last executing test programs: 1m20.182884457s ago: executing program 4 (id=417): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0xfffffffffffffca6, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m20.07481709s ago: executing program 4 (id=423): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)={0xe000200f}) 1m19.60862013s ago: executing program 4 (id=428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2a9d2029db1ec5386b000000080006"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4880) 1m19.509817353s ago: executing program 4 (id=429): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m19.459774924s ago: executing program 4 (id=431): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) syz_clone(0xaca80400, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 1m18.377380819s ago: executing program 4 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x1) 1m18.377261489s ago: executing program 32 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x1) 1m8.210228114s ago: executing program 1 (id=672): perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x14, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m8.111137716s ago: executing program 1 (id=676): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180), 0x20ce, r2}, 0x38) 1m7.112088619s ago: executing program 1 (id=698): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x8, 0x0, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x2, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r0, 0x0, 0x0, 0x0}, 0x30) 1m6.980947313s ago: executing program 1 (id=704): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@usrjquota}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x476, &(0x7f00000000c0)="$eJzs3M9vFFUcAPDv7G5BfrYi/gBRQTQSf7S0oHLwoomJB01M9IDHWgpBCjW0JkIaWwzBi4mScDcmXkz8Czx5IurJxCveDQkxXEC9rJnuzLLt7pZud9tt3c8nmfa9nTf73ndm3sybmU4D6Fn70x9JxPaIuBER/RFRqC2wpTKl5e7enhn7+/bMWBLl8nt/Jelicef2zFheNF9uW+U7S+kHhctJDDSod+rCxTOjExPj57P80PTZj4emLlx86fTZ0VPjp8bPjRw7dvTI8KuvjLzckTjTNt3Z+9nkvj1vfXD1nbHjVz/85Ydkfk65fO364QVxdEZfRMxE0mTus52trOt21KSTUhcbQks2R0Qp21tvRH8UL++szuuPNz/vauOAVVUul8sjzWfPlYH/sSRaKn5gS7S2ALBe5Sf69Po3n2oHAP+u7vCj6269XrkASuO+m02VOaW4lJXpW3R920n7I+L43D/fpFMsup8CALAafkrHPy82GP8NRDxSU25n9mxoICIejIhdEfFQROyOiIezMo9GxGMt1r9/Ub5+/FO42XpUy5eO/17Lnm0tHP9Vn4INFLPcjvn4+5KTpyfGD2fr5FD0bU7zww2/PYmYS3///lWz+mvHf+mU1p+PBbN23CxtXrjMidHp0bYDz9y6FLG31Cj+JEr3oog9EbF3hXWcfv77fQs/KVZT949/CR14zlT+NuK5yvafi0Xx55Kln08OPRAT44eH8r2i3q+/XXm3Wf1txd8B6fbf2nD/r8Y/kNQ+r52q+4pN96vjyh9fNL2mWen+vyl5f0Hln45OT58fjtiUvF3/ec0N7jyfl0/jP3Swcf/fFffWxOMRke7ET0TEkxHxVNb2AxHxdEQcXCL+n9945qOVx7+60vhnW9r+rSeKZ67/2Kz+5W3/o3lmvlHLOf7VtSIaB9HGqgMAAIANoxAR2yMpDFbThcLgYOXv5XfH1sLE5NT0CycnPzl3ovKOwED0FfI7Xf0190OHs3vDeX4ky89m+SPZfeNrxS3z+cGxyYkT3Q4eety2Jv0/9Wex260DVp33taB36f/Qu1be/x05YKO7Ty8urFU7gLXnLA69q1H/n+1CO4C15/wPvava/79eRuGa170Wv7wJbDzO/9C79H/oSe28178uEvFdxNJlkvXS1JYSX7azeGkNWhiF9bGi1jAxUozoYjNK9f/VonEiLpRn266020cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//5Eu42A=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='d'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m6.63654151s ago: executing program 1 (id=711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000f40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x14000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1m6.343793087s ago: executing program 1 (id=716): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x28) 1m6.312371198s ago: executing program 33 (id=716): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x28) 1m0.704217958s ago: executing program 3 (id=821): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m0.624677819s ago: executing program 3 (id=824): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) fallocate(r1, 0x0, 0x0, 0x8800000) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000280)=""/64, 0x40}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) 1m0.394952655s ago: executing program 3 (id=832): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file2\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0xfe, 0x1f5, &(0x7f0000000a00)="$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") write$UHID_INPUT(r0, &(0x7f0000007fc0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x02\x00', 0x189141, 0x9) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 1m0.193121729s ago: executing program 3 (id=836): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@usrjquota}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x476, &(0x7f00000000c0)="$eJzs3M9vFFUcAPDv7G5BfrYi/gBRQTQSf7S0oHLwoomJB01M9IDHWgpBCjW0JkIaWwzBi4mScDcmXkz8Czx5IurJxCveDQkxXEC9rJnuzLLt7pZud9tt3c8nmfa9nTf73ndm3sybmU4D6Fn70x9JxPaIuBER/RFRqC2wpTKl5e7enhn7+/bMWBLl8nt/Jelicef2zFheNF9uW+U7S+kHhctJDDSod+rCxTOjExPj57P80PTZj4emLlx86fTZ0VPjp8bPjRw7dvTI8KuvjLzckTjTNt3Z+9nkvj1vfXD1nbHjVz/85Ydkfk65fO364QVxdEZfRMxE0mTus52trOt21KSTUhcbQks2R0Qp21tvRH8UL++szuuPNz/vauOAVVUul8sjzWfPlYH/sSRaKn5gS7S2ALBe5Sf69Po3n2oHAP+u7vCj6269XrkASuO+m02VOaW4lJXpW3R920n7I+L43D/fpFMsup8CALAafkrHPy82GP8NRDxSU25n9mxoICIejIhdEfFQROyOiIezMo9GxGMt1r9/Ub5+/FO42XpUy5eO/17Lnm0tHP9Vn4INFLPcjvn4+5KTpyfGD2fr5FD0bU7zww2/PYmYS3///lWz+mvHf+mU1p+PBbN23CxtXrjMidHp0bYDz9y6FLG31Cj+JEr3oog9EbF3hXWcfv77fQs/KVZT949/CR14zlT+NuK5yvafi0Xx55Kln08OPRAT44eH8r2i3q+/XXm3Wf1txd8B6fbf2nD/r8Y/kNQ+r52q+4pN96vjyh9fNL2mWen+vyl5f0Hln45OT58fjtiUvF3/ec0N7jyfl0/jP3Swcf/fFffWxOMRke7ET0TEkxHxVNb2AxHxdEQcXCL+n9945qOVx7+60vhnW9r+rSeKZ67/2Kz+5W3/o3lmvlHLOf7VtSIaB9HGqgMAAIANoxAR2yMpDFbThcLgYOXv5XfH1sLE5NT0CycnPzl3ovKOwED0FfI7Xf0190OHs3vDeX4ky89m+SPZfeNrxS3z+cGxyYkT3Q4eety2Jv0/9Wex260DVp33taB36f/Qu1be/x05YKO7Ty8urFU7gLXnLA69q1H/n+1CO4C15/wPvava/79eRuGa170Wv7wJbDzO/9C79H/oSe28178uEvFdxNJlkvXS1JYSX7azeGkNWhiF9bGi1jAxUozoYjNK9f/VonEiLpRn266020cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//5Eu42A=") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 59.957891415s ago: executing program 3 (id=838): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0x8) flock(r0, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x90) flock(r2, 0x6) 59.604457113s ago: executing program 3 (id=843): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 59.565627854s ago: executing program 34 (id=843): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 54.475713872s ago: executing program 0 (id=927): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 54.475537172s ago: executing program 0 (id=928): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80002028}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(r0, 0x7866) shutdown(r0, 0x0) 54.429912132s ago: executing program 0 (id=930): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 54.11403429s ago: executing program 0 (id=935): io_setup(0x5, &(0x7f0000000180)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 53.952034473s ago: executing program 0 (id=939): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd6c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\xf0Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 53.832636786s ago: executing program 0 (id=942): syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x62440) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b11210000000000851000000200000085000000b200000095003300000000d1022e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000905000100070000000900020073797a310000000014000780050015001600000008001240000a00000500050002000000050004000100000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24004804}, 0x20004000) 45.721634474s ago: executing program 7 (id=1077): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4296e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x9}, 0x7606, 0x3ff, 0xff, 0x0, 0x0, 0x9, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x40, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r2}, 0x38) 45.529350488s ago: executing program 7 (id=1080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 45.382491352s ago: executing program 7 (id=1084): r0 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xfffffffffffffffc, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c020000", @ANYBLOB="010027"], 0x22c}, 0x1, 0x0, 0x0, 0x40}, 0xc000) 44.471636643s ago: executing program 7 (id=1088): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@usrjquota}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x476, &(0x7f00000000c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 43.973106365s ago: executing program 7 (id=1097): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c76436ffffff8700135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.419732517s ago: executing program 7 (id=1105): set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 43.419643017s ago: executing program 35 (id=1105): set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xffffffa8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 38.790607294s ago: executing program 36 (id=942): syz_open_dev$evdev(&(0x7f0000000240), 0x2, 0x62440) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b11210000000000851000000200000085000000b200000095003300000000d1022e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000000206030000000000000000000000000905000100070000000900020073797a310000000014000780050015001600000008001240000a00000500050002000000050004000100000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24004804}, 0x20004000) 1.589837285s ago: executing program 9 (id=1812): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r0, 0x0, 0x1) 1.514431206s ago: executing program 9 (id=1815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfbd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.407546159s ago: executing program 9 (id=1819): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0xfffffffb, 0x1}, 0x80, 0x0}, 0x40) sendmsg$kcm(r0, 0x0, 0x0) 1.283721152s ago: executing program 6 (id=1823): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='!'], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101880, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4008744b, &(0x7f0000000180)) 1.233826322s ago: executing program 6 (id=1827): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) file_getattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$random(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xa, 0x40, 0x3, 0x41}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 1.161762704s ago: executing program 6 (id=1830): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffd, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x26020480) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 999.569118ms ago: executing program 6 (id=1832): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) 938.934979ms ago: executing program 5 (id=1835): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) accept4(r0, 0x0, 0x0, 0x80800) 863.722721ms ago: executing program 5 (id=1836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 835.309561ms ago: executing program 8 (id=1837): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000080)={[{@bh}]}, 0x2, 0xbd6, &(0x7f00000025c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r1, r1, 0x0, 0xe3aa6ea) 835.019981ms ago: executing program 5 (id=1838): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@barrier}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000180)="f7", 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x121) 680.892645ms ago: executing program 8 (id=1839): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 618.302796ms ago: executing program 5 (id=1840): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x204, 0x2edf, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x1a, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="12000000350000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 556.139167ms ago: executing program 9 (id=1841): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r2, 0x2f}, 0x10) 499.966368ms ago: executing program 9 (id=1842): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) writev(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=' ', 0x1}], 0x1) 427.70254ms ago: executing program 5 (id=1843): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000400)="cb8c", 0x2}], 0x1}, 0x8050) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x1c0, 0x0, 0x0) 427.54524ms ago: executing program 8 (id=1844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0xd, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x10002}}, 0x0, 0x0, 0x31, 0x0, "8ddbb51aa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7f, @empty, 0x4}, 0x1c) listen(r0, 0x81) syz_emit_ethernet(0x4a, &(0x7f0000001200)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0022de", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff, 0x0, 0xfffe}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x4d, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0xffff, 0x0, 0x2}, {"fb4bc7bb9593b95fd916e5da7600fd7a9ac8465477389a0af948a9bcc13ebe210089bf0dae2fa8c31dcff09e130b4c34a15bd94017f93b3c73"}}}}}}}, 0x0) 424.82005ms ago: executing program 8 (id=1846): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'ovf\x00', 0x30, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @multicast2, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 381.074202ms ago: executing program 8 (id=1847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000180)="24f5bb", 0x3}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000540)="4e348e", 0x3}], 0x4) 327.155163ms ago: executing program 5 (id=1848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 282.272144ms ago: executing program 8 (id=1849): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 279.877513ms ago: executing program 9 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x21140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000001f00000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 279.378193ms ago: executing program 2 (id=1851): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 198.838366ms ago: executing program 2 (id=1852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)='5', 0x1}], 0xa6, &(0x7f0000000b40)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x404c044) 176.482286ms ago: executing program 6 (id=1853): socket$xdp(0x2c, 0x3, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt(r0, 0x65, 0x8, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 152.688327ms ago: executing program 2 (id=1854): r0 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) close_range(r0, r1, 0x2) 67.678688ms ago: executing program 2 (id=1855): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 