last executing test programs: 1m5.907077914s ago: executing program 4 (id=641): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xe}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x26}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1m5.883496404s ago: executing program 4 (id=642): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000040000000400000015"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) epoll_wait(r1, &(0x7f0000000400)=[{}], 0x1, 0xdb) 1m5.638670959s ago: executing program 4 (id=644): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x43, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1m5.432392504s ago: executing program 4 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 1m5.360930146s ago: executing program 4 (id=649): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x40) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1m5.170640449s ago: executing program 4 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m5.170371619s ago: executing program 32 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m3.024869975s ago: executing program 3 (id=686): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0400980}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x440c2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}}) 1m2.904561697s ago: executing program 3 (id=688): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m2.738575821s ago: executing program 3 (id=689): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) io_setup(0x4, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) 1m2.585094714s ago: executing program 3 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 1m2.547231805s ago: executing program 3 (id=693): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) perf_event_open(&(0x7f0000000040)={0x8, 0x80, 0x9, 0x2, 0x8, 0x7, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x28b6, 0x8, 0x9, 0x6, 0xffffffffffff4437, 0x145d, 0x1, 0x0, 0x9, 0x0, 0x102}, 0x0, 0x40000000001, 0xffffffffffffffff, 0x9) 1m2.31754109s ago: executing program 3 (id=702): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r2, 0xfff, 0x0) 1m2.276268161s ago: executing program 33 (id=702): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r2, 0xfff, 0x0) 1.444856049s ago: executing program 5 (id=1927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000feffffffffffffff0008000740"], 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) 1.341468661s ago: executing program 5 (id=1929): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0x7}, 0x2402, 0x40, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000400)) 1.279194653s ago: executing program 6 (id=1933): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400a4dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) 1.241757733s ago: executing program 6 (id=1935): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.231124883s ago: executing program 5 (id=1936): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.070538187s ago: executing program 6 (id=1937): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 1.039952628s ago: executing program 5 (id=1939): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x48, r2, 0x1, 0x70bd2e, 0x25dddbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20006911}, 0x20004004) 1.035380438s ago: executing program 0 (id=1940): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 943.81615ms ago: executing program 2 (id=1941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) 900.836011ms ago: executing program 5 (id=1942): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x23, 0x2, 0x1) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 777.241373ms ago: executing program 0 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x62213, 0x58091}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x54}}, 0x200008c6) 735.145334ms ago: executing program 0 (id=1944): r0 = socket(0x8000000010, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100080, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000500)="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", 0xfc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) 724.568924ms ago: executing program 2 (id=1945): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000034000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 690.484825ms ago: executing program 2 (id=1946): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0x7}, 0x2402, 0x40, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000400)) 672.538075ms ago: executing program 0 (id=1947): openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 621.165726ms ago: executing program 2 (id=1948): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400a4dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) 588.730117ms ago: executing program 0 (id=1949): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 587.320807ms ago: executing program 2 (id=1959): r0 = socket$inet6(0xa, 0x802, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x40) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 537.068929ms ago: executing program 2 (id=1951): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) sendfile(r1, r0, 0x0, 0x7ffff000) 473.6809ms ago: executing program 0 (id=1952): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r2}) 446.07986ms ago: executing program 1 (id=1953): socket(0x848000000015, 0x805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 349.421772ms ago: executing program 1 (id=1954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x62213, 0x58091}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x54}}, 0x200008c6) 321.317053ms ago: executing program 1 (id=1955): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 218.091005ms ago: executing program 1 (id=1956): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r3, 0x10000, 0x0, 0xe4}, 0x10) 160.741397ms ago: executing program 1 (id=1957): r0 = socket(0x8000000010, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100080, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000500)="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", 0xfc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) 159.809917ms ago: executing program 6 (id=1958): unshare(0x20000600) r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) 118.580797ms ago: executing program 6 (id=1960): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 74.576288ms ago: executing program 1 (id=1970): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 19.943509ms ago: executing program 5 (id=1961): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x4, 0x3, 0x0, 0x11, 0x40, 0xff}, &(0x7f00000001c0)=0x9b) 0s ago: executing program 6 (id=1962): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040086, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback, 0x200}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000b40)=0x228a, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40000, 0x0, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000002240)=""/4089, 0xff9}], 0x1}, 0x2000000}], 0x1, 0x2702, 0x0) kernel console output (not intermixed with test programs): filter on device eth6 [ 69.500962][ T5318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.508145][ T5318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.534475][ T5318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.552979][ T5318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.559274][ T5427] xt_hashlimit: size too large, truncated to 1048576 [ 69.566656][ T5318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.566686][ T5318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.590686][ T5318] hsr_slave_0: entered promiscuous mode [ 69.612058][ T5318] hsr_slave_1: entered promiscuous mode [ 69.614541][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 69.618223][ T5318] debugfs: 'hsr0' already exists in 'hsr' [ 69.632806][ T5318] Cannot create hsr debugfs directory [ 69.752435][ T5318] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 69.772375][ T5318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.787262][ T5318] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 69.797914][ T5318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.806338][ T5318] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 69.827792][ T5318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.860906][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 69.872194][ T5318] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 69.891111][ T5318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.958182][ T5318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.048282][ T5318] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.057720][ T5471] loop1: detected capacity change from 0 to 512 [ 70.066204][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.073304][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.102350][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.109606][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.119530][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.181214][ T5471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.196580][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 70.216097][ T5471] ext4 filesystem being mounted at /128/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.312671][ T5471] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.742: Failed to acquire dquot type 0 [ 70.424208][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.488053][ T5318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.609422][ T5526] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 70.620896][ T5526] bridge2: entered promiscuous mode [ 70.970216][ T5552] loop2: detected capacity change from 0 to 8192 [ 70.989255][ T5552] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.053832][ T5318] veth0_vlan: entered promiscuous mode [ 71.056165][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 71.066113][ T5318] veth1_vlan: entered promiscuous mode [ 71.079755][ T5565] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 71.088937][ T5565] gretap0: entered promiscuous mode [ 71.103742][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 71.107105][ T5318] veth0_macvtap: entered promiscuous mode [ 71.120696][ T5318] veth1_macvtap: entered promiscuous mode [ 71.138249][ T5318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.149819][ T5318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.161160][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.170441][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.180269][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.190118][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.565224][ T5599] loop2: detected capacity change from 0 to 128 [ 71.609332][ T5599] EXT4-fs: Ignoring removed nobh option [ 71.662053][ T5599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.679774][ T5601] loop6: detected capacity change from 0 to 512 [ 71.688900][ T5609] sz1: rxe_newlink: already configured on lo [ 71.750228][ T5599] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.814898][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 71.814913][ T28] audit: type=1400 audit(1782873011.325:525): avc: denied { write } for pid=5598 comm="syz.2.774" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.843939][ T5601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.875605][ T5601] ext4 filesystem being mounted at /6/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.912626][ T5601] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 71.958442][ T5601] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 71.975331][ T5623] loop0: detected capacity change from 0 to 32768 [ 72.005166][ T5601] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.775: Failed to acquire dquot type 0 [ 72.069812][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 72.105750][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.155381][ T5639] loop2: detected capacity change from 0 to 1024 [ 72.177396][ T5639] EXT4-fs: inline encryption not supported [ 72.211344][ T5639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.251861][ T5648] netlink: 'syz.5.797': attribute type 11 has an invalid length. [ 72.270837][ T28] audit: type=1400 audit(1782873011.795:526): avc: denied { write } for pid=5637 comm="syz.2.792" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.289405][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'. [ 