last executing test programs: 1m9.594253411s ago: executing program 3 (id=99): recvmmsg(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f00000041c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)=""/139, 0x8b}], 0x6}, 0x9}], 0x1, 0x2042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3ff, 0xfffffffffffffffc}, 0x800, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0xff, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)={[&(0x7f00000001c0)='\x00']}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) socket(0xb, 0x5, 0x47d6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/36, &(0x7f00000000c0)=0x24) 1m9.427425066s ago: executing program 3 (id=101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) connect$inet(r0, 0x0, 0x0) 1m9.3161244s ago: executing program 3 (id=102): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000400000000000010087d0000000b00000000000001000000005300220f0000000001000004040001040000000002000000000000000061612e003e80930a574d05a1069d99f473ead9a0237fb2417abc856e32f500"/119], 0x0, 0x51}, 0x28) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a310000000005000400000000001400078008001240000100000800114000000000050001000600000005000500000000000d000300686173683a6d6163"], 0x5c}}, 0x4004804) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x105000, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000018c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x8}, {0x8, 0x3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x2004080) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1, 0xb0) pwrite64(r6, 0x0, 0x0, 0xe7c) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESHEX=r4, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2c080}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00042dbd7000fcdbdf25020000000400018014000680050002000900000006000100020000002400068008000700", @ANYRES32=r10, @ANYBLOB="0800030000000000060005004ecf307a4400010002000000229143e4f8cac0a2e1e42aa0addc4ba6e8f4a9e5ed0dfb4cd036df20e16ff2df089fe72a5177c6fc2e5616d98168ed1bf6da6911b9d0430626f7"], 0x50}, 0x1, 0x0, 0x0, 0x20044810}, 0x1050) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)) r12 = socket$kcm(0x10, 0x2, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r8, @ANYBLOB="770acf274457ba125ebb04ca6e1f466d656accf839cce3bc24b67f26c1"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) setrlimit(0x6, &(0x7f00000000c0)={0x7, 0x6}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 1m9.120664126s ago: executing program 3 (id=104): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0xf7, 0x579, &(0x7f0000001200)="$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") r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000700)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10) ptrace$cont(0x21, r1, 0x80000001, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noblock_validity}, {@delalloc}, {@quota}, {@errors_remount}, {@nomblk_io_submit}, {@dioread_nolock}, {@mb_optimize_scan}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r6, @in={{0x2, 0x4e24, @empty}}, 0xe, 0x38f}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) 1m7.991235571s ago: executing program 3 (id=109): r0 = socket$netlink(0x10, 0x3, 0x8000000004) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = creat(&(0x7f0000000040)='./bus\x00', 0xa8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) fcntl$lock(r1, 0x6, &(0x7f0000000100)={0x5, 0x0, 0x100, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000026c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf25280000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x10) (async) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) (async) sendmsg$nl_route_sched(r7, 0x0, 0x4000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r12, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) r13 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r13, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) connect$inet(r13, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x12, r2, 0x86c36000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) 1m5.869860067s ago: executing program 3 (id=122): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0x0, 0xee00, 0x0) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m5.761516551s ago: executing program 32 (id=122): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0x0, 0xee00, 0x0) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 3.171984422s ago: executing program 1 (id=523): unshare(0x60000600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) set_mempolicy(0x2, &(0x7f0000000040)=0xdf, 0xb) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r0 = socket$inet6(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) 2.991723327s ago: executing program 1 (id=528): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) keyctl$assume_authority(0x10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_create(0xd) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r2, @ANYRES64=r0], 0x0) 2.444053814s ago: executing program 1 (id=542): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) 2.427625155s ago: executing program 1 (id=543): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff7ffc}]}) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 2.371784616s ago: executing program 1 (id=545): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d21534081e041c409c1d0102030109021200d9000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) 1.968083589s ago: executing program 2 (id=556): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000007840), 0x4000000000002c9, 0x10103, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0) 1.639488759s ago: executing program 1 (id=568): syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000080408205820540000102030109028e000301018005080b0001010130040904000000010130000a2401062a00060000000d240a04030000000002000000132403060703058404ff"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) 1.576366691s ago: executing program 0 (id=569): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.559127442s ago: executing program 4 (id=570): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x204, r3, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x188, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x75, 0x3, "05221407311cd48d0433c42d000fe6900e82d8c8654a40b485502bdb20bff6e7e6913c13d87f69c0780ef5e64a444dd16e618fe022895d007a0f0767bf97983156aa7c37833247866ce8bdc55c67f4fad2474200f816c1aa7db62ad756bedab8ac4a52e8cd3b205d909f32665a2e932990"}, @NL80211_FTM_RESP_ATTR_LCI={0x2a, 0x2, "8e0a001dc5f81da23bf0fb4bd6efbd848822de9293cf9af151b02b1abf2ddbb41c6e8e57a826"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xdc, 0x2, "829d54c9f23c702d889d3740b24500b61b9d38fd5c223076087aad2b9c18fff3fd11d3d1cc0955a9497032e9a4b90844f3f11d61e50c9df035b8fc4a9ca0df7697e0b342bbf43475db336bd85fd7933780c8f8061d2af6fe8ae8aaf438d1c5825d3cdd7a92983f7d9c97f5621dd8544a0439a40217fbce1f36710a0f070e9f9000b56bfa2f2936c6650e2042fad3a3547ca444a266bd061a4e7c9a44b65ab41222afdb47190fafcc55ce4aa6a48965c86dc0807182034b8518d81c2dd93b85a986343522e886a93a3df88bb1b60f27d54ee9b415c5d779a9"}]}, @NL80211_ATTR_PROBE_RESP={0x6, 0x91, "f4bf"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x204}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 1.409369837s ago: executing program 2 (id=571): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0xf, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.153408754s ago: executing program 5 (id=575): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x10, &(0x7f0000000780)=ANY=[@ANYBLOB='@1}'], 0x0, 0x0}) 1.068842687s ago: executing program 0 (id=576): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r3 = socket(0x1c, 0x3, 0x16) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 976.40218ms ago: executing program 4 (id=577): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f00000001c0)=ANY=[], 0x0, 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 873.463423ms ago: executing program 2 (id=578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 855.465224ms ago: executing program 2 (id=579): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x8, 0xffff}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44008854}, 0x4010) 796.412016ms ago: executing program 2 (id=580): r0 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "b1975a9d", {0x1, 0x4, 0x4, 0xff, 0x2}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) 615.628141ms ago: executing program 5 (id=581): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x5c}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) 598.747271ms ago: executing program 5 (id=582): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x68800, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 428.327627ms ago: executing program 4 (id=583): syz_emit_ethernet(0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee427a00743c0020010000000000000000000000000001ff0200000000000000000000000000012f04000000000000c910", @ANYRES16], 0x0) 427.995797ms ago: executing program 4 (id=584): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) syz_emit_ethernet(0x2a, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 412.896448ms ago: executing program 0 (id=585): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 345.82256ms ago: executing program 4 (id=586): fsopen(0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000003c0)='.\x00', 0x5db) tee(r1, r2, 0x1, 0x0) 268.298062ms ago: executing program 4 (id=587): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009050202100202000009058202"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000001080)={0x10, &(0x7f00000000c0)={0x60, 0x8}, 0x0, 0x0}) 267.893292ms ago: executing program 0 (id=588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x574, 0x1b8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4ac, 0xffffffff, 0xffffffff, 0x4ac, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0x33402762bbab0482, 0xffffffff, 0x0, 0xffff00], [0x0, 0xff000000, 0x0, 0xff000000], '\x00', 'veth1_to_hsr\x00', {}, {}, 0x47, 0x4, 0x2}, 0x0, 0x198, 0x1b8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf4}, {0x9, 0x1000000, 0x24, 0x4, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x28c, 0x2f4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x2, 0x6, 0x4, 0x3, 'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x3, 0x6, 0x4, 'syz0\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5d0) 267.409982ms ago: executing program 2 (id=589): r0 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540000102030109026e0003017f0006080b0002012030230904000000010130000a2401100a000900000009040100000102300009040101"], 0x0) syz_usb_connect(0x1, 0x492, &(0x7f0000000e00)=ANY=[@ANYBLOB], &(0x7f0000000dc0)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x310, 0x6, 0x5, 0x97, 0x10, 0x4}, 0xf, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_ep_write(r0, 0x9, 0x0, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x4009, 0x8001, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x35, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0x8, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xb, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_usb_connect$uac3(0x1, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x86a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x0, 0x60, 0x0, {0x8, 0xb, 0x2, 0x1, 0x1, 0x20, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7f, 0x1, 0x35, 0xfc}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x4, 0xf6, "8b23678d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x9, 0x6, {0xa, 0x25, 0x25, 0x2, 0x9, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x2a}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x8, 0xc8, {0xa, 0x25, 0x25, 0x9, 0x4, 0xf00b}}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x1, [{0x58, &(0x7f0000000580)=@string={0x58, 0x3, "c7638f99760d2df9ecbae2525e7805a4326b52b70477bb3e396fed1a4b2370359673318fb0dfcd4a5ed1c488ed21e718575201289a5166dfef2da52492efbb0a0ba8869d5eab16af3db9557812ab445b94372a6bc98f"}}]}) 267.262512ms ago: executing program 0 (id=590): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'ipvlan1\x00', {0x2, 0xe22, @local}}) 236.720663ms ago: executing program 0 (id=591): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r0, &(0x7f0000000040)=""/60, 0x3c, 0x40000003, 0x0, 0x0) 62.999658ms ago: executing program 5 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x40040) 295.16µs ago: executing program 5 (id=593): syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end, @generic={0x59, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 5 (id=594): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x140) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$loop(0x0, 0xf, 0x183043) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r8, 0x0, 0x20000023896) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(r0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.4.43'. [ 44.838542][ T3687] team0: Port device team_slave_0 removed [ 44.861135][ T3704] random: crng reseeded on system resumption [ 44.871378][ T3703] loop0: detected capacity change from 0 to 2048 [ 44.879986][ T3697] netlink: 'syz.3.47': attribute type 12 has an invalid length. [ 44.889046][ T3703] EXT4-fs: quotafile must be on filesystem root [ 44.892270][ T3697] netlink: 'syz.3.47': attribute type 29 has an invalid length. [ 44.911324][ T3697] netlink: 148 bytes leftover after parsing attributes in process `syz.3.47'. [ 44.933908][ T3697] netlink: 'syz.3.47': attribute type 1 has an invalid length. [ 44.950758][ T3697] netlink: 'syz.3.47': attribute type 2 has an invalid length. [ 44.982209][ T3697] netlink: 11 bytes leftover after parsing attributes in process `syz.3.47'. [ 45.146292][ T3709] loop1: detected capacity change from 0 to 512 [ 45.195527][ T3712] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET) [ 45.470839][ T3713] loop3: detected capacity change from 0 to 512 [ 45.574935][ T3713] ------------[ cut here ]------------ [ 45.580648][ T3713] EA inode 11 i_nlink=0 [ 45.580680][ T3713] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.50/3713 [ 45.595637][ T3713] Modules linked in: [ 45.599637][ T3713] CPU: 1 UID: 0 PID: 3713 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT(lazy) [ 45.608879][ T3713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 45.618987][ T3713] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 45.625693][ T3713] Code: 24 52 98 ff 4c 8d 2d 4d 5f 5c 05 49 8d 7e 40 e8 e4 14 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 10 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 8f 94 d8 03 66 66 66 66 66 66 2e [ 45.645382][ T3713] RSP: 0018:ffffc900017b75a8 EFLAGS: 00010246 [ 45.651498][ T3713] RAX: ffff888101f1ad00 RBX: ffff88810827d1f8 RCX: ffffffff81c0e2b8 [ 45.659505][ T3713] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d41f0 [ 45.667523][ T3713] RBP: 000000000000000b R08: 000188810827d1ab R09: 0000000000000000 [ 45.675926][ T3713] R10: ffffc900017b74d8 R11: 0001c900017b74d8 R12: ffff88810827d1a8 [ 45.684032][ T3713] R13: ffffffff871d41f0 R14: ffff88810827d160 R15: 0000000000000001 [ 45.692099][ T3713] FS: 00007f92077d66c0(0000) GS:ffff8882ae9f6000(0000) knlGS:0000000000000000 [ 45.701073][ T3713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.707709][ T3713] CR2: 00007f9208d85fc0 CR3: 000000011afb2000 CR4: 00000000003506f0 [ 45.715845][ T3713] Call Trace: [ 45.719160][ T3713] [ 45.722208][ T3713] ext4_xattr_set_entry+0x77c/0x1010 [ 45.727616][ T3713] ext4_xattr_ibody_set+0x184/0x3c0 [ 45.732946][ T3713] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 45.738813][ T3713] __ext4_expand_extra_isize+0x246/0x280 [ 45.744535][ T3713] __ext4_mark_inode_dirty+0x29b/0x3d0 [ 45.750051][ T3713] ext4_evict_inode+0x8ba/0xe30 [ 45.755042][ T3713] ? __pfx_ext4_evict_inode+0x10/0x10 [ 45.760547][ T3713] evict+0x2af/0x510 [ 45.764552][ T3713] ? __dquot_initialize+0x146/0x7c0 [ 45.769874][ T3713] iput+0x41a/0x580 [ 45.773739][ T3713] ext4_process_orphan+0x1a9/0x1c0 [ 45.778980][ T3713] ext4_orphan_cleanup+0x69c/0x9f0 [ 45.784311][ T3713] ext4_fill_super+0x3408/0x37c0 [ 45.789292][ T3713] ? set_blocksize+0x14c/0x270 [ 45.794113][ T3713] ? setup_bdev_super+0x30e/0x370 [ 45.799199][ T3713] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.804569][ T3713] get_tree_bdev_flags+0x291/0x300 [ 45.809853][ T3713] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.815277][ T3713] get_tree_bdev+0x1f/0x30 [ 45.819816][ T3713] ext4_get_tree+0x1c/0x30 [ 45.824316][ T3713] vfs_get_tree+0x57/0x1d0 [ 45.828785][ T3713] do_new_mount+0x288/0x8d0 [ 45.836003][ T3713] path_mount+0x4d0/0xbc0 [ 45.840397][ T3713] __se_sys_mount+0x28c/0x2e0 [ 45.845161][ T3713] ? restore_fpregs_from_fpstate+0x61/0x110 [ 45.851183][ T3713] __x64_sys_mount+0x67/0x80 [ 45.855870][ T3713] x64_sys_call+0x2d61/0x3020 [ 45.860707][ T3713] do_syscall_64+0x12c/0x3b0 [ 45.865475][ T3713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.871446][ T3713] RIP: 0033:0x7f9208d9e0ca [ 45.875887][ T3713] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.895565][ T3713] RSP: 002b:00007f92077d5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.904025][ T3713] RAX: ffffffffffffffda RBX: 00007f92077d5ee0 RCX: 00007f9208d9e0ca [ 45.912072][ T3713] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f92077d5ea0 [ 45.920119][ T3713] RBP: 0000200000000180 R08: 00007f92077d5ee0 R09: 0000000000000000 [ 45.928154][ T3713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 45.936167][ T3713] R13: 00007f92077d5ea0 R14: 000000000000047a R15: 00002000000001c0 [ 45.944262][ T3713] [ 45.947312][ T3713] ---[ end trace 0000000000000000 ]--- [ 46.242454][ T3713] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.50: bit already cleared for inode 11 [ 46.256467][ T3722] FAULT_INJECTION: forcing a failure. [ 46.256467][ T3722] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.256879][ T3720] loop2: detected capacity change from 0 to 256 [ 46.276483][ T3718] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 46.284330][ T3713] loop3: lost filesystem error report for type 5 error -117 [ 46.301230][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 46.315051][ C1] EXT4-fs (loop3): initial error at time 1780996285: ext4_free_inode:354 [ 46.323547][ C1] EXT4-fs (loop3): last error at time 1780996285: ext4_free_inode:354 [ 46.332129][ T3722] CPU: 1 UID: 0 PID: 3722 Comm: syz.1.53 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 46.332178][ T3722] Tainted: [W]=WARN [ 46.332237][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 46.332253][ T3722] Call Trace: [ 46.332262][ T3722] [ 46.332273][ T3722] __dump_stack+0x1d/0x30 [ 46.332305][ T3722] dump_stack_lvl+0x95/0xd0 [ 46.332393][ T3722] dump_stack+0x15/0x1b [ 46.332412][ T3722] should_fail_ex+0x263/0x280 [ 46.332439][ T3722] should_fail+0xb/0x20 [ 46.332461][ T3722] should_fail_usercopy+0x1a/0x20 [ 46.332549][ T3722] _copy_from_iter+0xcf/0xea0 [ 46.332572][ T3722] ? __alloc_skb+0x4f6/0x690 [ 46.332644][ T3722] ? __alloc_skb+0x200/0x690 [ 46.332674][ T3722] netlink_sendmsg+0x4ae/0x6f0 [ 46.332783][ T3722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.332823][ T3722] ____sys_sendmsg+0x563/0x5b0 [ 46.332853][ T3722] ___sys_sendmsg+0x195/0x1e0 [ 46.332924][ T3722] __x64_sys_sendmsg+0xd4/0x160 [ 46.332960][ T3722] x64_sys_call+0x194c/0x3020 [ 46.333027][ T3722] do_syscall_64+0x12c/0x3b0 [ 46.333135][ T3722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.333174][ T3722] RIP: 0033:0x7f9c7b80ce59 [ 46.333190][ T3722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.333208][ T3722] RSP: 002b:00007f9c7a267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.333276][ T3722] RAX: ffffffffffffffda RBX: 00007f9c7ba85fa0 RCX: 00007f9c7b80ce59 [ 46.333290][ T3722] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 46.333305][ T3722] RBP: 00007f9c7a267090 R08: 0000000000000000 R09: 0000000000000000 [ 46.333322][ T3722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.333337][ T3722] R13: 00007f9c7ba86038 R14: 00007f9c7ba85fa0 R15: 00007ffdfb780138 [ 46.333357][ T3722] [ 46.560490][ T3713] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 46.569321][ T3713] loop3: lost filesystem error report for type 5 error -117 [ 46.572687][ T3713] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 46.592080][ T3713] loop3: lost filesystem error report for type 5 error -117 [ 46.592237][ T3713] EXT4-fs (loop3): 1 orphan inode deleted [ 46.649713][ T3713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.696712][ T3727] loop4: detected capacity change from 0 to 512 [ 46.756424][ T3727] EXT4-fs: Ignoring removed orlov option [ 46.787197][ T3727] EXT4-fs: dax option not supported [ 46.797889][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 46.840537][ T3729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54'. [ 46.861056][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.021750][ T3738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'. [ 47.044727][ T3740] loop1: detected capacity change from 0 to 512 [ 47.057975][ T3741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 47.067847][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 47.067860][ T28] audit: type=1400 audit(1780996286.195:318): avc: denied { create } for pid=3737 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 47.099568][ T3743] loop4: detected capacity change from 0 to 1024 [ 47.150139][ T3741] netlink: 40 bytes leftover after parsing attributes in process `syz.1.59'. [ 47.165099][ T28] audit: type=1400 audit(1780996286.225:319): avc: denied { write } for pid=3737 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 47.250821][ T28] audit: type=1400 audit(1780996286.235:320): avc: denied { write } for pid=3737 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.271086][ T28] audit: type=1400 audit(1780996286.235:321): avc: denied { read } for pid=3737 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.292765][ T28] audit: type=1400 audit(1780996286.325:322): avc: denied { create } for pid=3737 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.312315][ T28] audit: type=1400 audit(1780996286.345:323): avc: denied { setopt } for pid=3737 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.343702][ T28] audit: type=1400 audit(1780996286.465:324): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.391849][ T3753] capability: warning: `syz.1.63' uses 32-bit capabilities (legacy support in use) [ 47.402478][ T28] audit: type=1400 audit(1780996286.535:325): avc: denied { bind } for pid=3752 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.451663][ T28] audit: type=1400 audit(1780996286.535:326): avc: denied { name_bind } for pid=3752 comm="syz.1.63" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 47.479906][ T28] audit: type=1400 audit(1780996286.535:327): avc: denied { node_bind } for pid=3752 comm="syz.1.63" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 47.517021][ T3763] EXT4-fs: inline encryption not supported [ 47.524809][ T3763] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.537979][ T3763] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.65: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.552393][ T3763] loop2: lost filesystem error report for type 5 error -117 [ 47.552825][ T3763] EXT4-fs (loop2): Remounting filesystem read-only [ 47.566761][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 47.566787][ C0] EXT4-fs (loop2): initial error at time 1780996286: ext4_free_blocks:6718 [ 47.566815][ C0] EXT4-fs (loop2): last error at time 1780996286: ext4_free_blocks:6718 [ 47.590646][ T3763] EXT4-fs (loop2): 1 orphan inode deleted [ 47.597101][ T3763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.598947][ T3751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.623654][ T72] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 47.626427][ T3751] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.646638][ T72] EXT4-fs (loop2): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 47.664843][ T3773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.676594][ T72] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.688888][ T3773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.726020][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.794865][ T3780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.807250][ T3777] syzkaller0: entered promiscuous mode [ 47.812895][ T3777] syzkaller0: entered allmulticast mode [ 47.818951][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.833054][ T3780] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.848502][ T3780] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.860862][ T3780] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.860862][ T3780] [ 47.871249][ T3780] EXT4-fs (loop2): Total free blocks count 0 [ 47.877363][ T3780] EXT4-fs (loop2): Free/Dirty block details [ 47.883788][ T3780] EXT4-fs (loop2): free_blocks=2415919104 [ 47.889620][ T3780] EXT4-fs (loop2): dirty_blocks=32 [ 47.895088][ T3780] EXT4-fs (loop2): Block reservation details [ 47.901642][ T3780] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 47.963849][ T3787] bond0: (slave veth1_to_batadv): Error: Device can not be enslaved while up [ 48.065768][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 48.078966][ T3301] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 48.141873][ T3797] xt_hashlimit: size too large, truncated to 1048576 [ 48.344087][ T36] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 48.433081][ T3805] set_capacity_and_notify: 4 callbacks suppressed [ 48.433102][ T3805] loop4: detected capacity change from 0 to 512 [ 48.453369][ T3809] bridge_slave_1: left allmulticast mode [ 48.474881][ T3809] bridge_slave_1: left promiscuous mode [ 48.490705][ T3805] ext3: Unknown parameter 'smackfsroot' [ 48.502394][ T3809] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.530765][ T3805] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 48.542887][ T3809] bridge_slave_0: left allmulticast mode [ 48.548611][ T3809] bridge_slave_0: left promiscuous mode [ 48.554784][ T3809] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.594245][ T3805] netlink: 'syz.4.73': attribute type 16 has an invalid length. [ 48.648704][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.656068][ T3805] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.725948][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.736781][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.780348][ T3830] loop0: detected capacity change from 0 to 128 [ 48.797730][ T3830] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.811849][ T3830] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.848606][ T72] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.866655][ T72] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.913148][ T72] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.923205][ T72] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.927753][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.964125][ T3837] loop1: detected capacity change from 0 to 512 [ 48.987567][ T3837] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.025720][ T3837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.048130][ T3837] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.81: corrupted xattr entries [ 49.059626][ T3837] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.059863][ T3837] EXT4-fs (loop1): Remounting filesystem read-only [ 49.063860][ T3843] capability: warning: `syz.0.82' uses deprecated v2 capabilities in a way that may be insecure [ 49.069101][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 49.069121][ C0] EXT4-fs (loop1): initial error at time 1780996288: xattr_find_entry:337: inode 15 [ 49.069157][ C0] EXT4-fs (loop1): last error at time 1780996288: xattr_find_entry:337: inode 15 [ 49.070171][ T3837] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.070227][ T3837] EXT4-fs (loop1): 1 truncate cleaned up [ 49.071016][ T3837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.338031][ T3859] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 49.377088][ T3859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=3859 comm=syz.3.89 [ 49.404461][ T3859] loop3: detected capacity change from 0 to 128 [ 49.839286][ T30] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 49.978225][ T3887] syzkaller1: entered promiscuous mode [ 50.013094][ T3887] syzkaller1: entered allmulticast mode [ 50.040540][ T3885] loop2: detected capacity change from 0 to 7 [ 50.191406][ T3893] loop2: detected capacity change from 0 to 512 [ 50.215545][ T3893] msdos: Unknown parameter 'fowner>18' [ 50.261274][ T3896] __nla_validate_parse: 5 callbacks suppressed [ 50.261294][ T3896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'. [ 50.295995][ T3896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'. [ 50.344743][ T3898] IPVS: length: 36 != 24 [ 50.381621][ T3902] loop2: detected capacity change from 0 to 512 [ 50.399480][ T3902] EXT4-fs (loop2): 1 truncate cleaned up [ 50.414998][ T3902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.603939][ T3855] Set syz1 is full, maxelem 65536 reached [ 50.604019][ T3909] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.100: invalid indirect mapped block 234881024 (level 0) [ 50.647548][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.697408][ T3911] loop1: detected capacity change from 0 to 256 [ 50.708915][ T3913] loop3: detected capacity change from 0 to 512 [ 50.738043][ T3913] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.777722][ T3913] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.104: bad orphan inode 15 [ 50.801328][ T3913] loop3: lost filesystem error report for type 5 error -117 [ 50.808537][ T3913] ext4_test_bit(bit=14, block=18) = 1 [ 50.816007][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 50.816029][ C0] EXT4-fs (loop3): initial error at time 1780996289: ext4_orphan_get:1423 [ 50.816049][ C0] EXT4-fs (loop3): last error at time 1780996289: ext4_orphan_get:1423 [ 50.844934][ T3913] is_bad_inode(inode)=0 [ 50.849192][ T3913] NEXT_ORPHAN(inode)=1023 [ 50.853585][ T3913] max_ino=32 [ 50.856818][ T3913] i_nlink=0 [ 50.861673][ T3913] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.104: corrupted xattr block 19: e_value size too large [ 50.892707][ T3913] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.894161][ T3913] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 50.983350][ T3913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 51.021956][ T3922] loop1: detected capacity change from 0 to 128 [ 51.266145][ T3927] EXT4-fs: Ignoring removed bh option [ 51.342753][ T3927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.363727][ T3927] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.387927][ T3927] mmap: syz.0.107 (3927) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.565266][ T3927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'. [ 51.726485][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.815318][ T3300] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /19/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=4096, size=4096 fake=0 [ 51.945498][ T3931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.989991][ T3300] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 52.008757][ T3933] msdos: Unknown parameter 'fowner>00' [ 52.227670][ T3300] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 52.910559][ T3943] vfat: Bad value for 'shortname' [ 52.940609][ T28] kauditd_printk_skb: 527 callbacks suppressed [ 52.940630][ T28] audit: type=1326 audit(1780996291.765:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012632][ T28] audit: type=1326 audit(1780996291.765:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012671][ T28] audit: type=1326 audit(1780996291.765:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012725][ T28] audit: type=1326 audit(1780996291.765:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012753][ T28] audit: type=1326 audit(1780996291.765:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012785][ T28] audit: type=1326 audit(1780996291.765:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012834][ T28] audit: type=1326 audit(1780996291.765:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012862][ T28] audit: type=1326 audit(1780996291.765:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012896][ T28] audit: type=1326 audit(1780996291.765:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.012982][ T28] audit: type=1326 audit(1780996292.125:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.2.112" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7ffc0000 [ 53.184044][ T3945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.292599][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.542511][ T3924] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 53.585302][ T72] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.637595][ T3961] set_capacity_and_notify: 4 callbacks suppressed [ 53.637614][ T3961] loop1: detected capacity change from 0 to 512 [ 53.665416][ T72] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.719770][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.744363][ T72] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.767351][ T3963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 53.779198][ T3963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 53.789223][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 53.824084][ T72] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.836787][ T3965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'. [ 53.847771][ T3965] syz.1.120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.126507][ T3971] loop2: detected capacity change from 0 to 256 [ 54.344964][ T72] bridge_slave_1: left allmulticast mode [ 54.350689][ T72] bridge_slave_1: left promiscuous mode [ 54.361773][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.505933][ T72] bridge_slave_0: left allmulticast mode [ 54.589892][ T72] bridge_slave_0: left promiscuous mode [ 54.641342][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.877787][ T3994] loop1: detected capacity change from 0 to 1024 [ 54.900612][ T3994] EXT4-fs: Ignoring removed orlov option [ 54.964353][ T3973] loop0: detected capacity change from 0 to 256 [ 54.977426][ T3994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.991568][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.012938][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.025504][ T72] bond0 (unregistering): Released all slaves [ 55.079360][ T4016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 55.095144][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 55.117470][ T4019] loop4: detected capacity change from 0 to 512 [ 55.142096][ T4019] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.128: corrupted inode contents [ 55.166706][ T4019] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.168195][ T4019] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.128: mark_inode_dirty error [ 55.177412][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 55.177440][ C1] EXT4-fs (loop4): initial error at time 1780996294: ext4_do_update_inode:5690: inode 16 [ 55.177471][ C1] EXT4-fs (loop4): last error at time 1780996294: ext4_do_update_inode:5690: inode 16 [ 55.219097][ T72] hsr_slave_0: left promiscuous mode [ 55.231498][ T4019] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.231665][ T4019] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.128: corrupted inode contents [ 55.252810][ T4019] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.254421][ T72] hsr_slave_1: left promiscuous mode [ 55.273897][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.288352][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.305725][ T4019] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.128: mark_inode_dirty error [ 55.317072][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.325009][ T4019] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.325175][ T4019] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.128: corrupted inode contents [ 55.346833][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.354463][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.365315][ T4019] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.365574][ T72] veth1_macvtap: left promiscuous mode [ 55.372163][ T4019] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 55.375734][ T72] veth0_macvtap: left promiscuous mode [ 55.394416][ T4019] loop4: lost filesystem error report for type 5 error -117 [ 55.395869][ T72] veth1_vlan: left promiscuous mode [ 55.395886][ T4019] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.128: corrupted inode contents [ 55.395911][ T4019] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.404043][ T72] veth0_vlan: left promiscuous mode [ 55.436594][ T4019] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.128: mark_inode_dirty error [ 55.462668][ T4030] netlink: 'syz.1.130': attribute type 21 has an invalid length. [ 55.470643][ T4019] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.470927][ T4019] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 55.489326][ T4019] loop4: lost filesystem error report for type 5 error -117 [ 55.494379][ T4019] EXT4-fs (loop4): 1 truncate cleaned up [ 55.519007][ T4019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.531990][ T3432] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 55.543436][ T4019] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.584216][ T72] team0 (unregistering): Port device team_slave_1 removed [ 55.595422][ T72] team0 (unregistering): Port device team_slave_0 removed [ 55.687331][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 55.736096][ T4048] loop0: detected capacity change from 0 to 512 [ 55.755531][ T4048] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 55.786004][ T4048] EXT4-fs (loop0): 1 truncate cleaned up [ 55.798937][ T4048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.990815][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.021912][ T4067] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 56.049722][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.118644][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 56.121506][ T4072] netlink: 'syz.4.136': attribute type 12 has an invalid length. [ 56.121522][ T4072] netlink: 'syz.4.136': attribute type 29 has an invalid length. [ 56.121613][ T4072] netlink: 148 bytes leftover after parsing attributes in process `syz.4.136'. [ 56.121634][ T4072] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 56.121650][ T4072] netlink: 'syz.4.136': attribute type 2 has an invalid length. [ 56.121664][ T4072] netlink: 11 bytes leftover after parsing attributes in process `syz.4.136'. [ 56.333582][ T4091] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 56.450152][ T4103] loop1: detected capacity change from 0 to 512 [ 56.468698][ T4103] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.511127][ T4103] EXT4-fs (loop1): 1 truncate cleaned up [ 56.544049][ T4103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.736935][ T4117] loop4: detected capacity change from 0 to 512 [ 56.768917][ T4117] EXT4-fs error (device loop4): __ext4_fill_super:5596: inode #2: comm syz.4.144: iget: bad extended attribute block 2037609061 [ 56.795866][ T4117] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 56.801245][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 56.820806][ C1] EXT4-fs (loop4): initial error at time 1780996295: __ext4_fill_super:5596: inode 2 [ 56.830876][ T4117] EXT4-fs (loop4): get root inode failed [ 56.830885][ C1] EXT4-fs (loop4): last error at time 1780996295: __ext4_fill_super:5596: inode 2 [ 56.841243][ T4091] bond2: entered promiscuous mode [ 56.861149][ T4117] EXT4-fs (loop4): mount failed [ 56.880106][ T4091] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.895878][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.945326][ T4123] loop1: detected capacity change from 0 to 512 [ 56.958788][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 56.972274][ T4123] EXT4-fs: Ignoring removed nobh option [ 56.980238][ T4123] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 57.007313][ T4123] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.145: inode has both inline data and extents flags [ 57.031525][ T4123] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.031775][ T4123] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.145: couldn't read orphan inode 13 (err -117) [ 57.052772][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 57.052814][ C0] EXT4-fs (loop1): initial error at time 1780996296: ext4_orphan_get:1397: inode 13 [ 57.052849][ C0] EXT4-fs (loop1): last error at time 1780996296: ext4_orphan_get:1397: inode 13 [ 57.070546][ T4128] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 57.094435][ T4128] team0: Port device dummy0 added [ 57.095027][ T4123] loop1: lost filesystem error report for type 5 error -117 [ 57.101565][ T4123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.109440][ T4131] netlink: 148 bytes leftover after parsing attributes in process `syz.2.148'. [ 57.121499][ T4128] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 57.146016][ T4128] team0: Port device dummy0 removed [ 57.159601][ T4128] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.169581][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.209832][ T3980] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.222843][ T3980] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.236746][ T3980] bridge_slave_0: entered allmulticast mode [ 57.246382][ T3980] bridge_slave_0: entered promiscuous mode [ 57.275718][ T4138] bridge0: port 3(batadv1) entered blocking state [ 57.285459][ T4138] bridge0: port 3(batadv1) entered disabled state [ 57.292070][ T4138] batadv1: entered allmulticast mode [ 57.298115][ T4138] batadv1: entered promiscuous mode [ 57.303791][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.311372][ T3980] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.319060][ T3980] bridge_slave_1: entered allmulticast mode [ 57.325907][ T3980] bridge_slave_1: entered promiscuous mode [ 57.341048][ T4134] netlink: 'syz.1.149': attribute type 10 has an invalid length. [ 57.349121][ T4134] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.356384][ T4134] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.383086][ T4134] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.390272][ T4134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.397591][ T4134] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.404699][ T4134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.451628][ T4134] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 57.483438][ T3980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.522391][ T3980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.559790][ T3980] team0: Port device team_slave_0 added [ 57.578410][ T3980] team0: Port device team_slave_1 added [ 57.634393][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 