last executing test programs: 5m7.71130378s ago: executing program 32 (id=395): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) 4m51.81723947s ago: executing program 1 (id=658): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x3}], 0x1c) 4m51.779427881s ago: executing program 1 (id=659): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000e40)=ANY=[], 0x8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m51.709262912s ago: executing program 1 (id=670): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)}, 0x8800) r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x10, {0x8}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'wg2\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x4, 0x1, 0x1], 0x0, 0x3}, {0xffffffffffffffff, [0x4, 0x0, 0x0, 0x3, 0x3, 0x4], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 4m51.692550603s ago: executing program 1 (id=672): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 4m51.351483681s ago: executing program 1 (id=662): syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x8c2) ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2a, 0x0, &(0x7f0000000100)={0x1e, 0x0, 0xd, 0x9dd6, 0x2, 0x10, 0x2, 0x55}, &(0x7f0000000180)={0x0, 0x80000000, 0x72, 0x1, 0x8, 0x0, 0x4, 0x8}, &(0x7f0000000280), &(0x7f0000000400)={&(0x7f00000003c0)={[0x7]}, 0x8}) 4m51.164422665s ago: executing program 1 (id=666): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x50) 4m51.104816616s ago: executing program 33 (id=666): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x8001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x50) 3m32.37925838s ago: executing program 2 (id=2407): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$cgroup_devices(r0, &(0x7f0000000100)={'c', ' *:* ', 'w\x00'}, 0x8) 3m31.910594081s ago: executing program 2 (id=2413): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) 3m31.648484027s ago: executing program 2 (id=2419): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x1, 0xffff, r1, 0x0}]) syz_clone(0x40900100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m31.220418377s ago: executing program 2 (id=2428): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002, 0x300}}}}}, 0x0) 3m31.131469109s ago: executing program 2 (id=2430): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) syz_usbip_server_init(0x1) 3m30.529939203s ago: executing program 2 (id=2453): semop(0x0, &(0x7f00000000c0)=[{0x0, 0x400, 0x1000}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0)=0x100, 0x4) 3m15.502841593s ago: executing program 34 (id=2453): semop(0x0, &(0x7f00000000c0)=[{0x0, 0x400, 0x1000}], 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f00000000c0)=0x100, 0x4) 3m5.739604401s ago: executing program 3 (id=2835): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) 3m5.692528061s ago: executing program 3 (id=2836): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m2.674635702s ago: executing program 3 (id=2905): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x4, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 3m2.674186082s ago: executing program 3 (id=2906): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x4a8, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x2a0, 0x2e0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) 3m2.599770054s ago: executing program 3 (id=2907): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000008, &(0x7f0000000000), 0x2, 0x541, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3m1.746337213s ago: executing program 3 (id=2915): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") 3m1.720524424s ago: executing program 35 (id=2915): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51a, &(0x7f0000001200)="$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") 2m1.178907516s ago: executing program 7 (id=4252): r0 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) socket(0x10, 0x3, 0x0) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x40005}, 0x40000) 2m1.098718189s ago: executing program 7 (id=4254): socket(0x848000000015, 0x805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m1.001778311s ago: executing program 7 (id=4256): r0 = semget$private(0x0, 0x6, 0x1b5) semop(r0, &(0x7f0000000040)=[{0x0, 0xff43}], 0x1) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 2m0.096320351s ago: executing program 7 (id=4271): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@errors_remount}, {@nodiscard}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1001000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x7, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47e778082004cb59d654cb9b1b165263bdbcef549ba197fce47df1162af3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x5]}) 1m59.240594731s ago: executing program 7 (id=4279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m58.955646637s ago: executing program 7 (id=4288): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1m58.921007928s ago: executing program 36 (id=4288): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x10e88d, 0x2, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1m1.043753663s ago: executing program 5 (id=5603): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) 1m0.969840604s ago: executing program 5 (id=5605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) 1m0.796464639s ago: executing program 5 (id=5612): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJ', 0x2}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) 59.883373399s ago: executing program 5 (id=5652): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 59.878520209s ago: executing program 5 (id=5654): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 59.722045483s ago: executing program 5 (id=5656): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, 0x0, 0x0) brk(0x5d555ede6000) 59.695007473s ago: executing program 37 (id=5656): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, 0x0, 0x0) brk(0x5d555ede6000) 2.673826328s ago: executing program 0 (id=6859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb92c"], 0xfdef) 2.521719502s ago: executing program 0 (id=6864): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04"], 0x3c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 2.460461793s ago: executing program 0 (id=6866): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 2.103480701s ago: executing program 0 (id=6874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82240, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.002800394s ago: executing program 0 (id=6877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001400)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) setreuid(0x0, 0xee00) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r1, 0xb) 1.919727936s ago: executing program 0 (id=6879): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) 1.864086937s ago: executing program 6 (id=6882): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x10aa44, 0x2, 0x1ff, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) setresuid(0xee01, 0xee00, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.796925979s ago: executing program 6 (id=6884): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 1.363019688s ago: executing program 8 (id=6889): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') unshare(0x24060400) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1.322516649s ago: executing program 9 (id=6890): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x12, 0x8}, 0x10ecd9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6a57, &(0x7f0000000040)={0x0, 0x398c, 0x1c080, 0xd, 0x2a}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b6", 0xa}], 0x1}, 0x0) io_uring_enter(r0, 0x5b3, 0x7ecd, 0x17, 0x0, 0x0) 1.202694852s ago: executing program 9 (id=6892): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x2}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x5}, 0x10ecc8, 0x1224, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r0) 1.193092522s ago: executing program 8 (id=6893): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 1.115531984s ago: executing program 4 (id=6895): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r2, &(0x7f0000000440)=""/4090, 0xffa) getdents(r2, 0x0, 0x0) 1.035533406s ago: executing program 4 (id=6896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x4, 0xa}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.004153386s ago: executing program 9 (id=6897): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0x3}) 936.227258ms ago: executing program 4 (id=6898): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5fbd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 935.567778ms ago: executing program 9 (id=6908): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) 917.430619ms ago: executing program 8 (id=6899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) socket(0x2b, 0x80801, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 735.663463ms ago: executing program 8 (id=6900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1011, &(0x7f0000000300)=ANY=[], 0x0) 583.559286ms ago: executing program 4 (id=6901): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000140)=0x4, 0x4) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 582.976956ms ago: executing program 8 (id=6912): unshare(0x22020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 527.165687ms ago: executing program 8 (id=6902): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 205.344154ms ago: executing program 4 (id=6903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="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", 0xc01}, {0x0}], 0x2, &(0x7f0000001940)}}], 0x2, 0x91) write$binfmt_elf32(r1, &(0x7f00000004c0)=ANY=[], 0x258) 123.224917ms ago: executing program 4 (id=6904): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = syz_io_uring_setup(0x53e7, &(0x7f0000000040)={0x0, 0x892df, 0x400, 0x3, 0x2c5}, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r0], 0x1) 109.947677ms ago: executing program 6 (id=6905): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) symlinkat(&(0x7f0000002040)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2}, 0x18) lstat(&(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)) 60.217328ms ago: executing program 6 (id=6906): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r2, 0x7f}, &(0x7f0000000100)=0x8) 59.551158ms ago: executing program 9 (id=6907): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004d40)={0x0, 0x0, 0x0}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x58}, 0x40000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000000000100df31"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 29.790799ms ago: executing program 6 (id=6909): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) 435.86µs ago: executing program 9 (id=6910): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f00000001c0)) 0s ago: executing program 6 (id=6911): openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 0033 [ 256.190196][T15288] CR2: 00007ffb5825cc2b CR3: 000000014959e000 CR4: 00000000003506f0 [ 256.198254][T15288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 256.206346][T15288] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 256.214428][T15288] Call Trace: [ 256.217775][T15288] [ 256.220834][T15288] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 256.226880][T15288] ext4_xattr_delete_inode+0x6b5/0x790 [ 256.232506][T15288] ext4_evict_inode+0xb18/0xdf0 [ 256.237520][T15288] ? __pfx_ext4_evict_inode+0x10/0x10 [ 256.243394][T15288] evict+0x2a5/0x510 [ 256.247353][T15288] iput+0x430/0x5a0 [ 256.251230][T15288] ext4_process_orphan+0x1a4/0x1c0 [ 256.256500][T15288] ext4_orphan_cleanup+0x6a6/0xa10 [ 256.261789][T15288] ? ext4_register_li_request+0x14c/0x440 [ 256.267782][T15288] ext4_fill_super+0x33ab/0x3760 [ 256.272791][T15288] ? set_blocksize+0x14c/0x270 [ 256.277671][T15288] ? __pfx_ext4_fill_super+0x10/0x10 [ 256.283048][T15288] get_tree_bdev_flags+0x291/0x300 [ 256.288327][T15288] ? __pfx_ext4_fill_super+0x10/0x10 [ 256.293685][T15288] get_tree_bdev+0x1f/0x30 [ 256.298166][T15288] ext4_get_tree+0x1c/0x30 [ 256.302726][T15288] vfs_get_tree+0x57/0x1d0 [ 256.307213][T15288] do_new_mount+0x288/0x8d0 [ 256.311803][T15288] path_mount+0x4ad/0xb90 [ 256.316279][T15288] __se_sys_mount+0x28c/0x2e0 [ 256.321086][T15288] __x64_sys_mount+0x67/0x80 [ 256.325733][T15288] x64_sys_call+0x2d61/0x3020 [ 256.330552][T15288] do_syscall_64+0x136/0x3c0 [ 256.335332][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.341351][T15288] RIP: 0033:0x7ffb581af0ca [ 256.345819][T15288] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.365740][T15288] RSP: 002b:00007ffb56c06e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.374246][T15288] RAX: ffffffffffffffda RBX: 00007ffb56c06ee0 RCX: 00007ffb581af0ca [ 256.382351][T15288] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007ffb56c06ea0 [ 256.390413][T15288] RBP: 0000200000000180 R08: 00007ffb56c06ee0 R09: 0000000000800718 [ 256.398675][T15288] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 256.406749][T15288] R13: 00007ffb56c06ea0 R14: 00000000000004a2 R15: 0000200000000fc0 [ 256.414834][T15288] [ 256.417919][T15288] ---[ end trace 0000000000000000 ]--- [ 256.432209][T15288] EXT4-fs (loop4): 1 orphan inode deleted [ 256.441024][T15288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.472251][ T28] audit: type=1400 audit(1783792373.098:1706): avc: denied { write } for pid=15287 comm="syz.4.4496" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.522256][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.663170][ T28] audit: type=1400 audit(1783792373.278:1707): avc: denied { write } for pid=15293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.714846][ T28] audit: type=1400 audit(1783792373.338:1708): avc: denied { write } for pid=15313 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.894802][ T28] audit: type=1400 audit(1783792373.518:1709): avc: denied { write } for pid=15322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.945285][ T28] audit: type=1400 audit(1783792373.568:1710): avc: denied { write } for pid=15343 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.086190][ T28] audit: type=1400 audit(1783792373.708:1711): avc: denied { nosuid_transition } for pid=15351 comm="syz.6.4510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 257.125224][ T28] audit: type=1400 audit(1783792373.708:1712): avc: denied { transition } for pid=15351 comm="syz.6.4510" path="/820/file1" dev="tmpfs" ino=4239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 257.153262][ T28] audit: type=1400 audit(1783792373.708:1713): avc: denied { entrypoint } for pid=15351 comm="syz.6.4510" path="/820/file1" dev="tmpfs" ino=4239 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 257.177611][ T28] audit: type=1400 audit(1783792373.708:1714): avc: denied { noatsecure } for pid=15351 comm="syz.6.4510" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 257.246444][T15358] loop8: detected capacity change from 0 to 512 [ 257.271715][T15358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.290265][T15363] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4515'. [ 257.335345][ T28] audit: type=1400 audit(1783792373.938:1715): avc: denied { write } for pid=15357 comm="syz.8.4514" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.567183][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.063718][T15445] loop8: detected capacity change from 0 to 8192 [ 258.254426][T15463] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.4547'. [ 258.558395][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4558'. [ 258.576003][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4558'. [ 258.810608][T15494] loop4: detected capacity change from 0 to 32768 [ 258.901042][T15494] loop4: p1 p3 < > [ 259.177384][T10291] udevd[10291]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 259.193940][T10236] udevd[10236]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 259.426309][T10877] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 259.435882][T10877] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.477266][T15548] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4580'. [ 259.514715][T15548] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4580'. [ 260.321158][T15583] loop5: detected capacity change from 0 to 512 [ 260.427664][T15602] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4603'. [ 260.428270][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4604'. [ 260.477179][T15583] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4595: bg 0: block 393: padding at end of block bitmap is not set [ 260.503986][T15604] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4604'. [ 260.578358][T15583] loop5: lost filesystem error report for type 5 error -117 [ 260.579981][ T49] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.596103][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 260.596122][ C0] EXT4-fs (loop5): initial error at time 1783792377: ext4_validate_block_bitmap:441 [ 260.596142][ C0] EXT4-fs (loop5): last error at time 1783792377: ext4_validate_block_bitmap:441 [ 260.628352][T15583] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 260.663863][T15583] loop5: lost filesystem error report for type 5 error -117 [ 260.671812][T15583] EXT4-fs (loop5): 2 truncates cleaned up [ 260.714976][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4609'. [ 260.721089][T15583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.741762][ T49] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.773598][ T49] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.822965][ T49] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.894424][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4621'. [ 260.910152][ T8371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.947584][T15630] : renamed from bond0 (while UP) [ 261.594128][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4633'. [ 262.681218][T15725] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4657'. [ 263.169584][T15763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15763 comm=syz.6.4674 [ 264.178396][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.185911][ C1] bridge0: topology change detected, propagating [ 264.192943][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.200310][ C1] bridge0: topology change detected, propagating [ 264.428047][T15829] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4701'. [ 264.515036][T15834] netlink: 'syz.8.4703': attribute type 1 has an invalid length. [ 264.551382][T15834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.606048][T15841] loop8: detected capacity change from 0 to 128 [ 264.622517][T15841] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.675741][T15841] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.877509][T15840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.911960][T15840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.014883][T15850] loop8: detected capacity change from 0 to 164 [ 265.709570][T15893] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.717176][T15893] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.732639][T15899] loop8: detected capacity change from 0 to 256 [ 265.836609][T15893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.851002][T15893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.940977][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4742'. [ 266.381159][ T30] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.390000][ T30] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 266.399343][ T5026] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.409754][ T5026] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 266.553853][ T5026] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.592698][ T5026] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 266.620624][ T30] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.624583][T15934] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4743'. [ 266.639903][ T30] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 266.756364][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 266.756381][ T28] audit: type=1400 audit(1783792383.378:1721): avc: denied { connect } for pid=15948 comm="syz.8.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 266.797436][T15951] gtp0: entered allmulticast mode [ 266.810439][ T28] audit: type=1400 audit(1783792383.378:1722): avc: denied { bind } for pid=15948 comm="syz.8.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 266.914924][T15959] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4754'. [ 266.947276][T15962] loop8: detected capacity change from 0 to 256 [ 266.981608][T15962] vfat: Bad value for 'shortname' [ 267.185311][T15977] tipc: Enabling of bearer rejected, already enabled [ 267.245172][T15992] loop8: detected capacity change from 0 to 128 [ 267.268432][T15992] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.302805][T15992] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.327806][T15999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4770'. [ 267.385704][ T49] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.730310][T16023] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4780'. [ 267.739801][T16023] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4780'. [ 267.763293][T16021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.790111][T16021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.575003][T16059] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4795'. [ 268.886716][ T28] audit: type=1400 audit(1783792385.508:1723): avc: denied { execmod } for pid=16069 comm="syz.5.4799" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 268.992181][T16068] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4798'. [ 269.001434][T16068] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4798'. [ 269.067293][T16078] netlink: 'syz.4.4803': attribute type 1 has an invalid length. [ 269.110199][T16080] loop4: detected capacity change from 0 to 256 [ 269.117093][T16080] vfat: Bad value for 'shortname' [ 269.212615][T16076] loop5: detected capacity change from 0 to 512 [ 269.238782][T16076] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 269.273436][T16076] EXT4-fs (loop5): 1 truncate cleaned up [ 269.304581][T16076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.389529][ T8371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.506904][T16097] loop4: detected capacity change from 0 to 512 [ 269.572333][T16097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.621719][T16097] ext4 filesystem being mounted at /858/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.635186][ T28] audit: type=1400 audit(1783792386.258:1724): avc: denied { write } for pid=16096 comm="syz.4.4808" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.795293][T16118] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4817'. [ 269.858206][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.142254][T16146] loop5: detected capacity change from 0 to 512 [ 270.170876][T16146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.233161][T16146] ext4 filesystem being mounted at /619/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.246568][ T28] audit: type=1400 audit(1783792386.878:1725): avc: denied { write } for pid=16145 comm="syz.5.4830" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.453729][ T8371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.710827][T16166] loop8: detected capacity change from 0 to 512 [ 270.803828][T16166] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 270.926848][T16166] EXT4-fs (loop8): 1 truncate cleaned up [ 270.931104][T16166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.020681][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.095209][T16217] SELinux: ebitmap start bit (536870912) is beyond the end of the bitmap (1088) [ 271.095305][T16217] SELinux: invalid class [ 271.095596][T16217] SELinux: failed to load policy [ 271.436637][T16238] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.444979][T16238] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.656179][T16238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.699447][T16238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.890109][ T5010] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.913563][ T5010] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.914681][T16267] 9p: Bad value for 'wfdno' [ 272.384594][ T5010] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.399019][ T5010] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.508868][T16322] loop5: detected capacity change from 0 to 4096 [ 273.585843][T16322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.629160][ T28] audit: type=1400 audit(1783792390.248:1726): avc: denied { write } for pid=16321 comm="syz.5.4897" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.741653][ T8371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.845133][T16340] syz_tun: left promiscuous mode [ 274.060905][T16340] geneve2: left promiscuous mode [ 274.484467][T16352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.868470][T16378] netlink: 'syz.4.4921': attribute type 1 has an invalid length. [ 274.910642][T16378] bond3: entered promiscuous mode [ 274.921977][T16378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.968612][T16380] bond3: (slave veth3): making interface the new active one [ 274.985388][T16380] veth3: entered promiscuous mode [ 275.026719][T16380] bond3: (slave veth3): Enslaving as an active interface with an up link [ 275.231417][ T28] audit: type=1400 audit(1783792391.858:1727): avc: denied { read } for pid=16406 comm="syz.4.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 276.188553][T16440] geneve2: left promiscuous mode [ 276.194606][T16440] vlan2: left promiscuous mode [ 276.200286][T16440] erspan0: left promiscuous mode [ 276.206095][T16440] bond1: left promiscuous mode [ 276.212648][T16440] bond2: left promiscuous mode [ 276.220372][T16440] bond3: left promiscuous mode [ 276.225425][T16440] veth3: left promiscuous mode [ 276.391530][ T28] audit: type=1326 audit(1783792393.018:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.8.4951" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dd905de59 code=0x0 [ 276.663456][T16486] netlink: 'syz.9.4967': attribute type 1 has an invalid length. [ 276.679693][T16486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.702280][T16486] bond0: (slave gretap1): making interface the new active one [ 276.711086][T16486] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 277.376003][ T28] audit: type=1326 audit(1783792649.994:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16537 comm="syz.8.5000" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dd905de59 code=0x0 [ 278.325719][T16593] netlink: 'syz.8.5013': attribute type 6 has an invalid length. [ 278.351947][ T28] audit: type=1400 audit(1783792650.974:1730): avc: denied { read } for pid=16594 comm="syz.8.5014" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 278.379378][ T28] audit: type=1400 audit(1783792650.974:1731): avc: denied { open } for pid=16594 comm="syz.8.5014" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 278.405055][ T28] audit: type=1400 audit(1783792651.004:1732): avc: denied { ioctl } for pid=16594 comm="syz.8.5014" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 278.854209][T16646] netlink: 'syz.8.5029': attribute type 1 has an invalid length. [ 278.942591][T16646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.994622][T16651] bond3: (slave gretap1): making interface the new active one [ 279.015797][T16651] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 279.183956][T16681] loop4: detected capacity change from 0 to 256 [ 279.313978][T16693] netlink: 'syz.5.5049': attribute type 1 has an invalid length. [ 279.425253][T16693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.440914][T16700] __nla_validate_parse: 1 callbacks suppressed [ 279.440936][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5050'. [ 279.479350][T16698] bond1: (slave gretap1): making interface the new active one [ 279.488102][T16698] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 279.731147][T16715] loop8: detected capacity change from 0 to 1024 [ 279.744780][T16715] EXT4-fs: Ignoring removed orlov option [ 279.771875][ T28] audit: type=1400 audit(1783792652.384:1733): avc: denied { mounton } for pid=16716 comm="syz.4.5058" path="/file0" dev="bpf" ino=48574 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 279.816572][T16715] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.828857][T16712] loop5: detected capacity change from 0 to 2048 [ 279.901172][ T28] audit: type=1400 audit(1783792652.514:1734): avc: denied { write } for pid=16714 comm="syz.8.5057" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 279.929923][ T28] audit: type=1400 audit(1783792652.514:1735): avc: denied { write } for pid=16714 comm="syz.8.5057" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.009744][T16712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.034839][T16712] ext4 filesystem being mounted at /666/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.076382][ T28] audit: type=1400 audit(1783792652.694:1736): avc: denied { write } for pid=16710 comm="syz.5.5055" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 280.101076][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.250707][T16760] syzkaller1: entered promiscuous mode [ 280.266970][T16760] syzkaller1: entered allmulticast mode [ 280.328258][T16769] batman_adv: batadv0: Adding interface: dummy0 [ 280.335463][T16769] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.367149][T16769] batman_adv: batadv0: Interface activated: dummy0 [ 280.402535][T16769] net_ratelimit: 77 callbacks suppressed [ 280.402556][T16769] batadv0: mtu less than device minimum [ 280.419739][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.430701][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.441658][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.452776][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.464033][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.474958][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.486022][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.497265][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.508312][T16769] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 280.739077][ T49] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 280.757213][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 280.770112][ T49] EXT4-fs (loop5): This should not happen!! Data will be lost [ 280.770112][ T49] [ 280.784835][ T49] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 547 with error 28 [ 280.798193][ T49] EXT4-fs (loop5): This should not happen!! Data will be lost [ 280.798193][ T49] [ 280.809109][ T49] EXT4-fs (loop5): Total free blocks count 0 [ 280.816887][ T49] EXT4-fs (loop5): Free/Dirty block details [ 280.823314][ T49] EXT4-fs (loop5): free_blocks=0 [ 280.828562][ T49] EXT4-fs (loop5): dirty_blocks=560 [ 280.835266][ T49] EXT4-fs (loop5): Block reservation details [ 280.846975][ T8371] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 281.006956][T16811] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5095'. [ 281.016494][T16811] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5095'. [ 281.103117][T16817] loop5: detected capacity change from 0 to 1024 [ 281.144345][T16817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 281.158744][T16817] ext4 filesystem being mounted at /671/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.175374][ T28] audit: type=1400 audit(1783792653.794:1737): avc: denied { write } for pid=16816 comm="syz.5.5099" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.177083][T16817] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5099: bg 0: block 112: padding at end of block bitmap is not set [ 281.212349][ T28] audit: type=1400 audit(1783792653.794:1738): avc: denied { write } for pid=16816 comm="syz.5.5099" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.234832][T16817] EXT4-fs (loop5): Remounting filesystem read-only [ 281.241579][ T28] audit: type=1400 audit(1783792653.794:1739): avc: denied { write } for pid=16816 comm="syz.5.5099" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.285237][ T8371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 281.401322][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5106'. [ 281.414715][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5106'. [ 281.450381][T16835] geneve2: entered promiscuous mode [ 281.480977][T16835] geneve2: entered allmulticast mode [ 281.504053][ T30] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.541713][ T30] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.576129][ T30] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.600051][ T30] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.618175][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.633218][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.643276][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.655452][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.978550][T16882] veth0: entered promiscuous mode [ 281.990197][T16882] veth0: left promiscuous mode [ 282.120444][T16896] netlink: 'syz.6.5134': attribute type 2 has an invalid length. [ 282.131069][ T28] audit: type=1400 audit(1783792654.754:1740): avc: denied { connect } for pid=16895 comm="syz.6.5134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 282.219505][T16904] ip_vti0: entered promiscuous mode [ 282.235771][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5137'. [ 282.712574][ T28] audit: type=1400 audit(1783792655.334:1741): avc: denied { unmount } for pid=11065 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 283.063171][T16963] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5163'. [ 283.244640][T16975] netlink: 276 bytes leftover after parsing attributes in process `syz.8.5168'. [ 283.293374][T16980] loop8: detected capacity change from 0 to 512 [ 283.336581][T16980] EXT4-fs error (device loop8): __ext4_iget:5533: inode #11: block 1: comm syz.8.5170: invalid block [ 283.359681][T16980] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 283.359925][T16980] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5170: couldn't read orphan inode 11 (err -117) [ 283.369186][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 283.369212][ C1] EXT4-fs (loop8): initial error at time 1783792655: __ext4_iget:5533: inode 11: block 1 [ 283.369269][ C1] EXT4-fs (loop8): last error at time 1783792655: __ext4_iget:5533: inode 11: block 1 [ 283.408028][T16980] loop8: lost filesystem error report for type 5 error -117 [ 283.408677][T16980] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.894941][T17009] veth3: entered promiscuous mode [ 283.900132][T17009] veth3: entered allmulticast mode [ 284.140856][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.505634][ T28] audit: type=1400 audit(1783792657.124:1742): avc: denied { ioctl } for pid=17048 comm="syz.8.5195" path="socket:[49174]" dev="sockfs" ino=49174 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 284.637803][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 284.790247][T17062] hsr0: entered promiscuous mode [ 284.806636][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5200'. [ 285.470538][T17100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5215'. [ 285.492075][T17102] loop4: detected capacity change from 0 to 1024 [ 285.502879][T17102] EXT4-fs: Ignoring removed bh option [ 285.543457][T17102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.586042][ T28] audit: type=1400 audit(1783792658.204:1743): avc: denied { write } for pid=17101 comm="syz.4.5216" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.685355][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.742816][T17106] net_ratelimit: 12 callbacks suppressed [ 285.742839][T17106] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 285.959793][T17121] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 286.125070][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5228'. [ 286.397381][T17156] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5240'. [ 286.825558][T17191] loop8: detected capacity change from 0 to 512 [ 286.844443][T17191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.870574][T17191] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 286.898625][T17191] EXT4-fs (loop8): 1 truncate cleaned up [ 286.905386][T17191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.927764][ T28] audit: type=1400 audit(1783792659.544:1744): avc: denied { write } for pid=17190 comm="syz.8.5254" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.972777][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.115328][ T28] audit: type=1400 audit(1783792659.734:1745): avc: denied { getopt } for pid=17197 comm="syz.8.5256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 287.189197][T17202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5257'. [ 287.264356][T17204] netlink: 463 bytes leftover after parsing attributes in process `syz.6.5258'. [ 287.323110][T17206] netlink: 'syz.5.5259': attribute type 39 has an invalid length. [ 287.602336][T17229] netlink: 272 bytes leftover after parsing attributes in process `syz.6.5270'. [ 287.614096][T17229] netlink: 272 bytes leftover after parsing attributes in process `syz.6.5270'. [ 287.683465][T17241] 9p: Bad value for 'wfdno' [ 287.764832][ T28] audit: type=1400 audit(1783792660.384:1746): avc: denied { bind } for pid=17250 comm="syz.5.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.820140][ T28] audit: type=1400 audit(1783792660.384:1747): avc: denied { listen } for pid=17250 comm="syz.5.5278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.923219][ T28] audit: type=1400 audit(1783792660.544:1748): avc: denied { ioctl } for pid=17268 comm="syz.8.5286" path="socket:[50432]" dev="sockfs" ino=50432 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.938646][T17270] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 288.080600][T17282] loop8: detected capacity change from 0 to 512 [ 288.102945][T17282] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 288.147870][T17282] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 05000002) [ 288.458548][T17302] loop5: detected capacity change from 0 to 32768 [ 288.486835][T17314] netlink: 'syz.9.5303': attribute type 29 has an invalid length. [ 288.915790][T17338] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5312'. [ 289.119928][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5319'. [ 289.142731][T17357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.174210][T17357] bond2: (slave batadv1): Opening slave failed [ 289.212430][T17364] loop8: detected capacity change from 0 to 512 [ 289.220829][T17364] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.5322: corrupted in-inode xattr: invalid ea_ino [ 289.234274][T17364] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 289.235860][T17364] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5322: couldn't read orphan inode 15 (err -117) [ 289.245076][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 289.245100][ C1] EXT4-fs (loop8): initial error at time 1783792662: ext4_iget_extra_inode:5180: inode 15 [ 289.245138][ C1] EXT4-fs (loop8): last error at time 1783792662: ext4_iget_extra_inode:5180: inode 15 [ 289.283812][T17364] loop8: lost filesystem error report for type 5 error -117 [ 289.284451][T17364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.322367][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.478977][T17384] netlink: 'syz.8.5330': attribute type 1 has an invalid length. [ 289.525191][T17388] sctp: [Deprecated]: syz.8.5332 (pid 17388) Use of int in maxseg socket option. [ 289.525191][T17388] Use struct sctp_assoc_value instead [ 290.040642][T17435] netlink: 'syz.8.5353': attribute type 29 has an invalid length. [ 290.133617][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5357'. [ 290.148751][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5357'. [ 290.174935][ T5026] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.175027][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5357'. [ 290.175047][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5357'. [ 290.203291][ T5026] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.213655][ T5026] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.228121][T17445] loop4: detected capacity change from 0 to 512 [ 290.232531][ T5026] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.244628][T17445] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.5359: corrupted in-inode xattr: invalid ea_ino [ 290.259681][T17445] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 290.259961][T17445] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5359: couldn't read orphan inode 15 (err -117) [ 290.269200][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 290.269225][ C1] EXT4-fs (loop4): initial error at time 1783792663: ext4_iget_extra_inode:5180: inode 15 [ 290.269270][ C1] EXT4-fs (loop4): last error at time 1783792663: ext4_iget_extra_inode:5180: inode 15 [ 290.308072][T17445] loop4: lost filesystem error report for type 5 error -117 [ 290.309891][T17445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.200857][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.366507][T17472] netlink: 'syz.9.5370': attribute type 1 has an invalid length. [ 291.568401][T17503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5385'. [ 291.582173][T17503] ip6erspan0: entered promiscuous mode [ 291.605426][ T28] audit: type=1400 audit(1783792665.226:1749): avc: denied { ioctl } for pid=17508 comm="syz.6.5387" path="socket:[49835]" dev="sockfs" ino=49835 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.823633][T17524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.832852][T17524] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.845468][T17524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.875954][T17524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.885141][T17524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.897010][T17524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.907460][T17524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.918689][T17531] netlink: 'syz.9.5394': attribute type 4 has an invalid length. [ 291.928479][T17524] veth1_vlan: left promiscuous mode [ 291.934649][T17524] veth0_vlan: left promiscuous mode [ 291.941943][T17524] veth0_vlan: entered promiscuous mode [ 291.949409][T17524] veth1_vlan: entered promiscuous mode [ 291.958462][T17524] veth1_macvtap: left promiscuous mode [ 291.965076][T17524] veth0_macvtap: left promiscuous mode [ 291.970245][T17532] netlink: 'syz.9.5394': attribute type 4 has an invalid length. [ 291.978839][T17524] veth0_macvtap: entered promiscuous mode [ 291.985611][T17524] veth1_macvtap: entered promiscuous mode [ 291.994955][T17524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.004530][T17524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.013136][T17524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.023110][T17524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.060742][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.068774][ T30] bridge0: port 1(bridge_slave_0) entered listening state [ 292.080977][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.088120][ T30] bridge0: port 2(bridge_slave_1) entered listening state [ 292.221788][ T28] audit: type=1326 audit(1783792665.846:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.9.5397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98b0cfde59 code=0x0 [ 292.683690][ T28] audit: type=1400 audit(1783792666.306:1751): avc: denied { accept } for pid=17582 comm="syz.6.5420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 292.770168][T17591] loop5: detected capacity change from 0 to 512 [ 292.804121][T17591] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.5424: corrupted in-inode xattr: invalid ea_ino [ 292.827206][T17591] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 292.827449][T17591] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.5424: couldn't read orphan inode 15 (err -117) [ 292.836804][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 292.836823][ C0] EXT4-fs (loop5): initial error at time 1783792666: ext4_iget_extra_inode:5180: inode 15 [ 292.836886][ C0] EXT4-fs (loop5): last error at time 1783792666: ext4_iget_extra_inode:5180: inode 15 [ 292.876689][T17591] loop5: lost filesystem error report for type 5 error -117 [ 292.877266][T17591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.922024][ T8371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.129446][T17600] loop8: detected capacity change from 0 to 512 [ 293.264541][T17626] netlink: 'syz.9.5440': attribute type 12 has an invalid length. [ 293.273167][T17600] FAT-fs (loop8): error, clusters badly computed (1 != 0) [ 293.283259][T17626] netlink: 'syz.9.5440': attribute type 29 has an invalid length. [ 293.288403][T17600] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 293.299319][T17626] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5440'. [ 293.299347][T17626] netlink: 'syz.9.5440': attribute type 3 has an invalid length. [ 293.299364][T17626] netlink: 'syz.9.5440': attribute type 2 has an invalid length. [ 293.299378][T17626] netlink: 'syz.9.5440': attribute type 3 has an invalid length. [ 293.299392][T17626] netlink: 3 bytes leftover after parsing attributes in process `syz.9.5440'. [ 293.731179][ T28] audit: type=1326 audit(1783792667.356:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17649 comm="syz.6.5449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 293.806207][ T28] audit: type=1326 audit(1783792667.356:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17649 comm="syz.6.5449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 293.865783][ T28] audit: type=1326 audit(1783792667.356:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17649 comm="syz.6.5449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 293.909360][ T28] audit: type=1326 audit(1783792667.356:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17649 comm="syz.6.5449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 293.936627][ T28] audit: type=1326 audit(1783792667.356:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17649 comm="syz.6.5449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 293.976594][ T28] audit: type=1326 audit(1783792667.406:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17649 comm="syz.6.5449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78a851e68e code=0x7ffc0000 [ 294.006110][ T28] audit: type=1326 audit(1783792667.406:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17649 comm="syz.6.5449" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f78a851e68e code=0x7ffc0000 [ 294.743651][T17682] loop5: detected capacity change from 0 to 512 [ 294.771882][T17682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.787952][T17682] ext4 filesystem being mounted at /734/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.856657][ T8371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.301896][T17706] loop5: detected capacity change from 0 to 512 [ 295.462226][T17706] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.493033][T17706] ext4 filesystem being mounted at /738/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.578110][T17728] loop8: detected capacity change from 0 to 4096 [ 295.608329][T17728] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.793268][ T8371] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.840292][T17742] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5484'. [ 295.857939][T17742] batman_adv: batadv0: Interface deactivated: dummy0 [ 295.913193][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.923779][T17742] batman_adv: batadv0: Removing interface: dummy0 [ 296.309624][T17772] netlink: 'syz.5.5497': attribute type 4 has an invalid length. [ 296.339391][T17772] netlink: 'syz.5.5497': attribute type 4 has an invalid length. [ 296.356644][T17774] loop4: detected capacity change from 0 to 512 [ 296.414035][T17774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.431354][T17774] ext4 filesystem being mounted at /973/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.447325][T17774] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.5498: corrupted inode contents [ 296.472204][T17782] macvlan1: entered promiscuous mode [ 296.478399][T17774] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.5498: mark_inode_dirty error [ 296.492397][T17774] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.5498: corrupted inode contents [ 296.505891][T17782] macvlan1: left promiscuous mode [ 296.526820][T17774] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.5498: mark_inode_dirty error [ 296.635714][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.661164][T17798] loop8: detected capacity change from 0 to 256 [ 297.634149][T17878] netlink: 'syz.5.5514': attribute type 1 has an invalid length. [ 297.693129][T17878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.747239][T17884] bond2: (slave geneve3): making interface the new active one [ 297.795908][T17884] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 297.996269][T17901] loop5: detected capacity change from 0 to 256 [ 298.323181][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5532'. [ 299.539081][T17948] loop8: detected capacity change from 0 to 256 [ 299.578866][T17948] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.648843][T17961] sctp: [Deprecated]: syz.5.5549 (pid 17961) Use of int in max_burst socket option deprecated. [ 299.648843][T17961] Use struct sctp_assoc_value instead [ 299.793762][T17973] netlink: 'syz.6.5553': attribute type 4 has an invalid length. [ 299.817678][T17973] netlink: 'syz.6.5553': attribute type 4 has an invalid length. [ 300.043490][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 300.043510][ T28] audit: type=1326 audit(1783792673.666:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17991 comm="syz.6.5560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78a855de59 code=0x0 [ 300.353372][T18015] macvlan1: entered promiscuous mode [ 300.367231][T18015] macvlan1: left promiscuous mode [ 300.394964][T18017] loop8: detected capacity change from 0 to 512 [ 300.405196][T18017] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 300.433750][T18017] EXT4-fs (loop8): 1 truncate cleaned up [ 300.445676][T18017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.467964][ T28] audit: type=1400 audit(1783792674.086:1863): avc: denied { write } for pid=18016 comm="syz.8.5570" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.529015][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.667786][T18031] netlink: 'syz.9.5575': attribute type 1 has an invalid length. [ 300.682521][T18031] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5575'. [ 300.727746][T18037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5577'. [ 300.842342][T18042] 9pnet: p9_errstr2errno: server reported unknown error p [ 300.916134][T18061] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.937298][T18061] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.987743][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5589'. [ 301.003773][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5589'. [ 301.013961][T18067] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5589'. [ 301.025311][T18061] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.035865][T18061] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.088413][T18073] netlink: 'syz.6.5600': attribute type 3 has an invalid length. [ 301.112190][T18073] netlink: 'syz.6.5600': attribute type 4 has an invalid length. [ 301.129129][T18061] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.130849][T18073] netlink: 9067 bytes leftover after parsing attributes in process `syz.6.5600'. [ 301.143600][T18061] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.233097][T18061] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.260184][T18061] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.274748][T18056] loop5: detected capacity change from 0 to 32768 [ 301.311894][T18056] loop5: p1 p3 < > [ 301.368206][ T49] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.394492][ T49] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.429449][ T49] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.450740][T18096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5601'. [ 301.467009][ T49] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.514006][ T49] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.529011][ T49] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.545810][T10291] udevd[10291]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 301.546794][T10236] udevd[10236]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 301.591334][ T49] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.601832][ T49] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.639822][ T28] audit: type=1400 audit(1783792675.266:1864): avc: denied { listen } for pid=18109 comm="syz.9.5607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.792899][ T28] audit: type=1400 audit(1783792675.416:1865): avc: denied { mount } for pid=18128 comm="syz.6.5616" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 302.256801][T18189] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5641'. [ 302.285998][T18191] loop8: detected capacity change from 0 to 512 [ 302.292924][T18191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 302.300269][T18191] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 302.320492][T18191] EXT4-fs (loop8): 1 truncate cleaned up [ 302.327645][T18191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.352635][ T28] audit: type=1400 audit(1783792675.976:1866): avc: denied { write } for pid=18190 comm="syz.8.5642" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.481506][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.538391][T18211] netlink: 6392 bytes leftover after parsing attributes in process `syz.9.5650'. [ 302.548584][T18211] netlink: 6392 bytes leftover after parsing attributes in process `syz.9.5650'. [ 303.461217][T18224] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.468516][T18224] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.476229][T18224] bridge_slave_0: entered allmulticast mode [ 303.483212][T18224] bridge_slave_0: entered promiscuous mode [ 303.490476][T18224] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.497641][T18224] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.505351][T18224] bridge_slave_1: entered allmulticast mode [ 303.512140][T18224] bridge_slave_1: entered promiscuous mode [ 303.542489][T18224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.565192][T18224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.588659][T18224] team0: Port device team_slave_0 added [ 303.595259][T18224] team0: Port device team_slave_1 added [ 303.613031][T18224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.620080][T18224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.646449][T18224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.658084][T18224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.665166][T18224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.699007][T18251] loop4: detected capacity change from 0 to 1764 [ 303.721778][T18224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.787080][T18224] hsr_slave_0: entered promiscuous mode [ 303.799677][T18224] hsr_slave_1: entered promiscuous mode [ 303.812117][T18224] debugfs: 'hsr0' already exists in 'hsr' [ 303.824147][T18224] Cannot create hsr debugfs directory [ 304.177384][ T28] audit: type=1400 audit(1783792677.786:1867): avc: denied { write } for pid=18254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.260193][ T28] audit: type=1400 audit(1783792677.846:1868): avc: denied { write } for pid=18271 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.292425][T18224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.310033][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.326604][T18224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.382001][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.408652][T18224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.426985][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.440315][T18224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.454280][T18224] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.533310][ T28] audit: type=1400 audit(1783792678.156:1869): avc: denied { write } for pid=18273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.635170][ T28] audit: type=1400 audit(1783792678.256:1870): avc: denied { write } for pid=18309 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.753644][T18224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.792334][T18224] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.837272][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.844456][ T5026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.871594][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.878769][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.973113][ T28] audit: type=1400 audit(1783792678.596:1871): avc: denied { write } for pid=18320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.048196][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 305.048212][ T28] audit: type=1400 audit(1783792678.676:1873): avc: denied { write } for pid=18353 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.218000][T18224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.275101][ T28] audit: type=1400 audit(1783792678.896:1874): avc: denied { write } for pid=18363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.342367][ T28] audit: type=1400 audit(1783792678.966:1875): avc: denied { write } for pid=18392 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.370844][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5695'. [ 305.386279][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5695'. [ 305.504463][T18224] veth0_vlan: entered promiscuous mode [ 305.530969][T18224] veth1_vlan: entered promiscuous mode [ 305.592991][T18224] veth0_macvtap: entered promiscuous mode [ 305.625779][T18224] veth1_macvtap: entered promiscuous mode [ 305.640916][ T28] audit: type=1400 audit(1783792679.266:1876): avc: denied { write } for pid=18396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.667103][T18224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.703538][T18224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.725634][ T28] audit: type=1400 audit(1783792679.346:1877): avc: denied { write } for pid=18425 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.748387][ T5026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.757546][ T5026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.789690][ T5026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.826401][ T5026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.033859][ T28] audit: type=1400 audit(1783792679.656:1878): avc: denied { write } for pid=18427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.101746][ T28] audit: type=1400 audit(1783792679.726:1879): avc: denied { write } for pid=18452 