72.307000][ T28] audit: type=1400 audit(1782873011.795:527): avc: denied { write } for pid=5637 comm="syz.2.792" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.329665][ T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.339551][ T5649] loop6: detected capacity change from 0 to 8192 [ 72.340750][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.361308][ T49] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.373285][ T5648] netlink: 'syz.5.797': attribute type 11 has an invalid length. [ 72.376614][ T28] audit: type=1400 audit(1782873011.795:528): avc: denied { write } for pid=5637 comm="syz.2.792" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.387231][ T5648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'. [ 72.404720][ T28] audit: type=1400 audit(1782873011.795:529): avc: denied { unlink } for pid=5637 comm="syz.2.792" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.434887][ T28] audit: type=1400 audit(1782873011.795:530): avc: denied { rename } for pid=5637 comm="syz.2.792" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.459818][ T49] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.485959][ T49] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.569918][ T5654] loop6: detected capacity change from 0 to 4096 [ 72.588987][ T5654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.616045][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.685847][ T5666] loop5: detected capacity change from 0 to 512 [ 72.718629][ T5666] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.741476][ T5666] EXT4-fs (loop5): 1 truncate cleaned up [ 72.781439][ T5666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.837826][ T28] audit: type=1400 audit(1782873012.365:531): avc: denied { write } for pid=5665 comm="syz.5.804" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.866635][ T5666] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.804: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 72.909442][ T5666] EXT4-fs (loop5): Remounting filesystem read-only [ 72.916056][ T28] audit: type=1400 audit(1782873012.385:532): avc: denied { write } for pid=5665 comm="syz.5.804" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.968086][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.323253][ T5705] syzkaller1: entered promiscuous mode [ 73.329150][ T5705] syzkaller1: entered allmulticast mode [ 73.405734][ T3387] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.440488][ T3387] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.686992][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.687010][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 73.694457][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.833664][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.832'. [ 73.868170][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.882365][ T5725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.974937][ T3425] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.984741][ T3425] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.014217][ T3425] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.038016][ T3425] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.080568][ T5741] lo speed is unknown, defaulting to 1000 [ 74.425810][ T5772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.849'. [ 74.442431][ T5772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.849'. [ 75.269831][ T5806] set_capacity_and_notify: 1 callbacks suppressed [ 75.269879][ T5806] loop1: detected capacity change from 0 to 512 [ 75.285815][ T5806] EXT4-fs: Ignoring removed orlov option [ 75.292058][ T5806] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.310323][ T5806] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.863: corrupted in-inode xattr: e_value size too large [ 75.328172][ T5806] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.329848][ T5806] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.863: couldn't read orphan inode 15 (err -117) [ 75.339055][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 75.339094][ C0] EXT4-fs (loop1): initial error at time 1782873014: ext4_iget_extra_inode:5180: inode 15 [ 75.339139][ C0] EXT4-fs (loop1): last error at time 1782873014: ext4_iget_extra_inode:5180: inode 15 [ 75.378634][ T5806] loop1: lost filesystem error report for type 5 error -117 [ 75.379700][ T5806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.466032][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.519693][ T5813] 9pnet: p9_errstr2errno: server reported unknown error p [ 75.680413][ T5830] netlink: 'syz.5.874': attribute type 3 has an invalid length. [ 75.691444][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.699621][ T5830] netlink: 'syz.5.874': attribute type 1 has an invalid length. [ 75.707892][ T5830] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.874'. [ 75.710447][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.745755][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.758300][ T4407] Bluetooth: hci0: command 0x1003 tx timeout [ 75.764468][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.800503][ T5834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.876'. [ 75.835565][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.860917][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.873977][ T5837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.876'. [ 75.897405][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.908215][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.935381][ T5828] veth1_vlan: left promiscuous mode [ 75.946919][ T5828] veth0_vlan: left promiscuous mode [ 75.963945][ T5828] veth0_vlan: entered promiscuous mode [ 75.973992][ T5828] veth1_vlan: entered promiscuous mode [ 75.988119][ T5828] veth1_macvtap: left promiscuous mode [ 75.995477][ T5828] veth0_macvtap: left promiscuous mode [ 76.002519][ T5828] veth0_macvtap: entered promiscuous mode [ 76.020762][ T5828] veth1_macvtap: entered promiscuous mode [ 76.041538][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.050900][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.060770][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.071350][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.105875][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.112994][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.122613][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.129780][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.183764][ T3425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.192655][ T3425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.211844][ T3425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.242959][ T3425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.385341][ T5804] kexec: Could not allocate control_code_buffer [ 76.452286][ T5867] loop2: detected capacity change from 0 to 128 [ 76.860323][ T5907] loop6: detected capacity change from 0 to 1024 [ 76.898370][ T5913] loop5: detected capacity change from 0 to 512 [ 76.908951][ T5907] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 76.917725][ T5913] EXT4-fs: Invalid want_extra_isize 1969 [ 76.959814][ T5907] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 76.993029][ T5907] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 77.015072][ T5907] EXT4-fs (loop6): filesystem has both journal inode and journal device! [ 77.228248][ T5933] loop6: detected capacity change from 0 to 512 [ 77.263549][ T5933] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 77.300383][ T5924] loop5: detected capacity change from 0 to 4096 [ 77.316479][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 77.331417][ T28] audit: type=1400 audit(1782873016.835:549): avc: denied { write } for pid=5927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.363413][ T5933] EXT4-fs (loop6): 1 truncate cleaned up [ 77.388629][ T5924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.411590][ T5933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.453098][ T28] audit: type=1400 audit(1782873016.885:550): avc: denied { write } for pid=5943 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.475390][ T28] audit: type=1400 audit(1782873016.965:551): avc: denied { write } for pid=5923 comm="syz.5.914" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.497310][ T28] audit: type=1400 audit(1782873016.965:552): avc: denied { read write } for pid=5923 comm="syz.5.914" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.520184][ T28] audit: type=1400 audit(1782873016.965:553): avc: denied { open } for pid=5923 comm="syz.5.914" path="/63/file2/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.534003][ T5914] loop0: detected capacity change from 0 to 32768 [ 77.578965][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.619012][ T5914] loop0: p1 p3 < > [ 77.629299][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.681852][ T28] audit: type=1400 audit(1782873017.205:554): avc: denied { getopt } for pid=5953 comm="syz.6.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.716090][ T5122] udevd[5122]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 77.739189][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 78.097453][ T28] audit: type=1400 audit(1782873017.615:555): avc: denied { write } for pid=5955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.151421][ T28] audit: type=1400 audit(1782873017.675:556): avc: denied { write } for pid=5966 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.612598][ T28] audit: type=1400 audit(1782873018.135:557): avc: denied { write } for pid=5969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.659423][ T28] audit: type=1400 audit(1782873018.185:558): avc: denied { write } for pid=5980 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.143447][ T5986] loop0: detected capacity change from 0 to 512 [ 79.154872][ T5986] EXT4-fs: Ignoring removed nobh option [ 79.164693][ T5986] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.200141][ T5986] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.215341][ T5986] EXT4-fs (loop0): 1 truncate cleaned up [ 79.244438][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.290009][ T6004] netlink: 'syz.6.928': attribute type 9 has an invalid length. [ 79.302694][ T6004] netlink: 371 bytes leftover after parsing attributes in process `syz.6.928'. [ 79.305029][ T5986] EXT4-fs (loop0): shut down requested (2) [ 79.395802][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.461543][ T6014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.933'. [ 79.967353][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 79.987098][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.947'. [ 80.008220][ T6044] geneve3: entered promiscuous mode [ 80.013483][ T6044] geneve3: entered allmulticast mode [ 80.071134][ T5926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.949817][ T6139] loop6: detected capacity change from 0 to 1024 [ 80.969099][ T6139] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.989999][ T6139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.026579][ T6139] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.055727][ T6139] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.977: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 81.083262][ T6139] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 81.084915][ T6139] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.977: couldn't read orphan inode 11 (err -117) [ 81.094152][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 81.094167][ C1] EXT4-fs (loop6): initial error at time 1782873020: ext4_ext_check_inode:521: inode 11 [ 81.094196][ C1] EXT4-fs (loop6): last error at time 1782873020: ext4_ext_check_inode:521: inode 11 [ 81.135518][ T6139] loop6: lost filesystem error report for type 5 error -117 [ 81.136052][ T6139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.359978][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.376188][ T6151] syzkaller0: entered promiscuous mode [ 81.417959][ T6155] loop0: detected capacity change from 0 to 512 [ 81.427473][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811c3d9400: rx timeout, send abort [ 81.430228][ T6155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.461142][ T6155] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.984: bad orphan inode 131083 [ 81.484620][ T6155] loop0: lost filesystem error report for type 5 error -117 [ 81.486151][ T6155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.647315][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.804254][ T6208] loop0: detected capacity change from 0 to 512 [ 81.811844][ T6208] EXT4-fs: Ignoring removed nobh option [ 81.826719][ T6208] ------------[ cut here ]------------ [ 81.832199][ T6208] EA inode 11 i_nlink=1026 [ 81.832221][ T6208] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.0.992/6208 [ 81.848062][ T6208] Modules linked in: [ 81.851998][ T6208] CPU: 0 UID: 0 PID: 6208 Comm: syz.0.992 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.861399][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.872127][ T6208] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 81.878827][ T6208] Code: 36 d2 96 ff 49 8d 7e 40 4c 8d 2d 0b 8d 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 41 1a d9 03 90 90 90 90 90 90 90 [ 81.898834][ T6208] RSP: 0018:ffffc900092ab7f8 EFLAGS: 00010246 [ 81.904953][ T6208] RAX: ffff888104af0b30 RBX: ffff888107340180 RCX: ffffffff81c2a506 [ 81.913063][ T6208] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3200 [ 81.921167][ T6208] RBP: 000000000000000b R08: 0001888107340133 R09: 0000000000000000 [ 81.927522][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811d2aec00: rx timeout, send abort [ 81.929962][ T6208] R10: ffffc900092ab728 R11: 0001c900092ab728 R12: ffff888107340130 [ 81.937549][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811c3d9400: abort rx timeout. Force session deactivation [ 81.945417][ T6208] R13: ffffffff871d3200 R14: ffff8881073400e8 R15: 0000000000000001 [ 81.963975][ T6208] FS: 00007f6638e176c0(0000) GS:ffff8882ae8d1000(0000) knlGS:0000000000000000 [ 81.972939][ T6208] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.979555][ T6208] CR2: 0000001b30c21ff8 CR3: 000000011bdf8000 CR4: 00000000003506f0 [ 81.988207][ T6208] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.996214][ T6208] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 82.004467][ T6208] Call Trace: [ 82.008010][ T6208] [ 82.011089][ T6208] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 82.017679][ T6208] ext4_xattr_delete_inode+0x6b5/0x790 [ 82.023181][ T6208] ext4_evict_inode+0xb18/0xdf0 [ 82.028065][ T6208] ? __pfx_ext4_evict_inode+0x10/0x10 [ 82.033520][ T6208] evict+0x2a5/0x510 [ 82.037457][ T6208] iput+0x430/0x5a0 [ 82.041324][ T6208] ext4_process_orphan+0x1a4/0x1c0 [ 82.047140][ T6208] ext4_orphan_cleanup+0x6a6/0xa10 [ 82.052288][ T6208] ? ext4_register_li_request+0x14c/0x440 [ 82.058107][ T6208] ext4_fill_super+0x33ab/0x3760 [ 82.063121][ T6208] ? set_blocksize+0x14c/0x270 [ 82.067890][ T6208] ? __pfx_ext4_fill_super+0x10/0x10 [ 82.073239][ T6208] get_tree_bdev_flags+0x291/0x300 [ 82.078992][ T6208] ? __pfx_ext4_fill_super+0x10/0x10 [ 82.084385][ T6208] get_tree_bdev+0x1f/0x30 [ 82.088882][ T6208] ext4_get_tree+0x1c/0x30 [ 82.093549][ T6208] vfs_get_tree+0x57/0x1d0 [ 82.098120][ T6208] do_new_mount+0x288/0x8d0 [ 82.102686][ T6208] path_mount+0x4ad/0xb90 [ 82.107649][ T6208] __se_sys_mount+0x28c/0x2e0 [ 82.112417][ T6208] __x64_sys_mount+0x67/0x80 [ 82.117151][ T6208] x64_sys_call+0x2d61/0x3020 [ 82.121984][ T6208] do_syscall_64+0x136/0x3c0 [ 82.126683][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.132630][ T6208] RIP: 0033:0x7f663a3bf0ca [ 82.137793][ T6208] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.158018][ T6208] RSP: 002b:00007f6638e16e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.167477][ T6208] RAX: ffffffffffffffda RBX: 00007f6638e16ee0 RCX: 00007f663a3bf0ca [ 82.175548][ T6208] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f6638e16ea0 [ 82.183657][ T6208] RBP: 0000200000000180 R08: 00007f6638e16ee0 R09: 0000000000800718 [ 82.191670][ T6208] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 82.200266][ T6208] R13: 00007f6638e16ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 82.208306][ T6208] [ 82.211323][ T6208] ---[ end trace 0000000000000000 ]--- [ 82.218789][ T6208] EXT4-fs (loop0): 1 orphan inode deleted [ 82.224969][ T6208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.253512][ T6228] loop2: detected capacity change from 0 to 128 [ 82.284624][ T6228] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.298545][ T6228] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.317484][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 82.317496][ T28] audit: type=1400 audit(1782873021.845:584): avc: denied { write } for pid=6223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.348903][ T28] audit: type=1400 audit(1782873021.845:585): avc: denied { write } for pid=6227 comm="syz.2.999" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.370430][ T28] audit: type=1400 audit(1782873021.845:586): avc: denied { create } for pid=6227 comm="syz.2.999" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 82.414705][ T28] audit: type=1400 audit(1782873021.845:587): avc: denied { write } for pid=6227 comm="syz.2.999" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.415570][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.444099][ T28] audit: type=1400 audit(1782873021.845:588): avc: denied { write } for pid=6227 comm="syz.2.999" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.445225][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811d2aec00: abort rx timeout. Force session deactivation [ 82.467306][ T28] audit: type=1400 audit(1782873021.845:589): avc: denied { write } for pid=6227 comm="syz.2.999" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.500409][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.513949][ T28] audit: type=1400 audit(1782873021.845:590): avc: denied { write } for pid=6227 comm="syz.2.999" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.537840][ T28] audit: type=1400 audit(1782873021.845:591): avc: denied { write } for pid=6227 comm="syz.2.999" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.561451][ T28] audit: type=1400 audit(1782873021.965:592): avc: denied { write } for pid=6241 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.653057][ T6255] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1005'. [ 82.653289][ T28] audit: type=1400 audit(1782873022.135:593): avc: denied { tracepoint } for pid=6251 comm="syz.0.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 82.710039][ T6259] loop5: detected capacity change from 0 to 512 [ 82.723264][ T6264] loop1: detected capacity change from 0 to 512 [ 82.728802][ T6259] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.737004][ T6264] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.758635][ T6264] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1009: iget: bad i_size value: 38620345925642 [ 82.780566][ T6264] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.782306][ T6264] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1009: couldn't read orphan inode 15 (err -117) [ 82.791522][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 82.791545][ C0] EXT4-fs (loop1): initial error at time 1782873022: ext4_orphan_get:1399: inode 15 [ 82.791569][ C0] EXT4-fs (loop1): last error at time 1782873022: ext4_orphan_get:1399: inode 15 [ 82.833511][ T6264] loop1: lost filesystem error report for type 5 error -117 [ 82.835293][ T6264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.858427][ T6259] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 82.869494][ T6264] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1009: bg 0: block 5: invalid block bitmap [ 82.887391][ T6275] loop6: detected capacity change from 0 to 256 [ 82.893861][ T6264] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 82.906130][ T6259] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 82.926839][ T6259] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.934327][ T6275] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.944947][ T6264] EXT4-fs (loop1): This should not happen!! Data will be lost [ 82.944947][ T6264] [ 82.959931][ T6259] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1008: Invalid block bitmap block 0 in block_group 0 [ 82.990606][ T6264] EXT4-fs (loop1): Total free blocks count 0 [ 82.998569][ T6259] loop5: lost filesystem error report for type 5 error -117 [ 82.998913][ T6259] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1008: Invalid block bitmap block 0 in block_group 0 [ 83.019603][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 83.019623][ C0] EXT4-fs (loop5): last error at time 1782873022: ext4_read_block_bitmap_nowait:483 [ 83.036649][ T6264] EXT4-fs (loop1): Free/Dirty block details [ 83.042898][ T6264] EXT4-fs (loop1): free_blocks=0 [ 83.048151][ T6264] EXT4-fs (loop1): dirty_blocks=1 [ 83.054357][ T6259] loop5: lost filesystem error report for type 5 error -117 [ 83.054825][ T6259] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1008: Invalid block bitmap block 0 in block_group 0 [ 83.056869][ T6264] EXT4-fs (loop1): Block reservation details [ 83.071965][ T6259] loop5: lost filesystem error report for type 5 error -117 [ 83.086659][ T6264] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 83.100584][ T6259] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1008: Failed to acquire dquot type 1 [ 83.121233][ T6259] loop5: lost filesystem error report for type 5 error -28 [ 83.124525][ T6259] EXT4-fs (loop5): 1 orphan inode deleted [ 83.124656][ T6264] syz.1.1009 (6264) used greatest stack depth: 9592 bytes left [ 83.139226][ T3425] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 83.160099][ T3425] loop5: lost filesystem error report for type 5 error -117 [ 83.161774][ T6259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.183448][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 83.205263][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.261595][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.303004][ T6285] loop6: detected capacity change from 0 to 8 [ 83.340705][ T6289] lo speed is unknown, defaulting to 1000 [ 83.347356][ T6285] loop6: detected capacity change from 8 to 7 [ 83.355602][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.364804][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.373817][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.383012][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.436607][ T6290] loop6: detected capacity change from 7 to 0 [ 83.442999][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 83.452197][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 83.460489][ T6285] loop6: unable to read partition table [ 83.466282][ T6285] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 83.466282][ T6285] 咁 HID v0.00 Device [syz1] on syz0 [ 89.434864][ T6676] ip_vti0: entered promiscuous mode [ 89.607869][ T6698] Invalid argument reading file caps for ./file0 [ 89.608905][ T28] audit: type=1400 audit(1782873029.135:657): avc: denied { execute_no_trans } for pid=6697 comm="syz.5.1195" path="/123/file0" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.664641][ T28] audit: type=1400 audit(1782873029.175:658): avc: denied { create } for pid=6699 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.747438][ T6704] ip_vti0: entered promiscuous mode [ 90.282548][ T6709] loop2: detected capacity change from 0 to 1024 [ 90.285969][ T6713] __nla_validate_parse: 2 callbacks suppressed [ 90.285984][ T6713] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1210'. [ 90.306745][ T6709] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 90.328620][ T28] audit: type=1400 audit(1782873029.855:659): avc: denied { watch } for pid=6716 comm="syz.5.1203" path="/proc/276" dev="proc" ino=15667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 90.357055][ T6709] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.1201: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.400567][ T6709] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.400681][ T6709] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.1201: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.409818][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 90.409840][ C0] EXT4-fs (loop2): initial error at time 1782873029: ext4_map_blocks:791: inode 3: block 2 [ 90.409876][ C0] EXT4-fs (loop2): last error at time 1782873029: ext4_map_blocks:791: inode 3: block 2 [ 90.475198][ T6722] lo speed is unknown, defaulting to 1000 [ 90.485587][ T6709] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.485720][ T6709] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1201: Failed to acquire dquot type 0 [ 