57.648828][ T3980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.664413][ T3980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.710917][ T3980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.736191][ T3980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.753537][ T3980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.782069][ T72] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 57.791348][ T72] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 57.802373][ T3980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.842456][ T3980] hsr_slave_0: entered promiscuous mode [ 57.848891][ T3980] hsr_slave_1: entered promiscuous mode [ 57.863657][ T3980] debugfs: 'hsr0' already exists in 'hsr' [ 57.869655][ T3980] Cannot create hsr debugfs directory [ 58.106215][ T3980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.128442][ T3980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 58.143351][ T3980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.162647][ T3980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 58.181178][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 58.181198][ T28] audit: type=1400 audit(1780996297.305:1022): avc: denied { bind } for pid=4194 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.260879][ T3980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.270305][ T3980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 58.281924][ T3980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.307145][ T3980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 58.360624][ T3980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.391619][ T3980] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.403736][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.410946][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.447487][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.454629][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.318979][ T28] audit: type=1400 audit(1780996298.385:1023): avc: denied { bind } for pid=4212 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.338358][ T28] audit: type=1400 audit(1780996298.385:1024): avc: denied { setopt } for pid=4212 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.359130][ T28] audit: type=1400 audit(1780996298.385:1025): avc: denied { write } for pid=4212 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.647539][ T3980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.655231][ T4226] loop0: detected capacity change from 0 to 8192 [ 59.711439][ T4226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'. [ 59.761662][ T28] audit: type=1400 audit(1780996298.885:1026): avc: denied { remount } for pid=4225 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 59.856187][ T28] audit: type=1400 audit(1780996298.975:1027): avc: denied { write } for pid=4203 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.894386][ T4224] loop4: detected capacity change from 0 to 512 [ 59.900797][ T28] audit: type=1400 audit(1780996299.015:1028): avc: denied { write } for pid=4203 comm="syz.4.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.922763][ T4224] msdos: Bad value for 'check' [ 59.927892][ T28] audit: type=1400 audit(1780996299.025:1029): avc: denied { bind } for pid=4247 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.947921][ T28] audit: type=1400 audit(1780996299.025:1030): avc: denied { ioctl } for pid=4247 comm="syz.2.164" path="socket:[8200]" dev="sockfs" ino=8200 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.974155][ T28] audit: type=1400 audit(1780996299.025:1031): avc: denied { create } for pid=4247 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.051787][ T4263] netlink: 'syz.1.170': attribute type 2 has an invalid length. [ 60.071809][ T4263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.170'. [ 60.125310][ T3980] veth0_vlan: entered promiscuous mode [ 60.137060][ T4268] loop2: detected capacity change from 0 to 2048 [ 60.158053][ T3980] veth1_vlan: entered promiscuous mode [ 60.171346][ T4263] loop1: detected capacity change from 0 to 2048 [ 60.204291][ T4268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.215484][ T3980] veth0_macvtap: entered promiscuous mode [ 60.227986][ T4268] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.234331][ T3980] veth1_macvtap: entered promiscuous mode [ 60.247752][ T4263] loop1: p1 p2 p3 [ 60.252407][ T3980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.261371][ T3980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.268856][ T4263] loop1: p1 size 16777216 extends beyond EOD, truncated [ 60.277067][ T4263] loop1: p2 size 458752 extends beyond EOD, truncated [ 60.284831][ T4263] loop1: p3 start 3036741376 is beyond EOD, truncated [ 60.296661][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.306109][ T4278] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.174'. [ 60.306143][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.334209][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.351155][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.360845][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 60.388158][ T3977] udevd[3977]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 60.470542][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.530587][ T4293] validate_nla: 3 callbacks suppressed [ 60.530602][ T4293] netlink: 'syz.4.178': attribute type 12 has an invalid length. [ 60.564519][ T4293] netlink: 'syz.4.178': attribute type 29 has an invalid length. [ 60.597544][ T4293] netlink: 148 bytes leftover after parsing attributes in process `syz.4.178'. [ 60.607616][ T4299] loop1: detected capacity change from 0 to 512 [ 60.621607][ T4293] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 60.639063][ T4299] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 60.645670][ T4293] netlink: 'syz.4.178': attribute type 2 has an invalid length. [ 60.654661][ T4299] EXT4-fs (loop1): orphan cleanup on readonly fs [ 60.658689][ T4299] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.180: Failed to acquire dquot type 1 [ 60.685588][ T4293] netlink: 11 bytes leftover after parsing attributes in process `syz.4.178'. [ 60.686025][ T4299] loop1: lost filesystem error report for type 5 error -5 [ 60.715433][ T4299] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.180: bg 0: block 40: padding at end of block bitmap is not set [ 60.722644][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 60.722663][ C1] EXT4-fs (loop1): initial error at time 1780996299: ext4_acquire_dquot:7034 [ 60.722693][ C1] EXT4-fs (loop1): last error at time 1780996299: ext4_acquire_dquot:7034 [ 60.823357][ T4299] loop1: lost filesystem error report for type 5 error -117 [ 60.823528][ T4299] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 60.863961][ T4299] loop1: lost filesystem error report for type 5 error -117 [ 60.864206][ T4299] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.180: data will be lost [ 60.909610][ T4299] EXT4-fs (loop1): 1 truncate cleaned up [ 60.919021][ T4299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.070955][ T4312] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.180: corrupted xattr block 31: invalid header [ 61.176871][ T4314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 61.194923][ T4312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 61.218435][ T4314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.179'. [ 61.234786][ T4312] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.180: corrupted xattr block 31: invalid header [ 61.263846][ T4312] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 61.295578][ T4312] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.180: bad symlink. [ 61.408284][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.493015][ T4329] syzkaller0: entered promiscuous mode [ 61.505447][ T4329] syzkaller0: entered allmulticast mode [ 61.521895][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.529194][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.550672][ T4323] loop0: detected capacity change from 0 to 8192 [ 61.595473][ T4323] FAT-fs (loop0): bogus logical sector size 0 [ 61.604600][ T4336] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 61.605562][ T4323] FAT-fs (loop0): Can't find a valid FAT filesystem [ 61.655487][ T4336] bond3: entered promiscuous mode [ 61.684499][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 61.726814][ T4336] bond3: entered allmulticast mode [ 61.756225][ T4336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.814873][ T4340] bond3 (unregistering): Released all slaves [ 61.947404][ T4354] loop2: detected capacity change from 0 to 764 [ 62.323493][ T4370] loop0: detected capacity change from 0 to 512 [ 62.347431][ T4370] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 62.362872][ T4370] EXT4-fs (loop0): orphan cleanup on readonly fs [ 62.375317][ T4370] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.199: Failed to acquire dquot type 1 [ 62.417706][ T4370] loop0: lost filesystem error report for type 5 error -5 [ 62.421233][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 62.434891][ C0] EXT4-fs (loop0): initial error at time 1780996301: ext4_acquire_dquot:7034 [ 62.443815][ C0] EXT4-fs (loop0): last error at time 1780996301: ext4_acquire_dquot:7034 [ 62.461608][ T4370] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.199: bg 0: block 40: padding at end of block bitmap is not set [ 62.519818][ T4370] loop0: lost filesystem error report for type 5 error -117 [ 62.520032][ T4370] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 62.568819][ T4370] loop0: lost filesystem error report for type 5 error -117 [ 62.570373][ T4370] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.199: data will be lost [ 62.593921][ T4370] EXT4-fs (loop0): 1 truncate cleaned up [ 62.627805][ T4370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.638882][ T4377] loop5: detected capacity change from 0 to 512 [ 62.688614][ T4377] EXT4-fs: test_dummy_encryption option not supported [ 62.728916][ T4383] loop1: detected capacity change from 0 to 256 [ 62.741058][ T4383] vfat: Unknown parameter 'shortname.winnt' [ 62.914174][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 62.944164][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.131341][ T4398] netlink: 264 bytes leftover after parsing attributes in process `syz.5.208'. [ 64.166796][ T4420] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.176234][ T4420] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.182951][ T4420] __quota_error: 127 callbacks suppressed [ 64.183015][ T4420] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 64.197822][ T4420] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 64.207633][ T4420] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.215: Failed to acquire dquot type 1 [ 64.218874][ T4420] loop1: lost filesystem error report for type 5 error -5 [ 64.221225][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 64.234876][ C0] EXT4-fs (loop1): initial error at time 1780996303: ext4_acquire_dquot:7034 [ 64.243735][ C0] EXT4-fs (loop1): last error at time 1780996303: ext4_acquire_dquot:7034 [ 64.280239][ T4420] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.215: bg 0: block 40: padding at end of block bitmap is not set [ 64.323363][ T4420] loop1: lost filesystem error report for type 5 error -117 [ 64.323594][ T4420] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 64.342747][ T4420] loop1: lost filesystem error report for type 5 error -117 [ 64.345858][ T4420] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.215: data will be lost [ 64.364275][ T4420] EXT4-fs (loop1): 1 truncate cleaned up [ 64.374305][ T4420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.469759][ T4433] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 64.486641][ T4423] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 64.500530][ T4435] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.215: corrupted xattr block 31: invalid header [ 64.525233][ T4433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 64.528692][ T4435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 64.562774][ T4435] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.215: corrupted xattr block 31: invalid header [ 64.587632][ T28] audit: type=1400 audit(1780996303.715:1155): avc: denied { connect } for pid=4430 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.610398][ T4435] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 64.621424][ T4435] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.215: bad symlink. [ 64.627649][ T4444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.221'. [ 64.655018][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.764170][ T4438] set_capacity_and_notify: 2 callbacks suppressed [ 64.764190][ T4438] loop2: detected capacity change from 0 to 4096 [ 64.785428][ T4438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.823099][ T4438] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.010594][ T4459] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 65.037138][ T4459] bond1: entered promiscuous mode [ 65.043859][ T4459] bond1: entered allmulticast mode [ 65.051644][ T4459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.076731][ T4459] bridge0: entered promiscuous mode [ 65.085475][ T4459] bridge0: entered allmulticast mode [ 65.096645][ T4459] bond1: (slave bridge0): Enslaving as a backup interface with an up link [ 65.113414][ T4459] bridge1: entered promiscuous mode [ 65.119417][ T4459] bridge1: entered allmulticast mode [ 65.133551][ T4459] bond1: (slave bridge1): Enslaving as a backup interface with a down link [ 65.147968][ T4459] bridge2: entered promiscuous mode [ 65.153604][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 65.165036][ T4459] bridge2: entered allmulticast mode [ 65.171164][ T4459] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 65.272484][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 65.335038][ T28] audit: type=1326 audit(1780996304.455:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.2.220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69adeace59 code=0x7fc00000 [ 65.400431][ T4470] loop5: detected capacity change from 0 to 1024 [ 65.503149][ T28] audit: type=1400 audit(1780996304.565:1157): avc: denied { write } for pid=4471 