last executing test programs: 2m0.714599091s ago: executing program 2 (id=131): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x23, 0x2, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m59.82999498s ago: executing program 2 (id=145): bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x1}}, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000000206010300000000000000000000000605000100070000000900020073797a31000000000c00078008001300000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m59.789127812s ago: executing program 2 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r1 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x80000003, 0x1, @tid=r2}) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) 1m59.751374613s ago: executing program 2 (id=149): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x1000, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m59.696033214s ago: executing program 2 (id=152): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd6c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\xf0Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m59.668662804s ago: executing program 2 (id=154): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m55.968987228s ago: executing program 1 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000180)={0x60, 0x2, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x100, 0x0, 0x0, 0x2, 0x40, 0x14, 0xc, 0x20}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8000) 1m55.625809846s ago: executing program 1 (id=223): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) lstat(0x0, 0x0) 1m55.548460407s ago: executing program 1 (id=225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'sit0\x00', 0x400}) close(0x3) 1m55.301933403s ago: executing program 1 (id=231): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000440)={[{@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@fat=@sys_immutable}, {@fat=@nfs}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1m55.153495966s ago: executing program 1 (id=237): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) 1m54.883947522s ago: executing program 1 (id=245): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@user_xattr}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) rmdir(&(0x7f0000000380)='./file0\x00') 1m54.883825882s ago: executing program 32 (id=245): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@user_xattr}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) rmdir(&(0x7f0000000380)='./file0\x00') 1m44.422414138s ago: executing program 33 (id=154): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m43.280613444s ago: executing program 5 (id=432): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x1) 1m43.133531367s ago: executing program 5 (id=433): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1m43.110709317s ago: executing program 5 (id=434): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.074081318s ago: executing program 5 (id=435): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 1m43.024274639s ago: executing program 5 (id=436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x20040054) 1m42.635794858s ago: executing program 5 (id=444): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x100000}}, 0x40) 1m42.597930529s ago: executing program 34 (id=444): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x100000}}, 0x40) 1.830320799s ago: executing program 0 (id=2216): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0}) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) 1.380330419s ago: executing program 7 (id=2222): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000738000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 1.31378279s ago: executing program 7 (id=2224): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000"], 0x38}}, 0x4000) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) 1.274156922s ago: executing program 7 (id=2225): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480), 0x8) 1.227863872s ago: executing program 7 (id=2226): sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 1.226735192s ago: executing program 4 (id=2227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000020000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 1.060670636s ago: executing program 4 (id=2228): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000140)=0x4, 0x4) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 855.975821ms ago: executing program 7 (id=2230): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 817.388421ms ago: executing program 4 (id=2232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) 771.501763ms ago: executing program 0 (id=2234): open(&(0x7f0000000140)='./bus\x00', 0x16d942, 0x1c0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 770.450613ms ago: executing program 4 (id=2235): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x1013c1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 665.908335ms ago: executing program 0 (id=2238): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000280)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0xa, 0x4e24, 0x6, @remote, 0x5}}}, 0x38) r2 = syz_open_pts(r0, 0x80) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 652.050636ms ago: executing program 4 (id=2239): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback={0xff00}, 0x4000000c}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x5c39d53d76e37746) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000004c0)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 632.441326ms ago: executing program 0 (id=2240): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0x0, 0x1}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) 541.892938ms ago: executing program 0 (id=2242): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000140)=0x4, 0x4) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 541.788588ms ago: executing program 4 (id=2243): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 540.665478ms ago: executing program 6 (id=2244): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1400000}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 517.361488ms ago: executing program 7 (id=2245): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) pwritev(r0, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="566106aa11428258fb", 0x9}], 0x1, 0x947, 0x3) unshare(0x22020600) 464.552249ms ago: executing program 3 (id=2246): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000280)=""/153, 0x99) 463.44554ms ago: executing program 6 (id=2247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x4) 320.771783ms ago: executing program 0 (id=2248): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x2, 0x3}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 320.574633ms ago: executing program 6 (id=2249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, 0xffffffffffffffff, 0x19, 0x0, @val=@netfilter={0x2, 0x1, 0x3, 0x1}}, 0x20) 248.000724ms ago: executing program 6 (id=2250): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 191.062116ms ago: executing program 6 (id=2251): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a947f009b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084660914fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0xffffff1d}, {&(0x7f00000007c0)="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", 0xde6}], 0x4}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000480)="d353", 0x2}], 0x1}}], 0x2, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 168.847566ms ago: executing program 3 (id=2252): socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x3}, 0x10f4c8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000000)=ANY=[], 0x835, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) 111.741408ms ago: executing program 3 (id=2253): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000900)=@newtaction={0x14, 0x30, 0x2, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x10004080) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 52.129269ms ago: executing program 3 (id=2254): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x5, 0x276}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 51.957769ms ago: executing program 3 (id=2255): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e80)={0x14, 0x0, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x2400c0c4) 51.101459ms ago: executing program 6 (id=2256): unshare(0x62040200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000780)}, 0x20) 0s ago: executing program 3 (id=2257): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) kernel console output (not intermixed with test programs): beled_t tclass=dir permissive=1 [ 78.820948][ T28] audit: type=1400 audit(1784311291.462:580): avc: denied { tracepoint } for pid=5882 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.842203][ T28] audit: type=1400 audit(1784311291.472:581): avc: denied { write } for pid=5872 comm="syz.0.745" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.844602][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.864964][ T28] audit: type=1400 audit(1784311291.472:582): avc: denied { write } for pid=5872 comm="syz.0.745" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.897741][ T28] audit: type=1400 audit(1784311291.472:583): avc: denied { remove_name } for pid=5872 comm="syz.0.745" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.923066][ T28] audit: type=1400 audit(1784311291.472:584): avc: denied { rename } for pid=5872 comm="syz.0.745" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.945503][ T28] audit: type=1400 audit(1784311291.472:585): avc: denied { rmdir } for pid=5872 comm="syz.0.745" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.014538][ T5893] loop4: detected capacity change from 0 to 1024 [ 79.027977][ T5893] EXT4-fs: Ignoring removed bh option [ 79.038457][ T5893] EXT4-fs: Ignoring removed bh option [ 79.054066][ T5896] loop7: detected capacity change from 0 to 512 [ 79.063934][ T5893] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.075767][ T5896] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 79.084230][ T5896] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.755: corrupted in-inode xattr: e_value size too large [ 79.099295][ T5896] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.099452][ T5896] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.755: couldn't read orphan inode 15 (err -117) [ 79.108640][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 79.108662][ C0] EXT4-fs (loop7): initial error at time 1784311291: ext4_iget_extra_inode:5180: inode 15 [ 79.108698][ C0] EXT4-fs (loop7): last error at time 1784311291: ext4_iget_extra_inode:5180: inode 15 [ 79.137518][ T5893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.146971][ T5896] loop7: lost filesystem error report for type 5 error -117 [ 79.162907][ T5893] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.754: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 79.191232][ T5893] EXT4-fs (loop4): Remounting filesystem read-only [ 79.201083][ T5893] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 79.225462][ T5896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.241759][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.269845][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.397490][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 79.427752][ T5926] netlink: 'syz.0.765': attribute type 9 has an invalid length. [ 79.439160][ T5922] loop4: detected capacity change from 0 to 512 [ 79.453402][ T5928] netlink: 'syz.6.767': attribute type 10 has an invalid length. [ 79.461503][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.472406][ T5922] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 79.476549][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.501218][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.508410][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.517924][ T5922] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.764: bad orphan inode 15 [ 79.532783][ T5922] loop4: lost filesystem error report for type 5 error -117 [ 79.533171][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.547696][ T5928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.555019][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.562122][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.567997][ T5922] ext4_test_bit(bit=14, block=18) = 1 [ 79.569687][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 79.579674][ T5922] is_bad_inode(inode)=0 [ 79.581275][ C0] EXT4-fs (loop4): initial error at time 1784311292: ext4_orphan_get:1425 [ 79.581304][ C0] EXT4-fs (loop4): last error at time 1784311292: ext4_orphan_get:1425 [ 79.604287][ T5928] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 79.613021][ T5922] NEXT_ORPHAN(inode)=1023 [ 79.617600][ T5922] max_ino=32 [ 79.620931][ T5922] i_nlink=0 [ 79.626236][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.645189][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.654136][ T5922] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.764: bg 0: block 161: padding at end of block bitmap is not set [ 79.668648][ T5922] loop4: lost filesystem error report for type 5 error -117 [ 79.669059][ T5922] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 79.685892][ T5922] loop4: lost filesystem error report for type 5 error -117 [ 79.689165][ T5922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.722959][ T5922] ext2 filesystem being mounted at /175/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 80.577145][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.947649][ T5984] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 80.947780][ T54] bond0: (slave bond_slave_0): interface is now down [ 80.977528][ T54] bond0: (slave bond_slave_1): interface is now down [ 80.985705][ T54] bond0: (slave