90.507706][ T6709] loop2: lost filesystem error report for type 5 error -117 [ 90.507826][ T6709] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 90.537873][ T6709] loop2: lost filesystem error report for type 5 error -117 [ 90.538031][ T6709] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.1201: mark_inode_dirty error [ 90.576720][ T6709] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.578945][ T6709] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 90.601220][ T6709] EXT4-fs (loop2): 1 orphan inode deleted [ 90.607712][ T6709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.621278][ T310] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.635715][ T310] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.635868][ T310] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 0 [ 90.775935][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.791426][ T3299] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 90.810945][ T3299] loop2: lost filesystem error report for type 5 error -117 [ 90.818100][ T3299] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 90.834870][ T3299] loop2: lost filesystem error report for type 5 error -117 [ 90.835232][ T3299] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 90.870042][ T3299] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 90.875880][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1215'. [ 90.901004][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1215'. [ 90.916712][ T905] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 90.926215][ T905] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.365566][ T6757] loop5: detected capacity change from 0 to 512 [ 91.375570][ T6757] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1220: iget: bad i_size value: 38620345925642 [ 91.396521][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 91.397627][ T6757] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1220: couldn't read orphan inode 15 (err -117) [ 91.402973][ C0] EXT4-fs (loop5): initial error at time 1782873030: ext4_orphan_get:1399: inode 15 [ 91.424201][ C0] EXT4-fs (loop5): last error at time 1782873030: ext4_orphan_get:1399: inode 15 [ 91.426051][ T6757] loop5: lost filesystem error report for type 5 error -117 [ 91.434677][ T6757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.520012][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.557250][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.564742][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.666021][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.680230][ T6764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.859987][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.871036][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.885028][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.897079][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.918197][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.927536][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.940142][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.950386][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.113825][ T6817] loop2: detected capacity change from 0 to 512 [ 92.121674][ T6817] EXT4-fs: Ignoring removed orlov option [ 92.128270][ T6817] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.140048][ T6817] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1236: corrupted in-inode xattr: e_value size too large [ 92.168344][ T6817] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1236: couldn't read orphan inode 15 (err -117) [ 92.180267][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 92.180304][ C1] EXT4-fs (loop2): initial error at time 1782873031: ext4_iget_extra_inode:5180: inode 15 [ 92.180368][ C1] EXT4-fs (loop2): last error at time 1782873031: ext4_iget_extra_inode:5180: inode 15 [ 92.208468][ T6817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.263738][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.546639][ T6837] tls_set_device_offload: netdev not found [ 93.142925][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.169771][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.201472][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.217475][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.305452][ T6862] loop5: detected capacity change from 0 to 1024 [ 93.321713][ T6862] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 93.348746][ T6862] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 93.367972][ T6862] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 93.391863][ T6862] EXT4-fs (loop5): filesystem has both journal inode and journal device! [ 93.414528][ T6868] Invalid argument reading file caps for ./file0 [ 93.564246][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 93.610669][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.618106][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.710149][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.748843][ T6873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.132998][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 94.133012][ T28] audit: type=1400 audit(1782873033.655:677): avc: denied { sys_module } for pid=6890 comm="syz.0.1267" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.358204][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.370195][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.398384][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.430974][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.483176][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.498166][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.519138][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.531948][ T6899] loop5: detected capacity change from 0 to 256 [ 94.547798][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.598603][ T6905] Invalid argument reading file caps for ./file0 [ 94.615055][ T6903] loop0: detected capacity change from 0 to 1024 [ 94.667420][ T6903] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 94.718549][ T6903] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 94.757395][ T6903] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.787305][ T6903] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 95.470766][ T6935] loop2: detected capacity change from 0 to 32768 [ 95.498248][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1284'. [ 95.520505][ T6935] loop2: p1 p3 < > [ 95.549112][ T310] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 95.570242][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 95.594551][ T6951] loop1: detected capacity change from 0 to 256 [ 95.595636][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1286'. [ 95.602489][ T4407] Bluetooth: hci0: command 0x1003 tx timeout [ 95.615843][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.637526][ T6949] geneve2: entered promiscuous mode [ 95.643028][ T6949] geneve2: entered allmulticast mode [ 95.723380][ T6959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1304'. [ 95.731515][ T5122] udevd[5122]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 95.743455][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 95.768395][ T6959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1304'. [ 95.842253][ T6970] netlink: 'syz.0.1297': attribute type 9 has an invalid length. [ 95.850704][ T6970] netlink: 371 bytes leftover after parsing attributes in process `syz.0.1297'. [ 95.914098][ T6979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1301'. [ 96.218366][ T28] audit: type=1326 audit(1782873035.745:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.267744][ T28] audit: type=1326 audit(1782873035.745:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.293602][ T28] audit: type=1326 audit(1782873035.745:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.337745][ T28] audit: type=1326 audit(1782873035.745:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.363418][ T28] audit: type=1326 audit(1782873035.745:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.389192][ T28] audit: type=1326 audit(1782873035.775:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.414931][ T28] audit: type=1326 audit(1782873035.775:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.440621][ T28] audit: type=1326 audit(1782873035.805:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.476010][ T7008] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1314'. [ 96.495487][ T7010] loop1: detected capacity change from 0 to 1024 [ 96.502248][ T7010] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.514363][ T28] audit: type=1326 audit(1782873035.805:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6994 comm="syz.0.1319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f663a3bde59 code=0x7ffc0000 [ 96.541017][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1314'. [ 96.550522][ T7010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.563184][ T7010] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.577362][ T7010] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.1313: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 96.599886][ T7010] fserror_report: 2 callbacks suppressed [ 96.599901][ T7010] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 96.606524][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 96.622094][ C1] EXT4-fs (loop1): initial error at time 1782873036: ext4_ext_check_inode:521: inode 11 [ 96.631839][ C1] EXT4-fs (loop1): last error at time 1782873036: ext4_ext_check_inode:521: inode 11 [ 96.671589][ T7010] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1313: couldn't read orphan inode 11 (err -117) [ 96.707285][ T7010] fserror_report: 1 callbacks suppressed [ 96.707298][ T7010] loop1: lost filesystem error report for type 5 error -117 [ 96.901917][ T7023] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1318'. [ 97.158810][ T7048] rdma_rxe: rxe_newlink: failed to add lo [ 97.262459][ T7046] lo speed is unknown, defaulting to 1000 [ 97.744133][ T7061] sctp: [Deprecated]: syz.6.1334 (pid 7061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.744133][ T7061] Use struct sctp_sack_info instead [ 97.977641][ T7078] rdma_rxe: rxe_newlink: failed to add lo [ 98.604613][ T7102] sctp: [Deprecated]: syz.1.1360 (pid 7102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.604613][ T7102] Use struct sctp_sack_info instead [ 99.301123][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 99.301136][ T28] audit: type=1400 audit(1782873038.825:688): avc: denied { watch_reads } for pid=7113 comm="syz.2.1354" path="/proc/655" dev="proc" ino=16966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 99.376240][ T7116] rdma_rxe: rxe_newlink: failed to add lo [ 99.613241][ T7128] loop2: detected capacity change from 0 to 512 [ 99.634110][ T7130] loop1: detected capacity change from 0 to 512 [ 99.652188][ T7128] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.669431][ T7130] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1364: corrupted in-inode xattr: invalid ea_ino [ 99.687162][ T7130] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.689360][ T7130] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1364: couldn't read orphan inode 15 (err -117) [ 99.698548][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 99.698579][ C1] EXT4-fs (loop1): initial error at time 1782873039: ext4_iget_extra_inode:5180: inode 15 [ 99.698604][ C1] EXT4-fs (loop1): last error at time 1782873039: ext4_iget_extra_inode:5180: inode 15 [ 99.745749][ T7128] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1363: bad orphan inode 131083 [ 99.753458][ T7130] loop1: lost filesystem error report for type 5 error -117 [ 99.762642][ T7130] EXT4-fs mount: 2 callbacks suppressed [ 99.762672][ T7130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.769900][ T7128] loop2: lost filesystem error report for type 5 error -117 [ 99.816113][ T28] audit: type=1400 audit(1782873039.335:689): avc: denied { write } for pid=7129 comm="syz.1.1364" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.851682][ T7128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.885853][ T7136] loop6: detected capacity change from 0 to 512 [ 99.905433][ T28] audit: type=1400 audit(1782873039.395:690): avc: denied { write } for pid=7127 comm="syz.2.1363" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.930128][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.948548][ T7136] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.982200][ T28] audit: type=1400 audit(1782873039.495:691): avc: denied { write } for pid=7135 comm="syz.6.1366" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.013864][ T7139] loop2: detected capacity change from 0 to 256 [ 100.025702][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.039082][ T7139] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.062316][ T28] audit: type=1400 audit(1782873039.495:692): avc: denied { append } for pid=7135 comm="syz.6.1366" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.144427][ T28] audit: type=1400 audit(1782873039.665:693): avc: denied { ioctl } for pid=7141 comm="syz.0.1368" path="socket:[17012]" dev="sockfs" ino=17012 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.172410][ T7142] rdma_rxe: rxe_newlink: failed to add lo [ 100.184150][ T28] audit: type=1400 audit(1782873039.695:694): avc: denied { connect } for pid=7141 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.248124][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.292698][ T7153] loop1: detected capacity change from 0 to 512 [ 100.299946][ T7153] EXT4-fs: Ignoring removed mblk_io_submit option [ 100.308705][ T7153] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 100.322827][ T7153] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 100.331535][ T7153] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.352177][ T7153] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1371: Invalid block bitmap block 0 in block_group 0 [ 100.368938][ T7153] loop1: lost filesystem error report for type 5 error -117 [ 100.369191][ T7153] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1371: Invalid block bitmap block 0 in block_group 0 [ 100.376654][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 100.376678][ C0] EXT4-fs (loop1): last error at time 1782873039: ext4_read_block_bitmap_nowait:483 [ 100.421576][ T7153] loop1: lost filesystem error report for type 5 error -117 [ 100.421764][ T7153] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1371: Invalid block bitmap block 0 in block_group 0 [ 100.460778][ T7153] loop1: lost filesystem error report for type 5 error -117 [ 100.460996][ T7153] Quota error (device loop1): write_blk: dquota write failed [ 100.508089][ T7153] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 100.519589][ T7153] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1371: Failed to acquire dquot type 1 [ 100.546553][ T7153] loop1: lost filesystem error report for type 5 error -28 [ 100.547445][ T7153] EXT4-fs (loop1): 1 orphan inode deleted [ 100.568339][ T68] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 100.578066][ T68] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 1 [ 100.599132][ T68] loop1: lost filesystem error report for type 5 error -117 [ 100.601964][ T7153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.633054][ T7161] __nla_validate_parse: 1 callbacks suppressed [ 100.633080][ T7161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1377'. [ 100.706280][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.749589][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xa [ 100.774042][ T7170] sz1: rxe_newlink: already configured on lo [ 101.273836][ T7187] loop5: detected capacity change from 0 to 1024 [ 101.318554][ T7187] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.354808][ T7187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.382320][ T7187] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.421000][ T7187] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.1386: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 101.474666][ T7187] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.474812][ T7187] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1386: couldn't read orphan inode 11 (err -117) [ 101.484085][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 101.484117][ C0] EXT4-fs (loop5): initial error at time 1782873040: ext4_ext_check_inode:521: inode 11 [ 101.484167][ C0] EXT4-fs (loop5): last error at time 1782873040: ext4_ext_check_inode:521: inode 11 [ 101.598302][ T7187] loop5: lost filesystem error report for type 5 error -117 [ 101.598843][ T7187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.649097][ T7190] lo speed is unknown, defaulting to 1000 [ 101.651085][ T7196] loop6: detected capacity change from 0 to 8 [ 101.765123][ T7196] loop6: detected capacity change from 8 to 7 [ 101.773565][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.782742][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.791732][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.800883][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.808747][ T7196] loop6: unable to read partition table [ 101.817237][ T7196] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 101.817237][ T7196] .BL_se) failed (rc=-5) [ 101.849753][ T7197] loop6: detected capacity change from 7 to 0 [ 101.856004][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.865261][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 101.957333][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.008289][ T7203] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1390'. [ 102.030081][ T7199] loop2: detected capacity change from 0 to 512 [ 102.037062][ T7199] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.053603][ T7199] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 102.102667][ T7199] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 102.119497][ T7199] EXT4-fs (loop2): orphan cleanup on readonly fs [ 102.147007][ T7199] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1391: Invalid block bitmap block 0 in block_group 0 [ 102.166608][ T7199] loop2: lost filesystem error report for type 5 error -117 [ 102.166862][ T7199] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1391: Invalid block bitmap block 0 in block_group 0 [ 102.187579][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 102.187612][ C1] EXT4-fs (loop2): last error at time 1782873041: ext4_read_block_bitmap_nowait:483 [ 102.266648][ T7199] loop2: lost filesystem error report for type 5 error -117 [ 102.268483][ T7199] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1391: Invalid block bitmap block 0 in block_group 0 [ 102.313599][ T7199] loop2: lost filesystem error report for type 5 error -117 [ 102.314097][ T7199] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1391: Failed to acquire dquot type 1 [ 102.356535][ T7199] loop2: lost filesystem error report for type 5 error -28 [ 102.356908][ T7199] EXT4-fs (loop2): 1 orphan inode deleted [ 102.371876][ T310] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 102.383513][ T310] loop2: lost filesystem error report for type 5 error -117 [ 102.384257][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.425819][ T7207] loop6: detected capacity change from 0 to 512 [ 102.449209][ T7207] EXT4-fs: Ignoring removed nobh option [ 102.464977][ T7207] EXT4-fs (loop6): 1 orphan inode deleted [ 102.471454][ T7207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.564878][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.604265][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.690422][ T7224] loop2: detected capacity change from 0 to 256 [ 102.803541][ T7235] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1405'. [ 102.814049][ T7237] loop6: detected capacity change from 0 to 128 [ 102.827351][ T7237] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.843215][ T7237] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.890612][ T7244] loop2: detected capacity change from 0 to 512 [ 102.897401][ T7244] EXT4-fs: Ignoring removed bh option [ 102.917033][ T5318] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.930246][ T7244] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1410: corrupted in-inode xattr: e_value size too large [ 102.944753][ T7244] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.944951][ T7244] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1410: couldn't read orphan inode 15 (err -117) [ 102.954179][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 102.954200][ C1] EXT4-fs (loop2): initial error at time 1782873042: ext4_iget_extra_inode:5180: inode 15 [ 102.954260][ C1] EXT4-fs (loop2): last error at time 1782873042: ext4_iget_extra_inode:5180: inode 15 [ 102.972429][ T7251] syz_tun: entered allmulticast mode [ 102.973190][ T7244] loop2: lost filesystem error report for type 5 error -117 [ 102.983551][ T7250] syz_tun: left allmulticast mode [ 102.994259][ T7244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.057306][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.073927][ T7257] loop5: detected capacity change from 0 to 512 [ 103.081271][ T7257] EXT4-fs: Ignoring removed bh option [ 103.113364][ T7257] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1426: corrupted in-inode xattr: e_value size too large [ 103.153735][ T7257] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.153961][ T7257] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1426: couldn't read orphan inode 15 (err -117) [ 103.163160][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 103.163184][ C0] EXT4-fs (loop5): initial error at time 1782873042: ext4_iget_extra_inode:5180: inode 15 [ 103.163218][ C0] EXT4-fs (loop5): last error at time 1782873042: ext4_iget_extra_inode:5180: inode 15 [ 103.213126][ T7266] futex_wake_op: syz.1.1425 tries to shift op by -1; fix this program [ 103.257740][ T7257] loop5: lost filesystem error report for type 5 error -117 [ 103.258507][ T7257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.292718][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.370530][ T7270] loop6: detected capacity change from 0 to 512 [ 103.396569][ T7270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.429265][ T7270] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1416: iget: bad i_size value: 38620345925642 [ 103.444079][ T7270] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.445080][ T7270] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1416: couldn't read orphan inode 15 (err -117) [ 103.449056][ T7277] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1418'. [ 103.454329][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 103.454348][ C1] EXT4-fs (loop6): initial error at time 1782873042: ext4_orphan_get:1399: inode 15 [ 103.454381][ C1] EXT4-fs (loop6): last error at time 1782873042: ext4_orphan_get:1399: inode 15 [ 103.455062][ T7270] loop6: lost filesystem error report for type 5 error -117 [ 103.502586][ T7270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.585475][ T7270] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1416: bg 0: block 5: invalid block bitmap [ 103.618713][ T7270] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 103.647565][ T7270] EXT4-fs (loop6): This should not happen!! Data will be lost [ 103.647565][ T7270] [ 103.669818][ T7270] EXT4-fs (loop6): Total free blocks count 0 [ 103.679450][ T7270] EXT4-fs (loop6): Free/Dirty block details [ 103.686007][ T7292] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.712855][ T7270] EXT4-fs (loop6): free_blocks=0 [ 103.719076][ T7270] EXT4-fs (loop6): dirty_blocks=1 [ 103.719149][ T7292] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.724335][ T7270] EXT4-fs (loop6): Block reservation details [ 103.750175][ T7270] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 103.776440][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.828318][ T5318] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 103.842009][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.975560][ T7302] futex_wake_op: syz.0.1429 tries to shift op by -1; fix this program [ 104.311457][ T7315] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1434'. [ 104.488194][ T7322] vlan2: entered promiscuous mode [ 104.494039][ T7322] bridge0: entered promiscuous mode [ 104.737405][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 104.737428][ T28] audit: type=1400 audit(1782873044.265:709): avc: denied { setopt } for pid=7330 comm="syz.5.