext4_do_update_inode:5690: inode 16 [ 359.354639][ T7381] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 359.370140][ T7381] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.842: corrupted inode contents [ 359.393740][ T7381] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 359.397340][ T7381] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.842: mark_inode_dirty error [ 359.424317][ T7381] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 359.428631][ T7381] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.842: corrupted inode contents [ 359.454999][ T7381] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 359.460888][ T7381] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 359.484864][ T7381] loop3: lost filesystem error report for type 5 error -117 [ 359.490812][ T7381] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.842: corrupted inode contents [ 359.513220][ T7381] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 359.518298][ T7381] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.842: mark_inode_dirty error [ 359.544763][ T7381] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 359.546943][ T7381] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 359.569661][ T7381] loop3: lost filesystem error report for type 5 error -117 [ 359.581888][ T7381] EXT4-fs (loop3): 1 truncate cleaned up [ 359.643433][ T28] audit: type=1400 audit(2000000081.450:1454): avc: denied { open } for pid=7388 comm="syz.2.844" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 359.658509][ T7381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.687461][ T7381] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.244544][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 360.329969][ T2096] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 360.340010][ T2096] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 360.353117][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.442041][ T7406] netlink: 32 bytes leftover after parsing attributes in process `syz.2.847'. [ 360.451418][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.847'. [ 360.578699][ T7411] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.631970][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 360.898433][ T7419] loop3: detected capacity change from 0 to 512 [ 360.905313][ T7419] EXT4-fs: Ignoring removed mblk_io_submit option [ 361.058276][ T7419] EXT4-fs (loop3): orphan cleanup on readonly fs [ 361.064746][ T7419] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 361.073802][ T7419] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.848: attempt to clear invalid blocks 2 len 1 [ 361.086544][ T7419] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 361.086820][ T7419] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, [ 361.096045][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 361.096066][ C1] EXT4-fs (loop3): initial error at time 2000000083: ext4_clear_blocks:876: inode 13 [ 361.096097][ C1] EXT4-fs (loop3): last error at time 2000000083: ext4_clear_blocks:876: inode 13 [ 361.129711][ T7419] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 361.138181][ T7419] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.848: invalid indirect mapped block 1819239214 (level 0) [ 361.152210][ T7419] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 361.152746][ T7419] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.848: invalid indirect mapped block 1819239214 (level 1) [ 361.175791][ T7419] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 361.183197][ T7419] EXT4-fs (loop3): 1 truncate cleaned up [ 361.198639][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 361.211685][ T7419] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.788241][ T7431] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.983881][ T7431] gre0 speed is unknown, defaulting to 1000 [ 362.010698][ T7442] netlink: 340 bytes leftover after parsing attributes in process `syz.0.862'. [ 362.369249][ T7443] loop0: detected capacity change from 0 to 512 [ 362.642099][ T7444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'. [ 362.867059][ T7443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.900979][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 362.988547][ T7443] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.058785][ T7455] loop4: detected capacity change from 0 to 128 [ 363.080703][ T7458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.857'. [ 363.090631][ T7459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.859'. [ 363.170506][ T7458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'. [ 363.394840][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.453911][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.628550][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.029772][ T7471] loop3: detected capacity change from 0 to 512 [ 364.251232][ T7471] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.860: corrupted inode contents [ 364.267532][ T7471] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.860: mark_inode_dirty error [ 364.280840][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 364.281131][ C1] EXT4-fs (loop3): initial error at time 2000000086: ext4_do_update_inode:5690: inode 16 [ 364.282201][ C1] EXT4-fs (loop3): last error at time 2000000086: ext4_do_update_inode:5690: inode 16 [ 364.316460][ T7471] fserror_report: 1 callbacks suppressed [ 364.316485][ T7471] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 364.329891][ T7471] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.860: corrupted inode contents [ 364.356091][ T7471] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 364.360456][ T7471] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.860: mark_inode_dirty error [ 364.386231][ T7471] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 364.392190][ T7471] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.860: corrupted inode contents [ 364.418427][ T7471] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 364.421939][ T7471] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 364.444461][ T7471] loop3: lost filesystem error report for type 5 error -117 [ 364.447936][ T7471] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.860: corrupted inode contents [ 364.470800][ T7471] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 364.474049][ T7471] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.860: mark_inode_dirty error [ 364.499299][ T7471] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 364.502321][ T7471] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 364.524959][ T7471] loop3: lost filesystem error report for type 5 error -117 [ 364.539554][ T7471] EXT4-fs (loop3): 1 truncate cleaned up [ 364.539724][ T30] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 364.539752][ T30] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 364.539775][ T30] loop3: lost filesystem error report for type 5 error -117 [ 364.576565][ T28] audit: type=1400 audit(2000000086.470:1455): avc: denied { ioctl } for pid=7454 comm="syz.4.858" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16575 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 364.765221][ T7471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.785590][ T7471] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.398518][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.424695][ T7481] netlink: 'syz.0.875': attribute type 32 has an invalid length. [ 365.482531][ T7485] __nla_validate_parse: 3 callbacks suppressed [ 365.482585][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 365.496412][ T7484] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.002073][ T7502] Cannot find add_set index 0 as target [ 368.358908][ T7511] loop3: detected capacity change from 0 to 764 [ 368.402351][ T7503] loop0: detected capacity change from 0 to 512 [ 368.408956][ T7503] EXT4-fs: Ignoring removed mblk_io_submit option [ 368.418307][ T7503] EXT4-fs (loop0): orphan cleanup on readonly fs [ 368.424770][ T7503] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 368.433246][ T7503] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.868: attempt to clear invalid blocks 2 len 1 [ 368.445986][ T7503] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 368.446351][ T7503] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, [ 368.455475][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 368.455493][ C1] EXT4-fs (loop0): initial error at time 2000000090: ext4_clear_blocks:876: inode 13 [ 368.455543][ C1] EXT4-fs (loop0): last error at time 2000000090: ext4_clear_blocks:876: inode 13 [ 368.488944][ T7503] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 368.497382][ T7503] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.868: invalid indirect mapped block 1819239214 (level 0) [ 368.511344][ T7503] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 368.513177][ T7503] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.868: invalid indirect mapped block 1819239214 (level 1) [ 368.536194][ T7503] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 368.546057][ T7503] EXT4-fs (loop0): 1 truncate cleaned up [ 368.561356][ T7503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.574188][ T7503] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.681237][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 368.930445][ T7511] Symlink component flag not implemented [ 368.947708][ T7511] Symlink component flag not implemented [ 369.034475][ T7511] 9pnet_virtio: no channels available for device 127.0.0.1 [ 369.044789][ T28] audit: type=1400 audit(2000000091.370:1456): avc: denied { mounton } for pid=7510 comm="syz.3.872" path="/159/file1" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 369.078761][ T7511] tipc: Failed to remove unknown binding: 66,0,0/4:128809721/128809722 [ 369.099421][ T7511] tipc: Failed to remove unknown binding: 66,0,0/4:128809721/128809722 [ 369.997481][ T7535] loop3: detected capacity change from 0 to 512 [ 370.456314][ T7539] loop0: detected capacity change from 0 to 512 [ 370.543255][ T7539] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 370.586858][ T7535] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.877: corrupted inode contents [ 370.601038][ T7535] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 370.606755][ T7535] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.877: mark_inode_dirty error [ 370.608850][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 370.608870][ C1] EXT4-fs (loop3): initial error at time 2000000092: ext4_do_update_inode:5690: inode 16 [ 370.608917][ C1] EXT4-fs (loop3): last error at time 2000000092: ext4_do_update_inode:5690: inode 16 [ 370.665553][ T7535] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 370.701405][ T7535] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.877: corrupted inode contents [ 370.727788][ T7535] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 370.739653][ T7535] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.877: mark_inode_dirty error [ 370.763454][ T7535] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 370.772214][ T7539] EXT4-fs (loop0): 1 truncate cleaned up [ 370.811131][ T7539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.988074][ T7535] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.877: corrupted inode contents [ 371.005012][ T7535] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 371.010644][ T7535] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 371.031480][ T7535] loop3: lost filesystem error report for type 5 error -117 [ 371.037316][ T7535] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.877: corrupted inode contents [ 371.073869][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.874'. [ 371.101527][ T7545] netlink: 32 bytes leftover after parsing attributes in process `syz.1.879'. [ 371.112122][ T7535] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 371.124919][ T7535] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.877: mark_inode_dirty error [ 371.148929][ T7535] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 371.494232][ T7535] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 371.516631][ T7535] loop3: lost filesystem error report for type 5 error -117 [ 372.074549][ T7535] EXT4-fs (loop3): 1 truncate cleaned up [ 372.096765][ T404] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 372.115804][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.874'. [ 372.125361][ T404] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 372.172526][ T7535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.191361][ T7535] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.472616][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.879'. [ 373.259747][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.324742][ T7535] syz.3.877 (7535) used greatest stack depth: 8384 bytes left [ 373.334202][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.396685][ T7556] loop4: detected capacity change from 0 to 512 [ 373.498029][ T28] audit: type=1400 audit(2000000095.810:1457): avc: denied { ioctl } for pid=7557 comm="syz.0.884" path="socket:[16733]" dev="sockfs" ino=16733 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.526175][ T7551] loop2: detected capacity change from 0 to 128 [ 373.571470][ T7556] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 373.606649][ T7556] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 373.709402][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.728676][ T7558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.884'. [ 373.764434][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.820635][ T7565] netlink: 68 bytes leftover after parsing attributes in process `syz.3.881'. [ 374.457786][ T7556] EXT4-fs (loop4): 1 truncate cleaned up [ 374.469459][ T7556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.311830][ T7587] loop2: detected capacity change from 0 to 512 [ 375.425063][ T7587] EXT4-fs (loop2): 1 orphan inode deleted [ 375.451739][ T7587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.586763][ T7595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.886'. [ 375.844349][ T7587] bond3: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 375.871692][ T7587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.563714][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.578607][ T7600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.894'. [ 376.588580][ T7600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'. [ 376.600404][ T7590] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 376.698911][ T28] audit: type=1400 audit(2000000000.660:1458): avc: denied { write } for pid=7555 comm="syz.4.886" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.833569][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.506563][ T7618] loop2: detected capacity change from 0 to 512 [ 379.045568][ T7618] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.897: corrupted inode contents [ 379.062577][ T7618] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 379.065998][ T7618] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.897: mark_inode_dirty error [ 379.076286][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 379.076507][ C1] EXT4-fs (loop2): initial error at time 2000000003: ext4_do_update_inode:5690: inode 16 [ 379.076658][ C1] EXT4-fs (loop2): last error at time 2000000003: ext4_do_update_inode:5690: inode 16 [ 379.156461][ T7618] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 379.159903][ T7618] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.897: corrupted inode contents [ 379.187249][ T7618] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 379.192344][ T7618] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.897: mark_inode_dirty error [ 379.218579][ T7618] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 379.222388][ T7618] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.897: corrupted inode contents [ 379.246626][ T7618] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 379.764382][ T7618] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 379.786897][ T7618] loop2: lost filesystem error report for type 5 error -117 [ 379.790805][ T7618] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.897: corrupted inode contents [ 379.812458][ T7618] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 379.814494][ T7618] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.897: mark_inode_dirty error [ 379.840439][ T7618] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 379.843100][ T7618] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 379.863485][ T7618] loop2: lost filesystem error report for type 5 error -117 [ 379.886771][ T7618] EXT4-fs (loop2): 1 truncate cleaned up [ 379.904350][ T404] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 379.927048][ T7618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.945783][ T7618] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.044742][ T7625] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.085092][ T7625] gre0 speed is unknown, defaulting to 1000 [ 380.122332][ T404] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 380.238268][ T7626] loop3: detected capacity change from 0 to 512 [ 380.262564][ T7626] EXT4-fs: dax option not supported [ 380.329062][ T7618] syz.2.897 (7618) used greatest stack depth: 8320 bytes left [ 380.930900][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.344458][ T7632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.903'. [ 381.510902][ T7641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.525512][ T7638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.905'. [ 381.556057][ T7641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.556287][ T7638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.905'. [ 382.303811][ T7653] netlink: 32 bytes leftover after parsing attributes in process `syz.3.907'. [ 382.316187][ T7652] netlink: 80 bytes leftover after parsing attributes in process `syz.1.908'. [ 382.336413][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.907'. [ 382.544730][ T7664] netlink: 'syz.4.914': attribute type 2 has an invalid length. [ 383.399395][ T7676] loop2: detected capacity change from 0 to 512 [ 384.425761][ T7690] loop3: detected capacity change from 0 to 512 [ 384.916327][ T7690] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 385.047680][ T7676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 385.419340][ T7690] EXT4-fs (loop3): 1 truncate cleaned up [ 385.429436][ T7690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.945299][ T7696] netlink: 32 bytes leftover after parsing attributes in process `syz.4.922'. [ 385.972871][ T7696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.922'. [ 386.452276][ T7690] netlink: 80 bytes leftover after parsing attributes in process `syz.3.921'. [ 386.460195][ T7676] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 387.165037][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.214949][ T28] audit: type=1326 audit(2000000011.270:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b298ece59 code=0x7ffc0000 [ 387.285014][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.923'. [ 387.292701][ T28] audit: type=1326 audit(2000000011.300:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b298ece59 code=0x7ffc0000 [ 387.319826][ T28] audit: type=1326 audit(2000000011.300:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b298ece59 code=0x7ffc0000 [ 387.345385][ T28] audit: type=1326 audit(2000000011.300:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4b298ece59 code=0x7ffc0000 [ 387.371100][ T28] audit: type=1326 audit(2000000011.350:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b298ece59 code=0x7ffc0000 [ 387.411319][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.923'. [ 387.420621][ T28] audit: type=1326 audit(2000000011.350:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b298ecbc2 code=0x7ffc0000 [ 387.468972][ T28] audit: type=1326 audit(2000000011.350:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4b298ecc57 code=0x7ffc0000 [ 387.505972][ T28] audit: type=1326 audit(2000000011.350:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4b298a9b51 code=0x7ffc0000 [ 387.556690][ T28] audit: type=1326 audit(2000000011.350:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f4b298edc49 code=0x7ffc0000 [ 387.606823][ T28] audit: type=1326 audit(2000000011.350:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7700 comm="syz.0.925" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4b298a9bbb code=0x7ffc0000 [ 388.276256][ T7715] random: crng reseeded on system resumption [ 388.318361][ T7720] netlink: 'syz.1.930': attribute type 2 has an invalid length. [ 388.392337][ T7732] netlink: 56 bytes leftover after parsing attributes in process `syz.0.934'. [ 388.409849][ T7729] ip6_vti0 speed is unknown, defaulting to 1000 [ 388.476511][ T7729] gre0 speed is unknown, defaulting to 1000 [ 388.541594][ T7737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.939'. [ 388.566720][ T7739] netlink: 340 bytes leftover after parsing attributes in process `syz.4.933'. [ 388.580644][ T7737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.939'. [ 389.175143][ T7734] loop4: detected capacity change from 0 to 512 [ 389.333434][ T7759] loop2: detected capacity change from 0 to 512 [ 390.150945][ T7759] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 390.187400][ T7759] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 390.199715][ T7759] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.936: bad orphan inode 4 [ 390.211112][ T7759] loop2: lost filesystem error report for type 5 error -117 [ 390.212602][ T7759] EXT4-fs (loop2): 1 orphan inode deleted [ 390.220964][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 390.221004][ C1] EXT4-fs (loop2): initial error at time 2000000014: ext4_orphan_get:1423 [ 390.221313][ C1] EXT4-fs (loop2): last error at time 2000000014: ext4_orphan_get:1423 [ 390.267174][ T7759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.313129][ T7759] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 4: comm syz.2.936: lblock 0 mapped to illegal pblock 4 (length 1) [ 390.673950][ T7734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.775198][ T7734] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.285222][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.330819][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.289647][ T7783] SELinux: policydb magic number 0x202001e does not match expected magic number 0xf97cff8c [ 392.315908][ T7783] SELinux: failed to load policy [ 392.330459][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 392.330475][ T28] audit: type=1326 audit(2000000016.390:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.1.943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007119ce59 code=0x7ffc0000 [ 392.542691][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.948'. [ 392.545164][ T28] audit: type=1326 audit(2000000016.420:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.1.943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007119ce59 code=0x7ffc0000 [ 393.140358][ T7799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.948'. [ 393.534488][ T28] audit: type=1326 audit(2000000016.440:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7776 comm="syz.1.943" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f007119ce59 code=0x7ffc0000 [ 394.161810][ T7820] syzkaller0: entered promiscuous mode [ 394.182599][ T7820] syzkaller0: entered allmulticast mode [ 394.232700][ T7820] tipc: Enabled bearer , priority 0 [ 394.306841][ T7822] netlink: 32 bytes leftover after parsing attributes in process `syz.1.953'. [ 394.485741][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 394.738213][ T7828] SET target dimension over the limit! [ 395.456005][ T3384] tipc: Node number set to 4059216998 [ 395.902792][ T7835] loop4: detected capacity change from 0 to 512 [ 395.912460][ T7835] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 395.920694][ T7835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 395.929827][ T7835] System zones: 0-1, 15-15, 18-18, 34-34 [ 395.935725][ T7835] EXT4-fs (loop4): orphan cleanup on readonly fs [ 395.942444][ T7835] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 395.951955][ T7835] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 395.966718][ T7835] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 395.973790][ T7835] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.958: bad orphan inode 16 [ 396.009949][ T7835] loop4: lost filesystem error report for type 5 error -117 [ 396.010127][ T7835] ext4_test_bit(bit=15, block=18) = 1 [ 396.022867][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 396.022888][ C1] EXT4-fs (loop4): initial error at time 2000000020: ext4_orphan_get:1423 [ 396.022909][ C1] EXT4-fs (loop4): last error at time 2000000020: ext4_orphan_get:1423 [ 396.058340][ T7835] is_bad_inode(inode)=0 [ 396.062820][ T7835] NEXT_ORPHAN(inode)=0 [ 396.066927][ T7835] max_ino=32 [ 396.070492][ T7835] i_nlink=2 [ 396.074105][ T7835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.698326][ T28] audit: type=1326 audit(2000000020.750:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 396.844833][ T28] audit: type=1326 audit(2000000020.750:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 396.873490][ T28] audit: type=1326 audit(2000000020.750:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 396.903414][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.861394][ T28] audit: type=1326 audit(2000000020.750:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 397.886913][ T28] audit: type=1326 audit(2000000020.750:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 397.947559][ T28] audit: type=1326 audit(2000000020.750:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 397.977506][ T28] audit: type=1326 audit(2000000020.750:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 398.049802][ T7853] netlink: 6308 bytes leftover after parsing attributes in process `syz.1.962'. [ 398.127861][ T28] audit: type=1326 audit(2000000020.750:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 398.440332][ T28] audit: type=1326 audit(2000000020.750:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 398.506014][ T28] audit: type=1326 audit(2000000020.750:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 398.570068][ T7856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.965'. [ 398.586352][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.968'. [ 398.601324][ T28] audit: type=1326 audit(2000000020.750:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 398.627676][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.965'. [ 398.649545][ T7866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.968'. [ 398.694568][ T28] audit: type=1326 audit(2000000020.750:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 398.797827][ T28] audit: type=1326 audit(2000000020.750:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7845 comm="syz.3.961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22023ace59 code=0x7ffc0000 [ 399.587004][ T7883] SET target dimension over the limit! [ 399.851933][ T7883] loop2: detected capacity change from 0 to 512 [ 400.519728][ T7887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.973'. [ 400.678481][ T7887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'. [ 401.095429][ T7883] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.970: corrupted inode contents [ 401.113507][ T7883] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 401.118878][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 401.134624][ C0] EXT4-fs (loop2): initial error at time 2000000025: ext4_do_update_inode:5690: inode 16 [ 401.144470][ C0] EXT4-fs (loop2): last error at time 2000000025: ext4_do_update_inode:5690: inode 16 [ 401.162891][ T7883] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.970: mark_inode_dirty error [ 401.178179][ T7883] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 401.183327][ T7883] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.970: corrupted inode contents [ 401.208629][ T7883] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 401.214273][ T7883] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.970: mark_inode_dirty error [ 401.237096][ T7883] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 401.241730][ T7883] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.970: corrupted inode contents [ 401.268036][ T7883] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 401.272145][ T7883] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 401.295345][ T7883] loop2: lost filesystem error report for type 5 error -117 [ 401.298402][ T7883] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.970: corrupted inode contents [ 401.321382][ T7883] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 401.326370][ T7883] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.970: mark_inode_dirty error [ 401.361508][ T7883] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 401.364650][ T7883] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 401.387330][ T7883] loop2: lost filesystem error report for type 5 error -117 [ 401.400212][ T7883] EXT4-fs (loop2): 1 truncate cleaned up [ 401.438777][ T7883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.470887][ T7883] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.519984][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 401.623042][ T7893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 401.770057][ T7883] syz.2.970 (7883) used greatest stack depth: 8128 bytes left [ 401.779901][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.665610][ T7923] netlink: 6308 bytes leftover after parsing attributes in process `syz.3.983'. [ 405.314368][ T7931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.989'. [ 405.329770][ T7931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.989'. [ 405.426967][ T7940] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 405.647158][ T7950] SET target dimension over the limit! [ 406.135764][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.997'. [ 406.149731][ T7952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.993'. [ 406.380928][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 406.475274][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'. [ 406.611972][ T7972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1007'. [ 407.076375][ T28] kauditd_printk_skb: 215 callbacks suppressed [ 407.076394][ T28] audit: type=1400 audit(2000000004.940:1849): avc: denied { ioctl } for pid=7985 comm="syz.4.1014" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 407.322086][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1012'. [ 407.344201][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1012'. [ 408.281031][ T28] audit: type=1400 audit(2000000006.150:1850): avc: denied { lock } for pid=8004 comm="syz.1.1019" path="socket:[17834]" dev="sockfs" ino=17834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 408.559879][ T8025] openvswitch: netlink: Missing key (keys=1000040, expected=200000) [ 409.823887][ T8074] loop4: detected capacity change from 0 to 512 [ 410.076098][ T8074] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.1048: corrupted inode contents [ 410.090228][ T8074] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 410.092419][ T8074] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.1048: mark_inode_dirty error [ 410.104475][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 410.104865][ C1] EXT4-fs (loop4): initial error at time 2000000007: ext4_do_update_inode:5690: inode 16 [ 410.105066][ C1] EXT4-fs (loop4): last error at time 2000000007: ext4_do_update_inode:5690: inode 16 [ 410.150360][ T8074] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 410.157665][ T8074] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.1048: corrupted inode contents [ 410.181889][ T8074] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 410.185094][ T8074] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.1048: mark_inode_dirty error [ 410.221024][ T8074] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 410.224739][ T8074] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.1048: corrupted inode contents [ 410.252514][ T8074] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 410.256054][ T8074] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 410.277210][ T8074] loop4: lost filesystem error report for type 5 error -117 [ 410.283783][ T8074] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.1048: corrupted inode contents [ 410.306570][ T8074] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 410.310146][ T8074] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.1048: mark_inode_dirty error [ 410.335084][ T8074] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 410.338182][ T8074] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 410.360853][ T8074] loop4: lost filesystem error report for type 5 error -117 [ 410.376390][ T8074] EXT4-fs (loop4): 1 truncate cleaned up [ 410.417209][ T8074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.435801][ T8074] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.106137][ T404] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 411.118168][ T404] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 411.144518][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.394774][ T8092] SELinux: ebitmap start bit (771752640) is beyond the end of the bitmap (1472) [ 411.405953][ T8092] SELinux: failed to load policy [ 411.662891][ T8106] __nla_validate_parse: 7 callbacks suppressed [ 411.663169][ T8106] netlink: 6308 bytes leftover after parsing attributes in process `syz.3.1056'. [ 412.238339][ T8112] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1061'. [ 412.257979][ T8112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1061'. [ 412.390354][ T28] audit: type=1400 audit(2000000010.290:1851): avc: denied { read } for pid=8117 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 412.493795][ T28] audit: type=1400 audit(2000000010.360:1852): avc: denied { setopt } for pid=8121 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 412.632273][ T28] audit: type=1400 audit(2000000010.530:1853): avc: denied { ioctl } for pid=8135 comm="syz.4.1074" path="socket:[18642]" dev="sockfs" ino=18642 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 412.708253][ T8142] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1077'. [ 413.125197][ T8186] loop2: detected capacity change from 0 to 512 [ 413.155296][ T8186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.170299][ T8186] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.196717][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.451500][ T8216] loop3: detected capacity change from 0 to 512 [ 414.380490][ T8216] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 414.413507][ T8216] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #13: comm syz.3.1110: iget: bad i_size value: 12154757448730 [ 415.412941][ T8188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1099'. [ 415.425785][ T8216] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 415.428842][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 415.444634][ C0] EXT4-fs (loop3): initial error at time 2000000013: ext4_orphan_get:1397: inode 13 [ 415.454065][ C0] EXT4-fs (loop3): last error at time 2000000013: ext4_orphan_get:1397: inode 13 [ 415.733881][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1099'. [ 416.451637][ T8216] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1110: couldn't read orphan inode 13 (err -117) [ 416.493392][ T8216] loop3: lost filesystem error report for type 5 error -117 [ 416.493912][ T8216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.833912][ T8228] netlink: 6308 bytes leftover after parsing attributes in process `syz.0.1107'. [ 417.158660][ T8078] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 417.218355][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'. [ 417.251454][ T8236] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1119'. [ 417.262815][ T8236] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1119'. [ 417.724669][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.769312][ T28] audit: type=1400 audit(2000000015.670:1854): avc: denied { append } for pid=8242 comm="syz.0.1122" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 417.862601][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1126'. [ 418.018866][ T8282] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1141'. [ 418.171181][ T8302] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 8302 comm: syz.4.1152) [ 418.173559][ T28] audit: type=1400 audit(2000000016.070:1855): avc: denied { module_load } for pid=8299 comm="syz.4.1152" path=2F2173656C696E7578776B311FD06DC37F39C99E2A0D5493FDE291EFAA16236A978FBCDE590FCCC56D56CB15766D2870C92D515A23D27B84BF06 dev="mqueue" ino=18237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 418.235471][ T8308] loop4: detected capacity change from 0 to 764 [ 418.264281][ T28] audit: type=1400 audit(2000000016.160:1856): avc: denied { create } for pid=8309 comm="syz.1.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 418.315884][ T28] audit: type=1400 audit(2000000016.180:1857): avc: denied { getopt } for pid=8309 comm="syz.1.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 418.374299][ T28] audit: type=1400 audit(2000000016.270:1858): avc: denied { create } for pid=8324 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.408726][ T28] audit: type=1400 audit(2000000016.300:1859): avc: denied { write } for pid=8324 comm="syz.0.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 418.440381][ T8335] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1166'. [ 418.507181][ T28] audit: type=1400 audit(2000000016.370:1860): avc: denied { write } for pid=8339 comm="syz.0.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.543796][ T28] audit: type=1400 audit(2000000016.380:1861): avc: denied { setopt } for pid=8337 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 418.764577][ T8388] tmpfs: Unknown parameter 'contextd' [ 418.834293][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1194'. [ 418.987556][ T8410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1200'. [ 419.535148][ T28] audit: type=1400 audit(2000000017.430:1862): avc: denied { getopt } for pid=8413 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 419.597052][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 420.498434][ T28] audit: type=1400 audit(2000000018.390:1863): avc: denied { write } for pid=8459 comm="syz.4.1219" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 420.585812][ T8470] program syz.2.1224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.651650][ T8474] netlink: 'syz.3.1227': attribute type 1 has an invalid length. [ 420.672436][ T8474] netlink: 'syz.3.1227': attribute type 2 has an invalid length. [ 421.877846][ T8529] usb usb7: usbfs: process 8529 (syz.4.1250) did not claim interface 0 before use [ 421.965806][ T8512] __nla_validate_parse: 4 callbacks suppressed [ 421.965883][ T8512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1242'. [ 422.025371][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'. [ 422.136103][ T8560] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1265'. [ 422.220865][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1258'. [ 422.279811][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1258'. [ 422.301168][ T8583] usb usb1: usbfs: process 8583 (syz.1.1276) did not claim interface 0 before use [ 422.406982][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 422.483208][ T8605] loop3: detected capacity change from 0 to 256 [ 422.832315][ T8635] tmpfs: Bad value for 'mpol' [ 422.905610][ T8638] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1302'. [ 422.931159][ T8642] tmpfs: Bad value for 'mpol' [ 423.315917][ T8667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1313'. [ 423.371365][ T8667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1313'. [ 423.520050][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 423.520334][ T28] audit: type=1400 audit(2000000021.420:1871): avc: denied { getopt } for pid=8671 comm="syz.4.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 423.620119][ T8678] nft_compat: unsupported protocol 0 [ 424.237515][ T8712] netlink: 'syz.3.1334': attribute type 1 has an invalid length. [ 424.250419][ T8712] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1334'. [ 424.345285][ T28] audit: type=1400 audit(2000000022.240:1872): avc: denied { bind } for pid=8719 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 424.401366][ T28] audit: type=1400 audit(2000000022.290:1873): avc: denied { nlmsg_read } for pid=8725 comm="syz.3.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 425.317490][ T28] audit: type=1400 audit(2000000023.210:1874): avc: denied { bind } for pid=8789 comm="syz.1.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 425.533225][ T28] audit: type=1400 audit(2000000023.430:1875): avc: denied { connect } for pid=8814 comm="syz.3.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 425.766384][ T28] audit: type=1400 audit(2000000023.660:1876): avc: denied { create } for pid=8836 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 425.798062][ T28] audit: type=1400 audit(2000000023.690:1877): avc: denied { ioctl } for pid=8836 comm="syz.0.1391" path="socket:[20988]" dev="sockfs" ino=20988 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 426.891384][ T28] audit: type=1400 audit(2000000024.780:1878): avc: denied { getopt } for pid=8892 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 426.928962][ T8898] ================================================================== [ 426.937089][ T8898] BUG: KCSAN: data-race in ktime_get_mono_fast_ns / update_fast_timekeeper [ 426.945719][ T8898] [ 426.948061][ T8898] write to 0xffffffff86d4fb48 of 56 bytes by interrupt on cpu 0: [ 426.952466][ T28] audit: type=1400 audit(2000000024.850:1879): avc: denied { connect } for pid=8902 comm="syz.0.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 426.955785][ T8898] update_fast_timekeeper+0x38/0x70 [ 426.955824][ T8898] timekeeping_update_from_shadow+0x3ab/0x440 [ 426.955855][ T8898] __timekeeping_advance+0xa5d/0xc10 [ 426.955873][ T8898] update_wall_time+0x21/0x50 [ 426.955902][ T8898] tick_do_update_jiffies64+0x169/0x1c0 [ 426.955931][ T8898] tick_nohz_handler+0x8d/0x3d0 [ 426.955958][ T8898] __hrtimer_run_queues+0x276/0x4f0 [ 426.955981][ T8898] hrtimer_interrupt+0x261/0x850 [ 426.956006][ T8898] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 427.023159][ T8898] sysvec_apic_timer_interrupt+0x6f/0x80 [ 427.028815][ T8898] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 427.034820][ T8898] kcsan_setup_watchpoint+0x404/0x410 [ 427.040218][ T8898] folios_put_refs+0x4e/0x2d0 [ 427.044925][ T8898] free_pages_and_swap_cache+0x2af/0x3a0 [ 427.050593][ T8898] tlb_flush_mmu+0x557/0x6d0 [ 427.055223][ T8898] __zap_vma_range+0x24b9/0x2c20 [ 427.060198][ T8898] unmap_vmas+0x22a/0x340 [ 427.064557][ T8898] exit_mmap+0x1ab/0x5f0 [ 427.068838][ T8898] __mmput+0x28/0x1c0 [ 427.072845][ T8898] mmput+0x40/0x50 [ 427.076611][ T8898] exit_mm+0x15f/0x1f0 [ 427.080732][ T8898] do_exit+0x442/0x1530 [ 427.084905][ T8898] do_group_exit+0xfe/0x140 [ 427.089430][ T8898] get_signal+0xe30/0xf20 [ 427.093785][ T8898] arch_do_signal_or_restart+0x96/0x480 [ 427.099357][ T8898] exit_to_user_mode_loop+0x6f/0x820 [ 427.104670][ T8898] do_syscall_64+0x232/0x3b0 [ 427.109296][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.115218][ T8898] [ 427.117566][ T8898] read to 0xffffffff86d4fb58 of 8 bytes by task 8898 on cpu 1: [ 427.125305][ T8898] ktime_get_mono_fast_ns+0x92/0x1a0 [ 427.130630][ T8898] bpf_ktime_get_ns+0xe/0x20 [ 427.135245][ T8898] bpf_prog_b1adb4c1a433d624+0x23/0x29 [ 427.140710][ T8898] bpf_dispatcher_xdp_func+0x25/0x30 [ 427.146099][ T8898] bpf_test_run+0x233/0x620 [ 427.150616][ T8898] bpf_prog_test_run_xdp+0x5a9/0xa10 [ 427.155915][ T8898] bpf_prog_test_run+0x204/0x340 [ 427.160861][ T8898] __sys_bpf+0x52e/0x7e0 [ 427.165109][ T8898] __x64_sys_bpf+0x41/0x50 [ 427.169528][ T8898] x64_sys_call+0x10cb/0x3020 [ 427.174209][ T8898] do_syscall_64+0x12c/0x3b0 [ 427.178824][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.184720][ T8898] [ 427.187043][ T8898] value changed: 0x000000dc428aa111 -> 0x000000dc43da527e [ 427.194145][ T8898] [ 427.196475][ T8898] Reported by Kernel Concurrency Sanitizer on: [ 427.202626][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.3.1417 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 427.213486][ T8898] Tainted: [W]=WARN [ 427.217296][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.227350][ T8898] ==================================================================