comm="syz.2.231" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 65.583872][ T4483] loop2: detected capacity change from 0 to 512 [ 65.613901][ T4483] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.686714][ T4470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.706399][ T4483] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.735566][ T4483] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 65.818106][ T4483] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 65.898934][ T4483] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.232: Failed to acquire dquot type 1 [ 65.928952][ T4483] loop2: lost filesystem error report for type 5 error -5 [ 65.931234][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 65.944951][ C0] EXT4-fs (loop2): initial error at time 1780996305: ext4_acquire_dquot:7034 [ 65.953799][ C0] EXT4-fs (loop2): last error at time 1780996305: ext4_acquire_dquot:7034 [ 65.963020][ T4483] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.232: bg 0: block 40: padding at end of block bitmap is not set [ 65.978976][ T4483] loop2: lost filesystem error report for type 5 error -117 [ 65.979214][ T4483] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 66.007502][ T28] audit: type=1326 audit(1780996305.135:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.5.230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023243ce59 code=0x7ffc0000 [ 66.030673][ T4483] loop2: lost filesystem error report for type 5 error -117 [ 66.032957][ T28] audit: type=1326 audit(1780996305.135:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.5.230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023243ce59 code=0x7ffc0000 [ 66.036681][ T4483] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.232: data will be lost [ 66.040387][ T28] audit: type=1326 audit(1780996305.135:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4468 comm="syz.5.230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023243ce59 code=0x7ffc0000 [ 66.103332][ T4483] EXT4-fs (loop2): 1 truncate cleaned up [ 66.109406][ T4483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.156338][ T4483] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.232: corrupted xattr block 31: invalid header [ 66.172081][ T4483] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 66.182844][ T4483] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #16: comm syz.2.232: corrupted xattr block 31: invalid header [ 66.203210][ T4483] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 66.226174][ T4483] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.232: bad symlink. [ 66.251937][ T3980] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.283901][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.568399][ T4525] x_tables: duplicate underflow at hook 2 [ 66.592015][ T4527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.243'. [ 66.612504][ T4527] netlink: 14 bytes leftover after parsing attributes in process `syz.1.243'. [ 66.663634][ T4527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.716152][ T4527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.773659][ T4527] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 66.796135][ T4532] loop1: detected capacity change from 0 to 8192 [ 66.825906][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.833279][ T4527] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.845684][ T4527] bond0 (unregistering): Released all slaves [ 66.907221][ T4541] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 66.916375][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 66.927912][ T4543] loop4: detected capacity change from 0 to 512 [ 66.939747][ T4544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 66.974230][ T4543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.035186][ T4543] ext4 filesystem being mounted at /46/À supports timestamps until 2038-01-19 (0x7fffffff) [ 67.132377][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.272938][ T4558] loop5: detected capacity change from 0 to 2048 [ 68.554237][ T4563] loop0: detected capacity change from 0 to 1024 [ 68.582205][ T4558] loop5: p1 p4 [ 68.821828][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.249'. [ 68.830955][ T4561] netlink: 48 bytes leftover after parsing attributes in process `syz.5.249'. [ 69.113602][ T4558] loop5: p4 size 589824 extends beyond EOD, truncated [ 69.589532][ T4563] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.639933][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 70.639948][ T28] audit: type=1400 audit(1780996309.765:1238): avc: denied { setattr } for pid=4577 comm="syz.4.254" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 70.679358][ T4563] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 70.999894][ T3977] udevd[3977]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 71.101783][ T4582] SELinux: failed to load policy [ 71.302154][ T28] audit: type=1400 audit(1780996310.235:1239): avc: denied { read } for pid=4580 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.302224][ T28] audit: type=1400 audit(1780996310.235:1240): avc: denied { load_policy } for pid=4580 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.302313][ T28] audit: type=1400 audit(1780996310.435:1241): avc: denied { create } for pid=4570 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 71.336768][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 71.399100][ T28] audit: type=1400 audit(1780996310.505:1242): avc: denied { write } for pid=4581 comm="syz.2.255" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 71.443830][ T4590] tipc: Started in network mode [ 71.443854][ T4590] tipc: Node identity 4, cluster identity 4711 [ 71.528287][ T4590] tipc: Node number set to 4 [ 71.631457][ T4605] netlink: 'syz.0.257': attribute type 10 has an invalid length. [ 71.631568][ T4605] team0: Device veth0_macvtap is up. Set it down before adding it as a team port [ 71.686630][ T28] audit: type=1400 audit(1780996310.815:1243): avc: denied { write } for pid=4565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.702187][ T4596] loop2: detected capacity change from 0 to 4096 [ 71.702670][ T4596] ext3: Unknown parameter 'noacl' [ 71.774225][ T4585] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4585 comm=syz.2.255 [ 71.779850][ T28] audit: type=1400 audit(1780996310.905:1244): avc: denied { lock } for pid=4611 comm="syz.1.260" path="socket:[8821]" dev="sockfs" ino=8821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 71.865730][ T28] audit: type=1400 audit(1780996310.945:1245): avc: denied { write } for pid=4617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.027690][ T4585] pim6reg: entered allmulticast mode [ 72.108881][ T4635] loop0: detected capacity change from 0 to 1024 [ 72.109638][ T4635] EXT4-fs: quotafile must be on filesystem root [ 72.118624][ T4635] netlink: 72 bytes leftover after parsing attributes in process `syz.0.262'. [ 72.411401][ T4634] loop1: detected capacity change from 0 to 1764 [ 72.822691][ T4585] loop2: detected capacity change from 0 to 512 [ 73.012353][ T28] audit: type=1400 audit(1780996312.145:1246): avc: denied { write } for pid=4623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.101305][ T4643] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.101341][ T4643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.101473][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.101531][ T4643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.124957][ T28] audit: type=1400 audit(1780996312.255:1247): avc: denied { write } for pid=4647 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.136375][ T4585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.334032][ T4643] bridge0: port 3(batadv1) entered blocking state [ 73.334065][ T4643] bridge0: port 3(batadv1) entered forwarding state [ 73.334188][ T4643] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 74.033626][ T4660] loop5: detected capacity change from 0 to 512 [ 74.038945][ T4660] EXT4-fs: Ignoring removed bh option [ 74.099994][ T4660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.103388][ T4660] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.149785][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.744315][ T4671] loop0: detected capacity change from 0 to 512 [ 75.756514][ T4671] EXT4-fs: Ignoring removed bh option [ 77.204714][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 77.204732][ T28] audit: type=1400 audit(1780996316.335:1249): avc: denied { write } for pid=4657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.425767][ T4671] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 77.440574][ T28] audit: type=1400 audit(1780996316.565:1250): avc: denied { listen } for pid=4679 comm="syz.2.268" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.486091][ T3980] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.501171][ T35] IPVS: starting estimator thread 0... [ 77.602000][ T4687] IPVS: using max 1968 ests per chain, 98400 per kthread [ 77.643060][ T28] audit: type=1400 audit(1780996316.775:1251): avc: denied { map } for pid=4690 comm="syz.2.272" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.777016][ T4692] loop2: detected capacity change from 0 to 8192 [ 77.818521][ T4697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 77.828059][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 77.842087][ T4697] netlink: 16 bytes leftover after parsing attributes in process `syz.4.273'. [ 77.906036][ T28] audit: type=1400 audit(1780996317.035:1252): avc: denied { write } for pid=4701 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.940759][ T4692] loop2: p1 p2 p3 p4 [ 77.955388][ T4692] loop2: p1 start 51379968 is beyond EOD, truncated [ 77.973031][ T4692] loop2: p3 size 100663552 extends beyond EOD, truncated [ 77.994707][ T4692] loop2: p4 size 81920 extends beyond EOD, truncated [ 78.012118][ T28] audit: type=1400 audit(1780996317.115:1253): avc: denied { cmd } for pid=4704 comm="syz.0.274" path="socket:[8988]" dev="sockfs" ino=8988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.047328][ T4708] syzkaller0: entered promiscuous mode [ 78.062591][ T4708] syzkaller0: entered allmulticast mode [ 78.101586][ T4711] tun0: tun_chr_ioctl cmd 2147767506 [ 78.135680][ T28] audit: type=1400 audit(1780996572.268:1254): avc: denied { write } for pid=4705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.178808][ T28] audit: type=1400 audit(1780996572.278:1255): avc: denied { create } for pid=4715 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.232859][ T4727] loop5: detected capacity change from 0 to 512 [ 78.258040][ T28] audit: type=1400 audit(1780996572.288:1256): avc: denied { listen } for pid=4715 comm="syz.0.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.288722][ T4733] loop1: detected capacity change from 0 to 512 [ 78.304058][ T28] audit: type=1400 audit(1780996572.328:1257): avc: denied { write } for pid=4724 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.308464][ T4716] IPv6: sit1: Disabled Multicast RS [ 78.346930][ T4727] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 78.366210][ T4733] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 78.378323][ T4727] EXT4-fs (loop5): orphan cleanup on readonly fs [ 78.388043][ T4692] loop2: detected capacity change from 0 to 8192 [ 78.394718][ T4733] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.395572][ T4727] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 78.414381][ T4727] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.278: Failed to acquire dquot type 1 [ 78.423797][ T4733] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.279: Failed to acquire dquot type 1 [ 78.426862][ T4727] loop5: lost filesystem error report for type 5 error -5 [ 78.437354][ T4727] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.278: bg 0: block 40: padding at end of block bitmap is not set [ 78.444563][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 78.444584][ C0] EXT4-fs (loop5): initial error at time 1780996572: ext4_acquire_dquot:7034 [ 78.444609][ C0] EXT4-fs (loop5): last error at time 1780996572: ext4_acquire_dquot:7034 [ 78.451427][ T4733] loop1: lost filesystem error report for type 5 error -5 [ 78.484009][ T4727] loop5: lost filesystem error report for type 5 error -117 [ 78.491921][ T4727] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 78.508941][ T4692] loop2: p1 p2 p3 p4 [ 78.513129][ T4692] loop2: p1 start 51379968 is beyond EOD, truncated [ 78.517717][ T4727] loop5: lost filesystem error report for type 5 error -117 [ 78.520589][ T4727] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.278: data will be lost [ 78.528027][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 78.528054][ C0] EXT4-fs (loop1): initial error at time 1780996572: ext4_acquire_dquot:7034 [ 78.528091][ C0] EXT4-fs (loop1): last error at time 1780996572: ext4_acquire_dquot:7034 [ 78.563511][ T4727] EXT4-fs (loop5): 1 truncate cleaned up [ 78.570010][ T4733] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.279: bg 0: block 40: padding at end of block bitmap is not set [ 78.582834][ T4727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.584855][ T4692] loop2: p3 size 100663552 extends beyond EOD, [ 78.599248][ T4733] loop1: lost filesystem error report for type 5 error -117 [ 78.605889][ T4692] truncated [ 78.616883][ T4733] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 78.626128][ T4733] loop1: lost filesystem error report for type 5 error -117 [ 78.626512][ T4733] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.279: data will be lost [ 78.647690][ T4733] EXT4-fs (loop1): 1 truncate cleaned up [ 78.654458][ T4733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.661927][ T4692] loop2: p4 size 81920 extends beyond EOD, truncated [ 78.772418][ T3978] udevd[3978]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 78.773590][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 78.795125][ T3977] udevd[3977]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 78.795842][ T4739] loop4: detected capacity change from 0 to 512 [ 78.815716][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.827293][ T4742] can0: slcan on ttyS3. [ 78.873471][ T4739] EXT4-fs: Ignoring removed bh option [ 78.893179][ T4746] can0 (unregistered): slcan off ttyS3. [ 78.897963][ T4739] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 78.913813][ T3980] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.010890][ T4739] EXT4-fs (loop4): 1 truncate cleaned up [ 79.112071][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 79.157730][ T4739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.184047][ T4759] loop5: detected capacity change from 0 to 512 [ 79.209258][ T4759] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 79.240874][ T4759] EXT4-fs (loop5): orphan cleanup on readonly fs [ 79.261675][ T4751] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 79.382668][ T4765] loop2: detected capacity change from 0 to 512 [ 79.397973][ T4765] EXT4-fs: Ignoring removed bh option [ 79.536050][ T4765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.570570][ T4765] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.723656][ T4759] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.284: Failed to acquire dquot type 1 [ 79.797656][ T4759] loop5: lost filesystem error report for type 5 error -5 [ 79.799105][ T4759] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.284: bg 0: block 40: padding at end of block bitmap is not set [ 79.806381][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 79.806404][ C1] EXT4-fs (loop5): initial error at time 1780996573: ext4_acquire_dquot:7034 [ 79.806442][ C1] EXT4-fs (loop5): last error at time 1780996573: ext4_acquire_dquot:7034 [ 79.962911][ T4759] loop5: lost filesystem error report for type 5 error -117 [ 79.963112][ T4759] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 80.014770][ T4759] loop5: lost filesystem error report for type 5 error -117 [ 80.015062][ T4759] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.284: data will be lost [ 80.015235][ T4759] EXT4-fs (loop5): 1 truncate cleaned up [ 80.033192][ T4773] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 80.181663][ T4759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.351368][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.931181][ T3980] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.956979][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.991404][ T4804] loop4: detected capacity change from 0 to 512 [ 81.017877][ T4804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.030627][ T4804] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.043492][ T4804] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.291: iget: bad i_size value: 2533274857506816 [ 81.119028][ T4804] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.291: iget: bad i_size value: 2533274857506816 [ 81.168801][ T4804] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.291: iget: bad i_size value: 2533274857506816 [ 81.225876][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 81.226371][ T4806] pim6reg: entered allmulticast mode [ 81.246597][ T4804] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.291: iget: bad i_size value: 2533274857506816 [ 81.247133][ T4819] pim6reg: left allmulticast mode [ 81.282140][ T4810] syzkaller0: entered promiscuous mode [ 81.288897][ T4810] syzkaller0: entered allmulticast mode [ 81.293696][ T4804] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 81.378947][ T4804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.402194][ T4804] team0: Port device netdevsim2 added [ 81.490952][ T4825] netlink: 64 bytes leftover after parsing attributes in process `syz.0.294'. [ 81.516268][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.529955][ T4825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 81.554850][ T4806] loop5: detected capacity change from 0 to 512 [ 81.561849][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'. [ 81.623864][ T4834] loop4: detected capacity change from 0 to 512 [ 81.716444][ T4842] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.299'. [ 81.717565][ T4806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.762937][ T4806] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.824543][ T4848] msdos: Unknown parameter 'fowner>00000000000000000000' [ 82.116393][ T4857] EXT4-fs: Ignoring removed bh option [ 82.178904][ T4857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.195650][ T4857] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.033915][ T3980] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.458106][ T4866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.304'. [ 83.559989][ T4869] team0: No ports can be present during mode change [ 83.574568][ T4870] set_capacity_and_notify: 2 callbacks suppressed [ 83.574584][ T4870] loop4: detected capacity change from 0 to 128 [ 83.590533][ T4870] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.613507][ T4870] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.699727][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 83.699810][ T28] audit: type=1400 audit(1780996577.829:1268): avc: denied { ioctl } for pid=4867 comm="syz.4.306" path="/58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.955360][ T28] audit: type=1400 audit(1780996578.089:1269): avc: denied { mounton } for pid=4867 comm="syz.4.306" path="/proc/196/task" dev="proc" ino=9251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 84.180038][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.251872][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 84.261935][ T28] audit: type=1400 audit(1780996578.399:1270): avc: denied { setopt } for pid=4876 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.267181][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'. [ 84.287968][ T28] audit: type=1400 audit(1780996578.399:1271): avc: denied { create } for pid=4876 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.311181][ T28] audit: type=1400 audit(1780996578.399:1272): avc: denied { write } for pid=4876 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.332285][ T28] audit: type=1400 audit(1780996578.399:1273): avc: denied { write } for pid=4876 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.341328][ T4888] loop1: detected capacity change from 0 to 512 [ 84.352826][ T28] audit: type=1400 audit(1780996578.419:1274): avc: denied { read } for pid=4876 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.389642][ T4888] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 84.398357][ T4888] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.409297][ T4888] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 84.418407][ T4888] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 84.428346][ T4888] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.311: Failed to acquire dquot type 1 [ 84.441135][ T4888] loop1: lost filesystem error report for type 5 error -5 [ 84.444164][ T4888] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.311: bg 0: block 40: padding at end of block bitmap is not set [ 84.451410][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 84.451436][ C0] EXT4-fs (loop1): initial error at time 1780996578: ext4_acquire_dquot:7034 [ 84.451467][ C0] EXT4-fs (loop1): last error at time 1780996578: ext4_acquire_dquot:7034 [ 84.474414][ T4891] netlink: 'syz.2.312': attribute type 12 has an invalid length. [ 84.497554][ T4888] loop1: lost filesystem error report for type 5 error -117 [ 84.498392][ T4888] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 84.518079][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.528239][ T4888] loop1: lost filesystem error report for type 5 error -117 [ 84.528601][ T4888] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #16: comm syz.1.311: data will be lost [ 84.558826][ T4891] netlink: 'syz.2.312': attribute type 29 has an invalid length. [ 84.569914][ T4888] EXT4-fs (loop1): 1 truncate cleaned up [ 84.581565][ T4888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.594430][ T4891] netlink: 148 bytes leftover after parsing attributes in process `syz.2.312'. [ 84.603640][ T28] audit: type=1326 audit(1780996578.729:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4892 comm="syz.4.313" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099e59ce59 code=0x7ffc0000 [ 84.638756][ T4891] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 84.657277][ T4891] netlink: 'syz.2.312': attribute type 2 has an invalid length. [ 84.676941][ T4891] netlink: 11 bytes leftover after parsing attributes in process `syz.2.312'. [ 84.693597][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.726642][ T4893] loop4: detected capacity change from 0 to 512 [ 84.745406][ T4893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.764095][ T4893] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.313: iget: bad i_size value: 38620345925642 [ 84.785570][ T4893] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.787422][ T4893] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.313: couldn't read orphan inode 15 (err -117) [ 84.797025][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 84.797091][ C0] EXT4-fs (loop4): initial error at time 1780996578: ext4_orphan_get:1397: inode 15 [ 84.797204][ C0] EXT4-fs (loop4): last error at time 1780996578: ext4_orphan_get:1397: inode 15 [ 84.835576][ T4893] loop4: lost filesystem error report for type 5 error -117 [ 84.840083][ T4893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.936675][ T4901] netlink: 'syz.2.316': attribute type 10 has an invalid length. [ 84.998581][ T4896] loop1: detected capacity change from 0 to 128 [ 85.033752][ T4901] team0: Device veth0_vlan is already a lower device of the team interface [ 85.189423][ T4896] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.199573][ T4894] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.313: bg 0: block 5: invalid block bitmap [ 85.245517][ T4896] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.354634][ T4905] loop5: detected capacity change from 0 to 512 [ 85.374121][ T4905] EXT4-fs: Ignoring removed bh option [ 85.409290][ T4894] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1272 with error 28 [ 85.442332][ T4905] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.459311][ T4905] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.579600][ T4894] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.579600][ T4894] [ 85.589852][ T4894] EXT4-fs (loop4): Total free blocks count 0 [ 85.596442][ T4894] EXT4-fs (loop4): Free/Dirty block details [ 85.757287][ T4894] EXT4-fs (loop4): free_blocks=0 [ 85.768635][ T4894] EXT4-fs (loop4): dirty_blocks=1272 [ 85.779354][ T4894] EXT4-fs (loop4): Block reservation details [ 86.170068][ T4894] EXT4-fs (loop4): i_reserved_data_blocks=1272 [ 86.224338][ T4894] EXT4-fs (loop4): shut down requested (0) [ 86.807698][ T3980] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.872035][ T4913] loop0: detected capacity change from 0 to 512 [ 86.880570][ T4913] EXT4-fs: Ignoring removed bh option [ 87.035327][ T4913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.051357][ T4913] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.270988][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.299177][ T4921] netlink: 'syz.2.319': attribute type 12 has an invalid length. [ 87.321504][ T4921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.319'. [ 87.448213][ T4925] veth1_to_hsr: entered promiscuous mode [ 88.197806][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.251550][ T4929] loop1: detected capacity change from 0 to 1024 [ 88.262999][ T4934] loop0: detected capacity change from 0 to 512 [ 88.270470][ T4934] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.279445][ T4933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.325'. [ 88.294212][ T4929] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.304097][ T4933] team0: No ports can be present during mode change [ 88.341957][ T4939] netlink: 'syz.4.327': attribute type 12 has an invalid length. [ 88.349797][ T4939] netlink: 'syz.4.327': attribute type 29 has an invalid length. [ 88.357679][ T4939] netlink: 148 bytes leftover after parsing attributes in process `syz.4.327'. [ 88.366714][ T4939] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 88.374448][ T4939] netlink: 'syz.4.327': attribute type 2 has an invalid length. [ 88.382355][ T4939] netlink: 11 bytes leftover after parsing attributes in process `syz.4.327'. [ 88.470814][ T4929] EXT4-fs (loop1): mount failed [ 88.476396][ T4934] EXT4-fs (loop0): 1 truncate cleaned up [ 88.482935][ T4934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.884004][ T4946] loop2: detected capacity change from 0 to 512 [ 88.903968][ T4946] EXT4-fs: Ignoring removed bh option [ 88.912730][ T28] kauditd_printk_skb: 203 callbacks suppressed [ 88.920096][ T28] audit: type=1400 audit(1780996583.039:1478): avc: denied { firmware_load } for pid=4931 comm="syz.0.324" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 89.025679][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 89.035340][ T4949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 89.076822][ T28] audit: type=1400 audit(1780996583.209:1480): avc: denied { accept } for pid=4928 comm="syz.1.321" path="socket:[9485]" dev="sockfs" ino=9485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 89.113055][ T28] audit: type=1400 audit(1780996583.209:1479): avc: denied { map } for pid=4928 comm="syz.1.321" path="socket:[9485]" dev="sockfs" ino=9485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 89.228348][ T4946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.250881][ T4946] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.651564][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.731084][ T28] audit: type=1400 audit(1780996583.860:1481): avc: denied { block_suspend } for pid=4953 comm="syz.4.330" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.825724][ T4961] loop1: detected capacity change from 0 to 4096 [ 89.846752][ T28] audit: type=1400 audit(1780996583.860:1482): avc: denied { name_connect } for pid=4959 comm="syz.5.333" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 89.989690][ T4967] netlink: 40 bytes leftover after parsing attributes in process `syz.5.333'. [ 90.009457][ T4961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.532774][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.689806][ T4975] loop4: detected capacity change from 0 to 512 [ 90.706298][ T4975] EXT4-fs: Ignoring removed bh option [ 90.724658][ T28] audit: type=1400 audit(1780996584.010:1483): avc: denied { connect } for pid=4962 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.744214][ T28] audit: type=1326 audit(1780996584.700:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.1.