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.786187][ T7335] EXT4-fs: Ignoring removed oldalloc option [ 104.793988][ T7335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 104.802516][ T7335] EXT4-fs (loop6): orphan cleanup on readonly fs [ 104.809603][ T7335] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 104.824746][ T7335] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 104.831736][ T7335] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #13: comm syz.6.1443: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 104.849727][ T7335] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 104.849938][ T7335] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1443: couldn't read orphan inode 13 (err -117) [ 104.859069][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 104.859087][ C1] EXT4-fs (loop6): last error at time 1782873044: ext4_ext_check_inode:521: inode 13 [ 104.887084][ T7335] loop6: lost filesystem error report for type 5 error -117 [ 104.888034][ T7335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.914474][ T7335] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 104.926048][ T7335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 104.938599][ T7335] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 104.967482][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.251046][ T7350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1458'. [ 105.334436][ T7353] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.349510][ T7353] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.2.1450: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 105.368867][ T7353] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.369060][ T7353] EXT4-fs (loop2): Remounting filesystem read-only [ 105.378686][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 105.378706][ C0] EXT4-fs (loop2): initial error at time 1782873044: ext4_map_blocks:791: inode 15: block 1803188595 [ 105.378742][ C0] EXT4-fs (loop2): last error at time 1782873044: ext4_map_blocks:791: inode 15: block 1803188595 [ 105.414837][ T7353] EXT4-fs (loop2): mount failed [ 105.422607][ T7358] futex_wake_op: syz.6.1446 tries to shift op by -1; fix this program [ 105.741834][ T28] audit: type=1400 audit(1782873045.265:710): avc: denied { ioctl } for pid=7377 comm="syz.2.1462" path="socket:[17402]" dev="sockfs" ino=17402 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.915165][ T7372] lo speed is unknown, defaulting to 1000 [ 106.013520][ T6786] IPVS: starting estimator thread 0... [ 106.021766][ T7398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.046489][ T7398] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.5.1467: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 106.066944][ T7398] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.067139][ T7398] EXT4-fs (loop5): Remounting filesystem read-only [ 106.082829][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 106.082851][ C1] EXT4-fs (loop5): initial error at time 1782873045: ext4_map_blocks:791: inode 15: block 1803188595 [ 106.082909][ C1] EXT4-fs (loop5): last error at time 1782873045: ext4_map_blocks:791: inode 15: block 1803188595 [ 106.116574][ T7400] IPVS: using max 2400 ests per chain, 120000 per kthread [ 106.124639][ T7398] EXT4-fs (loop5): mount failed [ 106.225684][ T7411] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.256188][ T7411] EXT4-fs (loop6): orphan cleanup on readonly fs [ 106.276301][ T7411] Quota error (device loop6): v2_read_file_info: Free block number 131072 out of range (1, 6). [ 106.296626][ T7411] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 106.362893][ T7411] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 106.375401][ T7411] EXT4-fs error (device loop6): ext4_free_blocks:6718: comm syz.6.1485: Freeing blocks not in datazone - block = 0, count = 4096 [ 106.411160][ T7411] loop6: lost filesystem error report for type 5 error -117 [ 106.411503][ T7411] EXT4-fs (loop6): 1 orphan inode deleted [ 106.418860][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 106.418884][ C0] EXT4-fs (loop6): initial error at time 1782873045: ext4_free_blocks:6718 [ 106.418910][ C0] EXT4-fs (loop6): last error at time 1782873045: ext4_free_blocks:6718 [ 106.452794][ T7420] futex_wake_op: syz.5.1473 tries to shift op by -1; fix this program [ 106.467011][ T7411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.577551][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.652003][ T7418] lo speed is unknown, defaulting to 1000 [ 107.150827][ T7449] vlan2: entered promiscuous mode [ 107.156204][ T7449] bridge0: entered promiscuous mode [ 107.356138][ T7452] futex_wake_op: syz.2.1490 tries to shift op by -1; fix this program [ 107.586530][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1492'. [ 107.833197][ T28] audit: type=1400 audit(1782873047.355:711): avc: denied { ioctl } for pid=7464 comm="syz.5.1500" path="socket:[18578]" dev="sockfs" ino=18578 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.889531][ T7465] ip6erspan0: entered allmulticast mode [ 107.947052][ T7475] vlan0: entered promiscuous mode [ 107.963232][ T7475] bridge0: entered promiscuous mode [ 108.155109][ T7488] futex_wake_op: syz.5.1503 tries to shift op by -1; fix this program [ 108.158832][ T7490] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1509'. [ 108.332582][ T7507] set_capacity_and_notify: 8 callbacks suppressed [ 108.332597][ T7507] loop1: detected capacity change from 0 to 1024 [ 108.346854][ T7507] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 108.346854][ T7507] [ 108.881634][ T7514] loop2: detected capacity change from 0 to 7 [ 108.895193][ T7516] ip6gre1: entered promiscuous mode [ 108.906666][ T7516] ip6gre1: entered allmulticast mode [ 108.923151][ T7515] vlan2: entered promiscuous mode [ 108.928591][ T7515] bridge0: entered promiscuous mode [ 110.459040][ T7538] lo speed is unknown, defaulting to 1000 [ 110.471417][ T7541] futex_wake_op: syz.1.1527 tries to shift op by -1; fix this program [ 110.757407][ T9] IPVS: starting estimator thread 0... [ 110.857758][ T7545] IPVS: using max 2352 ests per chain, 117600 per kthread [ 110.988004][ T7560] loop0: detected capacity change from 0 to 1024 [ 111.017196][ T7560] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.074513][ T7560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.106952][ T7560] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 111.146124][ T7560] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1537: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 111.164869][ T7560] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.165480][ T7560] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1537: couldn't read orphan inode 11 (err -117) [ 111.174722][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 111.174739][ C1] EXT4-fs (loop0): initial error at time 1782873050: ext4_ext_check_inode:521: inode 11 [ 111.174766][ C1] EXT4-fs (loop0): last error at time 1782873050: ext4_ext_check_inode:521: inode 11 [ 111.212491][ T7560] loop0: lost filesystem error report for type 5 error -117 [ 111.215813][ T7560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.564032][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.694570][ T7576] vlan2: entered promiscuous mode [ 111.721948][ T7577] futex_wake_op: syz.6.1543 tries to shift op by -1; fix this program [ 111.873360][ T7583] ip6erspan0: entered allmulticast mode [ 111.954232][ T7589] loop6: detected capacity change from 0 to 1024 [ 111.987521][ T7589] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 111.987521][ T7589] [ 113.000022][ T28] audit: type=1400 audit(1782873052.525:712): avc: denied { read } for pid=7624 comm="syz.6.1566" path="socket:[18073]" dev="sockfs" ino=18073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 113.216254][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 113.250872][ T7629] netlink: 'syz.1.1568': attribute type 9 has an invalid length. [ 113.273635][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.282778][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.298770][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.340332][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.660882][ T7648] xt_hashlimit: size too large, truncated to 1048576 [ 113.839017][ T7658] loop5: detected capacity change from 0 to 128 [ 114.101017][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 114.174426][ T7675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1588'. [ 114.195839][ T7673] vlan2: entered promiscuous mode [ 114.208131][ T7677] xt_hashlimit: size too large, truncated to 1048576 [ 114.258101][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 114.278641][ T7679] netlink: 'syz.2.1590': attribute type 9 has an invalid length. [ 114.299840][ T7682] loop0: detected capacity change from 0 to 128 [ 114.347559][ T68] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.363767][ T68] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.393773][ T68] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.414358][ T68] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.523691][ T7694] xt_hashlimit: size too large, truncated to 1048576 [ 114.873037][ T7705] loop1: detected capacity change from 0 to 1024 [ 114.898304][ T7705] EXT4-fs: Ignoring removed orlov option [ 114.913069][ T7705] EXT4-fs: inline encryption not supported [ 114.948975][ T7705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.003515][ T28] audit: type=1400 audit(1782873054.525:713): avc: denied { write } for pid=7704 comm="syz.1.1599" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.010714][ T7705] EXT4-fs error (device loop1): __ext4_new_inode:1287: comm syz.1.1599: failed to insert inode 12: doubly allocated? [ 115.025538][ T28] audit: type=1400 audit(1782873054.525:714): avc: denied { write } for pid=7704 comm="syz.1.1599" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.067140][ T28] audit: type=1400 audit(1782873054.535:715): avc: denied { write } for pid=7704 comm="syz.1.1599" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.152066][ T28] audit: type=1400 audit(1782873054.675:716): avc: denied { write } for pid=7704 comm="syz.1.1599" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.179653][ T28] audit: type=1400 audit(1782873054.675:717): avc: denied { write } for pid=7704 comm="syz.1.1599" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.203479][ T28] audit: type=1400 audit(1782873054.675:718): avc: denied { rename } for pid=7704 comm="syz.1.1599" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.228285][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.251261][ T28] audit: type=1400 audit(1782873054.675:719): avc: denied { rmdir } for pid=7704 comm="syz.1.1599" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 115.306206][ T7727] loop5: detected capacity change from 0 to 1024 [ 115.313272][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.325319][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.336623][ T7727] EXT4-fs: Ignoring removed bh option [ 115.342746][ T7727] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 115.365907][ T7727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.380967][ T7727] EXT4-fs (loop5): shut down requested (2) [ 115.399587][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.406813][ T7732] loop2: detected capacity change from 0 to 128 [ 115.429543][ T7732] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.455364][ T7732] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.562288][ T28] audit: type=1400 audit(1782873055.085:720): avc: denied { write } for pid=7731 comm="syz.2.1610" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.601961][ T7740] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1613'. [ 115.651233][ T7742] vlan2: entered promiscuous mode [ 115.656451][ T28] audit: type=1400 audit(1782873055.175:721): avc: denied { mount } for pid=7743 comm="syz.5.1615" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.709975][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.809398][ T7754] netlink: 'syz.5.1620': attribute type 21 has an invalid length. [ 115.832569][ T7757] loop2: detected capacity change from 0 to 1024 [ 115.870454][ T7757] EXT4-fs: Ignoring removed bh option [ 115.914680][ T7757] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 115.941330][ T7757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.988714][ T7757] EXT4-fs (loop2): shut down requested (2) [ 116.010599][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.059227][ T7768] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1626'. [ 116.439495][ T7773] lo speed is unknown, defaulting to 1000 [ 117.275309][ T7803] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1639'. [ 117.428381][ T7813] loop5: detected capacity change from 0 to 512 [ 117.478217][ T7813] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.502930][ T7813] EXT4-fs (loop5): 1 truncate cleaned up [ 117.519530][ T7821] sock: sock_set_timeout: `syz.1.1646' (pid 7821) tries to set negative timeout [ 117.535648][ T7813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.598046][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.324457][ T7839] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1653'. [ 118.338006][ T7837] loop0: detected capacity change from 0 to 512 [ 118.357219][ T7837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.384593][ T7837] EXT4-fs (loop0): 1 truncate cleaned up [ 118.407217][ T7837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.448425][ T28] audit: type=1400 audit(1782873057.975:722): avc: denied { setattr } for pid=7835 comm="syz.0.1663" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.519257][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.609748][ T7866] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1667'. [ 118.655929][ T7870] sock: sock_set_timeout: `syz.6.1669' (pid 7870) tries to set negative timeout [ 118.719320][ T28] audit: type=1400 audit(1782873058.245:723): avc: denied { write } for pid=6782 comm="kworker/0:18" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19226 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 118.784275][ T7882] loop0: detected capacity change from 0 to 128 [ 118.805576][ T7882] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.837025][ T7882] ext4 filesystem being mounted at /331/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.901694][ T28] audit: type=1400 audit(1782873058.425:724): avc: denied { write } for pid=7881 comm="syz.0.1685" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.006126][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.067748][ T7907] gtp0: entered allmulticast mode [ 119.115752][ T7911] netlink: 'syz.0.1681': attribute type 21 has an invalid length. [ 119.133540][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 119.158903][ T7911] netlink: 'syz.0.1681': attribute type 21 has an invalid length. [ 119.174376][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 119.575711][ T7933] loop1: detected capacity change from 0 to 128 [ 119.593582][ T7933] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.607824][ T7933] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.644041][ T28] audit: type=1400 audit(1782873059.165:725): avc: denied { write } for pid=7932 comm="syz.1.1690" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.048950][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.458708][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 120.474572][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'. [ 120.491142][ T7939] lo speed is unknown, defaulting to 1000 [ 120.499003][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 120.576776][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 120.589672][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1699'. [ 120.592649][ T28] audit: type=1400 audit(1782873060.115:726): avc: denied { ioctl } for pid=7968 comm="syz.2.1707" path="socket:[19648]" dev="sockfs" ino=19648 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.604844][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'. [ 120.756808][ T28] audit: type=1400 audit(1782873060.285:727): avc: denied { write } for pid=7981 comm="syz.5.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 120.873993][ T28] audit: type=1400 audit(1782873060.395:728): avc: denied { listen } for pid=7991 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.073561][ T28] audit: type=1400 audit(1782873060.595:729): avc: denied { append } for pid=8008 comm="syz.1.1724" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 121.263304][ T28] audit: type=1326 audit(1782873060.785:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.2.1736" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa876d4de59 code=0x0 [ 121.410737][ T8044] loop0: detected capacity change from 0 to 128 [ 121.630487][ T28] audit: type=1400 audit(1782873061.155:731): avc: denied { bind } for pid=8063 comm="syz.0.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 121.670633][ T8062] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 121.729906][ T8068] loop0: detected capacity change from 0 to 512 [ 121.778162][ T8068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.792291][ T8068] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.815980][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.853553][ T8076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.909377][ T8081] loop0: detected capacity change from 0 to 512 [ 121.926450][ T8081] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 121.940352][ T8081] EXT4-fs (loop0): 1 truncate cleaned up [ 121.946916][ T8081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.971029][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.313966][ T8107] netlink: 'syz.2.1766': attribute type 1 has an invalid length. [ 122.325411][ T8107] netlink: 'syz.2.1766': attribute type 2 has an invalid length. [ 122.531638][ T8131] SELinux: failed to load policy [ 122.682495][ T8140] netlink: 'syz.6.1780': attribute type 1 has an invalid length. [ 122.691160][ T8140] netlink: 'syz.6.1780': attribute type 2 has an invalid length. [ 122.756360][ T8152] loop1: detected capacity change from 0 to 512 [ 122.794262][ T8152] EXT4-fs (loop1): 1 truncate cleaned up [ 122.838852][ T8136] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.842777][ T8152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.881347][ T8152] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1786: bg 0: block 465: padding at end of block bitmap is not set [ 122.897562][ T8152] EXT4-fs (loop1): Remounting filesystem read-only [ 122.919438][ T8152] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 122.977171][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.163869][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 123.186284][ T8195] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 123.215699][ T8195] SELinux: failed to load policy [ 123.506247][ T8232] loop1: detected capacity change from 0 to 4096 [ 123.526072][ T8232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.562560][ T8238] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 123.590791][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 123.590807][ T28] audit: type=1400 audit(1782873063.115:737): avc: denied { write } for pid=8231 comm="syz.1.1823" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.600306][ T8238] __nla_validate_parse: 3 callbacks suppressed [ 123.600340][ T8238] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1826'. [ 123.669070][ T8244] loop0: detected capacity change from 0 to 256 [ 123.686132][ T8244] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 123.706644][ T8244] FAT-fs (loop0): Can't find a valid FAT filesystem [ 123.762541][ T8244] xt_hashlimit: size too large, truncated to 1048576 [ 124.349506][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.413725][ T28] audit: type=1400 audit(1782873063.935:738): avc: denied { ioctl } for pid=8260 comm="syz.0.1836" path="socket:[20885]" dev="sockfs" ino=20885 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 124.502971][ T8271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1839'. [ 124.601991][ T28] audit: type=1400 audit(1782873064.125:739): avc: denied { getopt } for pid=8273 comm="syz.2.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.788995][ T28] audit: type=1400 audit(1782873064.315:740): avc: denied { shutdown } for pid=8291 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 124.848974][ T28] audit: type=1400 audit(1782873064.375:741): avc: denied { bind } for pid=8297 comm="syz.0.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 124.920790][ T8304] capability: warning: `syz.1.1855' uses 32-bit capabilities (legacy support in use) [ 125.196829][ T3595] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.196879][ T4407] Bluetooth: hci0: command 0x1003 tx timeout [ 125.372781][ T28] audit: type=1400 audit(1782873064.885:742): avc: denied { read } for pid=8318 comm="syz.0.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 125.385849][ T8314] lo speed is unknown, defaulting to 1000 [ 126.256583][ T28] audit: type=1400 audit(1782873065.775:743): avc: denied { create } for pid=8354 comm="syz.1.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.294813][ T28] audit: type=1400 audit(1782873065.805:744): avc: denied { setopt } for pid=8354 comm="syz.1.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.337204][ T8359] netlink: 'syz.5.1879': attribute type 12 has an invalid length. [ 126.347018][ T28] audit: type=1400 audit(1782873065.805:745): avc: denied { bind } for pid=8354 comm="syz.1.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.390947][ T28] audit: type=1400 audit(1782873065.805:746): avc: denied { listen } for pid=8354 comm="syz.1.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.570723][ T8376] netlink: 'syz.2.1886': attribute type 2 has an invalid length. [ 126.628031][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 126.671027][ T8382] bridge: RTM_NEWNEIGH with invalid ether address [ 126.703219][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 126.721481][ T8387] bridge: RTM_NEWNEIGH with invalid ether address [ 126.965953][ T8409] netlink: 'syz.6.1898': attribute type 2 has an invalid length. [ 127.004918][ T8416] veth0: entered promiscuous mode [ 127.014644][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'. [ 127.038299][ T8419] loop5: detected capacity change from 0 to 512 [ 127.053737][ T8419] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 127.062902][ T8416] veth0 (unregistering): left promiscuous mode [ 127.064550][ T8419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 127.090401][ T8419] EXT4-fs (loop5): orphan cleanup on readonly fs [ 127.100273][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1903'. [ 127.101975][ T8419] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.1902: iget: bad i_size value: 12154761577498 [ 127.130689][ T8419] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 127.131946][ T8419] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1902: couldn't read orphan inode 13 (err -117) [ 127.134384][ T8422] bridge: RTM_NEWNEIGH with invalid ether address [ 127.141200][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 127.165888][ C0] EXT4-fs (loop5): initial error at time 1782873066: ext4_orphan_get:1399: inode 13 [ 127.175398][ C0] EXT4-fs (loop5): last error at time 1782873066: ext4_orphan_get:1399: inode 13 [ 127.185589][ T8419] loop5: lost filesystem error report for type 5 error -117 [ 127.188695][ T8419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 127.261324][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1903'. [ 127.270518][ T8419] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1902: dx entry: limit 65535 != root limit 120 [ 127.297710][ T8422] bridge: RTM_NEWNEIGH with invalid ether address [ 127.299889][ T8419] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1902: Corrupt directory, running e2fsck is recommended [ 127.383033][ T8433] loop6: detected capacity change from 0 to 512 [ 127.422478][ T8433] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1908: bg 0: block 169: padding at end of block bitmap is not set [ 127.450414][ T8433] loop6: lost filesystem error report for type 5 error -117 [ 127.450632][ T8433] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1908: Failed to acquire dquot type 0 [ 127.458029][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 127.458050][ C0] EXT4-fs (loop6): initial error at time 1782873066: ext4_validate_block_bitmap:441 [ 127.458086][ C0] EXT4-fs (loop6): last error at time 1782873066: ext4_validate_block_bitmap:441 [ 127.495359][ T8433] loop6: lost filesystem error report for type 5 error -117 [ 127.496021][ T8433] EXT4-fs (loop6): 1 truncate cleaned up [ 127.509805][ T8433] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.525383][ T8433] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.550906][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.613497][ T8443] loop6: detected capacity change from 0 to 512 [ 127.661332][ T8443] EXT4-fs: Ignoring removed orlov option [ 127.681244][ T8418] syz.5.1902 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 127.700343][ T8443] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 127.717477][ T8418] CPU: 1 UID: 0 PID: 8418 Comm: syz.5.1902 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 127.717510][ T8418] Tainted: [W]=WARN [ 127.717517][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.717592][ T8418] Call Trace: [ 127.717598][ T8418] [ 127.717605][ T8418] __dump_stack+0x1d/0x30 [ 127.717625][ T8418] dump_stack_lvl+0x95/0xd0 [ 127.717642][ T8418] dump_stack+0x15/0x1b [ 127.717694][ T8418] dump_header+0x80/0x240 [ 127.717814][ T8418] oom_kill_process+0x295/0x350 [ 127.717840][ T8418] out_of_memory+0x981/0xbc0 [ 127.717865][ T8418] try_charge_memcg+0x621/0xa00 [ 127.717927][ T8418] charge_memcg+0x6d/0x120 [ 127.717952][ T8418] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 127.718015][ T8418] swap_cache_alloc_folio+0x47b/0x5e0 [ 127.718044][ T8418] swap_cluster_readahead+0x2b1/0x460 [ 127.718075][ T8418] swapin_readahead+0xd8/0x8a0 [ 127.718177][ T8418] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 127.718262][ T8418] ? hrtimer_start_range_ns+0x108/0x120 [ 127.718284][ T8418] ? __rcu_read_unlock+0x4e/0x70 [ 127.718304][ T8418] ? swap_cache_get_folio+0x1f7/0x200 [ 127.718367][ T8418] do_swap_page+0x2a2/0x1ec0 [ 127.718494][ T8418] ? __schedule+0x799/0xd10 [ 127.718513][ T8418] ? __rcu_read_lock+0x36/0x50 [ 127.718532][ T8418] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 127.718553][ T8418] handle_mm_fault+0xb3c/0x2da0 [ 127.718665][ T8418] do_user_addr_fault+0x634/0x1060 [ 127.718691][ T8418] ? trace_page_fault_user+0x1f/0xa0 [ 127.718760][ T8418] exc_page_fault+0x62/0xa0 [ 127.718855][ T8418] asm_exc_page_fault+0x26/0x30 [ 127.718872][ T8418] RIP: 0033:0x7f7f4c918fb8 [ 127.718889][ T8418] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 127.718987][ T8418] RSP: 002b:00007fff0482f090 EFLAGS: 00010246 [ 127.719056][ T8418] RAX: 0000000000000000 RBX: 000055559211d500 RCX: 00007f7f4c91e68e [ 127.719072][ T8418] RDX: 00007fff0482f0e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.719084][ T8418] RBP: 00007f7f4cbe7da0 R08: 0000000000000000 R09: 0000000000000000 [ 127.719098][ T8418] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001f35c [ 127.719112][ T8418] R13: 00007f7f4cbe5fac R14: 000000000001f196 R15: 00007fff0482f210 [ 127.719200][ T8418] [ 127.719461][ T8448] bridge0: port 3(macsec1) entered blocking state [ 127.722218][ T8418] memory: usage 307200kB, limit 307200kB, failcnt 171 [ 127.748848][ T8448] bridge0: port 3(macsec1) entered disabled state [ 127.764533][ T8418] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 127.790424][ T8448] macsec1: entered allmulticast mode [ 127.800264][ T8418] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 127.817229][ T8443] EXT4-fs (loop6): 1 truncate cleaned up [ 127.829853][ T8418] Memory cgroup stats for [ 127.831956][ T8448] bridge0: entered allmulticast mode [ 127.842848][ T8418] /syz5 [ 127.857164][ T8443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.873930][ T8418] : [ 127.876281][ T8448] macsec1: left allmulticast mode [ 128.030630][ T8418] cache 4096 [ 128.033883][ T8418] rss 0 [ 128.036878][ T8418] shmem 0 [ 128.039839][ T8418] mapped_file 0 [ 128.043284][ T8418] dirty 0 [ 128.046317][ T8418] writeback 0 [ 128.050165][ T8418] workingset_refault_anon 34 [ 128.054766][ T8418] workingset_refault_file 0 [ 128.060380][ T8418] swap 446464 [ 128.062696][ T5318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.063680][ T8418] swapcached 638976 [ 128.063689][ T8418] pgpgin 36690 [ 128.080279][ T8448] bridge0: left allmulticast mode [ 128.085683][ T8418] pgpgout 36687 [ 128.090563][ T8418] pgfault 52884 [ 128.094438][ T8418] pgmajfault 18 [ 128.099167][ T8418] inactive_anon 8192 [ 128.104207][ T8418] active_anon 0 [ 128.108081][ T8418] inactive_file 0 [ 128.111821][ T8418] active_file 4096 [ 128.115630][ T8418] unevictable 0 [ 128.119944][ T8418] hierarchical_memory_limit 314572800 [ 128.127244][ T8418] hierarchical_memsw_limit 9223372036854771712 [ 128.134261][ T8418] total_cache 4096 [ 128.138496][ T8418] total_rss 0 [ 128.141801][ T8418] total_shmem 0 [ 128.145271][ T8418] total_mapped_file 0 [ 128.151720][ T8418] total_dirty 0 [ 128.155208][ T8418] total_writeback 0 [ 128.159262][ T8418] total_workingset_refault_anon 34 [ 128.164435][ T8418] total_workingset_refault_file 0 [ 128.169716][ T8418] total_swap 446464 [ 128.173992][ T8418] total_swapcached 638976 [ 128.179253][ T8418] total_pgpgin 36690 [ 128.183171][ T8418] total_pgpgout 36687 [ 128.187374][ T8418] total_pgfault 52884 [ 128.191393][ T8418] total_pgmajfault 18 [ 128.195511][ T8418] total_inactive_anon 8192 [ 128.200174][ T8418] total_active_anon 0 [ 128.204223][ T8418] total_inactive_file 0 [ 128.209131][ T8418] total_active_file 4096 [ 128.213383][ T8418] total_unevictable 0 [ 128.218163][ T8418] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1902,pid=8418,uid=0 [ 128.259767][ T8418] Memory cgroup out of memory: Killed process 8418 (syz.5.1902) total-vm:96096kB, anon-rss:1240kB, file-rss:22388kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 128.293457][ T8457] loop0: detected capacity change from 0 to 4096 [ 128.308194][ T8457] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.380246][ T5101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.478661][ T8471] loop2: detected capacity change from 0 to 128 [ 128.512912][ T8471] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 128.526641][ T8471] ext4 filesystem being mounted at /421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.598045][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 128.598136][ T28] audit: type=1400 audit(1782873068.125:761): avc: denied { write } for pid=8468 comm="syz.2.1920" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.660650][ T28] audit: type=1400 audit(1782873068.125:762): avc: denied { write } for pid=8468 comm="syz.2.1920" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.688730][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.735022][ T28] audit: type=1400 audit(1782873068.125:763): avc: denied { rename } for pid=8468 comm="syz.2.1920" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.836382][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1927'. [ 128.845974][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 128.860634][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1927'. [ 128.870060][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1927'. [ 128.940579][ T8495] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.1930'. [ 129.040423][ T8506] loop5: detected capacity change from 0 to 128 [ 129.062294][ T8506] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 129.075607][ T8506] ext4 filesystem being mounted at /273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.163067][ T28] audit: type=1400 audit(1782873068.685:764): avc: denied { write } for pid=8505 comm="syz.5.1936" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.223547][ T28] audit: type=1400 audit(1782873068.705:765): avc: denied { write } for pid=8505 comm="syz.5.1936" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.248752][ T28] audit: type=1400 audit(1782873068.715:766): avc: denied { write } for pid=8505 comm="syz.5.1936" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.280039][ T28] audit: type=1400 audit(1782873068.715:767): avc: denied { write } for pid=8505 comm="syz.5.1936" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.320950][ T28] audit: type=1400 audit(1782873068.715:768): avc: denied { write } for pid=8505 comm="syz.5.1936" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.372356][ T28] audit: type=1400 audit(1782873068.715:769): avc: denied { write } for pid=8505 comm="syz.5.1936" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.450491][ T28] audit: type=1400 audit(1782873068.975:770): avc: denied { setopt } for pid=8519 comm="syz.0.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 129.541358][ T8528] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1945'. [ 129.559515][ T8530] netlink: 'syz.0.1944': attribute type 12 has an invalid length. [ 129.703402][ T8544] loop1: detected capacity change from 0 to 128 [ 129.719932][ T8544] ext4 filesystem being mounted at /338/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.803552][ T8547] loop2: detected capacity change from 0 to 4096 [ 129.815959][ T3295] EXT4-fs unmount: 3 callbacks suppressed [ 129.816053][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.833656][ T8547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.073259][ T8562] netlink: 'syz.1.1957': attribute type 12 has an invalid length. [ 130.142527][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1960'. [ 130.168582][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1960'. [ 130.183311][ T8567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1960'. [ 130.183319][ T40] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.183412][ T40] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.210058][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1960'. [ 130.217929][ T40] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.229454][ T40] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.257574][ T8547] ================================================================== [ 130.265684][ T8547] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 130.272804][ T8547] [ 130.275113][ T8547] write to 0xffff88810733f864 of 4 bytes by task 8556 on cpu 0: [ 130.282723][ T8547] xas_set_mark+0x12b/0x140 [ 130.287220][ T8547] __folio_start_writeback+0x16a/0x350 [ 130.292671][ T8547] ext4_bio_write_folio+0x5a2/0xa10 [ 130.297865][ T8547] mpage_process_page_bufs+0x487/0x600 [ 130.303331][ T8547] mpage_prepare_extent_to_map+0x79e/0xc00 [ 130.309145][ T8547] ext4_do_writepages+0x6ec/0x2720 [ 130.314251][ T8547] ext4_writepages+0x18f/0x300 [ 130.319009][ T8547] do_writepages+0x1b9/0x300 [ 130.323597][ T8547] file_write_and_wait_range+0x178/0x2f0 [ 130.329233][ T8547] mmb_fsync_noflush+0x48/0x140 [ 130.334088][ T8547] ext4_sync_file+0x1f2/0x6d0 [ 130.338767][ T8547] vfs_fsync_range+0xc5/0xe0 [ 130.343439][ T8547] ext4_buffered_write_iter+0x426/0x480 [ 130.348980][ T8547] ext4_file_write_iter+0x38e/0xef0 [ 130.354188][ T8547] iter_file_splice_write+0x6a0/0xa60 [ 130.359556][ T8547] direct_splice_actor+0x156/0x280 [ 130.364657][ T8547] splice_direct_to_actor+0x2f9/0x680 [ 130.370019][ T8547] do_splice_direct+0x119/0x1a0 [ 130.374861][ T8547] do_sendfile+0x37d/0x640 [ 130.379270][ T8547] __x64_sys_sendfile64+0x105/0x150 [ 130.384457][ T8547] x64_sys_call+0x2dc4/0x3020 [ 130.389126][ T8547] do_syscall_64+0x136/0x3c0 [ 130.393718][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.399610][ T8547] [ 130.401918][ T8547] read to 0xffff88810733f864 of 4 bytes by task 8547 on cpu 1: [ 130.409477][ T8547] xas_find_marked+0x602/0x650 [ 130.414252][ T8547] filemap_get_folios_tag+0xf7/0x400 [ 130.419545][ T8547] filemap_fdatawait_range+0x88/0x1e0 [ 130.424921][ T8547] __writeback_single_inode+0xd6/0x660 [ 130.430590][ T8547] writeback_single_inode+0x16d/0x400 [ 130.435963][ T8547] sync_inode_metadata+0x6e/0xa0 [ 130.440984][ T8547] mmb_fsync_noflush+0xfa/0x140 [ 130.445824][ T8547] ext4_sync_file+0x1f2/0x6d0 [ 130.450493][ T8547] vfs_fsync_range+0xc5/0xe0 [ 130.455095][ T8547] ext4_buffered_write_iter+0x426/0x480 [ 130.460639][ T8547] ext4_file_write_iter+0x38e/0xef0 [ 130.465829][ T8547] iter_file_splice_write+0x6a0/0xa60 [ 130.471201][ T8547] direct_splice_actor+0x156/0x280 [ 130.476305][ T8547] splice_direct_to_actor+0x2f9/0x680 [ 130.481666][ T8547] do_splice_direct+0x119/0x1a0 [ 130.486514][ T8547] do_sendfile+0x37d/0x640 [ 130.490931][ T8547] __x64_sys_sendfile64+0x105/0x150 [ 130.496122][ T8547] x64_sys_call+0x2dc4/0x3020 [ 130.500794][ T8547] do_syscall_64+0x136/0x3c0 [ 130.505396][ T8547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.511278][ T8547] [ 130.513594][ T8547] value changed: 0x0a000021 -> 0x00000021 [ 130.519310][ T8547] [ 130.521634][ T8547] Reported by Kernel Concurrency Sanitizer on: [ 130.527786][ T8547] CPU: 1 UID: 0 PID: 8547 Comm: syz.2.1951 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 130.538803][ T8547] Tainted: [W]=WARN [ 130.542851][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.552894][ T8547] ================================================================== [ 130.696156][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.