bridge0): interface is now down [ 80.997585][ T54] bond0: now running without any active interface! [ 81.107902][ T5984] infiniband syz1: set down [ 81.112523][ T5984] infiniband syz1: added bond0 [ 81.127691][ T5984] RDS/IB: syz1: added [ 81.134542][ T5984] smc: adding ib device syz1 with port count 1 [ 81.141015][ T5984] smc: ib device syz1 port 1 has no pnetid [ 81.701795][ T6002] loop7: detected capacity change from 0 to 128 [ 81.702500][ T6006] netlink: 'syz.3.801': attribute type 6 has an invalid length. [ 81.730128][ T6002] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.748465][ T6002] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.813451][ T54] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 81.985481][ T6037] netlink: 'syz.7.811': attribute type 3 has an invalid length. [ 81.993363][ T6037] netlink: 'syz.7.811': attribute type 4 has an invalid length. [ 82.001454][ T6037] netlink: 9067 bytes leftover after parsing attributes in process `syz.7.811'. [ 82.955702][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.961283][ T6061] bond0: entered promiscuous mode [ 82.967546][ T6061] bond_slave_1: entered promiscuous mode [ 82.975606][ T6061] bond0: left promiscuous mode [ 82.980705][ T6061] bond_slave_1: left promiscuous mode [ 83.010356][ T6065] bond0: entered promiscuous mode [ 83.015490][ T6065] bond_slave_1: entered promiscuous mode [ 83.022287][ T6065] bond0: left promiscuous mode [ 83.027173][ T6065] bond_slave_1: left promiscuous mode [ 83.244182][ T6083] loop4: detected capacity change from 0 to 512 [ 83.256575][ T6083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.264845][ T6083] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.283600][ T6083] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 83.292110][ T6083] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 83.302364][ T6083] EXT4-fs (loop4): 1 truncate cleaned up [ 83.310233][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.327890][ T6083] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 4: comm syz.4.830: lblock 0 mapped to illegal pblock 4 (length 1) [ 83.342659][ T6083] EXT4-fs (loop4): Remounting filesystem read-only [ 83.359198][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.505810][ T6091] syzkaller1: entered promiscuous mode [ 83.511355][ T6091] syzkaller1: entered allmulticast mode [ 83.817561][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 83.817622][ T28] audit: type=1400 audit(1784311296.502:622): avc: denied { ioctl } for pid=6104 comm="syz.4.839" path="socket:[13496]" dev="sockfs" ino=13496 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.768799][ T6011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.957440][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 84.960561][ T4270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.153911][ T6144] loop0: detected capacity change from 0 to 512 [ 85.171013][ T6144] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.209855][ T6144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.222995][ T6144] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.253119][ T28] audit: type=1400 audit(1784311297.932:623): avc: denied { write } for pid=6143 comm="syz.0.851" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.311707][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.329264][ T28] audit: type=1400 audit(1784311297.932:624): avc: denied { ioctl } for pid=6143 comm="syz.0.851" path="/190/file2/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.960219][ T6173] loop6: detected capacity change from 0 to 2048 [ 85.970714][ T6169] loop4: detected capacity change from 0 to 128 [ 86.010285][ T6169] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.023180][ T6173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.035625][ T6169] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.055840][ T28] audit: type=1400 audit(1784311298.732:625): avc: denied { write } for pid=6168 comm="syz.4.864" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.093016][ T28] audit: type=1400 audit(1784311298.732:626): avc: denied { write } for pid=6171 comm="syz.6.863" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.115043][ T28] audit: type=1400 audit(1784311298.732:627): avc: denied { write } for pid=6171 comm="syz.6.863" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.137746][ T28] audit: type=1400 audit(1784311298.762:628): avc: denied { write } for pid=6168 comm="syz.4.864" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.138075][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.171069][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.228535][ T6186] af_packet: tpacket_rcv: packet too big, clamped from 2920 to 4294967286. macoff=82 [ 86.262289][ T6191] loop7: detected capacity change from 0 to 512 [ 86.284293][ T6191] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.296890][ T6191] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.318601][ T28] audit: type=1400 audit(1784311299.002:629): avc: denied { write } for pid=6190 comm="syz.7.871" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.366155][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.397373][ T28] audit: type=1400 audit(1784311299.082:630): avc: denied { read } for pid=6199 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.459394][ T28] audit: type=1400 audit(1784311299.142:631): avc: denied { read } for pid=6204 comm="syz.7.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 86.637521][ T6208] loop4: detected capacity change from 0 to 512 [ 86.682261][ T6208] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 86.694007][ T6208] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.876: corrupted in-inode xattr: e_value size too large [ 86.710308][ T6208] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.712340][ T6208] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.876: couldn't read orphan inode 15 (err -117) [ 86.716143][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 86.724797][ T6208] loop4: lost filesystem error report for type 5 error -117 [ 86.734214][ C0] EXT4-fs (loop4): initial error at time 1784311299: ext4_iget_extra_inode:5180: inode 15 [ 86.734255][ C0] EXT4-fs (loop4): last error at time 1784311299: ext4_iget_extra_inode:5180: inode 15 [ 86.787946][ T6208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.842782][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.324364][ T6212] loop4: detected capacity change from 0 to 164 [ 87.332439][ T6212] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 87.341710][ T6212] isofs_fill_super: root inode is not a directory. Corrupted media? [ 87.539988][ T6231] loop7: detected capacity change from 0 to 512 [ 87.554651][ T6231] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #14: comm syz.7.885: invalid orphan symlink nlink 1 [ 87.568658][ T6231] loop7: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 87.568880][ T6231] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.885: couldn't read orphan inode 14 (err -117) [ 87.578095][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 87.578123][ C1] EXT4-fs (loop7): initial error at time 1784311300: ext4_orphan_get:1399: inode 14 [ 87.578160][ C1] EXT4-fs (loop7): last error at time 1784311300: ext4_orphan_get:1399: inode 14 [ 87.615018][ T6231] loop7: lost filesystem error report for type 5 error -117 [ 87.616922][ T6231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.636475][ T6231] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.657928][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.679108][ T6236] bond0: entered promiscuous mode [ 87.686808][ T6236] bond0: left promiscuous mode [ 87.711993][ T6236] bond0: entered promiscuous mode [ 87.718310][ T6236] bond0: left promiscuous mode [ 87.824354][ T6121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.890612][ T6245] netlink: 26 bytes leftover after parsing attributes in process `syz.3.890'. [ 88.017465][ T6260] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 88.066814][ T6258] loop7: detected capacity change from 0 to 512 [ 88.106993][ T6258] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 88.131872][ T6258] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.895: corrupted in-inode xattr: e_value size too large [ 88.154978][ T6258] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.155962][ T6258] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.895: couldn't read orphan inode 15 (err -117) [ 88.319469][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 88.347472][ C1] EXT4-fs (loop7): initial error at time 1784311300: ext4_iget_extra_inode:5180: inode 15 [ 88.358200][ C1] EXT4-fs (loop7): last error at time 1784311300: ext4_iget_extra_inode:5180: inode 15 [ 88.397980][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b84bc00: rx timeout, send abort [ 88.439413][ T6258] loop7: lost filesystem error report for type 5 error -117 [ 88.445443][ T6258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.521005][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.579764][ T6289] loop0: detected capacity change from 0 to 1024 [ 88.597884][ T6289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.613081][ T6289] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.644753][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.750704][ T54] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.765640][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b8a3a00: rx timeout, send abort [ 88.795475][ T6308] loop6: detected capacity change from 0 to 512 [ 88.833846][ T6310] loop7: detected capacity change from 0 to 512 [ 88.849250][ T6310] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 88.865748][ T6310] EXT4-fs (loop7): 1 truncate cleaned up [ 88.876849][ T6310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.881775][ T6308] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 88.901959][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 88.901975][ T28] audit: type=1400 audit(1784311301.582:636): avc: denied { write } for pid=6309 comm="syz.7.918" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.910178][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b84bc00: abort rx timeout. Force session deactivation [ 88.960074][ T6308] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.917: corrupted in-inode xattr: e_value size too large [ 88.968440][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.983051][ T6308] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.985490][ T6308] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.917: couldn't read orphan inode 15 (err -117) [ 88.995038][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 88.995068][ C1] EXT4-fs (loop6): initial error at time 1784311301: ext4_iget_extra_inode:5180: inode 15 [ 88.995339][ C1] EXT4-fs (loop6): last error at time 1784311301: ext4_iget_extra_inode:5180: inode 15 [ 89.042134][ T6308] loop6: lost filesystem error report for type 5 error -117 [ 89.065108][ T28] audit: type=1400 audit(1784311301.742:637): avc: denied { view } for pid=6321 comm="syz.4.923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 89.078440][ T6308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.201619][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.246994][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.256057][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.275726][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b8a3a00: abort rx timeout. Force session deactivation [ 89.691988][ T6330] loop6: detected capacity change from 0 to 1024 [ 89.763082][ T6330] EXT4-fs: Ignoring removed nobh option [ 89.795527][ T6330] EXT4-fs: Ignoring removed i_version option [ 89.840204][ T6330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.859264][ T6337] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 89.947985][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.101175][ T6355] loop7: detected capacity change from 0 to 1024 [ 90.140377][ T6355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.158401][ T28] audit: type=1400 audit(1784311302.842:638): avc: denied { write } for pid=6352 comm="syz.7.937" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.193562][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.272761][ T6365] bridge_slave_0: entered allmulticast mode [ 90.298723][ T6364] bridge_slave_0: left allmulticast mode [ 90.308895][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.3.942'. [ 90.364868][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.7.943'. [ 90.797014][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 90.797061][ T4270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.933068][ T28] audit: type=1400 audit(1784311303.612:639): avc: denied { connect } for pid=6396 comm="syz.3.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.953353][ T12] tipc: Subscription rejected, illegal request [ 91.094340][ T28] audit: type=1400 audit(1784311303.772:640): avc: denied { listen } for pid=6412 comm="syz.4.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.169442][ T6420] loop0: detected capacity change from 0 to 128 [ 91.204034][ T6420] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.222540][ T6420] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.241561][ T28] audit: type=1400 audit(1784311303.922:641): avc: denied { write } for pid=6419 comm="syz.0.965" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.271705][ T28] audit: type=1400 audit(1784311303.952:642): avc: denied { write } for pid=6419 comm="syz.0.965" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.312979][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.500791][ T28] audit: type=1400 audit(1784311304.182:643): avc: denied { create } for pid=6433 comm="syz.0.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 92.119686][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.973'. [ 92.247744][ T6431] syz.4.970 (6431) used greatest stack depth: 10112 bytes left [ 92.480313][ T6446] loop4: detected capacity change from 0 to 512 [ 92.554291][ T6446] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.652019][ T6446] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.984: invalid indirect mapped block 83886080 (level 1) [ 92.687644][ T6446] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 92.689444][ T6446] EXT4-fs (loop4): Remounting filesystem read-only [ 92.699154][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 92.699213][ C0] EXT4-fs (loop4): initial error at time 1784311305: ext4_free_branches:1023: inode 16 [ 92.699324][ C0] EXT4-fs (loop4): last error at time 1784311305: ext4_free_branches:1023: inode 16 [ 92.738561][ T6446] EXT4-fs (loop4): 1 orphan inode deleted [ 92.744812][ T6446] EXT4-fs (loop4): 1 truncate cleaned up [ 92.762376][ T6446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.814782][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.872621][ T6453] loop6: detected capacity change from 0 to 128 [ 92.920672][ T6453] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.943860][ T6461] bridge_slave_0: left allmulticast mode [ 92.955531][ T6461] bridge_slave_0: left promiscuous mode [ 92.955958][ T6453] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.966441][ T6461] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.993578][ T6461] bridge_slave_1: left allmulticast mode [ 93.007305][ T6461] bridge_slave_1: left promiscuous mode [ 93.032567][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.062539][ T28] audit: type=1400 audit(1784311305.742:644): avc: denied { write } for pid=6452 comm="syz.6.979" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.120631][ T6469] loop3: detected capacity change from 0 to 512 [ 93.121208][ T6461] bond0: (slave bond_slave_1): Releasing backup interface [ 93.144070][ T6469] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.149768][ T4602] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.174152][ T6469] EXT4-fs (loop3): 1 truncate cleaned up [ 93.181337][ T28] audit: type=1400 audit(1784311305.772:645): avc: denied { write } for pid=6452 comm="syz.6.979" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.223486][ T6461] team0: Port device team_slave_0 removed [ 93.316099][ T6461] team0: Port device team_slave_1 removed [ 93.330772][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.352206][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.378949][ T6461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.386421][ T6461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.408698][ T6461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.435843][ T6464] team0: Mode changed to "broadcast" [ 93.505951][ T6478] loop6: detected capacity change from 0 to 2048 [ 93.621877][ T6485] loop6: detected capacity change from 0 to 512 [ 93.639944][ T6485] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 93.665120][ T6485] EXT4-fs (loop6): 1 truncate cleaned up [ 94.444653][ T6513] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1001'. [ 94.481710][ T6515] loop3: detected capacity change from 0 to 512 [ 94.498678][ T6515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.541494][ T6515] EXT4-fs (loop3): 1 truncate cleaned up [ 94.560687][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 94.560704][ T28] audit: type=1400 audit(1784311307.242:649): avc: denied { write } for pid=6514 comm="syz.3.1002" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.187616][ T6534] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 95.202768][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1008'. [ 95.734895][ T28] audit: type=1400 audit(1784311308.412:650): avc: denied { bind } for pid=6556 comm="syz.3.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.783139][ T28] audit: type=1400 audit(1784311308.412:651): avc: denied { node_bind } for pid=6556 comm="syz.3.1020" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 95.841364][ T28] audit: type=1400 audit(1784311308.442:652): avc: denied { mounton } for pid=6558 comm="syz.4.1021" path="/251/file0" dev="proc" ino=4026532969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 95.888058][ T28] audit: type=1400 audit(1784311308.442:653): avc: denied { name_bind } for pid=6556 comm="syz.3.1020" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 95.939266][ T28] audit: type=1400 audit(1784311308.462:654): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 95.986690][ T28] audit: type=1400 audit(1784311308.572:655): avc: denied { bind } for pid=6565 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.034979][ T6570] loop3: detected capacity change from 0 to 512 [ 96.085724][ T6570] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.138491][ T28] audit: type=1400 audit(1784311308.822:656): avc: denied { write } for pid=6569 comm="syz.3.1027" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.392002][ T6581] loop0: detected capacity change from 0 to 512 [ 96.423105][ T6581] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.458087][ T6581] EXT4-fs (loop0): 1 truncate cleaned up [ 96.728533][ T6584] loop3: detected capacity change from 0 to 512 [ 96.815974][ T6584] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 96.837447][ T6584] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.1040: corrupted in-inode xattr: e_value size too large [ 96.889425][ T28] audit: type=1400 audit(1784311309.572:657): avc: denied { write } for pid=6580 comm="syz.0.1029" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.917125][ T6584] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.923563][ T6584] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1040: couldn't read orphan inode 15 (err -117) [ 96.933124][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 96.933213][ C1] EXT4-fs (loop3): initial error at time 1784311309: ext4_iget_extra_inode:5180: inode 15 [ 96.933441][ C1] EXT4-fs (loop3): last error at time 1784311309: ext4_iget_extra_inode:5180: inode 15 [ 96.999462][ T6584] loop3: lost filesystem error report for type 5 error -117 [ 97.296135][ T28] audit: type=1400 audit(1784311309.972:658): avc: denied { read } for pid=6594 comm="syz.4.1034" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 97.501396][ T6610] loop4: detected capacity change from 0 to 512 [ 98.008741][ T6616] syz.0.1044 (6616) used greatest stack depth: 9896 bytes left [ 98.045763][ T6623] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1047'. [ 98.068283][ T6625] loop3: detected capacity change from 0 to 512 [ 98.225971][ T6632] loop3: detected capacity change from 0 to 256 [ 98.273044][ T6632] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.579575][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1059'. [ 98.588614][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1059'. [ 98.600873][ T6650] geneve2: entered promiscuous mode [ 98.606360][ T6650] geneve2: entered allmulticast mode [ 98.618239][ T6652] loop6: detected capacity change from 0 to 512 [ 98.628428][ T6652] EXT4-fs: Ignoring removed orlov option [ 98.634370][ T6652] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.659856][ T6652] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 98.674887][ T6652] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.1060: attempt to clear invalid blocks 2 len 1 [ 98.688557][ T6652] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.691062][ T6652] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, [ 98.700265][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 98.700290][ C1] EXT4-fs (loop6): initial error at time 1784311311: ext4_clear_blocks:876: inode 13 [ 98.700327][ C1] EXT4-fs (loop6): last error at time 1784311311: ext4_clear_blocks:876: inode 13 [ 98.734221][ T6652] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 98.743244][ T6652] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1060: invalid indirect mapped block 1819239214 (level 0) [ 98.757310][ T6652] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.757526][ T6652] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.1060: invalid indirect mapped block 1819239214 (level 1) [ 98.781094][ T6652] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 98.788018][ T6652] EXT4-fs (loop6): 1 truncate cleaned up [ 98.827849][ T6652] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.1060: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 98.850288][ T6665] syzkaller1: entered promiscuous mode [ 98.855943][ T6665] syzkaller1: entered allmulticast mode [ 98.939673][ T6671] loop6: detected capacity change from 0 to 512 [ 99.193549][ T6669] loop7: detected capacity change from 0 to 1024 [ 99.206691][ T6669] EXT4-fs: Ignoring removed nobh option [ 99.213853][ T6669] EXT4-fs: Ignoring removed i_version option [ 99.458276][ T6708] loop7: detected capacity change from 0 to 512 [ 99.500251][ T6708] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.526962][ T6713] loop3: detected capacity change from 0 to 512 [ 99.573356][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 99.573375][ T28] audit: type=1400 audit(1784311312.252:676): avc: denied { write } for pid=6712 comm="syz.3.1084" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.930559][ T28] audit: type=1400 audit(1784311312.612:677): avc: denied { mount } for pid=6733 comm="syz.3.1093" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 100.237083][ T28] audit: type=1400 audit(1784311312.922:678): avc: denied { ioctl } for pid=6761 comm="syz.4.1105" path="socket:[15308]" dev="sockfs" ino=15308 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.284711][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1107'. [ 100.293944][ T6766] netlink: 'syz.0.1107': attribute type 7 has an invalid length. [ 100.302041][ T6766] netlink: 'syz.0.1107': attribute type 8 has an invalid length. [ 100.310260][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 100.888987][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1130'. [ 100.951533][ T6807] loop6: detected capacity change from 0 to 4096 [ 101.005682][ T6814] syz.3.1124 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.145639][ T28] audit: type=1400 audit(1784311313.822:679): avc: denied { watch } for pid=6824 comm="syz.7.1131" path="/proc/297/map_files" dev="proc" ino=16464 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 101.186607][ T6820] loop6: detected capacity change from 0 to 512 [ 101.217240][ T28] audit: type=1400 audit(1784311313.892:680): avc: denied { shutdown } for pid=6828 comm="syz.7.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.251789][ T6820] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 101.255355][ T28] audit: type=1400 audit(1784311313.892:681): avc: denied { read } for pid=6828 comm="syz.7.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.262558][ T6827] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 101.297009][ T6820] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1127: corrupted in-inode xattr: e_value size too large [ 101.314883][ T6820] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.316019][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 101.329109][ T6820] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1127: couldn't read orphan inode 15 (err -117) [ 101.331630][ C0] EXT4-fs (loop6): initial error at time 1784311314: ext4_iget_extra_inode:5180: inode 15 [ 101.331660][ C0] EXT4-fs (loop6): last error at time 1784311314: ext4_iget_extra_inode:5180: inode 15 [ 101.378345][ T6820] loop6: lost filesystem error report for type 5 error -117 [ 101.404491][ T6844] loop4: detected capacity change from 0 to 512 [ 101.413796][ T6820] EXT4-fs mount: 28 callbacks suppressed [ 101.413843][ T6820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.433942][ T6844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.459921][ T6844] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1138: corrupted in-inode xattr: invalid ea_ino [ 101.489926][ T6844] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.490776][ T6844] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1138: couldn't read orphan inode 15 (err -117) [ 101.500011][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 101.500032][ C0] EXT4-fs (loop4): initial error at time 1784311314: ext4_iget_extra_inode:5180: inode 15 [ 101.500074][ C0] EXT4-fs (loop4): last error at time 1784311314: ext4_iget_extra_inode:5180: inode 15 [ 101.544378][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.550171][ T6844] loop4: lost filesystem error report for type 5 error -117 [ 101.560917][ T6844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.601891][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1139'. [ 101.660896][ T28] audit: type=1400 audit(1784311314.342:682): avc: denied { write } for pid=6842 comm="syz.4.1138" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.685465][ T6844] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 705660336 > max in inode 18 [ 101.698934][ T6854] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 101.727767][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.884219][ T6858] loop6: detected capacity change from 0 to 164 [ 101.975290][ T6858] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 102.014024][ T6858] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 102.050981][ T6858] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 102.124308][ T6878] loop7: detected capacity change from 0 to 1024 [ 102.150118][ T6878] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.164869][ T6878] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.179959][ T28] audit: type=1400 audit(1784311314.862:683): avc: denied { write } for pid=6877 comm="syz.7.1153" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.204844][ T6878] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.1153: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.228010][ T6878] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 102.251920][ T6878] EXT4-fs (loop7): This should not happen!! Data will be lost [ 102.251920][ T6878] [ 102.262773][ T6878] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.1153: lblock 0 mapped to illegal pblock 0 (length 1) [ 102.277842][ T6878] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 102.290836][ T6878] EXT4-fs (loop7): This should not happen!! Data will be lost [ 102.290836][ T6878] [ 102.321413][ T36] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:2: lblock 4 mapped to illegal pblock 4 (length 2) [ 102.336381][ T36] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 102.348965][ T36] EXT4-fs (loop7): This should not happen!! Data will be lost [ 102.348965][ T36] [ 102.369032][ T36] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 102.395032][ T36] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.407824][ T36] EXT4-fs (loop7): This should not happen!! Data will be lost [ 102.407824][ T36] [ 102.428311][ T4725] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 102.446195][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.709144][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1155'. [ 103.060320][ T6889] loop6: detected capacity change from 0 to 512 [ 103.117622][ T6889] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 103.191633][ T6889] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.1156: invalid indirect mapped block 83886080 (level 1) [ 103.245042][ T6889] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 103.246339][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 103.262342][ C0] EXT4-fs (loop6): initial error at time 1784311315: ext4_free_branches:1023: inode 16 [ 103.272551][ C0] EXT4-fs (loop6): last error at time 1784311315: ext4_free_branches:1023: inode 16 [ 103.345735][ T6889] EXT4-fs (loop6): Remounting filesystem read-only [ 103.371216][ T6889] EXT4-fs (loop6): 1 orphan inode deleted [ 103.395403][ T6889] EXT4-fs (loop6): 1 truncate cleaned up [ 103.406888][ T6938] 9pnet: p9_errstr2errno: server reported unknown error p [ 103.413118][ T6889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.529735][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.723055][ T28] audit: type=1400 audit(1784311316.402:684): avc: denied { recv } for pid=6975 comm="syz.6.1167" saddr=10.128.0.163 src=30036 daddr=10.128.1.12 dest=49974 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 103.823545][ T28] audit: type=1400 audit(1784311316.502:685): avc: denied { bind } for pid=6993 comm="syz.6.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.032660][ T6992] set_capacity_and_notify: 1 callbacks suppressed [ 104.032712][ T6992] loop4: detected capacity change from 0 to 512 [ 104.095446][ T6992] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 104.123292][ T6992] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1170: corrupted in-inode xattr: e_value size too large [ 104.155900][ T6992] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.165697][ T6992] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1170: couldn't read orphan inode 15 (err -117) [ 104.166218][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 104.166247][ C1] EXT4-fs (loop4): initial error at time 1784311316: ext4_iget_extra_inode:5180: inode 15 [ 104.166338][ C1] EXT4-fs (loop4): last error at time 1784311316: ext4_iget_extra_inode:5180: inode 15 [ 104.266456][ T6992] loop4: lost filesystem error report for type 5 error -117 [ 104.283347][ T6992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.366953][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.665517][ T7090] loop4: detected capacity change from 0 to 256 [ 104.728557][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1187'. [ 104.791147][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 104.791165][ T28] audit: type=1400 audit(1784311317.472:689): avc: denied { setopt } for pid=7103 comm="syz.6.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.825449][ T28] audit: type=1400 audit(1784311317.472:690): avc: denied { listen } for pid=7103 comm="syz.6.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.886731][ T28] audit: type=1400 audit(1784311317.472:691): avc: denied { accept } for pid=7103 comm="syz.6.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 105.033747][ T7129] loop6: detected capacity change from 0 to 256 [ 105.045484][ T28] audit: type=1400 audit(1784311317.722:692): avc: denied { create } for pid=7131 comm="syz.4.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.066623][ T7129] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.094165][ T7129] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.115260][ T28] audit: type=1400 audit(1784311317.772:693): avc: denied { remount } for pid=7133 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 105.159744][ T28] audit: type=1400 audit(1784311317.822:694): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 105.232977][ T7138] loop3: detected capacity change from 0 to 256 [ 105.248151][ T28] audit: type=1400 audit(1784311317.922:695): avc: denied { connect } for pid=7144 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.268453][ T28] audit: type=1400 audit(1784311317.922:696): avc: denied { write } for pid=7144 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.301497][ T7147] loop4: detected capacity change from 0 to 512 [ 105.310790][ T7147] EXT4-fs: Ignoring removed oldalloc option [ 105.320331][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1204'. [ 105.332617][ T7147] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.362387][ T7147] EXT4-fs (loop4): 1 orphan inode deleted [ 105.375198][ T7147] EXT4-fs (loop4): 1 truncate cleaned up [ 105.383747][ T7152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1210'. [ 105.388405][ T7147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.398855][ T7152] ip6gre1: entered promiscuous mode [ 105.410638][ T7152] ip6gre1: entered allmulticast mode [ 105.450342][ T7147] EXT4-fs (loop4): shut down requested (2) [ 105.463140][ T7147] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 105.472242][ T7147] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 105.497781][ T7160] netlink: 'syz.0.1212': attribute type 4 has an invalid length. [ 105.506506][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.536121][ T7160] netlink: 'syz.0.1212': attribute type 4 has an invalid length. [ 105.621121][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 105.656844][ T7177] netlink: 'syz.0.1221': attribute type 29 has an invalid length. [ 105.705423][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 105.884225][ T28] audit: type=1400 audit(1784311318.562:697): avc: denied { sqpoll } for pid=7197 comm="syz.7.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.012814][ T7206] loop3: detected capacity change from 0 to 164 [ 106.051742][ T7206] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 106.079945][ T7206] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 106.094121][ T7206] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 106.122128][ T7215] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 106.138613][ T7215] bond2: entered promiscuous mode [ 106.143949][ T7215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.167360][ T7215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.176086][ T7215] bond2: (slave bond3): making interface the new active one [ 106.183592][ T7215] bond3: entered promiscuous mode [ 106.189896][ T7215] bond2: (slave bond3): Enslaving as an active interface with an up link [ 106.273622][ T28] audit: type=1400 audit(1784311318.952:698): avc: denied { ioctl } for pid=7224 comm="syz.3.1241" path="socket:[16047]" dev="sockfs" ino=16047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.537332][ T7247] netlink: 'syz.6.1250': attribute type 4 has an invalid length. [ 106.561191][ T7247] netlink: 'syz.6.1250': attribute type 4 has an invalid length. [ 106.746310][ T7265] loop6: detected capacity change from 0 to 256 [ 107.500933][ T7310] netlink: 'syz.6.1279': attribute type 1 has an invalid length. [ 107.529177][ T7310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.577135][ T7310] bond1: (slave gretap1): making interface the new active one [ 107.592714][ T7310] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 107.605532][ T7294] loop7: detected capacity change from 0 to 4096 [ 107.699512][ T7294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.758003][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 107.759163][ T4270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 107.823062][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.936274][ T7332] loop7: detected capacity change from 0 to 512 [ 107.968771][ T7332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.063478][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.075455][ T7322] loop6: detected capacity change from 0 to 1764 [ 108.247063][ T7360] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 108.276329][ T7360] bond1: entered promiscuous mode [ 108.286432][ T7360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.317999][ T7360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.327333][ T7360] bond1: (slave bond2): making interface the new active one [ 108.345812][ T7360] bond2: entered promiscuous mode [ 108.360023][ T7360] bond1: (slave bond2): Enslaving as an active interface with an up link [ 108.458409][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1302'. [ 108.881090][ T7373] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 108.971688][ T7373] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1304: invalid indirect mapped block 83886080 (level 1) [ 108.987062][ T7373] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 108.995536][ T7373] EXT4-fs (loop7): Remounting filesystem read-only [ 109.005319][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 109.005364][ C0] EXT4-fs (loop7): initial error at time 1784311321: ext4_free_branches:1023: inode 16 [ 109.005494][ C0] EXT4-fs (loop7): last error at time 1784311321: ext4_free_branches:1023: inode 16 [ 109.043376][ T7373] EXT4-fs (loop7): 1 orphan inode deleted [ 109.050456][ T7373] EXT4-fs (loop7): 1 truncate cleaned up [ 109.065693][ T7373] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.122318][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.187966][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1315'. [ 109.525516][ T7412] set_capacity_and_notify: 1 callbacks suppressed [ 109.525532][ T7412] loop7: detected capacity change from 0 to 512 [ 109.577624][ T7412] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1321: Failed to acquire dquot type 1 [ 109.589083][ T7412] loop7: lost filesystem error report for type 5 error -117 [ 109.595334][ T7412] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1321: Failed to acquire dquot type 1 [ 109.602714][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 109.602735][ C1] EXT4-fs (loop7): last error at time 1784311322: ext4_acquire_dquot:7041 [ 109.629086][ T7412] loop7: lost filesystem error report for type 5 error -117 [ 109.632040][ T7412] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1321: bg 0: block 248: padding at end of block bitmap is not set [ 109.653744][ T7412] loop7: lost filesystem error report for type 5 error -117 [ 109.654624][ T7412] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 109.678171][ T7412] loop7: lost filesystem error report for type 5 error -117 [ 109.678669][ T7412] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.1321: Failed to acquire dquot type 1 [ 109.698839][ T7412] loop7: lost filesystem error report for type 5 error -117 [ 109.699103][ T7412] EXT4-fs (loop7): 1 orphan inode deleted [ 109.722452][ T7412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.749053][ T7412] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.781020][ T7412] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.1321: deleted inode referenced: 12 [ 109.867171][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.996069][ T4270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.999634][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 110.733625][ T7436] loop4: detected capacity change from 0 to 512 [ 110.765314][ T7436] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.780436][ T7436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.797646][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 110.797662][ T28] audit: type=1400 audit(1784311323.482:706): avc: denied { ioctl } for pid=7433 comm="syz.0.1331" path="socket:[17410]" dev="sockfs" ino=17410 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.845261][ T7436] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.923053][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.932220][ T28] audit: type=1400 audit(1784311323.562:707): avc: denied { write } for pid=7435 comm="syz.4.1332" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.083827][ T28] audit: type=1400 audit(1784311323.762:708): avc: denied { setopt } for pid=7450 comm="syz.3.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.090466][ T7451] loop3: detected capacity change from 0 to 128 [ 111.142046][ T7451] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 111.166088][ T7451] FAT-fs (loop3): data area starts beyond volume (4132 > 6) [ 111.173485][ T7451] FAT-fs (loop3): Can't find a valid FAT filesystem [ 111.343518][ T28] audit: type=1400 audit(1784311324.022:709): avc: denied { create } for pid=7469 comm="syz.0.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 111.731514][ T28] audit: type=1400 audit(1784311324.412:710): avc: denied { bind } for pid=7492 comm="syz.4.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.794515][ T28] audit: type=1400 audit(1784311324.432:711): avc: denied { listen } for pid=7492 comm="syz.4.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.825895][ T7497] loop4: detected capacity change from 0 to 128 [ 111.902375][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1359'. [ 111.917073][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1359'. [ 111.973532][ T28] audit: type=1400 audit(1784311324.652:712): avc: denied { read } for pid=7501 comm="syz.4.1360" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.197855][ T7508] loop3: detected capacity change from 0 to 512 [ 112.267868][ T28] audit: type=1400 audit(1784311324.952:713): avc: denied { getopt } for pid=7516 comm="syz.6.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.298466][ T7508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.330198][ T7508] EXT4-fs (loop3): 1 truncate cleaned up [ 112.348868][ T7508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.390049][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.493518][ T7528] loop4: detected capacity change from 0 to 164 [ 112.545928][ T7528] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 112.562206][ T7528] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 112.575950][ T7528] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 112.652583][ T7536] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1374'. [ 112.891495][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 113.119928][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1386'. [ 113.203533][ T7570] program syz.4.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.497711][ T7587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 113.678915][ T3363] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 113.698767][ T3363] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.927095][ T7598] loop6: detected capacity change from 0 to 512 [ 114.009126][ T7598] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 114.048688][ T7598] EXT4-fs (loop6): 1 truncate cleaned up [ 114.113556][ T7598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.129971][ T7592] loop7: detected capacity change from 0 to 1764 [ 114.163986][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.188747][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 114.233627][ T7616] loop4: detected capacity change from 0 to 256 [ 114.264485][ T7617] sg_write: data in/out 463004/136 bytes for SCSI command 0x0-- guessing data in; [ 114.264485][ T7617] program syz.6.1408 not setting count and/or reply_len properly [ 114.468915][ T7624] loop4: detected capacity change from 0 to 4096 [ 114.502906][ T7624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.542156][ T28] audit: type=1400 audit(1784311327.222:714): avc: denied { write } for pid=7623 comm="syz.4.1414" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.594739][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.795718][ T7648] Cannot find del_set index 2 as target [ 114.820173][ T28] audit: type=1400 audit(1784311327.502:715): avc: denied { write } for pid=7645 comm="syz.6.1420" name="file0" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.288059][ T7669] netlink: 'syz.7.1431': attribute type 1 has an invalid length. [ 115.335916][ T7669] bond1: entered promiscuous mode [ 115.353896][ T7669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.404479][ T7671] bond1: (slave veth1): making interface the new active one [ 115.434047][ T7671] veth1: entered promiscuous mode [ 115.454406][ T7671] bond1: (slave veth1): Enslaving as an active interface with an up link [ 115.790703][ T7677] loop7: detected capacity change from 0 to 1024 [ 115.820362][ T7677] EXT4-fs: Ignoring removed bh option [ 115.840101][ T7677] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.864116][ T7677] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 115.879420][ T7677] System zones: 0-1, 3-12 [ 115.906093][ T7677] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #3: block 1: comm syz.7.1434: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.975283][ T7677] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.975743][ T7677] EXT4-fs (loop7): Remounting filesystem read-only [ 115.984939][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 115.984987][ C1] EXT4-fs (loop7): initial error at time 1784311328: ext4_map_blocks:833: inode 3: block 1 [ 115.985102][ C1] EXT4-fs (loop7): last error at time 1784311328: ext4_map_blocks:833: inode 3: block 1 [ 116.083296][ T7677] __quota_error: 3 callbacks suppressed [ 116.083341][ T7677] Quota error (device loop7): write_blk: dquota write failed [ 116.119883][ T7677] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 116.136986][ T7677] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 116.149946][ T7656] loop6: detected capacity change from 0 to 4096 [ 116.161767][ T7677] EXT4-fs (loop7): 1 orphan inode deleted [ 116.169197][ T7677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.223874][ T7656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.320638][ T7656] syz.6.1425 (7656) used greatest stack depth: 9728 bytes left [ 116.427308][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.437028][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.672453][ T7704] loop6: detected capacity change from 0 to 256 [ 116.691291][ T7704] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.727367][ T7704] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.744719][ T7706] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 116.774140][ T7699] loop7: detected capacity change from 0 to 512 [ 116.775142][ T7706] netlink: 'syz.3.1446': attribute type 4 has an invalid length. [ 116.848321][ T7699] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 116.883537][ T7699] EXT4-fs (loop7): 1 truncate cleaned up [ 116.930604][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 116.944080][ T7699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.969901][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 117.035252][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 117.044412][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.060182][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.077447][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 117.105292][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.114413][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.223986][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.776349][ T7743] netlink: 'syz.4.1461': attribute type 4 has an invalid length. [ 117.827546][ T7747] netlink: 'syz.4.1461': attribute type 4 has an invalid length. [ 118.677517][ T28] audit: type=1400 audit(1784311331.362:719): avc: denied { write } for pid=7796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.745799][ T28] audit: type=1400 audit(1784311331.422:720): avc: denied { write } for pid=7816 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.854453][ T7823] loop4: detected capacity change from 0 to 512 [ 118.881102][ T28] audit: type=1400 audit(1784311331.562:721): avc: denied { mounton } for pid=7822 comm="syz.4.1489" path="/file0" dev="autofs" ino=17978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 118.917992][ T7823] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.933544][ T7823] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 118.954418][ T7823] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 118.988891][ T7823] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 118.997121][ T7823] System zones: 0-2, 18-18, 34-35 [ 119.003097][ T7823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.017303][ T7823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.043278][ T28] audit: type=1400 audit(1784311331.722:722): avc: denied { write } for pid=7821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.121393][ T28] audit: type=1400 audit(1784311331.792:723): avc: denied { write } for pid=7837 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.177692][ T7820] loop6: detected capacity change from 0 to 512 [ 119.239843][ T7820] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 119.294629][ T7820] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #11: comm syz.6.1488: corrupted in-inode xattr: invalid ea_ino [ 119.393119][ T28] audit: type=1400 audit(1784311332.052:724): avc: denied { create } for pid=7847 comm="syz.4.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.428024][ T7820] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.436110][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 119.452478][ C0] EXT4-fs (loop6): initial error at time 1784311332: ext4_iget_extra_inode:5180: inode 11 [ 119.455113][ T28] audit: type=1400 audit(1784311332.062:725): avc: denied { bind } for pid=7847 comm="syz.4.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.463242][ C0] EXT4-fs (loop6): last error at time 1784311332: ext4_iget_extra_inode:5180: inode 11 [ 119.506867][ T7820] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1488: couldn't read orphan inode 11 (err -117) [ 119.525458][ T7820] loop6: lost filesystem error report for type 5 error -117 [ 119.564439][ T7820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.674250][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.845120][ T7875] loop6: detected capacity change from 0 to 2048 [ 119.884551][ T7875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.914910][ T7875] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 119.940424][ T7875] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 119.952864][ T7875] EXT4-fs (loop6): This should not happen!! Data will be lost [ 119.952864][ T7875] [ 119.964592][ T7875] EXT4-fs (loop6): Total free blocks count 0 [ 119.974890][ T7875] EXT4-fs (loop6): Free/Dirty block details [ 119.982681][ T7875] EXT4-fs (loop6): free_blocks=4096 [ 119.988187][ T7875] EXT4-fs (loop6): dirty_blocks=16 [ 119.993400][ T7875] EXT4-fs (loop6): Block reservation details [ 120.000509][ T7875] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 120.029523][ T54] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 120.042535][ T4602] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 120.144794][ T7889] loop6: detected capacity change from 0 to 1024 [ 120.158205][ T7889] EXT4-fs: Ignoring removed bh option [ 120.166587][ T7889] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.179516][ T7889] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 120.192692][ T7889] System zones: 0-1, 3-12 [ 120.201334][ T7889] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.1509: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.267123][ T7889] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 120.268196][ T7889] EXT4-fs (loop6): Remounting filesystem read-only [ 120.277351][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 120.277384][ C0] EXT4-fs (loop6): initial error at time 1784311332: ext4_map_blocks:833: inode 3: block 1 [ 120.277468][ C0] EXT4-fs (loop6): last error at time 1784311332: ext4_map_blocks:833: inode 3: block 1 [ 120.323936][ T7889] EXT4-fs (loop6): 1 orphan inode deleted [ 120.347132][ T7889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.370330][ T7902] Invalid argument reading file caps for ./file0 [ 120.390927][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.519442][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1521'. [ 120.848200][ T7928] syzkaller1: entered promiscuous mode [ 120.859848][ T7928] syzkaller1: entered allmulticast mode [ 120.925797][ T7927] loop4: detected capacity change from 0 to 1024 [ 120.946107][ T7927] EXT4-fs: Ignoring removed bh option [ 120.957058][ T7927] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.976685][ T7927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 120.985132][ T7927] System zones: 0-1, 3-12 [ 121.011727][ T7931] Invalid argument reading file caps for ./file0 [ 121.027784][ T7927] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.1529: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.080566][ T7927] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 121.080942][ T7927] EXT4-fs (loop4): Remounting filesystem read-only [ 121.090149][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 121.090203][ C1] EXT4-fs (loop4): initial error at time 1784311333: ext4_map_blocks:833: inode 3: block 1 [ 121.090329][ C1] EXT4-fs (loop4): last error at time 1784311333: ext4_map_blocks:833: inode 3: block 1 [ 121.159543][ T7927] __quota_error: 6 callbacks suppressed [ 121.159576][ T7927] Quota error (device loop4): write_blk: dquota write failed [ 121.197689][ T7927] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 121.214801][ T7927] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 121.247841][ T7927] EXT4-fs (loop4): 1 orphan inode deleted [ 121.263339][ T7927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.499951][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.684663][ T7956] loop7: detected capacity change from 0 to 256 [ 121.719222][ T7956] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.910335][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 122.037472][ T28] audit: type=1400 audit(1784311334.712:729): avc: denied { write } for pid=7966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.116086][ T28] audit: type=1400 audit(1784311334.772:730): avc: denied { write } for pid=7981 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.288961][ T28] audit: type=1400 audit(1784311334.972:731): avc: denied { write } for pid=7984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.352992][ T28] audit: type=1400 audit(1784311335.032:732): avc: denied { write } for pid=8000 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.553523][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1552'. [ 122.653629][ T8016] loop4: detected capacity change from 0 to 256 [ 122.662571][ T7961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.724770][ T8020] loop7: detected capacity change from 0 to 512 [ 122.760793][ T8020] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1557: corrupted in-inode xattr: invalid ea_ino [ 122.790810][ T8020] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.790954][ T8020] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1557: couldn't read orphan inode 15 (err -117) [ 122.800224][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 122.800250][ C0] EXT4-fs (loop7): initial error at time 1784311335: ext4_iget_extra_inode:5180: inode 15 [ 122.800290][ C0] EXT4-fs (loop7): last error at time 1784311335: ext4_iget_extra_inode:5180: inode 15 [ 122.862191][ T8020] loop7: lost filesystem error report for type 5 error -117 [ 122.865620][ T8020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.947127][ T28] audit: type=1400 audit(1784311591.686:733): avc: denied { ioctl } for pid=8033 comm="syz.6.1563" path="socket:[18252]" dev="sockfs" ino=18252 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.010559][ T28] audit: type=1400 audit(1784311591.706:734): avc: denied { write } for pid=8019 comm="syz.7.1557" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.071726][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.099337][ T8048] netlink: 'syz.7.1567': attribute type 15 has an invalid length. [ 123.119216][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1567'. [ 123.150494][ T8048] netlink: 'syz.7.1567': attribute type 15 has an invalid length. [ 123.158947][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 2304 - 0 [ 123.177125][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 2304 - 0 [ 123.187170][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1567'. [ 123.206301][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 2304 - 0 [ 123.225265][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 2304 - 0 [ 123.637762][ T8069] loop4: detected capacity change from 0 to 512 [ 123.644996][ T8069] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.672633][ T8069] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #11: comm syz.4.1575: corrupted in-inode xattr: invalid ea_ino [ 123.697203][ T8069] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.697366][ T8069] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1575: couldn't read orphan inode 11 (err -117) [ 123.706641][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 123.706666][ C0] EXT4-fs (loop4): initial error at time 1784311592: ext4_iget_extra_inode:5180: inode 11 [ 123.706702][ C0] EXT4-fs (loop4): last error at time 1784311592: ext4_iget_extra_inode:5180: inode 11 [ 123.754409][ T8069] loop4: lost filesystem error report for type 5 error -117 [ 123.755070][ T8069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.836976][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.121874][ T8084] loop4: detected capacity change from 0 to 512 [ 124.130596][ T8084] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 124.153495][ T54] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 124.162754][ T28] audit: type=1400 audit(1784311592.886:735): avc: denied { remount } for pid=8083 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 124.251659][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1584'. [ 124.272304][ T8090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1584'. [ 124.600094][ T8096] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 124.686740][ T8112] loop6: detected capacity change from 0 to 128 [ 124.993183][ T8124] loop7: detected capacity change from 0 to 256 [ 125.562251][ T8138] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 125.578241][ T8138] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.1603'. [ 126.094071][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1614'. [ 126.286266][ T8155] loop4: detected capacity change from 0 to 1764 [ 126.755476][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 126.755495][ T28] audit: type=1400 audit(1784311595.486:741): avc: denied { accept } for pid=8177 comm="syz.6.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.840486][ T28] audit: type=1400 audit(1784311595.576:742): avc: denied { read } for pid=8187 comm="syz.6.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 127.127999][ T8196] gre1: entered promiscuous mode [ 127.173368][ T8199] loop7: detected capacity change from 0 to 512 [ 127.195755][ T8199] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 127.227286][ T8199] EXT4-fs (loop7): 1 truncate cleaned up [ 127.245237][ T8199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.297524][ T28] audit: type=1400 audit(1784311596.036:743): avc: denied { write } for pid=8197 comm="syz.7.1629" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.336405][ T28] audit: type=1400 audit(1784311596.036:744): avc: denied { add_name } for pid=8197 comm="syz.7.1629" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 127.422856][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.435058][ T8181] loop4: detected capacity change from 0 to 4096 [ 127.493609][ T8211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8211 comm=syz.7.1634 [ 127.494873][ T8181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.588500][ T8211] netlink: 'syz.7.1634': attribute type 1 has an invalid length. [ 127.660961][ T8211] bond2: (slave ip6erspan0): making interface the new active one [ 127.669229][ T8211] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 127.714045][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.855592][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 128.208915][ T28] audit: type=1326 audit(1784311596.946:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 128.259600][ T8302] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 128.270945][ T28] audit: type=1326 audit(1784311596.946:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 128.296922][ T28] audit: type=1326 audit(1784311596.946:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 128.331290][ T8302] bond4: (slave geneve4): making interface the new active one [ 128.346512][ T28] audit: type=1326 audit(1784311596.946:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 128.378377][ T28] audit: type=1326 audit(1784311596.946:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 128.403868][ T28] audit: type=1326 audit(1784311596.946:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8298 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 128.490140][ T8302] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 128.508821][ T113] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.518121][ T113] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.560127][ T113] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.588050][ T113] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.622254][ T8250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.683224][ T8318] loop7: detected capacity change from 0 to 512 [ 128.767847][ T8318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.834813][ T8318] ext4 filesystem being mounted at /220/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.076511][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.789695][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'. [ 130.800612][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'. [ 131.036779][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1721'. [ 131.097305][ T8444] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 131.114836][ T8444] bond5: entered promiscuous mode [ 131.124370][ T8444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.139570][ T8444] 8021q: adding VLAN 0 to HW filter on device bond5 [ 131.146855][ T8444] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 131.157505][ T8444] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 131.170413][ T8444] bond5: (slave ip6gre2): making interface the new active one [ 131.178044][ T8444] ip6gre2: entered promiscuous mode [ 131.185400][ T8444] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 131.375722][ T8468] loop7: detected capacity change from 0 to 512 [ 131.410747][ T8468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.447394][ T8468] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.564280][ T4725] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.680506][ T8492] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 131.688573][ T8492] netlink: 'syz.3.1746': attribute type 4 has an invalid length. [ 131.697077][ T8492] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1746'. [ 131.707357][ T8492] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 131.715772][ T8492] netlink: 'syz.3.1746': attribute type 4 has an invalid length. [ 131.724160][ T8492] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1746'. [ 131.743805][ T8484] loop6: detected capacity change from 0 to 8192 [ 131.763101][ T8484] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.778015][ T8484] vfat filesystem being mounted at /268/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 131.899798][ T8506] gre1: entered promiscuous mode [ 132.539294][ T8537] gre1: entered promiscuous mode [ 132.680982][ T8545] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.1768'. [ 132.759782][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 132.759817][ T28] audit: type=1400 audit(3931795249.489:780): avc: denied { getopt } for pid=8549 comm="syz.7.1769" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.800763][ T8554] netlink: 'syz.3.1772': attribute type 10 has an invalid length. [ 132.814390][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.838294][ T8554] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.032388][ T28] audit: type=1400 audit(3931795249.769:781): avc: denied { mount } for pid=8577 comm="syz.3.1783" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 133.081783][ T8581] xt_hashlimit: size too large, truncated to 1048576 [ 133.240326][ T8596] netlink: 'syz.6.1789': attribute type 9 has an invalid length. [ 133.255147][ T8596] netlink: 'syz.6.1789': attribute type 7 has an invalid length. [ 133.271171][ T8596] netlink: 'syz.6.1789': attribute type 8 has an invalid length. [ 133.340977][ T8602] loop6: detected capacity change from 0 to 512 [ 133.396171][ T8602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.416317][ T8602] ext4 filesystem being mounted at /275/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.462879][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.820877][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 133.846469][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 133.869815][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 133.939444][ T8584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.963229][ T8629] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.1802'. [ 133.976101][ T8629] openvswitch: netlink: Key type 386 is out of range max 32 [ 134.029970][ T8633] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 134.058931][ T8637] loop4: detected capacity change from 0 to 512 [ 134.100648][ T8643] loop7: detected capacity change from 0 to 512 [ 134.117354][ T8637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.133160][ T8643] FAT-fs (loop7): data area starts beyond volume (199892 > 45184) [ 134.142751][ T8643] FAT-fs (loop7): Can't find a valid FAT filesystem [ 134.177944][ T8637] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.949539][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.013204][ T8673] loop4: detected capacity change from 0 to 1024 [ 135.045128][ T8673] EXT4-fs: Ignoring removed bh option [ 135.103204][ T8673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.129100][ T28] audit: type=1400 audit(3931795251.869:782): avc: denied { write } for pid=8672 comm="syz.4.1814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.166598][ T28] audit: type=1400 audit(3931795251.869:783): avc: denied { create } for pid=8672 comm="syz.4.1814" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 135.209483][ T28] audit: type=1400 audit(3931795251.889:784): avc: denied { write } for pid=8672 comm="syz.4.1814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.231267][ T28] audit: type=1400 audit(3931795251.889:785): avc: denied { write } for pid=8672 comm="syz.4.1814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.252964][ T28] audit: type=1400 audit(3931795251.889:786): avc: denied { write } for pid=8672 comm="syz.4.1814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.274746][ T28] audit: type=1400 audit(3931795251.889:787): avc: denied { write } for pid=8672 comm="syz.4.1814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.296533][ T28] audit: type=1400 audit(3931795251.889:788): avc: denied { write } for pid=8672 comm="syz.4.1814" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.371089][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.397037][ T8686] loop7: detected capacity change from 0 to 128 [ 135.404388][ T8686] msdos filesystem being mounted at /241/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 135.428404][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.428404][ T8686] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 135.460484][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.460484][ T8686] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 135.474878][ T8686] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 135.483598][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.483598][ T8686] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 135.499832][ T8686] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 135.512054][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.512054][ T8686] loop7: rw=524288, sector=154, nr_sectors = 8 limit=128 [ 135.526820][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.526820][ T8686] loop7: rw=0, sector=154, nr_sectors = 8 limit=128 [ 135.547636][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.547636][ T8686] loop7: rw=0, sector=154, nr_sectors = 8 limit=128 [ 