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b80ce59 code=0x7ffc0000 [ 90.784252][ T4977] loop0: detected capacity change from 0 to 128 [ 90.852069][ T4975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.868710][ T4975] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.066483][ T28] audit: type=1326 audit(1780996584.700:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.1.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b80ce59 code=0x7ffc0000 [ 91.097078][ T4977] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.179077][ T4977] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.291967][ T28] audit: type=1326 audit(1780996584.930:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.1.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b80ce59 code=0x7ffc0000 [ 91.343030][ T28] audit: type=1326 audit(1780996584.930:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4958 comm="syz.1.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b80ce59 code=0x7ffc0000 [ 91.373040][ T4977] netlink: 'syz.0.335': attribute type 1 has an invalid length. [ 91.397847][ T4977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.532333][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.550614][ T3296] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.807994][ T4996] loop2: detected capacity change from 0 to 128 [ 91.837552][ T4998] netlink: 16 bytes leftover after parsing attributes in process `syz.5.341'. [ 91.847917][ T4994] loop0: detected capacity change from 0 to 1024 [ 91.908757][ T4989] xfrm1: entered allmulticast mode [ 92.077436][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.258676][ T4994] EXT4-fs: inline encryption not supported [ 92.266177][ T4994] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.280035][ T4994] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.337: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.295448][ T5000] team0: No ports can be present during mode change [ 92.305147][ T4994] loop0: lost filesystem error report for type 5 error -117 [ 92.305345][ T4994] EXT4-fs (loop0): Remounting filesystem read-only [ 92.312710][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 92.312734][ C0] EXT4-fs (loop0): initial error at time 1780996586: ext4_free_blocks:6718 [ 92.312781][ C0] EXT4-fs (loop0): last error at time 1780996586: ext4_free_blocks:6718 [ 92.344048][ T4994] EXT4-fs (loop0): 1 orphan inode deleted [ 92.350630][ T4994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.363418][ T98] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 92.375601][ T98] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 92.386897][ T98] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 92.474075][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.741629][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.751732][ T5014] loop4: detected capacity change from 0 to 1024 [ 92.760954][ T5014] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.774104][ T5014] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 92.784929][ T5014] EXT4-fs (loop4): invalid journal inode [ 92.790869][ T5014] EXT4-fs (loop4): can't get journal size [ 92.797034][ T5014] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #2: comm syz.4.345: blocks 3-3 from inode overlap system zone [ 92.811242][ T5014] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 92.811434][ T5014] EXT4-fs (loop4): failed to initialize system zone (-117) [ 92.820516][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 92.820540][ C1] EXT4-fs (loop4): initial error at time 1780996586: ext4_protect_reserved_inode:182: inode 2 [ 92.820570][ C1] EXT4-fs (loop4): last error at time 1780996586: ext4_protect_reserved_inode:182: inode 2 [ 92.854757][ T5014] EXT4-fs (loop4): mount failed [ 93.002331][ T5041] loop2: detected capacity change from 0 to 256 [ 93.013808][ T5041] vfat: Unknown parameter '·ÒŸ6ÔŸ' [ 93.273581][ T5079] loop1: detected capacity change from 0 to 512 [ 93.292976][ T5079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.343176][ T5079] EXT4-fs (loop1): 1 truncate cleaned up [ 93.349790][ T5079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.405976][ T5089] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 93.405976][ T5089] Please contact the netfilter-devel mailing list or update your nftables rules. [ 93.435784][ T5089] loop2: detected capacity change from 0 to 732 [ 94.070806][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.114441][ T5106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.124199][ T5106] bond0: (slave bond1): Enslaving as an active interface with an up link [ 94.136880][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 94.188417][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 94.188445][ T28] audit: type=1400 audit(1780996588.310:1648): avc: denied { getopt } for pid=5108 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.227767][ T5113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.368'. [ 94.326623][ T5116] loop0: detected capacity change from 0 to 8192 [ 94.371227][ T5116] loop0: p2 p3 [ 94.375511][ T5116] loop0: p3 start 458783 is beyond EOD, truncated [ 94.435977][ T5122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 94.515029][ T28] audit: type=1400 audit(1780996588.640:1649): avc: denied { bind } for pid=5130 comm="syz.5.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.535660][ T3977] udevd[3977]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 94.618948][ T5140] loop0: detected capacity change from 0 to 512 [ 94.642919][ T5140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.666142][ T5140] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.167591][ T28] audit: type=1400 audit(1780996589.290:1650): avc: denied { write } for pid=5152 comm="syz.5.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.215930][ T28] audit: type=1400 audit(1780996589.340:1651): avc: denied { create } for pid=5152 comm="syz.5.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 96.781848][ T5167] loop5: detected capacity change from 0 to 512 [ 96.965609][ T5167] EXT4-fs: dax option not supported [ 97.086788][ T4952] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 97.574904][ T5179] loop1: detected capacity change from 0 to 256 [ 97.815343][ T5155] syzkaller1: entered promiscuous mode [ 97.856385][ T5155] syzkaller1: entered allmulticast mode [ 97.962531][ T28] audit: type=1400 audit(1780996592.091:1652): avc: denied { write } for pid=5187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.989252][ T5206] netlink: 'syz.5.392': attribute type 9 has an invalid length. [ 98.033351][ T28] audit: type=1400 audit(1780996592.161:1653): avc: denied { write } for pid=5208 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.080031][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.221576][ T5206] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.294582][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.502749][ T5209] loop2: detected capacity change from 0 to 128 [ 98.921921][ T5209] EXT4-fs: Ignoring removed oldalloc option [ 99.037390][ T28] audit: type=1400 audit(1780996593.161:1654): avc: denied { write } for pid=5225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.129338][ T5209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 99.138936][ T5209] System zones: 1-3, 19-19, 35-36 [ 99.165925][ T5209] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.183261][ T5209] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.204582][ T28] audit: type=1400 audit(1780996593.331:1655): avc: denied { write } for pid=5247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.232053][ T5240] netlink: 'syz.0.395': attribute type 32 has an invalid length. [ 99.333313][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 99.353272][ T28] audit: type=1400 audit(1780996593.471:1656): avc: denied { create } for pid=5251 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 99.353786][ T5252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.399'. [ 99.390843][ T5257] loop4: detected capacity change from 0 to 512 [ 99.453505][ T5261] netlink: 48 bytes leftover after parsing attributes in process `syz.2.390'. [ 99.507415][ T5240] bond3: option coupled_control: invalid value (255) [ 99.564508][ T5240] bond3 (unregistering): Released all slaves [ 99.638264][ T5269] loop4: detected capacity change from 0 to 4096 [ 99.726200][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.747458][ T5252] IPVS: Error connecting to the multicast addr [ 99.759026][ T5273] netlink: 52 bytes leftover after parsing attributes in process `syz.4.404'. [ 99.804182][ T5273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 99.850501][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 99.870902][ T28] audit: type=1400 audit(1780996594.001:1657): avc: denied { setopt } for pid=5279 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.138337][ T5294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.742038][ T5294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.409'. [ 101.291584][ T28] audit: type=1400 audit(1780996595.421:1658): avc: denied { read } for pid=5305 comm="syz.4.412" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 101.357016][ T28] audit: type=1400 audit(1780996595.481:1659): avc: denied { getopt } for pid=5309 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.449961][ T28] audit: type=1400 audit(1780996595.581:1660): avc: denied { append } for pid=5319 comm="syz.2.418" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.596678][ T28] audit: type=1400 audit(1780996595.661:1661): avc: denied { write } for pid=5319 comm="syz.2.418" path="socket:[9956]" dev="sockfs" ino=9956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.636804][ T28] audit: type=1400 audit(1780996595.761:1662): avc: denied { read } for pid=5319 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 101.822954][ T5333] loop4: detected capacity change from 0 to 512 [ 101.846769][ T5333] EXT4-fs: Ignoring removed bh option [ 101.885985][ T5334] loop1: detected capacity change from 0 to 256 [ 101.899046][ T5334] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.668826][ T5334] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.542526][ T5330] loop2: detected capacity change from 0 to 128 [ 103.820012][ T5330] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 104.584809][ T5333] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 104.584847][ T5333] EXT4-fs: failed to create workqueue [ 104.600429][ T5333] EXT4-fs (loop4): mount failed [ 105.509588][ T5345] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5345 comm=syz.0.422 [ 105.561720][ T5345] loop0: detected capacity change from 0 to 512 [ 105.645782][ T28] audit: type=1400 audit(1780996599.771:1663): avc: denied { map } for pid=5347 comm="syz.5.424" path="socket:[10766]" dev="sockfs" ino=10766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.669584][ T28] audit: type=1400 audit(1780996599.771:1664): avc: denied { read } for pid=5347 comm="syz.5.424" path="socket:[10766]" dev="sockfs" ino=10766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.711867][ T5356] netlink: 'syz.4.425': attribute type 12 has an invalid length. [ 105.719949][ T5356] netlink: 'syz.4.425': attribute type 29 has an invalid length. [ 105.732553][ T5356] netlink: 148 bytes leftover after parsing attributes in process `syz.4.425'. [ 105.742198][ T5345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.754983][ T5345] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.765829][ T5356] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 105.773732][ T5345] ext4: Unknown parameter 'prog#0: [ 105.773732][ T5345] 0: (85) call bpf_get_socket_uid#47 [ 105.773732][ T5345] 1: (62) *(u32 *)(r10 -256) ' [ 105.789229][ T28] audit: type=1400 audit(1780996599.912:1665): avc: denied { remount } for pid=5344 comm="syz.0.422" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.808919][ T5356] netlink: 'syz.4.425': attribute type 2 has an invalid length. [ 105.816612][ T5356] netlink: 11 bytes leftover after parsing attributes in process `syz.4.425'. [ 105.838125][ T5361] loop1: detected capacity change from 0 to 512 [ 105.866843][ T5361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.889230][ T5361] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.900469][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.918100][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 106.044523][ T5365] team0: No ports can be present during mode change [ 106.073772][ T28] audit: type=1400 audit(1780996600.202:1666): avc: denied { bind } for pid=5374 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.093924][ T28] audit: type=1400 audit(1780996600.202:1667): avc: denied { listen } for pid=5374 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 106.590170][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.612642][ T28] audit: type=1400 audit(1780996600.742:1668): avc: denied { associate } for pid=5382 comm="syz.2.432" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 106.735389][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 106.993313][ T5398] loop5: detected capacity change from 0 to 512 [ 107.007636][ T5398] EXT4-fs: Ignoring removed bh option [ 107.821800][ T5398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.843141][ T5398] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.890413][ T28] audit: type=1400 audit(1780996602.012:1669): avc: denied { read write } for pid=5401 comm="syz.1.437" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 107.919866][ T28] audit: type=1400 audit(1780996602.012:1670): avc: denied { open } for pid=5401 comm="syz.1.437" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.052422][ T5408] netlink: 'syz.2.440': attribute type 12 has an invalid length. [ 108.072153][ T5408] netlink: 'syz.2.440': attribute type 29 has an invalid length. [ 108.096158][ T5408] netlink: 148 bytes leftover after parsing attributes in process `syz.2.440'. [ 108.125257][ T5408] netlink: 'syz.2.440': attribute type 1 has an invalid length. [ 108.152538][ T5408] netlink: 'syz.2.440': attribute type 2 has an invalid length. [ 108.176223][ T5408] netlink: 11 bytes leftover after parsing attributes in process `syz.2.440'. [ 108.280113][ T5404] tmpfs: Unknown parameter 'nOswap' [ 108.293968][ T28] audit: type=1400 audit(1780996602.422:1671): avc: denied { ioctl } for pid=5418 comm="syz.1.443" path="socket:[10888]" dev="sockfs" ino=10888 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.578851][ T5425] loop1: detected capacity change from 0 to 4096 [ 108.762516][ T5432] tipc: Can't bind to reserved service type 0 [ 108.922877][ T3980] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.961658][ T5425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.957704][ T28] audit: type=1326 audit(1780996604.092:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7b80ce59 code=0x7ffc0000 [ 110.695698][ T5439] loop2: detected capacity change from 0 to 2048 [ 110.933758][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 110.933823][ T28] audit: type=1326 audit(1780996605.062:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9c7b80ce59 code=0x7ffc0000 [ 111.279138][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.290397][ T5446] syzkaller0: left promiscuous mode [ 111.827831][ T5439] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 111.829227][ T5439] EXT4-fs: failed to create workqueue [ 111.848054][ T5439] EXT4-fs (loop2): mount failed [ 111.873669][ T5446] syzkaller0: left allmulticast mode [ 111.911243][ T28] audit: type=1326 audit(1780996605.062:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5424 comm="syz.1.445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9c7b80ce59 code=0x7ffc0000 [ 112.038221][ T28] audit: type=1400 audit(1780996606.032:1763): avc: denied { bind } for pid=5448 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.094375][ T28] audit: type=1400 audit(1780996606.032:1764): avc: denied { listen } for pid=5448 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.115224][ T28] audit: type=1400 audit(1780996606.042:1765): avc: denied { mount } for pid=5448 comm="syz.0.450" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 112.139901][ T5470] netlink: 'syz.5.454': attribute type 12 has an invalid length. [ 112.147856][ T5470] netlink: 'syz.5.454': attribute type 29 has an invalid length. [ 112.155702][ T28] audit: type=1400 audit(1780996606.142:1766): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 112.176268][ T5470] netlink: 148 bytes leftover after parsing attributes in process `syz.5.454'. [ 112.190664][ T5470] netlink: 'syz.5.454': attribute type 1 has an invalid length. [ 112.218708][ T28] audit: type=1400 audit(1780996606.332:1767): avc: denied { mounton } for pid=5466 comm="syz.1.449" path="/syzcgroup/unified/syz1/cgroup.procs" dev="cgroup2" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 112.244324][ T5470] netlink: 'syz.5.454': attribute type 2 has an invalid length. [ 112.252575][ T5470] netlink: 11 bytes leftover after parsing attributes in process `syz.5.454'. [ 112.258284][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 112.303627][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 112.334221][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 112.353552][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 112.362808][ T28] audit: type=1400 audit(1780996606.482:1768): avc: denied { execute } for pid=5482 comm="syz.5.456" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 112.402307][ T28] audit: type=1400 audit(1780996606.532:1769): avc: denied { write } for pid=5451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.597160][ T28] audit: type=1400 audit(1780996606.722:1770): avc: denied { write } for pid=5497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.771822][ T5503] loop2: detected capacity change from 0 to 512 [ 112.788805][ T5503] EXT4-fs: Ignoring removed bh option [ 112.886027][ T5503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.904201][ T5503] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.016746][ T5503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 113.396391][ T5523] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.463'. [ 113.527451][ T5535] loop5: detected capacity change from 0 to 512 [ 113.646785][ T5539] netlink: 'syz.5.466': attribute type 12 has an invalid length. [ 113.656469][ T5539] netlink: 'syz.5.466': attribute type 29 has an invalid length. [ 113.664490][ T5539] netlink: 148 bytes leftover after parsing attributes in process `syz.5.466'. [ 113.674575][ T5539] netlink: 'syz.5.466': attribute type 1 has an invalid length. [ 113.682489][ T5539] netlink: 'syz.5.466': attribute type 2 has an invalid length. [ 113.690560][ T5539] netlink: 11 bytes leftover after parsing attributes in process `syz.5.466'. [ 113.920302][ T5552] loop5: detected capacity change from 0 to 8192 [ 114.153189][ T5566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.170846][ T5566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.381609][ T5576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.392840][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.407312][ T5576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.841756][ T5606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.856496][ T5606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.906079][ T5609] netlink: 'syz.4.490': attribute type 4 has an invalid length. [ 114.918896][ T5609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.930129][ T5609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.009470][ T5615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.019207][ T5615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.262790][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.272554][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.454703][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.463339][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.490439][ T5641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.500563][ T5641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.585346][ T5650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.596074][ T5650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.711007][ T5641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.719749][ T5641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.799386][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.808073][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.817417][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.826088][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.033244][ T5656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.042760][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.051736][ T5656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.053566][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.230942][ T5666] tipc: Enabling of bearer rejected, failed to enable media [ 116.268024][ T5670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.279370][ T5670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.352485][ T5675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.361189][ T5675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.543634][ T5677] bridge_slave_0: default FDB implementation only supports local addresses [ 116.640073][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.648688][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.661957][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.676882][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.698881][ T5692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.711284][ T5692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.786480][ T5685] netlink: 'syz.1.523': attribute type 12 has an invalid length. [ 116.815689][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.824757][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.850035][ T5696] syzkaller1: entered promiscuous mode [ 116.855612][ T5696] syzkaller1: entered allmulticast mode [ 116.911224][ T5700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.919861][ T5700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.924149][ T5692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.936353][ T5692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.270559][ T5722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.280075][ T5722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.388481][ T5728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.398264][ T5728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.411720][ T5730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.420336][ T5730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.466358][ T5732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.482260][ T5732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.768415][ T5749] lo: entered allmulticast mode [ 117.951113][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 117.951131][ T28] audit: type=1400 audit(1780996612.083:1851): avc: denied { setopt } for pid=5750 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.977939][ T5751] tipc: Started in network mode [ 117.982880][ T5751] tipc: Node identity f8000000, cluster identity 4711 [ 117.989816][ T5751] tipc: Node number set to 4160749568 [ 118.031143][ T5764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.048155][ T5764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.167933][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.179168][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.201646][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.210362][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.396317][ T5792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.405012][ T5792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.617095][ T5798] sg_write: data in/out 422878/626 bytes for SCSI command 0x0-- guessing data in; [ 118.617095][ T5798] program syz.5.574 not setting count and/or reply_len properly [ 118.650761][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.659401][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.737911][ T5802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.746551][ T5802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.791495][ T5805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.800873][ T5805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.965002][ T5811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.973655][ T5811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.205484][ T5815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.214157][ T5815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.345955][ T5819] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 119.359863][ T5819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.373874][ T5819] vlan2: entered allmulticast mode [ 119.379456][ T5819] bond2: entered allmulticast mode [ 119.393191][ T5819] bond2: (slave geneve2): making interface the new active one [ 119.400994][ T5819] geneve2: entered allmulticast mode [ 119.408096][ T5819] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 119.416925][ T72] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.425891][ T72] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.438822][ T5822] syzkaller0: entered promiscuous mode [ 119.444372][ T5822] syzkaller0: entered allmulticast mode [ 119.452324][ T72] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.466990][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.495701][ T5826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.504841][ T5826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.535320][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.550773][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.571173][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.581731][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.592146][ T5830] tipc: Started in network mode [ 119.597152][ T5830] tipc: Node identity 3acac831a826, cluster identity 4711 [ 119.604519][ T5830] tipc: Enabled bearer , priority 0 [ 119.612578][ T5830] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 119.623934][ T5830] tipc: Resetting bearer [ 119.631432][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.640087][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.808073][ T5840] ================================================================== [ 119.816218][ T5840] BUG: KCSAN: data-race in print_cpu / tick_nohz_stop_idle [ 119.823482][ T5840] [ 119.825827][ T5840] read-write to 0xffff888237c1be98 of 8 bytes by interrupt on cpu 0: [ 119.833917][ T5840] tick_nohz_stop_idle+0xde/0x130 [ 119.838990][ T5840] tick_irq_enter+0x8d/0x100 [ 119.843616][ T5840] sysvec_apic_timer_interrupt+0x67/0x80 [ 119.849275][ T5840] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 119.855301][ T5840] pv_native_safe_halt+0xf/0x20 [ 119.860180][ T5840] default_idle+0x9/0x20 [ 119.864473][ T5840] default_idle_call+0x3b/0x60 [ 119.869313][ T5840] do_idle+0x17f/0x2b0 [ 119.873446][ T5840] cpu_startup_entry+0x24/0x30 [ 119.878262][ T5840] rest_init+0xee/0xf0 [ 119.882387][ T5840] start_kernel+0x49f/0x4d0 [ 119.886931][ T5840] x86_64_start_reservations+0x24/0x30 [ 119.892441][ T5840] x86_64_start_kernel+0xfc/0x100 [ 119.897516][ T5840] common_startup_64+0x13e/0x147 [ 119.902841][ T5840] [ 119.905188][ T5840] read to 0xffff888237c1be98 of 8 bytes by task 5840 on cpu 1: [ 119.912761][ T5840] print_cpu+0x3df/0x670 [ 119.917057][ T5840] timer_list_show+0x107/0x170 [ 119.921866][ T5840] seq_read_iter+0x636/0x940 [ 119.926503][ T5840] proc_reg_read_iter+0x110/0x180 [ 119.931582][ T5840] copy_splice_read+0x471/0x6c0 [ 119.936475][ T5840] splice_direct_to_actor+0x26e/0x670 [ 119.941903][ T5840] do_splice_direct+0x119/0x1a0 [ 119.946798][ T5840] do_sendfile+0x382/0x650 [ 119.951249][ T5840] __x64_sys_sendfile64+0x105/0x150 [ 119.956482][ T5840] x64_sys_call+0x2dc4/0x3020 [ 119.961207][ T5840] do_syscall_64+0x12c/0x3b0 [ 119.965841][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.971771][ T5840] [ 119.974122][ T5840] value changed: 0x0000000000000035 -> 0x0000000000000030 [ 119.981256][ T5840] [ 119.983604][ T5840] Reported by Kernel Concurrency Sanitizer on: [ 119.989802][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz.5.594 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 120.000602][ T5840] Tainted: [W]=WARN [ 120.004430][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 120.014519][ T5840] ================================================================== [ 120.606174][ T3378] tipc: Node number set to 2464991281