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.304714][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'. [ 306.324541][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5712'. [ 306.350175][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5712'. [ 306.360494][T18475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5712'. [ 306.420219][ T28] audit: type=1400 audit(1783792680.036:1880): avc: denied { write } for pid=18458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.450465][T18486] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5717'. [ 306.532078][ T28] audit: type=1400 audit(1783792680.156:1881): avc: denied { write } for pid=18498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.726086][ T28] audit: type=1400 audit(1783792680.346:1882): avc: denied { accept } for pid=18528 comm="syz.8.5731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.899038][T18553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5735'. [ 307.184886][T18579] loop4: detected capacity change from 0 to 512 [ 307.260066][T18579] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 307.295241][T18579] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.5743: corrupted in-inode xattr: e_value size too large [ 307.355380][T18579] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.357960][T18579] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5743: couldn't read orphan inode 15 (err -117) [ 307.368178][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 307.368430][ C0] EXT4-fs (loop4): initial error at time 1783792680: ext4_iget_extra_inode:5180: inode 15 [ 307.369589][ C0] EXT4-fs (loop4): last error at time 1783792680: ext4_iget_extra_inode:5180: inode 15 [ 307.427987][T18579] loop4: lost filesystem error report for type 5 error -117 [ 307.429277][T18579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.554417][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.640893][T18621] netlink: 'syz.0.5751': attribute type 39 has an invalid length. [ 308.024117][T18672] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5761'. [ 308.043124][T18672] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5761'. [ 308.783408][T18691] loop4: detected capacity change from 0 to 512 [ 308.796322][T18691] EXT4-fs (loop4): filesystem is read-only [ 308.803039][T18691] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 308.815128][T18691] EXT4-fs (loop4): failed to initialize system zone (-117) [ 308.823002][T18691] EXT4-fs (loop4): mount failed [ 308.947861][T18703] loop7: detected capacity change from 8 to 512 [ 309.148888][T18716] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5778'. [ 309.237864][ T5757] IPVS: starting estimator thread 0... [ 309.340246][T18725] IPVS: using max 2256 ests per chain, 112800 per kthread [ 309.373694][T18739] xt_hashlimit: size too large, truncated to 1048576 [ 310.047966][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5797'. [ 310.115422][T18760] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 310.351395][T18784] team0: Port device team_slave_0 removed [ 310.942430][T18817] loop4: detected capacity change from 0 to 1024 [ 310.965223][T18817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 311.022148][T18817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.063233][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 311.063251][ T28] audit: type=1400 audit(1783792684.686:1897): avc: denied { append } for pid=18816 comm="syz.4.5820" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 311.168085][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.187885][ T28] audit: type=1400 audit(1783792684.726:1898): avc: denied { write } for pid=18816 comm="syz.4.5820" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.239052][T18829] netlink: 'syz.4.5824': attribute type 1 has an invalid length. [ 311.278957][T18829] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.330684][T18833] bond4: (slave geneve3): making interface the new active one [ 311.372951][T18833] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 311.428221][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.436672][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.478905][ T5024] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.488726][ T5024] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.571918][T18842] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.707548][T18842] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.774144][T18842] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.832362][T18842] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.884820][ T28] audit: type=1400 audit(1783792685.506:1899): avc: denied { write } for pid=3390 comm="kworker/0:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54739 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 311.982069][ T5024] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.011676][ T5024] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.049790][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.068859][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.486022][T18886] netlink: 'syz.0.5859': attribute type 21 has an invalid length. [ 312.504450][T18886] __nla_validate_parse: 2 callbacks suppressed [ 312.504466][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5859'. [ 312.569539][ T5024] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.579407][ T5018] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.588872][ T5018] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.600470][T18886] netlink: 'syz.0.5859': attribute type 21 has an invalid length. [ 312.632700][ T5018] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.657250][T18886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5859'. [ 312.846705][T18907] loop4: detected capacity change from 0 to 512 [ 312.906566][T18907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.951557][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5864'. [ 312.965058][ T28] audit: type=1400 audit(1783792686.586:1900): avc: denied { write } for pid=18902 comm="syz.4.5857" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.991828][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5864'. [ 313.017551][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5864'. [ 313.026785][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5864'. [ 313.091800][T18927] bridge1: entered promiscuous mode [ 313.101560][T18927] bridge1: entered allmulticast mode [ 313.191768][T18937] netlink: 'syz.6.5871': attribute type 1 has an invalid length. [ 313.214285][T18937] netlink: 'syz.6.5871': attribute type 2 has an invalid length. [ 313.228097][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.395883][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.403848][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.411690][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.419578][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.427482][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.435403][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.443421][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.451956][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.459870][T18957] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 313.496311][T18959] SELinux: failed to load policy [ 313.546950][ T28] audit: type=1326 audit(1783792687.166:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.6.5882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 313.613426][ T28] audit: type=1326 audit(1783792687.166:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.6.5882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 313.666181][ T28] audit: type=1326 audit(1783792687.166:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.6.5882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 313.713787][T18979] netlink: 'syz.0.5887': attribute type 14 has an invalid length. [ 313.746699][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5887'. [ 313.751527][ T28] audit: type=1326 audit(1783792687.166:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.6.5882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 313.778400][T18979] netlink: 'syz.0.5887': attribute type 14 has an invalid length. [ 313.814384][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5887'. [ 313.848502][ T28] audit: type=1326 audit(1783792687.166:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.6.5882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 313.888522][ T28] audit: type=1326 audit(1783792687.166:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.6.5882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 314.421249][T19022] netlink: 43 bytes leftover after parsing attributes in process `syz.6.5908'. [ 314.485133][T19023] bridge0: port 3(vlan2) entered blocking state [ 314.497640][T19023] bridge0: port 3(vlan2) entered disabled state [ 314.506227][T19023] vlan2: entered allmulticast mode [ 314.512224][T19023] geneve0: entered allmulticast mode [ 314.530711][T19023] vlan2: entered promiscuous mode [ 314.544635][T19023] geneve0: entered promiscuous mode [ 315.214223][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5923'. [ 315.411655][T19062] bridge2: entered promiscuous mode [ 315.430066][T19062] bridge2: entered allmulticast mode [ 315.588987][T19074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.606580][T19074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.687508][T19072] syzkaller0: entered promiscuous mode [ 315.700924][T19072] syzkaller0: entered allmulticast mode [ 315.903757][T19088] sg_write: data in/out 491520/136 bytes for SCSI command 0x0-- guessing data in; [ 315.903757][T19088] program syz.0.5937 not setting count and/or reply_len properly [ 316.042343][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 316.332897][T19106] netlink: 'syz.6.5945': attribute type 1 has an invalid length. [ 316.356494][T19106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.375926][T19100] loop8: detected capacity change from 0 to 512 [ 316.392923][T19106] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 316.397477][T19100] EXT4-fs: Ignoring removed i_version option [ 316.457892][ T49] net_ratelimit: 45 callbacks suppressed [ 316.457913][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.510636][T19100] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.5952: Unrecognised inode hash code 255 [ 316.528385][T19100] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.5952: Corrupt directory, running e2fsck is recommended [ 316.556117][T19100] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 316.568482][T19100] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.5952: corrupted in-inode xattr: e_name out of bounds [ 316.583511][T19100] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 316.584815][T19100] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5952: couldn't read orphan inode 15 (err -117) [ 316.594306][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 316.594515][ C1] EXT4-fs (loop8): initial error at time 1783792946: ext4_iget_extra_inode:5180: inode 15 [ 316.594915][ C1] EXT4-fs (loop8): last error at time 1783792946: ext4_iget_extra_inode:5180: inode 15 [ 316.638368][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.648584][T19100] loop8: lost filesystem error report for type 5 error -117 [ 316.662266][T19100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.715711][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.840549][T19123] loop8: detected capacity change from 0 to 512 [ 316.951812][T19123] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 316.983204][T19123] EXT4-fs error (device loop8): __ext4_fill_super:5600: inode #2: comm syz.8.5951: iget: special inode unallocated [ 316.996454][T19123] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 316.997866][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 317.014835][ C1] EXT4-fs (loop8): initial error at time 1783792946: __ext4_fill_super:5600: inode 2 [ 317.025605][ C1] EXT4-fs (loop8): last error at time 1783792946: __ext4_fill_super:5600: inode 2 [ 317.040705][T19123] EXT4-fs (loop8): get root inode failed [ 317.047735][T19123] EXT4-fs (loop8): mount failed [ 317.108768][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.117381][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.133225][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.146580][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.715916][T19180] SELinux: Context : is not valid (left unmapped). [ 317.716353][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 317.716396][ T28] audit: type=1400 audit(1783792947.388:1925): avc: denied { mac_admin } for pid=19179 comm="syz.9.5975" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 317.762207][ T28] audit: type=1400 audit(1783792947.408:1926): avc: denied { relabelto } for pid=19179 comm="syz.9.5975" name="cgroup.controllers" dev="cgroup2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 317.818546][ T28] audit: type=1400 audit(1783792947.408:1927): avc: denied { associate } for pid=19179 comm="syz.9.5975" name="cgroup.controllers" dev="cgroup2" ino=4 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon=":" [ 318.077842][ T3843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 318.083780][ T4213] Bluetooth: hci0: command 0x1003 tx timeout [ 318.402358][T19202] netlink: 'syz.4.5985': attribute type 1 has an invalid length. [ 318.434196][T19202] bond5: entered promiscuous mode [ 318.449399][T19202] bond5: entered allmulticast mode [ 318.467281][T19208] loop8: detected capacity change from 0 to 256 [ 318.477199][T19202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.540629][T19212] bridge0: port 3(vlan3) entered blocking state [ 318.547043][T19212] bridge0: port 3(vlan3) entered disabled state [ 318.553663][T19212] vlan3: entered allmulticast mode [ 318.559710][T19212] geneve0: entered allmulticast mode [ 318.565973][T19212] vlan3: entered promiscuous mode [ 318.573000][T19212] geneve0: entered promiscuous mode [ 318.593346][T19214] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.625442][T19214] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.705709][T19214] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.721776][T19214] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.795983][T19214] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.807476][T19214] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.830748][ T5026] Bluetooth: hci0: Frame reassembly failed (-84) [ 318.891654][T19214] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.908071][T19214] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.980458][T19252] __nla_validate_parse: 6 callbacks suppressed [ 318.980484][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6008'. [ 319.022288][ T49] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.030859][ T49] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.041600][ T49] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.060120][ T49] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.091905][ T49] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.100426][ T49] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.109056][ T49] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.125236][ T49] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.304499][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6016'. [ 319.314274][T19271] netlink: 'syz.0.6016': attribute type 10 has an invalid length. [ 319.322479][T19271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6016'. [ 319.335356][T19271] geneve2: entered promiscuous mode [ 319.341003][T19271] geneve2: entered allmulticast mode [ 319.492976][T19276] SELinux: invalid class [ 319.497432][T19276] SELinux: failed to load policy [ 319.681470][ T5757] Process accounting resumed [ 319.844415][ T28] audit: type=1400 audit(1783792949.518:1928): avc: denied { mount } for pid=19294 comm="syz.0.6024" name="/" dev="autofs" ino=56562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 320.240392][T19341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19341 comm=syz.4.6046 [ 320.255516][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6046'. [ 320.481577][ T28] audit: type=1400 audit(1783792950.158:1929): avc: denied { getopt } for pid=19355 comm="syz.0.6052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 320.553718][T19366] loop4: detected capacity change from 0 to 4096 [ 320.573848][T19366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.606877][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.666219][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6058'. [ 320.726260][T19382] tls_set_device_offload: netdev not found [ 320.749041][T19384] netlink: 'syz.6.6063': attribute type 1 has an invalid length. [ 320.766314][T19384] bond2: entered promiscuous mode [ 320.786958][T19384] bond2: entered allmulticast mode [ 320.797886][T19384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.878338][ T4213] Bluetooth: hci0: command 0x1003 tx timeout [ 320.885074][ T3843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 321.245412][T19414] loop4: detected capacity change from 0 to 512 [ 321.269203][T19414] EXT4-fs: Ignoring removed i_version option [ 321.334341][T19414] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.6075: Unrecognised inode hash code 255 [ 321.367077][T19414] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6075: Corrupt directory, running e2fsck is recommended [ 321.438156][T19414] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 321.450836][T19414] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6075: corrupted in-inode xattr: e_name out of bounds [ 321.466409][T19414] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 321.467733][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 321.484422][ C1] EXT4-fs (loop4): initial error at time 1783792951: ext4_iget_extra_inode:5180: inode 15 [ 321.496043][ C1] EXT4-fs (loop4): last error at time 1783792951: ext4_iget_extra_inode:5180: inode 15 [ 321.509281][T19414] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6075: couldn't read orphan inode 15 (err -117) [ 321.522525][T19414] loop4: lost filesystem error report for type 5 error -117 [ 321.533201][T19414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.635708][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.930780][T19444] netlink: 'syz.8.6088': attribute type 10 has an invalid length. [ 321.943672][T19444] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.952156][T19444] bond0: (slave team0): Enslaving as an active interface with an up link [ 321.994176][T19448] netlink: 'syz.6.6090': attribute type 4 has an invalid length. [ 322.114030][T19461] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6097'. [ 322.174600][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6098'. [ 322.397957][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 322.405918][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 322.929251][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6119'. [ 322.941315][T19511] netlink: 'syz.9.6119': attribute type 9 has an invalid length. [ 323.311580][T19539] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6131'. [ 323.322170][T19537] loop8: detected capacity change from 0 to 512 [ 323.333546][T19541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6132'. [ 323.351863][T19537] EXT4-fs (loop8): 1 truncate cleaned up [ 323.376446][T19537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.412922][ T28] audit: type=1400 audit(1783792953.088:1930): avc: denied { write } for pid=19536 comm="syz.8.6130" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.436167][ T28] audit: type=1400 audit(1783792953.088:1931): avc: denied { write } for pid=19536 comm="syz.8.6130" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 324.191416][ T28] audit: type=1400 audit(1783792953.868:1932): avc: denied { read } for pid=19594 comm="syz.0.6148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.832680][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.002053][T19687] bond0: entered promiscuous mode [ 325.025810][T19687] bond_slave_0: entered promiscuous mode [ 325.034875][T19687] bond_slave_1: entered promiscuous mode [ 325.055647][T19687] bond0: left promiscuous mode [ 325.070140][T19687] bond_slave_0: left promiscuous mode [ 325.086010][T19687] bond_slave_1: left promiscuous mode [ 325.094709][T19691] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 325.120454][T19698] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 325.120485][ T5022] bond0: (slave bond_slave_0): interface is now down [ 325.180171][ T5022] bond0: (slave bond_slave_1): interface is now down [ 325.207772][ T5010] bond0: (slave bond_slave_0): interface is now down [ 325.217195][ T5010] bond0: (slave bond_slave_1): interface is now down [ 325.247940][ T5010] bond0: (slave bond_slave_0): interface is now down [ 325.275505][ T5010] bond0: (slave bond_slave_1): interface is now down [ 325.296921][ T5010] bond0: now running without any active interface! [ 325.359956][T19698] infiniband syz1: set down [ 325.364565][T15910] syz1: Port: 1 Link DOWN [ 325.369432][T19698] infiniband syz1: added bond0 [ 325.390160][T19698] RDS/IB: syz1: added [ 325.400094][T19698] smc: adding ib device syz1 with port count 1 [ 325.406451][T19698] smc: ib device syz1 port 1 has no pnetid [ 325.767843][T19718] loop4: detected capacity change from 0 to 1024 [ 325.803308][T19718] EXT4-fs: Ignoring removed bh option [ 325.839338][T19718] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 325.870180][T19718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.943086][ T28] audit: type=1400 audit(1783792955.618:1933): avc: denied { write } for pid=19717 comm="syz.4.6176" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.038825][ T28] audit: type=1400 audit(1783792955.698:1934): avc: denied { write } for pid=19717 comm="syz.4.6176" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.168917][T19732] netlink: 'syz.9.6180': attribute type 21 has an invalid length. [ 326.181979][T19727] syzkaller0: entered promiscuous mode [ 326.186969][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.188569][T19732] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.205550][T19727] syzkaller0: entered allmulticast mode [ 326.385446][T19746] netlink: 'syz.9.6184': attribute type 1 has an invalid length. [ 326.414053][T19746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.097060][T19798] __nla_validate_parse: 2 callbacks suppressed [ 327.097079][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6204'. [ 327.145107][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6204'. [ 327.194124][T19802] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6205'. [ 327.354498][T19815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6212'. [ 328.287216][T19873] bridge2: entered promiscuous mode [ 328.304434][T19873] bridge2: entered allmulticast mode [ 329.666356][T19928] loop8: detected capacity change from 0 to 1024 [ 329.684701][T19928] ext4: Bad value for 'auto_da_alloc' [ 329.717638][T19928] loop8: detected capacity change from 0 to 512 [ 330.027489][T19957] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6273'. [ 330.460670][T19984] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6284'. [ 330.472174][T19984] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6284'. [ 330.806811][ T28] audit: type=1326 audit(1783793216.481:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19992 comm="syz.0.6288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18401dde59 code=0x0 [ 331.163745][T20009] bridge_slave_0: left allmulticast mode [ 331.170692][T20009] bridge_slave_0: left promiscuous mode [ 331.176855][T20009] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.256781][T20009] bridge_slave_1: left allmulticast mode [ 331.269209][T20009] bridge_slave_1: left promiscuous mode [ 331.280952][T20009] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.321313][T20009] bond0: (slave bond_slave_0): Releasing backup interface [ 331.374500][T20009] bond0: (slave bond_slave_1): Releasing backup interface [ 331.422673][T20009] team0: Port device team_slave_1 removed [ 331.442437][T20009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.454003][T20009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.467440][T20009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.475612][T20009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.491728][T20009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 331.902841][T20041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6309'. [ 332.497512][T20069] netlink: 'syz.4.6321': attribute type 12 has an invalid length. [ 332.524813][T20069] netlink: 'syz.4.6321': attribute type 29 has an invalid length. [ 332.540773][T20069] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6321'. [ 333.124727][T20104] Process accounting resumed [ 334.002002][T20128] loop8: detected capacity change from 0 to 512 [ 334.089826][T20128] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 334.145731][T20128] EXT4-fs (loop8): 1 truncate cleaned up [ 334.166103][T20128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.230932][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.615745][T20179] ipip1: entered promiscuous mode [ 334.621151][T20179] ipip1: entered allmulticast mode [ 335.556550][ T28] audit: type=1400 audit(1783793221.231:1936): avc: denied { unmount } for pid=20220 comm="syz.9.6389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 336.010834][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6416'. [ 336.062127][T20269] bond7: entered promiscuous mode [ 336.081296][T20269] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.093784][T20272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.108892][T20272] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 336.133140][T20272] bond7: (slave ip6gre1): Error -95 calling set_mac_address [ 336.248114][T20276] geneve1: entered promiscuous mode [ 336.340440][T20276] geneve1: left promiscuous mode [ 336.449530][T20290] xt_hashlimit: size too large, truncated to 1048576 [ 336.461090][T20290] xt_hashlimit: max too large, truncated to 1048576 [ 336.865553][ T5010] Bluetooth: hci0: Frame reassembly failed (-84) [ 336.991000][T20323] geneve1: entered promiscuous mode [ 337.036140][T20323] geneve1: left promiscuous mode [ 337.300155][T20349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.342628][T20351] loop8: detected capacity change from 0 to 4096 [ 337.351259][T20342] bridge_slave_0: left allmulticast mode [ 337.359876][T20351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.394399][T20342] bridge_slave_0: left promiscuous mode [ 337.412685][T20351] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 337.442013][T20342] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.514608][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.656265][T20366] ALSA: seq fatal error: cannot create timer (-16) [ 338.307217][T20342] bridge_slave_1: left allmulticast mode [ 338.323072][T20342] bridge_slave_1: left promiscuous mode [ 338.336906][T20342] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.357486][T20342] bond0: (slave bond_slave_0): Releasing backup interface [ 338.372514][T20342] bond0: (slave bond_slave_1): Releasing backup interface [ 338.382273][T20342] team0: Port device team_slave_1 removed [ 338.388327][T20342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.396085][T20342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.407098][T20342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 338.769954][ T28] audit: type=1326 audit(1783793224.451:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 338.846361][ T28] audit: type=1326 audit(1783793224.451:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 338.878002][ T3843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 338.910285][ T28] audit: type=1326 audit(1783793224.451:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 338.946403][ T28] audit: type=1326 audit(1783793224.451:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 338.972439][ T28] audit: type=1326 audit(1783793224.481:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 339.025880][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6469'. [ 339.046207][ T28] audit: type=1326 audit(1783793224.481:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 339.117442][ T28] audit: type=1326 audit(1783793224.481:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 339.163129][ T28] audit: type=1326 audit(1783793224.481:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 339.248949][ T28] audit: type=1326 audit(1783793224.481:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 339.314148][ T28] audit: type=1326 audit(1783793224.481:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.6.6466" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f78a855de59 code=0x7ffc0000 [ 339.437279][T20445] netlink: 'syz.0.6479': attribute type 1 has an invalid length. [ 339.716705][T20468] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6489'. [ 339.722279][T20469] loop4: detected capacity change from 0 to 512 [ 339.740004][T20469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 339.792129][T20469] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6487: corrupted in-inode xattr: invalid ea_ino [ 339.807651][T20469] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 339.808119][T20469] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6487: couldn't read orphan inode 15 (err -117) [ 339.829833][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 339.829860][ C1] EXT4-fs (loop4): initial error at time 1783793225: ext4_iget_extra_inode:5180: inode 15 [ 339.829917][ C1] EXT4-fs (loop4): last