135.561583][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.561583][ T8686] loop7: rw=0, sector=154, nr_sectors = 8 limit=128 [ 135.575027][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.575027][ T8686] loop7: rw=0, sector=154, nr_sectors = 8 limit=128 [ 135.588503][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.588503][ T8686] loop7: rw=0, sector=154, nr_sectors = 8 limit=128 [ 135.602190][ T8686] syz.7.1823: attempt to access beyond end of device [ 135.602190][ T8686] loop7: rw=0, sector=154, nr_sectors = 8 limit=128 [ 136.140018][ T8710] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.1833'. [ 136.152788][ T8710] openvswitch: netlink: Key type 386 is out of range max 32 [ 136.380221][ T8714] netlink: 'syz.4.1835': attribute type 4 has an invalid length. [ 136.769518][ T8736] syzkaller0: entered promiscuous mode [ 136.786477][ T8736] syzkaller0: entered allmulticast mode [ 136.953874][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1849'. [ 137.005204][ T28] audit: type=1326 audit(3931795253.739:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8749 comm="syz.7.1850" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e6a67de99 code=0x7ffc0000 [ 137.303748][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1858'. [ 138.581657][ T8808] loop4: detected capacity change from 0 to 512 [ 138.603295][ T8808] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.635814][ T8808] EXT4-fs (loop4): 1 truncate cleaned up [ 138.649616][ T8808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.717027][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 138.717057][ T28] audit: type=1400 audit(3931795255.459:808): avc: denied { write } for pid=8807 comm="syz.4.1875" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.870626][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.925245][ T8820] loop4: detected capacity change from 0 to 128 [ 138.959483][ T8820] vfat filesystem being mounted at /417/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 138.985218][ T28] audit: type=1400 audit(3931795255.719:809): avc: denied { ioctl } for pid=8821 comm="syz.6.1881" path="socket:[22701]" dev="sockfs" ino=22701 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 139.464265][ T8845] netlink: 'syz.6.1890': attribute type 12 has an invalid length. [ 139.521315][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1890'. [ 139.556822][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.556844][ T8845] netlink: 'syz.6.1890': attribute type 12 has an invalid length. [ 139.556867][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1890'. [ 139.575213][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.616791][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.639264][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.732203][ T8827] loop4: detected capacity change from 0 to 4096 [ 139.795678][ T8827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.939440][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.842585][ T8896] loop4: detected capacity change from 0 to 512 [ 141.860210][ T8896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.874930][ T8896] EXT4-fs (loop4): 1 truncate cleaned up [ 141.884898][ T8896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.922031][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.325610][ T8836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.409580][ T28] audit: type=1400 audit(3931795259.149:810): avc: denied { read } for pid=8915 comm="syz.3.1917" path="socket:[23752]" dev="sockfs" ino=23752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 142.565125][ T8935] netlink: 'syz.7.1922': attribute type 21 has an invalid length. [ 142.599335][ T8935] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1922'. [ 142.617787][ T8935] netlink: 'syz.7.1922': attribute type 4 has an invalid length. [ 142.641888][ T8935] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1922'. [ 142.814357][ T8943] netlink: 'syz.3.1926': attribute type 9 has an invalid length. [ 142.843356][ T8943] netlink: 'syz.3.1926': attribute type 7 has an invalid length. [ 142.865224][ T8943] netlink: 'syz.3.1926': attribute type 8 has an invalid length. [ 142.886949][ T8945] syzkaller0: entered promiscuous mode [ 142.898762][ T8945] syzkaller0: entered allmulticast mode [ 143.119002][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88810578c600: connection exists (02 00). last cmd: 14 [ 143.734508][ T8982] bridge_slave_0: invalid flags given to default FDB implementation [ 143.745879][ T8982] bridge_slave_0: invalid flags given to default FDB implementation [ 144.197556][ T9020] loop6: detected capacity change from 0 to 512 [ 144.208292][ T9025] loop7: detected capacity change from 0 to 128 [ 144.218606][ T9020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 144.233307][ T9025] vfat filesystem being mounted at /265/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 144.264399][ T9020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.291821][ T9020] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.314313][ T28] audit: type=1400 audit(3931795261.049:811): avc: denied { write } for pid=9019 comm="syz.6.1945" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.343106][ T9020] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1945: bg 0: block 217: padding at end of block bitmap is not set [ 144.360362][ T9020] EXT4-fs (loop6): Remounting filesystem read-only [ 144.389833][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.403975][ T49] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 144.448287][ T49] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 144.491096][ T28] audit: type=1326 audit(3931795261.229:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.4.1952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 144.570399][ T28] audit: type=1326 audit(3931795261.229:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.4.1952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 144.696969][ T28] audit: type=1326 audit(3931795261.229:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.4.1952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 144.740836][ T9082] netlink: 'syz.4.1957': attribute type 9 has an invalid length. [ 144.750051][ T28] audit: type=1326 audit(3931795261.229:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.4.1952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 144.750882][ T9082] netlink: 'syz.4.1957': attribute type 7 has an invalid length. [ 144.780012][ T28] audit: type=1326 audit(3931795261.259:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.4.1952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 144.791448][ T9082] netlink: 'syz.4.1957': attribute type 8 has an invalid length. [ 144.810842][ T28] audit: type=1326 audit(3931795261.259:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.4.1952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 144.810883][ T28] audit: type=1326 audit(3931795261.259:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9053 comm="syz.4.1952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f415ceade99 code=0x7ffc0000 [ 145.332095][ T9138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1972'. [ 145.368699][ T9140] netlink: 'syz.7.1973': attribute type 9 has an invalid length. [ 145.383673][ T9142] loop4: detected capacity change from 0 to 512 [ 145.396471][ T9140] netlink: 'syz.7.1973': attribute type 7 has an invalid length. [ 145.405196][ T9140] netlink: 'syz.7.1973': attribute type 8 has an invalid length. [ 145.407914][ T9142] EXT4-fs: Ignoring removed i_version option [ 145.453468][ T9147] loop6: detected capacity change from 0 to 128 [ 145.466661][ T9147] vfat filesystem being mounted at /313/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 145.477766][ T9142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.496596][ T9142] ext4 filesystem being mounted at /436/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.930850][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.477741][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1991'. [ 146.684112][ T9195] ref_ctr increment failed for inode: 0x869 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810559f000 [ 146.695730][ T9194] uprobe: syz.0.1994:9194 failed to unregister, leaking uprobe [ 146.742800][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 146.751900][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1997'. [ 146.951682][ T9212] netlink: 'syz.0.1999': attribute type 9 has an invalid length. [ 146.965299][ T9212] netlink: 'syz.0.1999': attribute type 7 has an invalid length. [ 146.974417][ T9212] netlink: 'syz.0.1999': attribute type 8 has an invalid length. [ 147.022227][ T9224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2005'. [ 147.385622][ T9246] netlink: 'syz.3.2014': attribute type 9 has an invalid length. [ 147.586160][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2018'. [ 147.908813][ T9266] syzkaller1: entered promiscuous mode [ 147.917862][ T9266] syzkaller1: entered allmulticast mode [ 148.890328][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'. [ 149.052772][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2040'. [ 149.086710][ T9313] random: crng reseeded on system resumption [ 149.128535][ T9315] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2044'. [ 149.562945][ T9350] loop6: detected capacity change from 0 to 128 [ 149.582660][ T9350] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.604796][ T9350] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.621081][ T9350] vfat filesystem being mounted at /338/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 149.674136][ T9085] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.234641][ T9381] validate_nla: 5 callbacks suppressed [ 150.234899][ T9381] netlink: 'syz.4.2070': attribute type 9 has an invalid length. [ 150.276767][ T9381] netlink: 'syz.4.2070': attribute type 7 has an invalid length. [ 150.298595][ T9381] netlink: 'syz.4.2070': attribute type 8 has an invalid length. [ 150.412923][ T9373] loop6: detected capacity change from 0 to 1024 [ 150.491122][ T9373] EXT4-fs: Ignoring removed bh option [ 150.510308][ T9373] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 150.577007][ T9373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.604603][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 150.604621][ T28] audit: type=1400 audit(3931795267.339:824): avc: denied { write } for pid=9372 comm="syz.6.2066" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.877919][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.929248][ T9410] loop6: detected capacity change from 0 to 128 [ 150.947829][ T9410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842e018, mo2=0002] [ 150.962178][ T9410] System zones: 1-3, 19-19, 35-36 [ 150.968320][ T9410] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.981296][ T9410] ext4 filesystem being mounted at /343/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.017229][ T28] audit: type=1400 audit(3931795267.759:825): avc: denied { write } for pid=9409 comm="syz.6.2078" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.062965][ T4602] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.098058][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2079'. [ 151.107358][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2079'. [ 151.118400][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2079'. [ 151.127685][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2079'. [ 151.287599][ T9394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 151.344240][ T9426] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 151.350811][ T9426] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 151.365941][ T9426] vhci_hcd vhci_hcd.0: Device attached [ 151.547302][ T3363] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 151.606022][ T3363] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 152.109259][ T28] audit: type=1400 audit(3931795268.849:826): avc: denied { append } for pid=9436 comm="syz.0.2086" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 153.702568][ T9457] loop6: detected capacity change from 0 to 128 [ 153.715002][ T9457] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.730907][ T9457] vfat filesystem being mounted at /353/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 153.779005][ T9462] loop2: detected capacity change from 0 to 7 [ 153.826457][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'. [ 153.849693][ T9097] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.899801][ T28] audit: type=1400 audit(3931795270.639:827): avc: denied { setopt } for pid=9470 comm="syz.4.2102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.017158][ T9484] loop6: detected capacity change from 0 to 512 [ 154.040265][ T9484] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 154.054156][ T9484] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 1024: comm syz.6.2106: invalid block [ 154.071588][ T9484] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 154.071872][ T9484] EXT4-fs (loop6): 1 truncate cleaned up [ 154.081152][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 154.081172][ C1] EXT4-fs (loop6): initial error at time 3931795270: ext4_get_branch:178: inode 13: block 1024 [ 154.081202][ C1] EXT4-fs (loop6): last error at time 3931795270: ext4_get_branch:178: inode 13: block 1024 [ 154.147441][ T9484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.335059][ T9424] syz.7.2092 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 154.366219][ T9424] CPU: 1 UID: 0 PID: 9424 Comm: syz.7.2092 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.366252][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.366267][ T9424] Call Trace: [ 154.366275][ T9424] [ 154.366283][ T9424] __dump_stack+0x1d/0x30 [ 154.366361][ T9424] dump_stack_lvl+0x95/0xd0 [ 154.366383][ T9424] dump_stack+0x15/0x1b [ 154.366568][ T9424] dump_header+0x80/0x240 [ 154.366594][ T9424] oom_kill_process+0x295/0x350 [ 154.366680][ T9424] out_of_memory+0x981/0xbc0 [ 154.366723][ T9424] try_charge_memcg+0x621/0xa00 [ 154.366813][ T9424] charge_memcg+0x6d/0x120 [ 154.366925][ T9424] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 154.366972][ T9424] swap_cache_alloc_folio+0x47b/0x5e0 [ 154.367078][ T9424] swap_cluster_readahead+0x3d2/0x460 [ 154.367179][ T9424] swapin_readahead+0xd8/0x8a0 [ 154.367211][ T9424] ? mod_lruvec_state+0x10c/0x120 [ 154.367241][ T9424] ? __rcu_read_unlock+0x33/0x70 [ 154.367338][ T9424] ? lruvec_stat_mod_folio+0xbb/0x100 [ 154.367364][ T9424] ? _raw_spin_unlock+0x9/0x30 [ 154.367385][ T9424] ? __rcu_read_unlock+0x4e/0x70 [ 154.367482][ T9424] ? swap_cache_get_folio+0x1f7/0x200 [ 154.367533][ T9424] do_swap_page+0x2a2/0x1ec0 [ 154.367568][ T9424] ? __css_rstat_updated+0xbb/0x280 [ 154.367618][ T9424] ? __rcu_read_lock+0x36/0x50 [ 154.367654][ T9424] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 154.367693][ T9424] handle_mm_fault+0xb3c/0x2da0 [ 154.367750][ T9424] do_user_addr_fault+0x634/0x1060 [ 154.367845][ T9424] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 154.367886][ T9424] ? trace_page_fault_user+0x1f/0xa0 [ 154.367928][ T9424] exc_page_fault+0x62/0xa0 [ 154.368000][ T9424] asm_exc_page_fault+0x26/0x30 [ 154.368029][ T9424] RIP: 0033:0x7f5e6a67e9bf [ 154.368059][ T9424] Code: e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 64 48 8b 04 25 28 00 00 00 <48> 89 44 24 18 8d 07 48 69 c0 83 de 1b 43 48 c1 e8 32 89 c1 69 c0 [ 154.368085][ T9424] RSP: 002b:00007ffc57821e70 EFLAGS: 00010246 [ 154.368107][ T9424] RAX: e0c2abeade065800 RBX: 00007f5e6a905fa0 RCX: 0000000000025990 [ 154.368142][ T9424] RDX: 00000000000000ee RSI: 0000000000000000 RDI: 00000000000003e8 [ 154.368155][ T9424] RBP: 00007f5e6a907da0 R08: 000000000e381314 R09: 3fffffffffffffff [ 154.368169][ T9424] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000025c80 [ 154.368185][ T9424] R13: 00007f5e6a90609c R14: 00000000000250c7 R15: 00007ffc57821fa0 [ 154.368209][ T9424] [ 154.369882][ T9424] memory: usage 307200kB, limit 307200kB, failcnt 233 [ 154.637965][ T9424] memory+swap: usage 386716kB, limit 9007199254740988kB, failcnt 0 [ 154.646206][ T9424] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 154.655646][ T9424] Memory cgroup stats for /syz7: [ 154.655884][ T9424] cache 0 [ 154.689180][ T9424] rss 0 [ 154.695276][ T9424] shmem 0 [ 154.706496][ T9424] mapped_file 0 [ 154.713499][ T9424] dirty 0 [ 154.719587][ T9424] writeback 0 [ 154.741654][ T9424] workingset_refault_anon 866 [ 154.758893][ T9424] workingset_refault_file 33 [ 154.773968][ T9424] swap 81424384 [ 154.785096][ T9424] swapcached 88473600 [ 154.798574][ T9424] pgpgin 123115 [ 154.802080][ T9424] pgpgout 123115 [ 154.840236][ T9424] pgfault 83315 [ 154.848548][ T9424] pgmajfault 35 [ 154.855185][ T9424] inactive_anon 0 [ 154.870985][ T9424] active_anon 0 [ 154.877539][ T9424] inactive_file 0 [ 154.886003][ T9424] active_file 0 [ 154.890935][ T9424] unevictable 0 [ 154.902087][ T9424] hierarchical_memory_limit 314572800 [ 154.913256][ T9424] hierarchical_memsw_limit 9223372036854771712 [ 154.925560][ T9424] total_cache 0 [ 154.931123][ T9424] total_rss 0 [ 154.934496][ T9424] total_shmem 0 [ 154.938015][ T9424] total_mapped_file 0 [ 154.942066][ T9424] total_dirty 0 [ 154.945612][ T9424] total_writeback 0 [ 154.949537][ T9424] total_workingset_refault_anon 866 [ 154.954840][ T9424] total_workingset_refault_file 33 [ 154.961086][ T9424] total_swap 81424384 [ 154.965100][ T9424] total_swapcached 88473600 [ 154.976067][ T9424] total_pgpgin 123115 [ 154.981694][ T9424] total_pgpgout 123115 [ 154.987758][ T9424] total_pgfault 83315 [ 154.991952][ T9424] total_pgmajfault 35 [ 154.996007][ T9424] total_inactive_anon 0 [ 155.000212][ T9424] total_active_anon 0 [ 155.012392][ T9424] total_inactive_file 0 [ 155.022987][ T9424] total_active_file 0 [ 155.030729][ T9424] total_unevictable 0 [ 155.039384][ T9424] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2092,pid=9424,uid=0 [ 155.065847][ T9424] Memory cgroup out of memory: Killed process 9424 (syz.7.2092) total-vm:96228kB, anon-rss:1232kB, file-rss:22260kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 155.110560][ T9426] syz.7.2092 (9426) used greatest stack depth: 8424 bytes left [ 155.243698][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.255381][ T9427] vhci_hcd: connection reset by peer [ 155.291672][ T9097] vhci_hcd vhci_hcd.7: stop threads [ 155.312765][ T9097] vhci_hcd vhci_hcd.7: release socket [ 155.338919][ T9097] vhci_hcd vhci_hcd.7: disconnect device [ 155.827510][ T9600] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2126'. [ 156.028619][ T9573] loop7: detected capacity change from 0 to 8192 [ 156.127905][ T9573] vfat filesystem being mounted at /285/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 156.655017][ T3363] usb 15-1: enqueue for inactive port 0 [ 156.685575][ T3363] usb 15-1: enqueue for inactive port 0 [ 156.770421][ T3363] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 157.216252][ T9641] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 157.230487][ T9641] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.533796][ T9641] bond3: entered promiscuous mode [ 157.539067][ T9641] bond3: entered allmulticast mode [ 157.762288][ T9661] loop4: detected capacity change from 0 to 128 [ 157.822274][ T9661] msdos filesystem being mounted at /465/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 158.004309][ T28] audit: type=1400 audit(3931795274.739:828): avc: denied { setattr } for pid=9676 comm="syz.7.2158" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.016903][ T9661] bio_check_eod: 18273 callbacks suppressed [ 158.016957][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.016957][ T9661] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 158.050736][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.050736][ T9661] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 158.065801][ T9661] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 158.081258][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.081258][ T9661] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 158.086915][ T9682] random: crng reseeded on system resumption [ 158.097106][ T9661] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 158.113499][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.113499][ T9661] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 158.129244][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.129244][ T9661] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 158.143688][ T9661] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 158.154587][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.154587][ T9661] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 158.179671][ T9684] netlink: 'syz.6.2161': attribute type 4 has an invalid length. [ 158.187934][ T9661] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 158.198709][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.198709][ T9661] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 158.214897][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.214897][ T9661] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 158.232996][ T9686] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2162'. [ 158.244359][ T9661] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 158.254270][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.254270][ T9661] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 158.277638][ T9091] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.280662][ T9661] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 158.295112][ T9661] syz.4.2151: attempt to access beyond end of device [ 158.295112][ T9661] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 158.314946][ T9661] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 158.335318][ T9661] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 158.356422][ T9661] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 158.365434][ T9661] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 158.502700][ T9656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.577281][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2164'. [ 158.588518][ T9690] geneve0: entered promiscuous mode [ 158.698268][ T28] audit: type=1326 audit(3931795275.429:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6c0de99 code=0x7ffc0000 [ 158.744406][ T28] audit: type=1326 audit(3931795275.439:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6c0de99 code=0x7ffc0000 [ 158.773230][ T28] audit: type=1326 audit(3931795275.439:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6c0de99 code=0x7ffc0000 [ 158.783035][ T9706] loop6: detected capacity change from 0 to 512 [ 158.798966][ T28] audit: type=1326 audit(3931795275.439:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6c0de99 code=0x7ffc0000 [ 158.830819][ T28] audit: type=1326 audit(3931795275.439:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffaa6c0de99 code=0x7ffc0000 [ 158.856379][ T28] audit: type=1326 audit(3931795275.439:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffaa6c0dc02 code=0x7ffc0000 [ 158.858282][ T9706] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 158.887025][ T28] audit: type=1326 audit(3931795275.439:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffaa6bce6ce code=0x7ffc0000 [ 158.916825][ T28] audit: type=1326 audit(3931795275.459:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa6c0de99 code=0x7ffc0000 [ 158.943571][ T28] audit: type=1326 audit(3931795275.469:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9701 comm="syz.0.2169" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffaa6c0dcc7 code=0x7ffc0000 [ 159.006292][ T9706] EXT4-fs (loop6): 1 truncate cleaned up [ 159.024783][ T9706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.177379][ T9725] loop4: detected capacity change from 0 to 256 [ 159.202510][ T9725] vfat filesystem being mounted at /470/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 159.239638][ T9725] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 159.275036][ T9725] FAT-fs (loop4): Filesystem has been set read-only [ 159.535577][ T3363] IPVS: starting estimator thread 0... [ 159.646079][ T9735] IPVS: using max 1680 ests per chain, 84000 per kthread [ 159.872215][ T4602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.316279][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 160.317943][ T4270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.544089][ T9788] netlink: 'syz.3.2206': attribute type 3 has an invalid length. [ 160.725672][ T9805] loop4: detected capacity change from 0 to 1024 [ 160.785345][ T9805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.873533][ T9805] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.900051][ T9805] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2213: bg 0: block 112: padding at end of block bitmap is not set [ 161.138205][ T9091] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 161.151908][ T9091] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.151908][ T9091] [ 161.196617][ T9091] EXT4-fs (loop4): Total free blocks count 0 [ 161.202698][ T9091] EXT4-fs (loop4): Free/Dirty block details [ 161.208897][ T9091] EXT4-fs (loop4): free_blocks=0 [ 161.213986][ T9091] EXT4-fs (loop4): dirty_blocks=64 [ 161.227002][ T9091] EXT4-fs (loop4): Block reservation details [ 161.238922][ T9091] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 161.256935][ T3298] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 161.283487][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.605866][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 161.618091][ T9822] geneve0: entered promiscuous mode [ 162.260438][ T30] nci: nci_rsp_packet: unknown rsp opcode 0x621 [ 162.281204][ T9893] sctp: [Deprecated]: syz.6.2247 (pid 9893) Use of int in max_burst socket option. [ 162.281204][ T9893] Use struct sctp_assoc_value instead [ 162.736018][ T9898] ================================================================== [ 162.744267][ T9898] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 162.752912][ T9898] [ 162.755262][ T9898] write to 0xffff888120903a60 of 8 bytes by task 9902 on cpu 0: [ 162.762926][ T9898] shmem_file_splice_read+0x401/0x590 [ 162.768342][ T9898] splice_direct_to_actor+0x261/0x680 [ 162.773752][ T9898] do_splice_direct+0x119/0x1a0 [ 162.778649][ T9898] do_sendfile+0x37d/0x640 [ 162.783101][ T9898] __x64_sys_sendfile64+0x105/0x150 [ 162.788338][ T9898] x64_sys_call+0x2dc4/0x3020 [ 162.793049][ T9898] do_syscall_64+0x136/0x3c0 [ 162.797666][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.803604][ T9898] [ 162.805954][ T9898] write to 0xffff888120903a60 of 8 bytes by task 9898 on cpu 1: [ 162.813608][ T9898] shmem_file_splice_read+0x401/0x590 [ 162.819035][ T9898] splice_direct_to_actor+0x261/0x680 [ 162.824440][ T9898] do_splice_direct+0x119/0x1a0 [ 162.829330][ T9898] do_sendfile+0x37d/0x640 [ 162.833782][ T9898] __x64_sys_sendfile64+0x105/0x150 [ 162.839019][ T9898] x64_sys_call+0x2dc4/0x3020 [ 162.843753][ T9898] do_syscall_64+0x136/0x3c0 [ 162.848377][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.854309][ T9898] [ 162.856657][ T9898] value changed: 0x00000000000044d0 -> 0x00000000000044d6 [ 162.863807][ T9898] [ 162.866159][ T9898] Reported by Kernel Concurrency Sanitizer on: [ 162.872329][ T9898] CPU: 1 UID: 0 PID: 9898 Comm: syz.0.2248 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.881638][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 162.891724][ T9898] ================================================================== [ 163.030306][ T9887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512