67.552458ms ago: executing program 6 (id=1856): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40) 36.458829ms ago: executing program 2 (id=1857): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0010000006000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x890) 0s ago: executing program 2 (id=1858): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x50, 0x0, 0x5, 0xd6}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): dv: batadv0: Adding interface: batadv_slave_0 [ 72.284367][ T5544] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.294718][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.322619][ T5477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.334876][ T5544] EXT4-fs (loop2): 1 truncate cleaned up [ 72.342553][ T5544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.359487][ T5547] netlink: 'syz.3.734': attribute type 10 has an invalid length. [ 72.368650][ T5477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.386730][ T5477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.437029][ T5477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.448412][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.455684][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.467516][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.474785][ T5547] bridge0: port 2(bridge_slave_1) entered listening state [ 72.482041][ T5547] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.489213][ T5547] bridge0: port 1(bridge_slave_0) entered listening state [ 72.501347][ T5547] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 72.541248][ T5477] hsr_slave_0: entered promiscuous mode [ 72.574338][ T5477] hsr_slave_1: entered promiscuous mode [ 72.611869][ T5477] debugfs: 'hsr0' already exists in 'hsr' [ 72.618766][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.633371][ T5477] Cannot create hsr debugfs directory [ 72.662644][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 72.662665][ T28] audit: type=1400 audit(1784629637.000:536): avc: denied { write } for pid=5561 comm="syz.2.735" name="rt_acct" dev="proc" ino=4026532643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 72.749926][ T28] audit: type=1400 audit(1784629637.090:537): avc: denied { write } for pid=5549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.811322][ T5571] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 72.862324][ T28] audit: type=1400 audit(1784629637.200:538): avc: denied { write } for pid=5574 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.911528][ T5576] syzkaller0: entered promiscuous mode [ 72.928546][ T5576] syzkaller0: entered allmulticast mode [ 72.948848][ T28] audit: type=1400 audit(1784629637.230:539): avc: denied { read write } for pid=5572 comm="syz.2.741" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 72.990418][ T28] audit: type=1400 audit(1784629637.230:540): avc: denied { open } for pid=5572 comm="syz.2.741" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 73.032311][ T5583] loop2: detected capacity change from 0 to 1024 [ 73.073682][ T5583] EXT4-fs: Ignoring removed bh option [ 73.109627][ T5477] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 73.112422][ T5583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.167843][ T5477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.176548][ T5477] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 73.186479][ T5583] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.190370][ T5477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.201401][ T28] audit: type=1400 audit(1784629637.520:541): avc: denied { write } for pid=5581 comm="syz.2.745" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.250303][ T5477] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 73.265976][ T5477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.273869][ T5477] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 73.294618][ T28] audit: type=1400 audit(1784629637.600:542): avc: denied { getopt } for pid=5599 comm="syz.0.751" lport=40308 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 73.295001][ T5598] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.337143][ T5477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.362112][ T5598] SELinux: failed to load policy [ 73.362137][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.503885][ T5477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.521918][ T5623] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 73.544276][ T5623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.579571][ T5477] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.589709][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.596855][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.645454][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.652686][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.702660][ T28] audit: type=1326 audit(1784629638.030:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.5.759" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 73.733551][ T5623] bond3: (slave geneve2): making interface the new active one [ 73.758939][ T5623] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 73.791333][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.811701][ T28] audit: type=1326 audit(1784629638.040:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.5.759" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 73.840596][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.866758][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.898062][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.924182][ T28] audit: type=1326 audit(1784629638.040:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.5.759" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 74.230609][ T5660] loop5: detected capacity change from 0 to 4096 [ 74.245966][ T5658] SELinux: failed to load policy [ 74.255430][ T5660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.347173][ T5680] loop2: detected capacity change from 0 to 512 [ 74.374601][ T5680] journal_path: not usable as path [ 74.379940][ T5680] EXT4-fs: error: could not find journal device path [ 74.454952][ T5690] loop3: detected capacity change from 0 to 1024 [ 74.471747][ T5693] loop2: detected capacity change from 0 to 128 [ 74.491984][ T5690] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.505462][ T5693] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 74.536657][ T5477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.546225][ T5693] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.589368][ T5693] ext2 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.591995][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.629023][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.676550][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.858660][ T5723] SELinux: failed to load policy [ 74.878057][ T5728] netlink: 36 bytes leftover after parsing attributes in process `syz.0.780'. [ 74.938513][ T5477] veth0_vlan: entered promiscuous mode [ 74.978089][ T5738] netlink: 'syz.5.783': attribute type 1 has an invalid length. [ 75.003541][ T5738] bond1: entered promiscuous mode [ 75.012322][ T5738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.043432][ T5477] veth1_vlan: entered promiscuous mode [ 75.077597][ T5738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.093879][ T5738] bond1: (slave bond2): making interface the new active one [ 75.109132][ T5738] bond2: entered promiscuous mode [ 75.119299][ T5738] bond1: (slave bond2): Enslaving as an active interface with an up link [ 75.168829][ T5477] veth0_macvtap: entered promiscuous mode [ 75.206298][ T5477] veth1_macvtap: entered promiscuous mode [ 75.243037][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.282657][ T5477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.320704][ T3450] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.339310][ T3450] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.379131][ T3450] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.397710][ T3450] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.563089][ T5765] netlink: 132 bytes leftover after parsing attributes in process `syz.2.792'. [ 76.247463][ T5789] netlink: 762 bytes leftover after parsing attributes in process `syz.6.802'. [ 76.327569][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.805'. [ 76.440440][ T5801] loop5: detected capacity change from 0 to 164 [ 76.476043][ T5801] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 76.504877][ T5801] isofs_fill_super: root inode is not a directory. Corrupted media? [ 76.636405][ T5811] loop6: detected capacity change from 0 to 512 [ 76.651018][ T5813] loop5: detected capacity change from 0 to 1024 [ 76.663266][ T5811] EXT4-fs: Ignoring removed nobh option [ 76.694678][ T5813] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.753482][ T5811] EXT4-fs (loop6): failed to initialize system zone (-117) [ 76.770432][ T5811] EXT4-fs (loop6): mount failed [ 76.799096][ T5813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.830879][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.063686][ T5841] loop3: detected capacity change from 0 to 4096 [ 77.123579][ T5841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.185175][ T5853] netlink: 'syz.0.829': attribute type 10 has an invalid length. [ 77.202909][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.214167][ T5857] loop2: detected capacity change from 0 to 512 [ 77.244832][ T5857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.260779][ T5857] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.329952][ T5864] loop3: detected capacity change from 0 to 256 [ 77.353271][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.418481][ T5871] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 77.436655][ T5871] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 77.456706][ T5871] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.465966][ T5871] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.836: Block bitmap for bg 0 marked uninitialized [ 77.479420][ T5871] loop3: lost filesystem error report for type 5 error -117 [ 77.481201][ T5871] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 77.497414][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 77.497435][ C1] EXT4-fs (loop3): initial error at time 1784629641: ext4_read_block_bitmap_nowait:517 [ 77.497456][ C1] EXT4-fs (loop3): last error at time 1784629641: ext4_read_block_bitmap_nowait:517 [ 77.523273][ T5871] loop3: lost filesystem error report for type 5 error -117 [ 77.523947][ T5871] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.836: Block bitmap for bg 0 marked uninitialized [ 77.544710][ T5871] loop3: lost filesystem error report for type 5 error -117 [ 77.545533][ T5871] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 77.561742][ T5871] loop3: lost filesystem error report for type 5 error -117 [ 77.563577][ T5871] EXT4-fs (loop3): 1 orphan inode deleted [ 77.584225][ T5871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.644890][ T5875] EXT4-fs (loop0): filesystem is read-only [ 77.651398][ T5875] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 77.663145][ T3302] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /168/file1: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 77.706014][ T5875] EXT4-fs (loop0): failed to initialize system zone (-117) [ 77.713911][ T3302] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 77.713947][ T5875] EXT4-fs (loop0): mount failed [ 77.773266][ T3302] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 77.999912][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.571515][ T5909] dummy0: entered promiscuous mode [ 78.585824][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.848'. [ 78.622247][ T5909] dummy0 (unregistering): left promiscuous mode [ 78.683282][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 78.683302][ T28] audit: type=1400 audit(1784629643.020:605): avc: denied { read } for pid=5919 comm="syz.6.850" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.717991][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.721186][ T28] audit: type=1400 audit(1784629643.020:606): avc: denied { open } for pid=5919 comm="syz.6.850" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.727059][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.757031][ T5889] bridge_slave_0: entered allmulticast mode [ 78.763821][ T5889] bridge_slave_0: entered promiscuous mode [ 78.768264][ T28] audit: type=1400 audit(1784629643.100:607): avc: denied { ioctl } for pid=5919 comm="syz.6.850" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.772775][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.802048][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.809410][ T5889] bridge_slave_1: entered allmulticast mode [ 78.815954][ T5889] bridge_slave_1: entered promiscuous mode [ 78.830304][ T28] audit: type=1400 audit(1784629643.170:608): avc: denied { sqpoll } for pid=5922 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.906639][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.924087][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.964077][ T5889] team0: Port device team_slave_0 added [ 78.971018][ T5889] team0: Port device team_slave_1 added [ 79.014024][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.021159][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.047833][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.062674][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.075388][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.101854][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.143715][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 79.181610][ T5889] hsr_slave_0: entered promiscuous mode [ 79.196741][ T5889] hsr_slave_1: entered promiscuous mode [ 79.203148][ T5889] debugfs: 'hsr0' already exists in 'hsr' [ 79.209483][ T5889] Cannot create hsr debugfs directory [ 79.327244][ T5939] set_capacity_and_notify: 2 callbacks suppressed [ 79.327265][ T5939] loop0: detected capacity change from 0 to 4096 [ 79.369192][ T5939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.393557][ T28] audit: type=1400 audit(1784629643.720:609): avc: denied { write } for pid=5938 comm="syz.0.856" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.435933][ T28] audit: type=1400 audit(1784629643.720:610): avc: denied { write } for pid=5938 comm="syz.0.856" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.459896][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.507775][ T5949] loop6: detected capacity change from 0 to 512 [ 79.508783][ T28] audit: type=1400 audit(1784629643.840:611): avc: denied { mount } for pid=5950 comm="syz.0.859" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.543136][ T5949] journal_path: not usable as path [ 79.556966][ T5949] EXT4-fs: error: could not find journal device path [ 79.746545][ T28] audit: type=1400 audit(1784629644.080:612): avc: denied { getopt } for pid=5969 comm="syz.5.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.956961][ T5985] loop5: detected capacity change from 0 to 512 [ 79.970922][ T5985] journal_path: not usable as path [ 79.976135][ T5985] EXT4-fs: error: could not find journal device path [ 80.051970][ T28] audit: type=1400 audit(1784629644.390:613): avc: denied { execute } for pid=5990 comm="syz.6.879" name="file1" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.080975][ T28] audit: type=1400 audit(1784629644.390:614): avc: denied { execute_no_trans } for pid=5990 comm="syz.6.879" path="/28/file1" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.160424][ T5997] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 80.220249][ T6003] netlink: 'syz.5.885': attribute type 1 has an invalid length. [ 80.234335][ T6003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.474982][ T6013] netlink: 36 bytes leftover after parsing attributes in process `syz.5.890'. [ 81.605058][ T5912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 81.639770][ T5889] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 81.686793][ T5889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.706500][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 81.715536][ T6035] netlink: 'syz.2.901': attribute type 9 has an invalid length. [ 81.723878][ T5889] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 81.742157][ T5889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.771256][ T30] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.782529][ T5889] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 81.811848][ T5889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.826911][ T6033] netdevsim netdevsim5 netdevsim3: IPsec offload requires 128 bit authentication [ 81.842281][ T30] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.864120][ T30] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.888920][ T5889] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 81.911525][ T5889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.931646][ T30] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.954287][ T6064] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 81.960783][ T6064] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 81.968265][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.911'. [ 81.983121][ T6064] hsr_slave_0: left promiscuous mode [ 81.999713][ T6064] hsr_slave_1: left promiscuous mode [ 82.093848][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.116827][ T5889] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.137968][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.145114][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.176697][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.183856][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.453156][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.695431][ T6115] loop2: detected capacity change from 0 to 512 [ 82.714595][ T6115] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 82.725417][ T6115] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.748761][ T6115] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.767478][ T6115] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.922: Block bitmap for bg 0 marked uninitialized [ 82.789395][ T6115] loop2: lost filesystem error report for type 5 error -117 [ 82.790309][ T6115] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 82.803369][ T5889] veth0_vlan: entered promiscuous mode [ 82.806445][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 82.818308][ C0] EXT4-fs (loop2): initial error at time 1784629647: ext4_read_block_bitmap_nowait:517 [ 82.828011][ C0] EXT4-fs (loop2): last error at time 1784629647: ext4_read_block_bitmap_nowait:517 [ 82.839309][ T6115] loop2: lost filesystem error report for type 5 error -117 [ 82.839749][ T6115] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.922: Block bitmap for bg 0 marked uninitialized [ 82.870251][ T6115] loop2: lost filesystem error report for type 5 error -117 [ 82.871537][ T6115] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 82.907228][ T6115] loop2: lost filesystem error report for type 5 error -117 [ 82.908822][ T6115] EXT4-fs (loop2): 1 orphan inode deleted [ 82.941041][ T6115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.013605][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.021716][ T5889] veth1_vlan: entered promiscuous mode [ 83.065046][ T5889] veth0_macvtap: entered promiscuous mode [ 83.080616][ T5889] veth1_macvtap: entered promiscuous mode [ 83.113017][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.124346][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.157687][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.168462][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.199653][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.217042][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.349474][ T6132] netlink: 'syz.5.929': attribute type 12 has an invalid length. [ 83.357706][ T6132] netlink: 'syz.5.929': attribute type 29 has an invalid length. [ 83.366283][ T6132] netlink: 148 bytes leftover after parsing attributes in process `syz.5.929'. [ 83.396937][ T6132] netlink: 'syz.5.929': attribute type 1 has an invalid length. [ 83.432028][ T6135] netlink: 'syz.5.929': attribute type 12 has an invalid length. [ 83.461489][ T6135] netlink: 'syz.5.929': attribute type 29 has an invalid length. [ 83.469732][ T6135] netlink: 148 bytes leftover after parsing attributes in process `syz.5.929'. [ 83.479059][ T6135] netlink: 'syz.5.929': attribute type 1 has an invalid length. [ 83.639445][ T6156] loop7: detected capacity change from 0 to 1024 [ 83.651092][ T6156] EXT4-fs: Ignoring removed bh option [ 83.706178][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 83.706265][ T28] audit: type=1400 audit(1784629648.040:648): avc: denied { mounton } for pid=6157 comm="syz.0.939" path="/196/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 83.741825][ T6156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.801515][ T28] audit: type=1400 audit(1784629648.110:649): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.837055][ T28] audit: type=1400 audit(1784629648.170:650): avc: denied { write } for pid=6155 comm="syz.7.938" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.932016][ T5889] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.052328][ T6178] loop5: detected capacity change from 0 to 512 [ 84.136462][ T28] audit: type=1400 audit(1784629648.470:651): avc: denied { ioctl } for pid=6179 comm="syz.5.949" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.113993][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.309840][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.960'. [ 85.330017][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.5.960'. [ 85.632155][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.961'. [ 85.667393][ T28] audit: type=1400 audit(1784629650.000:652): avc: denied { associate } for pid=6212 comm="syz.5.963" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 85.963249][ T6227] loop5: detected capacity change from 0 to 512 [ 85.980403][ T6227] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.992999][ T6227] EXT4-fs (loop5): 1 truncate cleaned up [ 86.000455][ T6227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.015927][ T28] audit: type=1400 audit(1784629650.350:653): avc: denied { write } for pid=6226 comm="syz.5.970" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.168767][ T28] audit: type=1400 audit(1784629650.500:654): avc: denied { unmount } for pid=5477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 86.332555][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.439745][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.6.973'. [ 86.700970][ T28] audit: type=1400 audit(1784629651.040:655): avc: denied { append } for pid=6251 comm="syz.6.979" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.139484][ T4123] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.282219][ T6287] netlink: 48 bytes leftover after parsing attributes in process `syz.7.993'. [ 87.454835][ T6296] loop6: detected capacity change from 0 to 128 [ 87.596183][ T28] audit: type=1400 audit(1784629651.930:656): avc: denied { append } for pid=6307 comm="syz.7.1003" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 87.596396][ T6309] sg_write: data in/out 491520/136 bytes for SCSI command 0x0-- guessing data in; [ 87.596396][ T6309] program syz.7.1003 not setting count and/or reply_len properly [ 87.841400][ T28] audit: type=1326 audit(1784629652.180:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6324 comm="syz.5.1011" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd4279de99 code=0x0 [ 88.098921][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 88.106149][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 88.210215][ T6337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1016'. [ 88.574927][ T6360] ip_vti0: entered promiscuous mode [ 88.580326][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 88.803229][ T6368] tmpfs: Bad value for 'mpol' [ 89.093989][ T6386] loop2: detected capacity change from 0 to 256 [ 89.567702][ T6397] netlink: 'syz.5.1043': attribute type 1 has an invalid length. [ 89.825349][ T6403] xt_hashlimit: size too large, truncated to 1048576 [ 90.075925][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 90.075941][ T28] audit: type=1326 audit(1784629654.410:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.127881][ T28] audit: type=1326 audit(1784629654.420:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.154909][ T28] audit: type=1326 audit(1784629654.490:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.186951][ T28] audit: type=1326 audit(1784629654.490:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.267325][ T28] audit: type=1326 audit(1784629654.520:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.294169][ T28] audit: type=1326 audit(1784629654.520:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.320898][ T28] audit: type=1326 audit(1784629654.520:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.347253][ T28] audit: type=1326 audit(1784629654.520:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.375896][ T28] audit: type=1326 audit(1784629654.520:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.401864][ T28] audit: type=1326 audit(1784629654.520:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6408 comm="syz.6.1048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7facd681de99 code=0x7ffc0000 [ 90.794311][ T6461] loop2: detected capacity change from 0 to 512 [ 90.816479][ T6461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.828806][ T6461] EXT4-fs (loop2): 1 truncate cleaned up [ 90.836987][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.250424][ T6479] loop7: detected capacity change from 0 to 512 [ 91.292139][ T6479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.319740][ T6479] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.349950][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.518364][ T6543] netlink: 'syz.2.1069': attribute type 8 has an invalid length. [ 91.540054][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 91.554788][ T6543] bond0: entered promiscuous mode [ 91.559277][ T5889] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.569476][ T6543] bond_slave_0: entered promiscuous mode [ 91.610187][ T6543] bond_slave_1: entered promiscuous mode [ 91.635712][ T6543] gretap0: entered promiscuous mode [ 91.659920][ T6543] bond0: left promiscuous mode [ 91.681245][ T6543] bond_slave_0: left promiscuous mode [ 91.694412][ T6543] bond_slave_1: left promiscuous mode [ 91.711732][ T6543] gretap0: left promiscuous mode [ 91.933549][ T6560] loop2: detected capacity change from 0 to 512 [ 92.001887][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.059529][ T6560] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.566055][ T6581] loop2: detected capacity change from 0 to 512 [ 92.685989][ T6581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.701298][ T6581] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 92.755583][ T6581] EXT4-fs (loop2): 1 truncate cleaned up [ 92.838377][ T6581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.129597][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.138886][ T6592] loop7: detected capacity change from 0 to 512 [ 93.161739][ T6592] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 93.200172][ T6592] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 93.221756][ T6592] EXT4-fs (loop7): orphan cleanup on readonly fs [ 93.238787][ T6592] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.1088: Block bitmap for bg 0 marked uninitialized [ 93.281741][ T6592] loop7: lost filesystem error report for type 5 error -117 [ 93.282108][ T6592] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 93.289618][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 93.289656][ C1] EXT4-fs (loop7): initial error at time 1784629657: ext4_read_block_bitmap_nowait:517 [ 93.289678][ C1] EXT4-fs (loop7): last error at time 1784629657: ext4_read_block_bitmap_nowait:517 [ 93.416247][ T6592] loop7: lost filesystem error report for type 5 error -117 [ 93.416397][ T6592] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.1088: Block bitmap for bg 0 marked uninitialized [ 93.444394][ T6592] loop7: lost filesystem error report for type 5 error -117 [ 93.444580][ T6592] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 93.462420][ T6607] loop2: detected capacity change from 0 to 1024 [ 93.487194][ T6607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 93.506162][ T6592] loop7: lost filesystem error report for type 5 error -117 [ 93.506306][ T6607] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.507567][ T6592] EXT4-fs (loop7): 1 orphan inode deleted [ 93.547151][ T6607] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1095: Freeing blocks not in datazone - block = 0, count = 16 [ 93.580702][ T6592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.592209][ T6607] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1095: bg 0: block 112: padding at end of block bitmap is not set [ 93.644755][ T5889] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /36/file1: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 93.687238][ T5889] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 93.780730][ T5889] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 93.849819][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.902301][ T6619] loop5: detected capacity change from 0 to 128 [ 93.928967][ T6619] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 93.977273][ T6619] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.003248][ T6619] ext2 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.057043][ T4762] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.092218][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1103'. [ 94.115103][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1103'. [ 94.130018][ T5889] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.158110][ T6529] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.252913][ T6632] loop5: detected capacity change from 0 to 4096 [ 94.260328][ T6529] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.288117][ T6632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.352119][ T6529] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.404435][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.424334][ T6529] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.626954][ T6529] bridge_slave_1: left allmulticast mode [ 94.632841][ T6529] bridge_slave_1: left promiscuous mode [ 94.638957][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.647089][ T6529] bridge_slave_0: left allmulticast mode [ 94.652944][ T6529] bridge_slave_0: left promiscuous mode [ 94.658927][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.756106][ T6529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.766781][ T6529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.776655][ T6529] bond0 (unregistering): Released all slaves [ 94.862703][ T6529] hsr_slave_0: left promiscuous mode [ 94.884245][ T6529] hsr_slave_1: left promiscuous mode [ 94.892650][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.928055][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.966357][ T6529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.988920][ T6529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.036813][ T6529] veth1_macvtap: left promiscuous mode [ 95.055522][ T6529] veth0_macvtap: left promiscuous mode [ 95.061509][ T6529] veth1_vlan: left promiscuous mode [ 95.067038][ T6529] veth0_vlan: left promiscuous mode [ 95.217661][ T6529] team0 (unregistering): Port device team_slave_1 removed [ 95.238754][ T6529] team0 (unregistering): Port device team_slave_0 removed [ 95.328670][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 95.571479][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 95.571501][ T28] audit: type=1400 audit(1784629659.910:741): avc: denied { write } for pid=6691 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.589421][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.615846][ T28] audit: type=1400 audit(1784629659.950:742): avc: denied { compute_member } for pid=6702 comm="syz.5.1123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.659306][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.672831][ T6633] bridge_slave_0: entered allmulticast mode [ 95.686238][ T6633] bridge_slave_0: entered promiscuous mode [ 95.702817][ T6633] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.710151][ T28] audit: type=1400 audit(1784629660.040:743): avc: denied { write } for pid=6713 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.718886][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.770017][ T6633] bridge_slave_1: entered allmulticast mode [ 95.782153][ T6633] bridge_slave_1: entered promiscuous mode [ 95.795025][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 95.871224][ T6633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.905326][ T6633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.939748][ T6728] netlink: 762 bytes leftover after parsing attributes in process `syz.2.1130'. [ 95.984431][ T6633] team0: Port device team_slave_0 added [ 96.012805][ T6633] team0: Port device team_slave_1 added [ 96.064485][ T6633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.071634][ T6633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.129306][ T6633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.167324][ T6633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.175693][ T6633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.243501][ T6633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.360745][ T6633] hsr_slave_0: entered promiscuous mode [ 96.378368][ T6633] hsr_slave_1: entered promiscuous mode [ 96.401102][ T6633] debugfs: 'hsr0' already exists in 'hsr' [ 96.414681][ T6633] Cannot create hsr debugfs directory [ 96.463537][ T28] audit: type=1400 audit(1784629660.800:744): avc: denied { write } for pid=6740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.547535][ T28] audit: type=1400 audit(1784629660.880:745): avc: denied { write } for pid=6753 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.620533][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 96.930644][ T6633] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 96.951693][ T28] audit: type=1400 audit(1784629661.290:746): avc: denied { write } for pid=6756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.982995][ T6633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.024986][ T6633] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 97.046840][ T6633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.052955][ T28] audit: type=1400 audit(1784629661.390:747): avc: denied { write } for pid=6770 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.077891][ T6633] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 97.120784][ T6633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.145149][ T6633] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 97.174132][ T6633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.199831][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 97.315221][ T6633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.350116][ T6633] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.362893][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1138'. [ 97.384357][ T28] audit: type=1326 audit(1784629661.720:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.5.1140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 97.386395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.416847][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.437024][ T28] audit: type=1326 audit(1784629661.720:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.5.1140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 97.467847][ T28] audit: type=1326 audit(1784629661.720:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6791 comm="syz.5.1140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 97.501093][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.508304][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.572809][ T6633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.620088][ T6800] loop5: detected capacity change from 0 to 512 [ 97.655539][ T6800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.716648][ T6800] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.812365][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.854321][ T6633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.957330][ T6829] netlink: 'syz.6.1148': attribute type 1 has an invalid length. [ 97.996169][ T6829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.051906][ T6832] bond1: (slave geneve2): making interface the new active one [ 98.119658][ T6832] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 98.283196][ T6633] veth0_vlan: entered promiscuous mode [ 98.302570][ T6633] veth1_vlan: entered promiscuous mode [ 98.337906][ T6633] veth0_macvtap: entered promiscuous mode [ 98.355029][ T6633] veth1_macvtap: entered promiscuous mode [ 98.381922][ T6633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.405085][ T6633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.427761][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.448769][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.472498][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.489338][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.867203][ T6857] xt_hashlimit: size too large, truncated to 1048576 [ 98.883959][ T6857] xt_hashlimit: max too large, truncated to 1048576 [ 99.063072][ T6869] loop6: detected capacity change from 0 to 4096 [ 99.087019][ T6869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.199809][ T5477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.227853][ T6531] bond1: left allmulticast mode [ 99.258241][ T6531] bond1: left promiscuous mode [ 99.277369][ T6531] bridge0: port 3(bond1) entered disabled state [ 99.311719][ T6531] bridge_slave_1: left allmulticast mode [ 99.318491][ T6531] bridge_slave_1: left promiscuous mode [ 99.339598][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.450899][ T6531] bridge_slave_0: left allmulticast mode [ 99.459709][ T6531] bridge_slave_0: left promiscuous mode [ 99.482427][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.567613][ T6531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.603535][ T6531] bond0 (unregistering): Released all slaves [ 99.616425][ T6531] bond1 (unregistering): Released all slaves [ 99.686981][ T6531] hsr_slave_0: left promiscuous mode [ 99.693057][ T6531] hsr_slave_1: left promiscuous mode [ 99.699275][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.722354][ T6531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.801583][ T6531] team0 (unregistering): Port device team_slave_1 removed [ 99.813778][ T6531] team0 (unregistering): Port device team_slave_0 removed [ 99.985034][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 100.254569][ T6858] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.268244][ T6858] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.275796][ T6858] bridge_slave_0: entered allmulticast mode [ 100.282571][ T6858] bridge_slave_0: entered promiscuous mode [ 100.289755][ T6858] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.296933][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.304265][ T6858] bridge_slave_1: entered allmulticast mode [ 100.311058][ T6858] bridge_slave_1: entered promiscuous mode [ 100.329681][ T6858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.340648][ T6858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.408457][ T6858] team0: Port device team_slave_0 added [ 100.442667][ T6858] team0: Port device team_slave_1 added [ 100.492137][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 100.534903][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.550152][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.602478][ T6858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.631653][ T6858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.650612][ T6858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.676842][ T6858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.731653][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 100.731672][ T28] audit: type=1400 audit(1784629665.070:765): avc: denied { bind } for pid=6944 comm="syz.6.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 100.783594][ T6858] hsr_slave_0: entered promiscuous mode [ 100.805803][ T6858] hsr_slave_1: entered promiscuous mode [ 100.912227][ T28] audit: type=1400 audit(1784629665.250:766): avc: denied { listen } for pid=6955 comm="syz.6.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.040306][ T28] audit: type=1400 audit(1784629665.380:767): avc: denied { write } for pid=6946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.148341][ T28] audit: type=1400 audit(1784629665.480:768): avc: denied { write } for pid=6970 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.183158][ T6858] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.213736][ T6858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.234287][ T6858] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.270872][ T6858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.295991][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 101.320456][ T6858] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.351576][ T6858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.386721][ T6858] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 101.413008][ T6858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.573340][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 101.591383][ T6858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.597721][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1186'. [ 101.626200][ T6995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 101.636296][ T6858] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.666557][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.673814][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.699522][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.706725][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.776473][ T7007] netlink: 'syz.5.1188': attribute type 1 has an invalid length. [ 101.795997][ T28] audit: type=1400 audit(1784629666.130:769): avc: denied { write } for pid=6990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.863623][ T28] audit: type=1400 audit(1784629666.180:770): avc: denied { create } for pid=7014 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.894328][ T6858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.958274][ T28] audit: type=1400 audit(1784629666.180:771): avc: denied { write } for pid=7014 comm="syz.2.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.997729][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 102.024229][ T28] audit: type=1400 audit(1784629666.240:772): avc: denied { write } for pid=7016 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.095123][ T28] audit: type=1400 audit(1784629666.330:773): avc: denied { ioctl } for pid=7021 comm="syz.2.1192" path="socket:[17724]" dev="sockfs" ino=17724 ioctlcmd=0x48e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.159027][ T6858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.360334][ T6858] veth0_vlan: entered promiscuous mode [ 102.370201][ T6858] veth1_vlan: entered promiscuous mode [ 102.388961][ T6858] veth0_macvtap: entered promiscuous mode [ 102.398090][ T6858] veth1_macvtap: entered promiscuous mode [ 102.412673][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.425577][ T6858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.437320][ T3450] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.446337][ T3450] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.462911][ T3450] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.477120][ T3450] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.534490][ T7062] loop5: detected capacity change from 0 to 128 [ 102.568484][ T7062] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.634866][ T7062] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.666809][ T28] audit: type=1400 audit(1784629667.000:774): avc: denied { listen } for pid=7068 comm="syz.6.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.704668][ T4762] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.762096][ T7072] loop8: detected capacity change from 0 to 128 [ 102.800514][ T7072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 102.816010][ T7072] System zones: 1-3, 19-19, 35-36 [ 102.864266][ T7072] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.931344][ T7072] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.044435][ T6633] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.115945][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.126739][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.137354][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1208'. [ 103.150735][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1208'. [ 103.160681][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1208'. [ 103.172522][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1208'. [ 103.459566][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.466898][ C0] bridge0: topology change detected, propagating [ 103.473368][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.480645][ C0] bridge0: topology change detected, propagating [ 104.019619][ T6199] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.025867][ T4123] Bluetooth: hci0: command 0x1003 tx timeout [ 104.452777][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 104.462489][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1225'. [ 104.477380][ T6529] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.487079][ T6529] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.497057][ T36] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.539941][ T36] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.651597][ T7146] loop5: detected capacity change from 0 to 1024 [ 104.701678][ T7146] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.766086][ T7146] EXT4-fs (loop5): shut down requested (0) [ 104.841947][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.891065][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1232'. [ 104.939620][ T7155] loop2: detected capacity change from 0 to 4096 [ 104.980218][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.040862][ T7168] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1236'. [ 105.148881][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.513380][ T7184] vlan2: entered allmulticast mode [ 105.532692][ T7184] bond0: entered allmulticast mode [ 105.557046][ T7184] bond_slave_0: entered allmulticast mode [ 105.568517][ T7184] bond_slave_1: entered allmulticast mode [ 105.675989][ T7187] loop9: detected capacity change from 0 to 128 [ 105.704078][ T7193] netlink: 'syz.6.1248': attribute type 29 has an invalid length. [ 105.728980][ T7193] netlink: 'syz.6.1248': attribute type 29 has an invalid length. [ 105.774188][ T7194] loop5: detected capacity change from 0 to 512 [ 105.838371][ T7194] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1247: inode has both inline data and extents flags [ 105.854935][ T7194] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.855340][ T7194] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1247: couldn't read orphan inode 15 (err -117) [ 105.868837][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 105.884412][ C0] EXT4-fs (loop5): initial error at time 1784629670: ext4_orphan_get:1399: inode 15 [ 105.895282][ C0] EXT4-fs (loop5): last error at time 1784629670: ext4_orphan_get:1399: inode 15 [ 105.896213][ T7194] loop5: lost filesystem error report for type 5 error -117 [ 105.897245][ T7194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.013445][ T7099] loop8: detected capacity change from 0 to 8192 [ 106.102559][ T7099] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.123968][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 106.123985][ T28] audit: type=1400 audit(1784629670.460:785): avc: denied { write } for pid=7188 comm="syz.5.1247" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.283384][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.341917][ T7227] loop2: detected capacity change from 0 to 512 [ 106.363250][ T7227] EXT4-fs: Ignoring removed nobh option [ 106.370274][ T7227] EXT4-fs: Ignoring removed bh option [ 106.376333][ T7227] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.405426][ T7227] EXT4-fs (loop2): 1 truncate cleaned up [ 106.411734][ T7227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.429606][ T28] audit: type=1400 audit(1784629670.760:786): avc: denied { write } for pid=7226 comm="syz.2.1261" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.513211][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.535992][ T7223] loop5: detected capacity change from 0 to 512 [ 106.614046][ T7223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.691681][ T7223] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 106.760398][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 106.775154][ T3398] IPVS: starting estimator thread 0... [ 106.805942][ T7248] loop6: detected capacity change from 0 to 128 [ 106.861198][ T7248] syz.6.1271: attempt to access beyond end of device [ 106.861198][ T7248] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 106.878850][ T7246] IPVS: using max 2208 ests per chain, 110400 per kthread [ 106.896373][ T7223] EXT4-fs (loop5): 1 truncate cleaned up [ 106.923264][ T7248] syz.6.1271: attempt to access beyond end of device [ 106.923264][ T7248] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 106.925955][ T28] audit: type=1400 audit(1784629671.260:787): avc: denied { name_bind } for pid=7249 comm="syz.2.1272" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 106.950020][ T7223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.983904][ T7248] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 107.001125][ T7248] syz.6.1271: attempt to access beyond end of device [ 107.001125][ T7248] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 107.022499][ T7248] syz.6.1271: attempt to access beyond end of device [ 107.022499][ T7248] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 107.063435][ T7248] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 107.096368][ T28] audit: type=1400 audit(1784629671.420:788): avc: denied { write } for pid=7222 comm="syz.5.1260" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.123748][ T7248] syz.6.1271: attempt to access beyond end of device [ 107.123748][ T7248] loop6: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 107.164947][ T28] audit: type=1400 audit(1784629671.440:789): avc: denied { read write } for pid=7222 comm="syz.5.1260" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.195184][ T7248] syz.6.1271: attempt to access beyond end of device [ 107.195184][ T7248] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 107.213508][ T7257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1275'. [ 107.242427][ T28] audit: type=1400 audit(1784629671.440:790): avc: denied { open } for pid=7222 comm="syz.5.1260" path="/187/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.265545][ T7248] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 107.283317][ T7248] syz.6.1271: attempt to access beyond end of device [ 107.283317][ T7248] loop6: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 107.319384][ T7248] syz.6.1271: attempt to access beyond end of device [ 107.319384][ T7248] loop6: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 107.349231][ T7248] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 107.368501][ T7248] syz.6.1271: attempt to access beyond end of device [ 107.368501][ T7248] loop6: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 107.394389][ T7248] syz.6.1271: attempt to access beyond end of device [ 107.394389][ T7248] loop6: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 107.437634][ T7248] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 107.448136][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.459719][ T7248] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 107.471556][ T7248] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 107.495566][ T7248] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 107.532298][ T7248] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 107.553394][ T7248] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 107.632058][ T28] audit: type=1326 audit(1784629671.970:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7268 comm="syz.5.1279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd4279de99 code=0x0 [ 107.786559][ T7292] netlink: 'syz.2.1285': attribute type 21 has an invalid length. [ 107.796592][ T28] audit: type=1400 audit(1784629672.120:792): avc: denied { write } for pid=7265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.886910][ T28] audit: type=1400 audit(1784629672.220:793): avc: denied { write } for pid=7297 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.214526][ T7308] loop8: detected capacity change from 0 to 512 [ 108.287880][ T7308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.439209][ T7308] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 108.713934][ T7308] EXT4-fs (loop8): 1 truncate cleaned up [ 108.729018][ T7308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.874160][ T28] audit: type=1400 audit(1784629673.180:794): avc: denied { write } for pid=7307 comm="syz.8.1289" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.104446][ T6633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.496091][ T7394] loop6: detected capacity change from 0 to 8192 [ 110.031186][ T7439] __nla_validate_parse: 5 callbacks suppressed [ 110.031207][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1330'. [ 110.089662][ T7434] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1329'. [ 110.390040][ T7464] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1337'. [ 110.399537][ T7464] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1337'. [ 110.657484][ T7466] loop9: detected capacity change from 0 to 512 [ 110.672067][ T7466] EXT4-fs: Ignoring removed bh option [ 110.677583][ T7468] loop6: detected capacity change from 0 to 512 [ 110.685759][ T7466] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 110.708443][ T7468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.712057][ T7466] EXT4-fs (loop9): 1 truncate cleaned up [ 110.727163][ T7466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.779662][ T6858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.792906][ T5477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.898036][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1345'. [ 111.140758][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 111.140773][ T28] audit: type=1400 audit(1784629675.480:810): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 111.174633][ T28] audit: type=1400 audit(1784629675.480:811): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 111.226260][ T28] audit: type=1400 audit(1784629675.560:812): avc: denied { tracepoint } for pid=7503 comm="syz.5.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.248206][ T7502] loop9: detected capacity change from 0 to 4096 [ 111.259858][ T28] audit: type=1400 audit(1784629675.560:813): avc: denied { read } for pid=7503 comm="syz.5.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 111.279673][ T7502] EXT4-fs: Ignoring removed bh option [ 111.307392][ T7502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.327859][ T7502] EXT4-fs error (device loop9): ext4_free_blocks:6718: comm syz.9.1352: Freeing blocks not in datazone - block = 0, count = 16 [ 111.328940][ T28] audit: type=1400 audit(1784629675.660:814): avc: denied { write } for pid=7501 comm="syz.9.1352" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.413700][ T6858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.449915][ T7513] loop8: detected capacity change from 0 to 128 [ 111.462657][ T7513] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 111.549037][ T7513] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.586406][ T28] audit: type=1400 audit(1784629675.920:815): avc: denied { write } for pid=7512 comm="syz.8.1357" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.623028][ T28] audit: type=1400 audit(1784629675.950:816): avc: denied { write } for pid=7512 comm="syz.8.1357" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.646409][ T6633] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 111.647193][ T28] audit: type=1400 audit(1784629675.950:817): avc: denied { write } for pid=7512 comm="syz.8.1357" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.716020][ T28] audit: type=1400 audit(1784629675.950:818): avc: denied { write } for pid=7512 comm="syz.8.1357" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.739055][ T28] audit: type=1400 audit(1784629675.950:819): avc: denied { create } for pid=7512 comm="syz.8.1357" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 111.947868][ T7534] loop2: detected capacity change from 0 to 256 [ 112.527587][ T7550] loop6: detected capacity change from 0 to 512 [ 112.573964][ T7550] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.632822][ T7550] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 112.730272][ T7550] EXT4-fs (loop6): 1 truncate cleaned up [ 112.771844][ T7550] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.029748][ T7569] loop8: detected capacity change from 0 to 512 [ 113.038278][ T5477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.055281][ T7569] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 113.114061][ T6529] tipc: Subscription rejected, illegal request [ 113.121555][ T7569] EXT4-fs (loop8): 1 truncate cleaned up [ 113.138501][ T7569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.180864][ T3411] IPVS: starting estimator thread 0... [ 113.270450][ T7589] IPVS: using max 2208 ests per chain, 110400 per kthread [ 113.311196][ T6633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.620568][ T7617] loop9: detected capacity change from 0 to 512 [ 113.769219][ T7617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.790965][ T7617] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 113.924349][ T7617] EXT4-fs (loop9): 1 truncate cleaned up [ 114.019038][ T7617] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.351922][ T6858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.640818][ T7696] loop6: detected capacity change from 0 to 32768 [ 114.647321][ T7706] loop5: detected capacity change from 0 to 8192 [ 114.658029][ T7706] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.888343][ T7712] loop5: detected capacity change from 0 to 512 [ 114.954665][ T7712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.010003][ T7712] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 115.064175][ T7712] EXT4-fs (loop5): 1 truncate cleaned up [ 115.195512][ T7712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.694577][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.774647][ T7739] syzkaller1: entered promiscuous mode [ 115.780294][ T7739] syzkaller1: entered allmulticast mode [ 115.878002][ T7745] loop5: detected capacity change from 0 to 1024 [ 115.920476][ T7745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.943046][ T7745] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.962171][ T7745] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.1428: Freeing blocks not in datazone - block = 0, count = 16 [ 115.978480][ T7745] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1428: bg 0: block 112: padding at end of block bitmap is not set [ 116.008361][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.217343][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 116.217363][ T28] audit: type=1400 audit(1784629680.550:843): avc: denied { accept } for pid=7768 comm="syz.8.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.348785][ T7763] loop5: detected capacity change from 0 to 512 [ 116.364439][ T7763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.404052][ T7763] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 116.467082][ T7763] EXT4-fs (loop5): 1 truncate cleaned up [ 116.524433][ T7763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.731087][ T28] audit: type=1400 audit(1784629681.060:844): avc: denied { write } for pid=7762 comm="syz.5.1436" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.871238][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.060723][ T28] audit: type=1400 audit(1784629681.390:845): avc: denied { write } for pid=7789 comm="syz.5.1447" path="socket:[19772]" dev="sockfs" ino=19772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.262118][ T7795] loop5: detected capacity change from 0 to 512 [ 117.302939][ T7795] EXT4-fs (loop5): 1 truncate cleaned up [ 117.325219][ T7795] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.340535][ T28] audit: type=1400 audit(1784629681.680:846): avc: denied { write } for pid=7794 comm="syz.5.1449" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.345322][ T7795] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1449: bg 0: block 465: padding at end of block bitmap is not set [ 117.378203][ T7795] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 117.393354][ T7795] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.393354][ T7795] [ 117.403362][ T7795] EXT4-fs (loop5): Total free blocks count 0 [ 117.409627][ T7795] EXT4-fs (loop5): Free/Dirty block details [ 117.415677][ T7795] EXT4-fs (loop5): free_blocks=0 [ 117.420947][ T7795] EXT4-fs (loop5): dirty_blocks=65 [ 117.426198][ T7795] EXT4-fs (loop5): Block reservation details [ 117.432595][ T7795] EXT4-fs (loop5): i_reserved_data_blocks=65 [ 117.492731][ T6531] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 117.630745][ T4762] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 117.800439][ T7825] netlink: 147888 bytes leftover after parsing attributes in process `syz.5.1461'. [ 118.188779][ T28] audit: type=1326 audit(1784629682.520:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.5.1472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 118.247635][ T28] audit: type=1326 audit(1784629682.550:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.5.1472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 118.334034][ T28] audit: type=1326 audit(1784629682.550:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.5.1472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 118.353319][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1475'. [ 118.392168][ T28] audit: type=1326 audit(1784629682.550:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.5.1472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 118.417895][ T28] audit: type=1326 audit(1784629682.560:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.5.1472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 118.445893][ T28] audit: type=1326 audit(1784629682.560:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.5.1472" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4279de99 code=0x7ffc0000 [ 118.646346][ T7874] loop2: detected capacity change from 0 to 512 [ 118.650419][ T7872] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 118.672053][ T7874] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 118.702210][ T7874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.722232][ T7874] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1481: bad orphan inode 15 [ 118.748922][ T7874] loop2: lost filesystem error report for type 5 error -117 [ 118.750264][ T7874] ext4_test_bit(bit=14, block=5) = 0 [ 118.763072][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 118.763099][ C0] EXT4-fs (loop2): initial error at time 1784629683: ext4_orphan_get:1425 [ 118.763128][ C0] EXT4-fs (loop2): last error at time 1784629683: ext4_orphan_get:1425 [ 118.787513][ T7874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 118.825395][ T7881] loop9: detected capacity change from 0 to 2048 [ 118.859700][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.890776][ T7881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.918778][ T6858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.954456][ T7889] loop6: detected capacity change from 0 to 512 [ 118.969829][ T7889] EXT4-fs: Ignoring removed oldalloc option [ 118.998798][ T7889] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 119.035232][ T7889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.058534][ T7889] ext4 filesystem being mounted at /172/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.139050][ T5477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.160128][ T7906] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 119.187783][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1497'. [ 119.232399][ T7917] loop8: detected capacity change from 0 to 1024 [ 119.270373][ T7917] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 119.319322][ T7917] System zones: 0-1, 3-12 [ 119.329356][ T7923] loop5: detected capacity change from 0 to 512 [ 119.346289][ T7917] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.374439][ T7923] EXT4-fs: Ignoring removed nobh option [ 119.412063][ T7923] EXT4-fs (loop5): orphan cleanup on readonly fs [ 119.435659][ T7917] EXT4-fs (loop8): shut down requested (2) [ 119.452442][ T7923] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.1500: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 119.531612][ T6633] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 119.542729][ T7923] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 119.545185][ T7923] EXT4-fs (loop5): Remounting filesystem read-only [ 119.554522][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 119.554539][ C0] EXT4-fs (loop5): initial error at time 1784629683: ext4_xattr_inode_update_ref:1037: inode 11 [ 119.554593][ C0] EXT4-fs (loop5): last error at time 1784629683: ext4_xattr_inode_update_ref:1037: inode 11 [ 119.619057][ T7923] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.1500: ea_inode dec ref err=-117 [ 119.632210][ T7923] EXT4-fs (loop5): 1 orphan inode deleted [ 119.645668][ T7923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 119.710764][ T7942] loop9: detected capacity change from 0 to 512 [ 119.718443][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.729490][ T7942] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 119.744162][ T7946] loop8: detected capacity change from 0 to 512 [ 119.762643][ T7942] EXT4-fs (loop9): 1 truncate cleaned up [ 119.780682][ T7946] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1510: inode has both inline data and extents flags [ 119.800972][ T7942] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.830341][ T7946] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.831011][ T7946] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1510: couldn't read orphan inode 15 (err -117) [ 119.840241][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 119.840263][ C1] EXT4-fs (loop8): initial error at time 1784629684: ext4_orphan_get:1399: inode 15 [ 119.840301][ C1] EXT4-fs (loop8): last error at time 1784629684: ext4_orphan_get:1399: inode 15 [ 119.884197][ T6858] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.888145][ T7946] loop8: lost filesystem error report for type 5 error -117 [ 119.894003][ T7946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.003680][ T6633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.259634][ T7972] ALSA: seq fatal error: cannot create timer (-16) [ 120.323777][ T7980] loop6: detected capacity change from 0 to 1024 [ 120.354948][ T7980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.367569][ T7980] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.396767][ T5477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 120.727567][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1535'. [ 120.805626][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1539'. [ 120.814843][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1539'. [ 120.828977][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1539'. [ 120.837947][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1539'. [ 121.440966][ T8075] IPv6: sit1: Disabled Multicast RS [ 121.474332][ T8077] loop2: detected capacity change from 0 to 128 [ 121.484898][ T8077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 121.496750][ T8077] System zones: 1-3, 19-19, 35-36 [ 121.503542][ T8077] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 121.521774][ T8077] ext4 filesystem being mounted at /346/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.556392][ T8077] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 121.578819][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.400191][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1570'. [ 122.593242][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 122.593261][ T28] audit: type=1400 audit(1784629686.930:885): avc: denied { ioctl } for pid=8108 comm="syz.6.1581" path="socket:[19261]" dev="sockfs" ino=19261 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.629273][ T8095] loop5: detected capacity change from 0 to 512 [ 122.662691][ T8095] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.713553][ T8095] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 122.730139][ T8095] EXT4-fs (loop5): group descriptors corrupted! [ 122.746149][ T28] audit: type=1400 audit(1784629687.080:886): avc: denied { bind } for pid=8118 comm="syz.9.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.803888][ T8122] EXT4-fs: Ignoring removed nobh option [ 122.848337][ T8122] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 122.877719][ T8122] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1587: invalid indirect mapped block 256 (level 1) [ 122.898856][ T8122] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.904276][ T8122] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1587: invalid indirect mapped block 2683928664 (level 1) [ 122.913526][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 122.913553][ C0] EXT4-fs (loop8): initial error at time 1784629687: ext4_free_branches:1023: inode 13 [ 122.913599][ C0] EXT4-fs (loop8): last error at time 1784629687: ext4_free_branches:1023: inode 13 [ 122.963890][ T8122] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.964234][ T8122] EXT4-fs (loop8): 1 truncate cleaned up [ 122.989993][ T8122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.171636][ T6633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.339706][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1597'. [ 123.360965][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1597'. [ 123.378139][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.392343][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.421263][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.450197][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.475510][ T28] audit: type=1400 audit(1784629687.810:887): avc: denied { map } for pid=8151 comm="syz.5.1602" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 123.691943][ T28] audit: type=1400 audit(1784629688.030:888): avc: denied { create } for pid=8172 comm="syz.9.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.721827][ T8163] set_capacity_and_notify: 1 callbacks suppressed [ 123.721852][ T8163] loop2: detected capacity change from 0 to 512 [ 123.739055][ T28] audit: type=1400 audit(1784629688.070:889): avc: denied { read } for pid=8172 comm="syz.9.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.916262][ T8163] EXT4-fs: test_dummy_encryption option not supported [ 123.973540][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.983333][ T28] audit: type=1400 audit(1784629688.310:890): avc: denied { read write } for pid=8161 comm="syz.2.1604" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.011346][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.053329][ T28] audit: type=1400 audit(1784629688.310:891): avc: denied { open } for pid=8161 comm="syz.2.1604" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.090829][ T8184] loop2: detected capacity change from 0 to 4096 [ 124.124282][ T8184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.159098][ T28] audit: type=1400 audit(1784629688.500:892): avc: denied { write } for pid=8183 comm="syz.2.1614" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.201952][ T28] audit: type=1400 audit(1784629688.540:893): avc: denied { read } for pid=8181 comm="syz.6.1613" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 124.269834][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.700895][ T28] audit: type=1400 audit(1784629689.040:894): avc: denied { write } for pid=8205 comm="syz.5.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.820565][ T8215] netlink: 'syz.6.1626': attribute type 1 has an invalid length. [ 124.867924][ T8198] loop8: detected capacity change from 0 to 512 [ 125.001742][ T8198] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 125.020540][ T8198] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.1620: corrupted in-inode xattr: e_value size too large [ 125.036105][ T8198] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.038226][ T8198] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1620: couldn't read orphan inode 15 (err -117) [ 125.060668][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 125.060698][ C0] EXT4-fs (loop8): initial error at time 1784629689: ext4_iget_extra_inode:5180: inode 15 [ 125.061025][ C0] EXT4-fs (loop8): last error at time 1784629689: ext4_iget_extra_inode:5180: inode 15 [ 125.090045][ T8198] loop8: lost filesystem error report for type 5 error -117 [ 125.105419][ T8198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.231874][ T8245] loop2: detected capacity change from 0 to 1024 [ 125.279984][ T8245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.641044][ T6633] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.642387][ T8245] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1629'. [ 125.708250][ T8245] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 125.864740][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1632'. [ 125.892987][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.946179][ T8340] loop2: detected capacity change from 0 to 164 [ 126.965586][ T8340] iso9660: Bad value for 'sbsector' [ 127.079886][ T3450] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.121576][ T3450] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.221445][ T3450] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.245836][ T3450] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.303600][ T3450] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.328001][ T3450] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.365643][ T8350] loop6: detected capacity change from 0 to 32768 [ 127.387162][ T3450] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.403686][ T3450] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.420831][ T8350] loop6: p1 p3 < > [ 127.453621][ T8383] loop2: detected capacity change from 0 to 512 [ 127.474123][ T8383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.506297][ T8383] EXT4-fs (loop2): 1 truncate cleaned up [ 127.607882][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 127.607901][ T28] audit: type=1400 audit(1784629691.940:915): avc: denied { setopt } for pid=8393 comm="syz.5.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 127.710072][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1665'. [ 127.730868][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1665'. [ 127.750662][ T8407] loop5: detected capacity change from 0 to 128 [ 127.767440][ T8389] udevd[8389]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 127.779448][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 127.799900][ T8407] bio_check_eod: 18 callbacks suppressed [ 127.799922][ T8407] syz.5.1666: attempt to access beyond end of device [ 127.799922][ T8407] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 127.839040][ T8407] syz.5.1666: attempt to access beyond end of device [ 127.839040][ T8407] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 127.853218][ T3450] bridge_slave_1: left allmulticast mode [ 127.859937][ T3450] bridge_slave_1: left promiscuous mode [ 127.866340][ T28] audit: type=1400 audit(1784629692.200:916): avc: denied { write } for pid=8402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.869971][ T3450] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.897927][ T8407] buffer_io_error: 4 callbacks suppressed [ 127.897950][ T8407] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 127.912512][ T8407] syz.5.1666: attempt to access beyond end of device [ 127.912512][ T8407] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 127.930956][ T8407] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 127.940300][ T3450] bridge_slave_0: left allmulticast mode [ 127.948992][ T8407] syz.5.1666: attempt to access beyond end of device [ 127.948992][ T8407] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 127.956505][ T3450] bridge_slave_0: left promiscuous mode [ 127.975001][ T28] audit: type=1400 audit(1784629692.310:917): avc: denied { write } for pid=8420 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.981235][ T3450] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.006049][ T8407] syz.5.1666: attempt to access beyond end of device [ 128.006049][ T8407] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 128.032824][ T8407] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 128.041899][ T8407] syz.5.1666: attempt to access beyond end of device [ 128.041899][ T8407] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 128.062100][ T8425] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1668'. [ 128.081035][ T8407] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 128.098981][ T8407] syz.5.1666: attempt to access beyond end of device [ 128.098981][ T8407] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 128.119181][ T8407] syz.5.1666: attempt to access beyond end of device [ 128.119181][ T8407] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 128.137295][ T8407] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 128.147403][ T8407] syz.5.1666: attempt to access beyond end of device [ 128.147403][ T8407] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 128.161465][ T8407] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 128.171721][ T8407] syz.5.1666: attempt to access beyond end of device [ 128.171721][ T8407] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 128.185764][ T8407] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 128.194869][ T8407] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 128.205215][ T8407] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 128.214146][ T8407] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 128.396075][ T3450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.428281][ T3450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.448440][ T3450] bond0 (unregistering): Released all slaves [ 128.485680][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 128.493702][ T8431] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 128.503980][ T36] bond0: (slave bond_slave_0): interface is now down [ 128.513257][ T36] bond0: (slave bond_slave_1): interface is now down [ 128.539852][ T36] bond0: (slave bond_slave_0): interface is now down [ 128.552567][ T36] bond0: (slave bond_slave_1): interface is now down [ 128.587760][ T8434] infiniband syz1: set active [ 128.592724][ T36] bond0: (slave bond_slave_0): interface is now down [ 128.597534][ T8433] loop6: detected capacity change from 0 to 512 [ 128.603034][ T8434] infiniband syz1: added bond0 [ 128.611843][ T36] bond0: (slave bond_slave_1): interface is now down [ 128.648874][ T6526] bond0: (slave bond_slave_0): interface is now down [ 128.656120][ T8434] RDS/IB: syz1: added [ 128.676247][ T6526] bond0: (slave bond_slave_1): interface is now down [ 128.686298][ T8434] smc: adding ib device syz1 with port count 1 [ 128.699730][ T8434] smc: ib device syz1 port 1 has no pnetid [ 128.729898][ T6526] bond0: (slave bond_slave_0): interface is now down [ 128.746029][ T6526] bond0: (slave bond_slave_1): interface is now down [ 128.781877][ T8433] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.794629][ T6526] bond0: (slave bond_slave_0): interface is now down [ 128.804843][ T6526] bond0: (slave bond_slave_1): interface is now down [ 128.818972][ T8433] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 128.830382][ T6531] bond0: (slave bond_slave_0): interface is now down [ 128.838923][ T6531] bond0: (slave bond_slave_1): interface is now down [ 128.871168][ T28] audit: type=1400 audit(1784629693.210:918): avc: denied { write } for pid=8438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.871452][ T6531] bond0: (slave bond_slave_0): interface is now down [ 128.906511][ T8433] EXT4-fs (loop6): 1 truncate cleaned up [ 128.917053][ T6531] bond0: (slave bond_slave_1): interface is now down [ 128.943312][ T28] audit: type=1400 audit(1784629693.280:919): avc: denied { write } for pid=8454 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.949037][ T6531] bond0: (slave bond_slave_0): interface is now down [ 128.997892][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.005999][ T28] audit: type=1400 audit(1784629693.340:920): avc: denied { write } for pid=8432 comm="syz.6.1671" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.027822][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.034654][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.059527][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.066537][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.091854][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.099055][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.119353][ T6526] bond0: (slave bond_slave_0): interface is now down [ 129.126168][ T6526] bond0: (slave bond_slave_1): interface is now down [ 129.161564][ T6526] bond0: (slave bond_slave_0): interface is now down [ 129.168533][ T6526] bond0: (slave bond_slave_1): interface is now down [ 129.202768][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.209962][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.232313][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.245981][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.268739][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.276294][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.298749][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.305852][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.330191][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.341161][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.353651][ T3450] hsr_slave_0: left promiscuous mode [ 129.360667][ T3450] hsr_slave_1: left promiscuous mode [ 129.369070][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.370845][ T6526] bond0: (slave bond_slave_0): interface is now down [ 129.384868][ T6526] bond0: (slave bond_slave_1): interface is now down [ 129.395396][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.405273][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.412934][ T6526] bond0: (slave bond_slave_0): interface is now down [ 129.421631][ T6526] bond0: (slave bond_slave_1): interface is now down [ 129.429449][ T3450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.440682][ T3450] veth1_macvtap: left promiscuous mode [ 129.446287][ T3450] veth0_macvtap: left promiscuous mode [ 129.452039][ T3450] veth1_vlan: left promiscuous mode [ 129.457370][ T3450] veth0_vlan: left promiscuous mode [ 129.459093][ T6531] bond0: (slave bond_slave_0): interface is now down [ 129.469603][ T6531] bond0: (slave bond_slave_1): interface is now down [ 129.498807][ T6524] bond0: (slave bond_slave_0): interface is now down [ 129.505813][ T6524] bond0: (slave bond_slave_1): interface is now down [ 129.529700][ T6524] bond0: (slave bond_slave_0): interface is now down [ 129.536695][ T6524] bond0: (slave bond_slave_1): interface is now down [ 129.556629][ T3450] team0 (unregistering): Port device team_slave_1 removed [ 129.563948][ T6529] bond0: (slave bond_slave_0): interface is now down [ 129.563972][ T6529] bond0: (slave bond_slave_1): interface is now down [ 129.578757][ T6529] bond0: (slave bond_slave_0): interface is now down [ 129.585601][ T6529] bond0: (slave bond_slave_1): interface is now down [ 129.592702][ T3450] team0 (unregistering): Port device team_slave_0 removed [ 129.608807][ T6529] bond0: (slave bond_slave_0): interface is now down [ 129.615846][ T6529] bond0: (slave bond_slave_1): interface is now down [ 129.638128][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 129.644862][ T6529] bond0: (slave bond_slave_0): interface is now down [ 129.657259][ T6529] bond0: (slave bond_slave_1): interface is now down [ 129.688889][ T6529] bond0: (slave bond_slave_0): interface is now down [ 129.713322][ T6529] bond0: (slave bond_slave_1): interface is now down [ 129.738905][ T6526] bond0: (slave bond_slave_0): interface is now down [ 129.745680][ T6526] bond0: (slave bond_slave_1): interface is now down [ 129.754639][ T8468] loop2: detected capacity change from 0 to 1024 [ 129.769122][ T6529] bond0: (slave bond_slave_0): interface is now down [ 129.779680][ T6529] bond0: (slave bond_slave_1): interface is now down [ 129.796730][ T28] audit: type=1400 audit(1784629694.130:921): avc: denied { write } for pid=8467 comm="syz.2.1678" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.819989][ T8468] EXT4-fs (loop2): shut down requested (0) [ 129.838767][ T6526] bond0: (slave bond_slave_0): interface is now down [ 129.858724][ T6526] bond0: (slave bond_slave_1): interface is now down [ 129.872683][ T6526] bond0: now running without any active interface! [ 130.030965][ T28] audit: type=1400 audit(1784629694.370:922): avc: denied { write } for pid=8476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.147078][ T28] audit: type=1400 audit(1784629694.480:923): avc: denied { write } for pid=8496 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.206966][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 130.258336][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.273680][ T8365] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.281306][ T8365] bridge_slave_0: entered allmulticast mode [ 130.287967][ T8365] bridge_slave_0: entered promiscuous mode [ 130.295394][ T8365] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.303590][ T8365] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.311687][ T8365] bridge_slave_1: entered allmulticast mode [ 130.319254][ T8365] bridge_slave_1: entered promiscuous mode [ 130.365903][ T8505] loop6: detected capacity change from 0 to 512 [ 130.412774][ T8365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.439956][ T8365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.440732][ T8505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.465953][ T8505] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 130.481702][ T8512] dummy0: entered allmulticast mode [ 130.488487][ T8512] dummy0: left allmulticast mode [ 130.539569][ T8365] team0: Port device team_slave_0 added [ 130.543864][ T28] audit: type=1400 audit(1784629694.880:924): avc: denied { map } for pid=8526 comm="syz.5.1690" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.561875][ T8365] team0: Port device team_slave_1 added [ 130.589511][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.596866][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.606065][ T8505] EXT4-fs (loop6): 1 truncate cleaned up [ 130.627925][ T8365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.641528][ T8365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.648594][ T8365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.711617][ T8365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.761356][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 130.820812][ T8365] hsr_slave_0: entered promiscuous mode [ 130.836104][ T8365] hsr_slave_1: entered promiscuous mode [ 130.848858][ T8365] debugfs: 'hsr0' already exists in 'hsr' [ 130.856369][ T8365] Cannot create hsr debugfs directory [ 131.229659][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1712'. [ 131.350807][ T8572] loop5: detected capacity change from 0 to 8192 [ 131.433558][ T8365] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 131.466077][ T8365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.478518][ T8365] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 131.507312][ T8365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.516868][ T8365] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 131.528171][ T8365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.542943][ T8365] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 131.570965][ T8365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.765318][ T8365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.813966][ T8365] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.842624][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.849849][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.906967][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.914246][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.046222][ T8610] loop5: detected capacity change from 0 to 512 [ 132.198414][ T8658] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1716'. [ 132.200733][ T8610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.267081][ T8658] ip6gre1: entered promiscuous mode [ 132.283122][ T8610] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 132.294521][ T8658] ip6gre1: entered allmulticast mode [ 132.358927][ T8365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.377629][ T8610] EXT4-fs (loop5): 1 truncate cleaned up [ 132.701446][ T8365] veth0_vlan: entered promiscuous mode [ 132.710272][ T8365] veth1_vlan: entered promiscuous mode [ 132.729283][ T8365] veth0_macvtap: entered promiscuous mode [ 132.737457][ T8365] veth1_macvtap: entered promiscuous mode [ 132.755004][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.769920][ T8365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.785194][ T6529] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.795137][ T6529] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.844093][ T6529] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.853652][ T4762] EXT4-fs unmount: 9 callbacks suppressed [ 132.853668][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.868892][ T6529] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.921265][ T8718] program syz.6.1727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.163317][ T8741] loop8: detected capacity change from 0 to 1024 [ 133.238261][ T8741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.258599][ T8741] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.281411][ T8741] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.1734: lblock 0 mapped to illegal pblock 0 (length 6) [ 133.294922][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 133.294944][ T28] audit: type=1400 audit(1784629697.620:945): avc: denied { write } for pid=8740 comm="syz.8.1734" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.334800][ T8741] EXT4-fs (loop8): Remounting filesystem read-only [ 133.362925][ T8365] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.466831][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1742'. [ 133.588925][ T8776] ip6gretap1: entered allmulticast mode [ 133.596528][ T8776] batman_adv: batadv0: Adding interface: ip6gretap1 [ 133.603440][ T8776] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.630405][ T8776] batman_adv: batadv0: Interface activated: ip6gretap1 [ 133.767453][ T28] audit: type=1400 audit(1784629698.100:946): avc: denied { ioctl } for pid=8786 comm="syz.8.1755" path="socket:[22134]" dev="sockfs" ino=22134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.901054][ T28] audit: type=1400 audit(1784629698.230:947): avc: denied { bind } for pid=8798 comm="syz.9.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.032557][ T28] audit: type=1400 audit(1784629698.370:948): avc: denied { write } for pid=8810 comm="syz.2.1764" path="socket:[21457]" dev="sockfs" ino=21457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 134.321002][ T8828] loop6: detected capacity change from 0 to 764 [ 134.341887][ T8828] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 134.351831][ T28] audit: type=1400 audit(1784629698.690:949): avc: denied { mount } for pid=8827 comm="syz.6.1772" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 134.425137][ T28] audit: type=1400 audit(1784629698.750:950): avc: denied { remount } for pid=8827 comm="syz.6.1772" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 134.489125][ T28] audit: type=1400 audit(1784629698.790:951): avc: denied { unmount } for pid=5477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 134.516471][ T8835] loop5: detected capacity change from 0 to 128 [ 134.538046][ T8835] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.551927][ T8835] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.599255][ T28] audit: type=1400 audit(1784629698.930:952): avc: denied { write } for pid=8834 comm="syz.5.1775" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.658202][ T4762] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.769451][ T8850] loop8: detected capacity change from 0 to 512 [ 134.775090][ T8850] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.1782: invalid block [ 134.775194][ T8850] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.775350][ T8850] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1782: invalid indirect mapped block 4294967295 (level 1) [ 134.775399][ T8850] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.775581][ T8850] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1782: invalid indirect mapped block 4294967295 (level 1) [ 134.775694][ T8850] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 134.775906][ T8850] EXT4-fs (loop8): 2 truncates cleaned up [ 134.776407][ T8850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.865987][ T8365] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.277119][ T8869] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8869 comm=syz.5.1788 [ 135.363670][ T28] audit: type=1400 audit(1784629699.700:953): avc: denied { read } for pid=8864 comm="syz.6.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.517112][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1797'. [ 135.543898][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1797'. [ 135.623869][ T8898] loop6: detected capacity change from 0 to 512 [ 135.647518][ T8898] EXT4-fs: Ignoring removed bh option [ 135.676272][ T8898] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 135.700663][ T8898] EXT4-fs (loop6): 1 truncate cleaned up [ 135.716901][ T8898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.747884][ T8908] netlink: 'syz.9.1804': attribute type 12 has an invalid length. [ 135.774802][ T8909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1803'. [ 135.796126][ T28] audit: type=1400 audit(1784629700.120:954): avc: denied { write } for pid=8894 comm="syz.6.1798" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.857525][ T5477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.226398][ T8940] SELinux: ebitmap start bit (536870912) is beyond the end of the bitmap (1088) [ 136.238570][ T8940] SELinux: invalid class [ 136.245612][ T8940] SELinux: failed to load policy [ 136.439836][ T8968] loop8: detected capacity change from 0 to 128 [ 136.495311][ T8968] bio_check_eod: 32 callbacks suppressed [ 136.495334][ T8968] syz.8.1829: attempt to access beyond end of device [ 136.495334][ T8968] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 136.811296][ T8989] loop8: detected capacity change from 0 to 4096 [ 136.818352][ T8989] EXT4-fs: Ignoring removed bh option [ 136.824575][ T8991] loop5: detected capacity change from 0 to 1024 [ 136.842301][ T8991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.855556][ T8989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.865469][ T8991] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.884697][ T8989] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.1837: Freeing blocks not in datazone - block = 0, count = 16 [ 136.915471][ T8991] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.1838: Freeing blocks not in datazone - block = 0, count = 16 [ 136.935532][ T8365] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.946783][ T3450] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 136.973208][ T3450] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.987000][ T3450] EXT4-fs (loop5): This should not happen!! Data will be lost [ 136.987000][ T3450] [ 136.998388][ T3450] EXT4-fs (loop5): Total free blocks count 0 [ 137.004527][ T3450] EXT4-fs (loop5): Free/Dirty block details [ 137.010678][ T3450] EXT4-fs (loop5): free_blocks=16 [ 137.015808][ T3450] EXT4-fs (loop5): dirty_blocks=16 [ 137.021441][ T3450] EXT4-fs (loop5): Block reservation details [ 137.027511][ T3450] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 137.035408][ T4762] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 137.049958][ T4762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.202675][ T3392] IPVS: starting estimator thread 0... [ 137.299632][ T9012] IPVS: using max 1872 ests per chain, 93600 per kthread [ 137.342461][ T9020] loop8: detected capacity change from 0 to 256 [ 137.380839][ T9022] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1850'. [ 137.525016][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1855'. [ 137.528390][ T9034] netlink: 'syz.6.1856': attribute type 1 has an invalid length. [ 137.565786][ T9034] bond2: entered promiscuous mode [ 137.579118][ T9034] bond2: entered allmulticast mode [ 137.589224][ T9034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.793332][ T9020] ================================================================== [ 137.801488][ T9020] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 137.808648][ T9020] [ 137.811018][ T9020] write to 0xffff8881058c621c of 4 bytes by task 9027 on cpu 1: [ 137.818687][ T9020] xas_set_mark+0x12b/0x140 [ 137.823231][ T9020] __folio_start_writeback+0x16a/0x350 [ 137.828846][ T9020] __mpage_writepages+0xd92/0x1370 [ 137.834005][ T9020] fat_writepages+0x26/0x30 [ 137.838562][ T9020] do_writepages+0x1b9/0x300 [ 137.843206][ T9020] file_write_and_wait_range+0x178/0x2f0 [ 137.848903][ T9020] mmb_fsync_noflush+0x48/0x140 [ 137.853813][ T9020] fat_file_fsync+0x98/0x110 [ 137.858459][ T9020] vfs_fsync_range+0xc5/0xe0 [ 137.863102][ T9020] generic_file_write_iter+0x1a3/0x1f0 [ 137.868616][ T9020] iter_file_splice_write+0x6a0/0xa60 [ 137.874045][ T9020] direct_splice_actor+0x156/0x280 [ 137.879202][ T9020] splice_direct_to_actor+0x2f9/0x680 [ 137.884629][ T9020] do_splice_direct+0x119/0x1a0 [ 137.889527][ T9020] do_sendfile+0x37d/0x640 [ 137.893992][ T9020] __x64_sys_sendfile64+0x105/0x150 [ 137.899274][ T9020] x64_sys_call+0x2dc4/0x3020 [ 137.904024][ T9020] do_syscall_64+0x136/0x3c0 [ 137.908643][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.914576][ T9020] [ 137.916958][ T9020] read to 0xffff8881058c621c of 4 bytes by task 9020 on cpu 0: [ 137.924535][ T9020] xas_find_marked+0x602/0x650 [ 137.929348][ T9020] filemap_get_folios_tag+0xf7/0x400 [ 137.934695][ T9020] writeback_iter+0x48f/0x7c0 [ 137.939426][ T9020] __mpage_writepages+0x8a/0x1370 [ 137.944487][ T9020] fat_writepages+0x26/0x30 [ 137.949029][ T9020] do_writepages+0x1b9/0x300 [ 137.953681][ T9020] file_write_and_wait_range+0x178/0x2f0 [ 137.959376][ T9020] mmb_fsync_noflush+0x48/0x140 [ 137.964280][ T9020] fat_file_fsync+0x98/0x110 [ 137.968931][ T9020] vfs_fsync_range+0xc5/0xe0 [ 137.973576][ T9020] generic_file_write_iter+0x1a3/0x1f0 [ 137.979193][ T9020] iter_file_splice_write+0x6a0/0xa60 [ 137.984614][ T9020] direct_splice_actor+0x156/0x280 [ 137.989803][ T9020] splice_direct_to_actor+0x2f9/0x680 [ 137.995253][ T9020] do_splice_direct+0x119/0x1a0 [ 138.000150][ T9020] do_sendfile+0x37d/0x640 [ 138.004613][ T9020] __x64_sys_sendfile64+0x105/0x150 [ 138.009866][ T9020] x64_sys_call+0x2dc4/0x3020 [ 138.014576][ T9020] do_syscall_64+0x136/0x3c0 [ 138.019226][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.025195][ T9020] [ 138.027553][ T9020] value changed: 0x0a000021 -> 0x0c000021 [ 138.033311][ T9020] [ 138.035658][ T9020] Reported by Kernel Concurrency Sanitizer on: [ 138.041842][ T9020] CPU: 0 UID: 0 PID: 9020 Comm: syz.8.1849 Not tainted syzkaller #0 PREEMPT(lazy) [ 138.051170][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 138.061262][ T9020] ==================================================================