error at time 1783793225: ext4_iget_extra_inode:5180: inode 15 [ 339.878746][T20469] loop4: lost filesystem error report for type 5 error -117 [ 339.880328][T20469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.930420][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.941319][T20483] netlink: 'syz.0.6495': attribute type 1 has an invalid length. [ 339.945344][T20484] netlink: 26 bytes leftover after parsing attributes in process `syz.8.6493'. [ 340.031601][T20483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.058110][T20483] bond1: (slave gretap1): making interface the new active one [ 340.066778][T20483] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 340.178316][T20493] bond0: (slave syz_tun): Releasing backup interface [ 340.202760][T20493] bond0: (slave team0): Releasing backup interface [ 340.259316][T20493] bridge_slave_0: left allmulticast mode [ 340.271883][T20493] bridge_slave_0: left promiscuous mode [ 340.301225][T20493] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.590110][T20493] bridge_slave_1: left allmulticast mode [ 340.596058][T20493] bridge_slave_1: left promiscuous mode [ 340.602611][T20493] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.614114][T20493] bond0: (slave bond_slave_0): Releasing backup interface [ 340.625950][T20493] bond0: (slave bond_slave_1): Releasing backup interface [ 340.639240][T20493] team0: Port device team_slave_0 removed [ 340.648553][T20493] team0: Port device team_slave_1 removed [ 340.655805][T20493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.663444][T20493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.673138][T20493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.680758][T20493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.717633][T20493] bond3: (slave gretap1): Releasing active interface [ 340.745290][T20500] team0: Mode changed to "loadbalance" [ 341.110291][T20541] cgroup: Unknown subsys name 'pcr' [ 341.806704][T20591] loop4: detected capacity change from 0 to 4096 [ 341.840964][T20591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.882834][T20591] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 341.920717][T20591] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.6538: Failed to acquire dquot type 1 [ 342.032632][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.947399][T20651] SELinux: failed to load policy [ 342.988737][T20654] cgroup: Unknown subsys name 'pcr' [ 343.104186][T20656] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.111569][T20656] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.184244][T20671] netlink: 'syz.8.6568': attribute type 32 has an invalid length. [ 343.275999][T20656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.288791][T20656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.366966][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6575'. [ 343.469582][ T5022] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.482214][ T5022] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.493792][ T5022] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.503360][ T5022] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.519632][ T5022] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.544250][ T5022] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.567068][ T5022] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.582832][ T5022] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.674724][T20705] netlink: 'syz.9.6582': attribute type 1 has an invalid length. [ 343.693072][T20705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 344.419534][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 344.419555][ T28] audit: type=1400 audit(1783793230.101:1970): avc: denied { name_bind } for pid=20727 comm="syz.9.6592" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 344.862739][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6608'. [ 344.891211][T20762] team1: entered promiscuous mode [ 344.903786][T20762] team1: entered allmulticast mode [ 344.916120][T20762] 8021q: adding VLAN 0 to HW filter on device team1 [ 345.040253][T20759] syz.9.6607 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 345.082493][T20759] CPU: 1 UID: 0 PID: 20759 Comm: syz.9.6607 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 345.082566][T20759] Tainted: [W]=WARN [ 345.082573][T20759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.082588][T20759] Call Trace: [ 345.082596][T20759] [ 345.082606][T20759] __dump_stack+0x1d/0x30 [ 345.082644][T20759] dump_stack_lvl+0x95/0xd0 [ 345.082669][T20759] dump_stack+0x15/0x1b [ 345.082687][T20759] dump_header+0x80/0x240 [ 345.082709][T20759] oom_kill_process+0x295/0x350 [ 345.082758][T20759] out_of_memory+0x981/0xbc0 [ 345.082790][T20759] try_charge_memcg+0x621/0xa00 [ 345.082839][T20759] charge_memcg+0x6d/0x120 [ 345.082891][T20759] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 345.082928][T20759] swap_cache_alloc_folio+0x47b/0x5e0 [ 345.082973][T20759] swap_cluster_readahead+0x3d2/0x460 [ 345.083012][T20759] swapin_readahead+0xd8/0x8a0 [ 345.083074][T20759] ? _raw_spin_unlock+0x9/0x30 [ 345.083096][T20759] ? swap_put_entries_cluster+0x49c/0x4c0 [ 345.083212][T20759] ? __entry_text_end+0x11218/0x102179 [ 345.083254][T20759] ? __rcu_read_unlock+0x4e/0x70 [ 345.083341][T20759] ? swap_cache_get_folio+0x1f7/0x200 [ 345.083416][T20759] do_swap_page+0x2a2/0x1ec0 [ 345.083471][T20759] ? __css_rstat_updated+0xbb/0x280 [ 345.083507][T20759] ? __rcu_read_lock+0x36/0x50 [ 345.083540][T20759] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 345.083597][T20759] handle_mm_fault+0xb3c/0x2da0 [ 345.083652][T20759] do_user_addr_fault+0x634/0x1060 [ 345.083693][T20759] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 345.083807][T20759] ? trace_page_fault_user+0x1f/0xa0 [ 345.083837][T20759] exc_page_fault+0x62/0xa0 [ 345.083869][T20759] asm_exc_page_fault+0x26/0x30 [ 345.083895][T20759] RIP: 0033:0x7f98b0bcb7e1 [ 345.083919][T20759] Code: ff e8 23 80 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d be 9e ee 00 e8 03 00 00 48 8d 1d bf a7 3b 00 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 345.083943][T20759] RSP: 002b:00007ffd94d72ef0 EFLAGS: 00010206 [ 345.083963][T20759] RAX: 000000000005438c RBX: 00007f98b0f85fa0 RCX: 0000000000053fc0 [ 345.083975][T20759] RDX: 00000000000003cc RSI: 00007ffd94d72ed0 RDI: 00000000000003e8 [ 345.083989][T20759] RBP: 00007f98b0f87da0 R08: 0000000039f81bd3 R09: 3fffffffffffffff [ 345.084044][T20759] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000005461c [ 345.084057][T20759] R13: 00007f98b0f85fac R14: 0000000000054317 R15: 00007ffd94d72ff0 [ 345.084083][T20759] [ 345.138204][T20759] memory: usage 307200kB, limit 307200kB, failcnt 167 [ 345.418740][T20759] memory+swap: usage 308040kB, limit 9007199254740988kB, failcnt 0 [ 345.440124][T20759] kmem: usage 280988kB, limit 9007199254740988kB, failcnt 0 [ 345.456530][T20759] Memory cgroup stats for /syz9: [ 345.456800][T20759] cache 0 [ 345.476689][T20759] rss 0 [ 345.481640][T20759] shmem 0 [ 345.486072][T20759] mapped_file 0 [ 345.496148][T20759] dirty 0 [ 345.500615][T20759] writeback 0 [ 345.508065][T20759] workingset_refault_anon 2085 [ 345.517195][T20759] workingset_refault_file 0 [ 345.526661][T20759] swap 860160 [ 345.534353][T20759] swapcached 15388672 [ 345.547513][T20759] pgpgin 138635 [ 345.558304][T20759] pgpgout 138635 [ 345.568090][T20759] pgfault 167050 [ 345.575895][T20759] pgmajfault 297 [ 345.583840][T20759] inactive_anon 0 [ 345.593737][T20759] active_anon 0 [ 345.603140][T20759] inactive_file 0 [ 345.610978][T20759] active_file 0 [ 345.618726][T20759] unevictable 0 [ 345.625410][T20759] hierarchical_memory_limit 314572800 [ 345.641636][T20759] hierarchical_memsw_limit 9223372036854771712 [ 345.651693][T20759] total_cache 0 [ 345.656468][T20759] total_rss 0 [ 345.663009][T20759] total_shmem 0 [ 345.666557][T20759] total_mapped_file 0 [ 345.670847][T20759] total_dirty 0 [ 345.674481][T20759] total_writeback 0 [ 345.678547][T20759] total_workingset_refault_anon 2085 [ 345.683897][T20759] total_workingset_refault_file 0 [ 345.689280][T20759] total_swap 860160 [ 345.693187][T20759] total_swapcached 15388672 [ 345.724702][T20759] total_pgpgin 138635 [ 345.731946][T20759] total_pgpgout 138635 [ 345.736229][T20759] total_pgfault 167050 [ 345.740698][T20759] total_pgmajfault 297 [ 345.744926][T20759] total_inactive_anon 0 [ 345.749499][T20759] total_active_anon 0 [ 345.755049][T20759] total_inactive_file 0 [ 345.763902][T20759] total_active_file 0 [ 345.773614][T20759] total_unevictable 0 [ 345.781292][T20759] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.6607,pid=20759,uid=0 [ 345.804822][T20759] Memory cgroup out of memory: Killed process 20759 (syz.9.6607) total-vm:96096kB, anon-rss:1236kB, file-rss:22200kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 346.559561][T20828] netlink: 7 bytes leftover after parsing attributes in process `syz.9.6633'. [ 346.750415][T20837] loop4: detected capacity change from 0 to 164 [ 346.800819][T20837] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 346.811449][T20837] isofs_fill_super: root inode is not a directory. Corrupted media? [ 347.079066][ T28] audit: type=1326 audit(1783793232.761:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20855 comm="syz.9.6646" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98b0cfde59 code=0x0 [ 347.405815][T20859] geneve3: left promiscuous mode [ 347.420996][T20873] loop4: detected capacity change from 0 to 1024 [ 347.435186][T20873] EXT4-fs: Ignoring removed bh option [ 347.483615][T20859] geneve4: left promiscuous mode [ 347.504729][T20859] veth3: left promiscuous mode [ 347.513691][T20873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 347.539243][T20859] bridge1: left promiscuous mode [ 347.565009][T20873] ext4 filesystem being mounted at /1180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.581889][T20859] bond2: left promiscuous mode [ 347.621000][T20859] bridge2: left promiscuous mode [ 347.639197][ T28] audit: type=1400 audit(1783793233.321:1972): avc: denied { write } for pid=20872 comm="syz.4.6652" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 347.667954][T20873] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 3) [ 347.688822][T20859] team1: left promiscuous mode [ 347.709507][ T5024] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.718243][ T5024] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.742729][ T5024] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 33145 - 0 [ 347.754633][T20873] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 347.787760][T20873] EXT4-fs (loop4): This should not happen!! Data will be lost [ 347.787760][T20873] [ 347.796108][ T5024] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.816216][T20881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 347.848042][T20881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 347.853256][ T5024] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.869186][T20881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 347.920980][T20881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 347.933036][ T5024] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 33145 - 0 [ 347.959489][T20881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 347.996767][T20894] erspan0: entered promiscuous mode [ 348.009052][T20881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 348.014285][ T5024] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.065706][ T5024] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.093811][T20881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 348.111306][ T5024] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 33145 - 0 [ 348.147025][ T5024] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.175156][ T5024] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.202312][T20881] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 348.205658][ T5024] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 33145 - 0 [ 348.226764][T20901] loop8: detected capacity change from 0 to 2048 [ 348.233649][T20872] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 3: comm syz.4.6652: lblock 3 mapped to illegal pblock 3 (length 1) [ 348.276106][T20901] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.339116][ T28] audit: type=1400 audit(1783793234.011:1973): avc: denied { write } for pid=20900 comm="syz.8.6661" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 348.363591][T20894] erspan0: left promiscuous mode [ 348.401461][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.417910][ T28] audit: type=1400 audit(1783793234.051:1974): avc: denied { execute } for pid=20900 comm="syz.8.6661" path="/730/file1/memory.events" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 348.503728][ T5022] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 348.553160][ T5022] EXT4-fs (loop4): This should not happen!! Data will be lost [ 348.553160][ T5022] [ 348.604184][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 348.664180][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.550180][T20892] syz.6.6659 (20892) used greatest stack depth: 8640 bytes left [ 349.634629][T15901] kernel write not supported for file bpf-prog (pid: 15901 comm: kworker/1:16) [ 349.738591][T20945] tls_set_device_offload_rx: netdev not found [ 349.850937][ T28] audit: type=1400 audit(1783793235.531:1975): avc: denied { accept } for pid=20950 comm="syz.0.6683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 350.080427][T20854] syz.6.6645 (20854) used greatest stack depth: 8256 bytes left [ 350.486610][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6697'. [ 351.990264][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6722'. [ 351.999617][T21044] loop8: detected capacity change from 0 to 512 [ 352.010679][ T28] audit: type=1400 audit(1783793237.691:1976): avc: denied { write } for pid=21047 comm="syz.0.6721" lport=55777 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 352.013782][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6722'. [ 352.046251][T21044] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 352.120243][T21044] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.6719: invalid indirect mapped block 83886080 (level 1) [ 352.154073][T21044] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 352.156392][T21044] EXT4-fs (loop8): Remounting filesystem read-only [ 352.158072][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 352.158161][ C1] EXT4-fs (loop8): initial error at time 1783793237: ext4_free_branches:1023: inode 16 [ 352.159170][ C1] EXT4-fs (loop8): last error at time 1783793237: ext4_free_branches:1023: inode 16 [ 352.262083][T21044] EXT4-fs (loop8): 1 orphan inode deleted [ 352.285935][T21044] EXT4-fs (loop8): 1 truncate cleaned up [ 352.342942][T21044] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.388153][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.478564][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.486371][ C1] bridge0: topology change detected, propagating [ 352.493464][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.500738][ C1] bridge0: topology change detected, propagating [ 352.654603][T21078] netlink: 'syz.9.6732': attribute type 1 has an invalid length. [ 352.669643][T21078] netlink: 101600 bytes leftover after parsing attributes in process `syz.9.6732'. [ 352.932007][T21073] loop8: detected capacity change from 0 to 512 [ 353.028059][T21073] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 353.056399][T21073] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 353.148351][T21073] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 353.203118][T21073] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 353.212738][T21073] System zones: 0-2, 18-18, 34-35 [ 353.241646][T21073] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.289318][T21103] loop4: detected capacity change from 0 to 1024 [ 353.308836][ T28] audit: type=1400 audit(1783793238.981:1977): avc: denied { write } for pid=21072 comm="syz.8.6730" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.335635][T21073] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6730: bg 0: block 353: padding at end of block bitmap is not set [ 353.356709][T21073] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 353.427336][T21103] EXT4-fs: Ignoring removed bh option [ 353.462041][T21103] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 353.535229][T21103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.573112][ T28] audit: type=1400 audit(1783793239.241:1978): avc: denied { write } for pid=21101 comm="syz.4.6743" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.822974][T11065] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.846655][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.910215][T21112] loop4: detected capacity change from 0 to 128 [ 353.948361][T21112] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.990871][T21112] ext4 filesystem being mounted at /1197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 354.096136][ T28] audit: type=1400 audit(1783793239.771:1979): avc: denied { write } for pid=21111 comm="syz.4.6745" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 354.197446][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.343079][T21144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6761'. [ 354.384190][T21144] xfrm1: entered allmulticast mode [ 354.400866][T21144] ip6gretap1: entered promiscuous mode [ 355.048381][T21188] sctp: [Deprecated]: syz.4.6778 (pid 21188) Use of int in max_burst socket option. [ 355.048381][T21188] Use struct sctp_assoc_value instead [ 355.129393][T15910] IPVS: starting estimator thread 0... [ 355.238899][T21192] IPVS: using max 2256 ests per chain, 112800 per kthread [ 355.365463][T21199] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6783'. [ 355.387199][T21199] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6783'. [ 355.417444][ T5014] IPVS: stop unused estimator thread 0... [ 355.424213][T21199] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6783'. [ 355.449033][T21199] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6783'. [ 355.465646][T21201] loop4: detected capacity change from 0 to 512 [ 355.521888][T21201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.583620][T21201] ext4 filesystem being mounted at /1206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.634560][T21211] netlink: 'syz.9.6787': attribute type 4 has an invalid length. [ 355.664588][ T28] audit: type=1400 audit(1783793241.331:1980): avc: denied { write } for pid=21200 comm="syz.4.6784" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.701125][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.701164][T21213] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6788'. [ 355.722846][T21214] netlink: 'syz.9.6787': attribute type 4 has an invalid length. [ 356.016993][T21189] kexec: Could not allocate control_code_buffer [ 356.205425][T21237] loop8: detected capacity change from 0 to 164 [ 356.285425][T21237] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 356.319617][T21237] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 356.345936][T21237] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 356.477831][T21243] netlink: 200 bytes leftover after parsing attributes in process `syz.8.6799'. [ 356.779529][ T28] audit: type=1400 audit(1783793242.461:1981): avc: denied { remount } for pid=21263 comm="syz.8.6808" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 356.957783][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 357.048038][ T28] audit: type=1400 audit(1783793242.721:1982): avc: denied { listen } for pid=21273 comm="syz.0.6813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.112474][ T28] audit: type=1400 audit(1783793242.751:1983): avc: denied { accept } for pid=21273 comm="syz.0.6813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 357.511227][T21300] loop4: detected capacity change from 0 to 2048 [ 357.551449][T21300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 357.627464][ T28] audit: type=1400 audit(1783793243.301:1984): avc: denied { write } for pid=21296 comm="syz.4.6822" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.808833][ T5022] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 357.839441][ T5022] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1030 with error 28 [ 357.902893][ T5022] EXT4-fs (loop4): This should not happen!! Data will be lost [ 357.902893][ T5022] [ 357.944621][ T5022] EXT4-fs (loop4): Total free blocks count 0 [ 357.971046][ T5022] EXT4-fs (loop4): Free/Dirty block details [ 357.989599][ T5022] EXT4-fs (loop4): free_blocks=2415919104 [ 358.008324][ T5022] EXT4-fs (loop4): dirty_blocks=1744 [ 358.020458][T21320] netlink: 'syz.8.6830': attribute type 4 has an invalid length. [ 358.036234][ T5022] EXT4-fs (loop4): Block reservation details [ 358.057788][T21320] netlink: 'syz.8.6830': attribute type 4 has an invalid length. [ 358.065949][ T5022] EXT4-fs (loop4): i_reserved_data_blocks=109 [ 358.103125][ T5022] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1030 with max blocks 706 with error 28 [ 359.464612][ T3297] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 359.564758][T21353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6839'. [ 359.711695][ T28] audit: type=1400 audit(1783793245.391:1985): avc: denied { setopt } for pid=21360 comm="syz.8.6850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 360.029971][T21391] loop4: detected capacity change from 0 to 164 [ 360.040096][T21398] netlink: 'syz.9.6865': attribute type 4 has an invalid length. [ 360.054004][T21391] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 360.115512][T21391] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 360.161358][T21391] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 360.704612][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6883'. [ 361.269172][T21454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6891'. [ 361.646906][T21471] syzkaller0: entered allmulticast mode [ 362.093191][T21485] loop8: detected capacity change from 0 to 2048 [ 362.129873][T21485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 362.172338][ T28] audit: type=1400 audit(1783793247.851:1986): avc: denied { write } for pid=21483 comm="syz.8.6902" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 362.229610][ T107] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 362.272876][ T107] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 82 with error 28 [ 362.319840][ T107] EXT4-fs (loop8): This should not happen!! Data will be lost [ 362.319840][ T107] [ 362.340167][ T107] EXT4-fs (loop8): Total free blocks count 0 [ 362.354255][ T107] EXT4-fs (loop8): Free/Dirty block details [ 362.366732][ T107] EXT4-fs (loop8): free_blocks=2415919104 [ 362.379099][ T107] EXT4-fs (loop8): dirty_blocks=240 [ 362.396473][ T107] EXT4-fs (loop8): Block reservation details [ 362.414991][ T107] EXT4-fs (loop8): i_reserved_data_blocks=15 [ 362.434768][ T107] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 82 with max blocks 152 with error 28 [ 362.612070][T21505] ================================================================== [ 362.620238][T21505] BUG: KCSAN: data-race in hrtimer_interrupt / print_tickdevice [ 362.628030][T21505] [ 362.630379][T21505] write to 0xffff888237c179e0 of 8 bytes by interrupt on cpu 0: [ 362.638052][T21505] hrtimer_interrupt+0x6b/0x810 [ 362.643001][T21505] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 362.648954][T21505] sysvec_apic_timer_interrupt+0x32/0x80 [ 362.654647][T21505] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.660677][T21505] [ 362.663048][T21505] read to 0xffff888237c179e0 of 8 bytes by task 21505 on cpu 1: [ 362.670884][T21505] print_tickdevice+0x144/0x340 [ 362.675785][T21505] timer_list_show+0x6c/0x170 [ 362.680502][T21505] seq_read_iter+0x5f6/0x8f0 [ 362.685224][T21505] proc_reg_read_iter+0x110/0x180 [ 362.690283][T21505] __io_read+0x44e/0xbd0 [ 362.694557][T21505] io_read+0x4a/0x190 [ 362.698585][T21505] __io_issue_sqe+0xfd/0x2e0 [ 362.703382][T21505] io_issue_sqe+0x1e7/0xb80 [ 362.707942][T21505] io_req_task_submit+0x46/0xa0 [ 362.712836][T21505] tctx_task_work_run+0x3a9/0x500 [ 362.717935][T21505] tctx_task_work+0x3f/0x60 [ 362.722482][T21505] task_work_run+0x130/0x1a0 [ 362.727281][T21505] get_signal+0xdc1/0xf10 [ 362.731684][T21505] arch_do_signal_or_restart+0x96/0x480 [ 362.737361][T21505] exit_to_user_mode_loop+0x15d/0x8c0 [ 362.742803][T21505] do_syscall_64+0x23c/0x3c0 [ 362.747434][T21505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.753355][T21505] [ 362.755784][T21505] value changed: 0x000000546b1c5d1d -> 0x000000546b1eac2e [ 362.762912][T21505] [ 362.765607][T21505] Reported by Kernel Concurrency Sanitizer on: [ 362.771893][T21505] CPU: 1 UID: 0 PID: 21505 Comm: syz.6.6911 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 362.782859][T21505] Tainted: [W]=WARN [ 362.786682][T21505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.796878][T21505] ================================================================== [ 363.013421][T21484] syz.8.6902 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 363.029969][T21484] CPU: 0 UID: 0 PID: 21484 Comm: syz.8.6902 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 363.030006][T21484] Tainted: [W]=WARN [ 363.030015][T21484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.030033][T21484] Call Trace: [ 363.030043][T21484] [ 363.030054][T21484] __dump_stack+0x1d/0x30 [ 363.030087][T21484] dump_stack_lvl+0x95/0xd0 [ 363.030166][T21484] dump_stack+0x15/0x1b [ 363.030187][T21484] dump_header+0x80/0x240 [ 363.030215][T21484] oom_kill_process+0x295/0x350 [ 363.030286][T21484] out_of_memory+0x981/0xbc0 [ 363.030330][T21484] try_charge_memcg+0x621/0xa00 [ 363.030427][T21484] __memcg_kmem_charge_page+0x199/0x3a0 [ 363.030471][T21484] __alloc_frozen_pages_noprof+0x18a/0x350 [ 363.030514][T21484] alloc_pages_mpol+0xa9/0x1d0 [ 363.030592][T21484] alloc_pages_noprof+0x8f/0x140 [ 363.030626][T21484] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 363.030746][T21484] __kvmalloc_node_noprof+0x3a0/0x590 [ 363.030773][T21484] ? futex_hash_allocate+0x192/0x920 [ 363.030799][T21484] ? futex_hash_allocate+0x192/0x920 [ 363.030874][T21484] ? futex_hash_allocate+0x192/0x920 [ 363.030957][T21484] futex_hash_allocate+0x192/0x920 [ 363.031014][T21484] ? cap_task_prctl+0x13f/0x6b0 [ 363.031061][T21484] futex_hash_prctl+0xd8/0xf0 [ 363.031089][T21484] __se_sys_prctl+0x4f4/0x13b0 [ 363.031123][T21484] __x64_sys_prctl+0x67/0x80 [ 363.031148][T21484] x64_sys_call+0x2533/0x3020 [ 363.031188][T21484] do_syscall_64+0x136/0x3c0 [ 363.031314][T21484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.031341][T21484] RIP: 0033:0x7f6dd905de59 [ 363.031364][T21484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.031389][T21484] RSP: 002b:00007f6dd7ab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 363.031443][T21484] RAX: ffffffffffffffda RBX: 00007f6dd92e5fa0 RCX: 00007f6dd905de59 [ 363.031462][T21484] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 363.031475][T21484] RBP: 00007f6dd90f3e6f R08: 0000000000000000 R09: 0000000000000000 [ 363.031488][T21484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.031552][T21484] R13: 00007f6dd92e6038 R14: 00007f6dd92e5fa0 R15: 00007ffe1fc769b8 [ 363.031577][T21484] [ 363.031624][T21484] memory: usage 277300kB, limit 307200kB, failcnt 366 [ 363.333095][T21484] memory+swap: usage 14272kB, limit 9007199254740988kB, failcnt 0 [ 363.357030][T21484] kmem: usage 6184kB, limit 9007199254740988kB, failcnt 0 [ 363.373455][T21484] Memory cgroup stats for /syz8: [ 363.373668][T21484] cache 7864320 [ 363.391457][T21484] rss 106496 [ 363.399176][T21484] shmem 12288 [ 363.403448][T21484] mapped_file 0 [ 363.407507][T21484] dirty 6307840 [ 363.411651][T21484] writeback 0 [ 363.415147][T21484] workingset_refault_anon 2458 [ 363.420281][T21484] workingset_refault_file 7 [ 363.424875][T21484] swap 1871872 [ 363.428413][T21484] swapcached 17305600 [ 363.432424][T21484] pgpgin 192810 [ 363.435890][T21484] pgpgout 190864 [ 363.439517][T21484] pgfault 196621 [ 363.443147][T21484] pgmajfault 318 [ 363.446730][T21484] inactive_anon 49152 [ 363.450801][T21484] active_anon 0 [ 363.454362][T21484] inactive_file 7745536 [ 363.458587][T21484] active_file 69632 [ 363.462414][T21484] unevictable 12288 [ 363.466224][T21484] hierarchical_memory_limit 314572800 [ 363.471689][T21484] hierarchical_memsw_limit 9223372036854771712 [ 363.477986][T21484] total_cache 7864320 [ 363.481982][T21484] total_rss 106496 [ 363.485736][T21484] total_shmem 12288 [ 363.489607][T21484] total_mapped_file 0 [ 363.493633][T21484] total_dirty 6307840 [ 363.497616][T21484] total_writeback 0 [ 363.501526][T21484] total_workingset_refault_anon 2458 [ 363.506831][T21484] total_workingset_refault_file 7 [ 363.511954][T21484] total_swap 1871872 [ 363.515869][T21484] total_swapcached 17305600 [ 363.520901][T21484] total_pgpgin 192810 [ 363.525070][T21484] total_pgpgout 190864 [ 363.529250][T21484] total_pgfault 196621 [ 363.533339][T21484] total_pgmajfault 318 [ 363.537483][T21484] total_inactive_anon 49152 [ 363.542044][T21484] total_active_anon 0 [ 363.546051][T21484] total_inactive_file 7745536 [ 363.550860][T21484] total_active_file 69632 [ 363.555215][T21484] total_unevictable 12288 [ 363.559580][T21484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6902,pid=21483,uid=0 [ 363.574413][T21484] Memory cgroup out of memory: Killed process 21484 (syz.8.6902) total-vm:96360kB, anon-rss:1352kB, file-rss:22548kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 363.625414][T11065] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost