last executing test programs: 4m27.509626198s ago: executing program 32 (id=35): r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000800) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 3m7.582415068s ago: executing program 33 (id=1744): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b3", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2m48.337387637s ago: executing program 34 (id=2337): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, 0x0, 0x0) 2m43.373240756s ago: executing program 35 (id=2422): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r2, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c"], 0x84}}, 0x200088c2) 2m42.624632204s ago: executing program 36 (id=2434): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) 2m32.101594275s ago: executing program 37 (id=2528): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x10000d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(0x0, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 2m11.145976166s ago: executing program 3 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) 2m11.033692339s ago: executing program 3 (id=2834): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) 2m10.134963561s ago: executing program 3 (id=2865): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'vlan0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r1, 0x18}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000014", 0xe}], 0x1}, 0x4005) 2m10.014391563s ago: executing program 3 (id=2868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 2m9.955854005s ago: executing program 3 (id=2871): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2m9.875136297s ago: executing program 3 (id=2876): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x20008884) 1m54.496167304s ago: executing program 38 (id=2876): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x20008884) 1m53.612970175s ago: executing program 9 (id=3044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYBLOB="b6fd3d1377ae842e4bcb383cd57743444e45f5188a552aff2b173d8fcdd693a79f016d5fb015aa7d34a687c6f3b57944ec2bf4f86b841a88895f90b1404cbe512112f0abe067b9a236e64f11f1fc5f12e73af4a62f343b04532164bd92acb5a265383421f28dfa8cd27e63108eded741d5b1800d6716a2cbafec8fc79062d977c7e6db6bd616cd2e7d88e4033a2d5c1b3c", @ANYRES64], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000003}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 1m53.482303298s ago: executing program 9 (id=3050): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1m53.378273501s ago: executing program 9 (id=3052): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001720000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 1m53.272464303s ago: executing program 9 (id=3055): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@commit={'commit', 0x3d, 0x82f7}}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x1, 0x456, &(0x7f0000000d80)="$eJzs3MtvG8UfAPCv7Th9/5JfKY+GFAIFEfFImvRBD1yKQOIAEhIcirgQkrQKdRvUpBKtIggcwhFV4o44IvEXcKFcEHBC4gp3hBShXCicjNbeTdzETuLEiUv9+UibzHjGmvnu7tjjWa8D6FgDyZ9cxMGI+DUieqrZOysMVP/dXpob/3tpbjwX5fIbf+Yq9f5amhvPqmbPO1DNlMvrtLvwdsRYqTR5Nc0Pz15+f3jm+o3npi6PXZy8OHll9OzZUyePdZ8ZPd2SOA8lfe37cLr/6Ctv3Xxt/PzNd3/8OunvwbS8No5WGaju3bqebHVjbXaoJp3ramNHaEohIpLDVayM/54oxL7lsp54+ZO2dg7YUeVyvryncfF8GbiHJRN1oBNlb/TJ599s26Wpx11h8Vwsr2PcTrdqSVfk0zrF9DPSThiIiPPz/3yRbLFD6xAAALVunYuIZ+vN//LxQE29/6XXhnoj4v8RcTgi7ouIIxFxf0Sl7oMR8VCT7a++QrJ2/lPu2VJgm5TM/15Ir23dOf/LZn/RW0hzhyrxF3MXpkqTJ9J9MhjFPUl+ZJ02vnvpl88aldXO/5ItaT+bC6b9+KNr1QLdxNjs2HZirrX4cURfV734c8tz3mR+fDQi+rbYxtTTX/VH7K1btnH862jBpLz8ZcRT1eM/H6viz+QaXp8cef7M6OnhvVGaPDGcnRVr/fTzwuuN2t9W/C2weKsc++ue/8vx9+b2Rsxcv3Gpcr12pvk2Fn77tOFnmq2e/925Nyvp7vSxD8ZmZ6+ORHTnXl37+OjKc7N8Vj85/weP1x//h2NlTzwcEf0RcSwiHomIR9O+PxYRj0fE8XXi/+HFJ95rPv51VuVbKIl/YqPjH7XHv/lE4dL33zQffyY5/qcqqcH0kc28/m22g9vZdwAAAPBfka98Bz6XH1pO5/NDQ9Xv8B+J/fnS9MzsMxemr12ZqH5XvjeK+Wylq6dmPXQkXRvujeK1JD+6kq+Un0zXjT8v7Kvkh8anSxPtDh463IEG4z/xeyHeaXf/gB3mfi3oXMY/dC7jHzqX8Q+dy/iHzlVv/H/Uhn4Au2+D9/99u9UPYPeZ/0PnMv6hcxn/0JEa3huf39Yt/xJtSnzbvb3fath8IvJ3Scj3TKIYdYu6Nv1jFltM7Klb1O5XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///78OPw") r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmmsg$sock(r0, &(0x7f0000000c40)=[{{&(0x7f0000000180)=@hci={0x1d, 0x1, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000480)="024468f75872dcc35c4a865167ce141180f86d6d2d2b667592a3c33936463143e7bb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86995e3ae7dbd8b6bc88af335ebe083ced9a2b1f3b847103b7af298aabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25000000000000", 0x7e}, {&(0x7f0000000bc0)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d94173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) 1m53.134881237s ago: executing program 9 (id=3058): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 1m53.084753628s ago: executing program 9 (id=3059): socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) 1m38.032011358s ago: executing program 39 (id=3059): socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) 1m23.407056087s ago: executing program 5 (id=3723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) 1m23.355712818s ago: executing program 5 (id=3726): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) 1m23.27655264s ago: executing program 5 (id=3730): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000002c0)={r1, 0x8}, 0x8) 1m23.229536742s ago: executing program 5 (id=3732): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1043400, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 1m23.175843822s ago: executing program 5 (id=3734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x6}, {0x7}, {0xfff1, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1m22.927330359s ago: executing program 5 (id=3740): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x1, 0x4ef, 0xf4ab, 0x7fff, 0xb1, "fe6735f4050000000000002000", 0x6, 0x4}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 1m22.907671309s ago: executing program 40 (id=3740): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x1, 0x4ef, 0xf4ab, 0x7fff, 0xb1, "fe6735f4050000000000002000", 0x6, 0x4}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 1m21.838519334s ago: executing program 6 (id=3761): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x800}, 0x64004084) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 1m21.786149336s ago: executing program 6 (id=3763): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x6, 0x89040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10004, 0x20da, 0x9, 0x8, 0x20009, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xda}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m20.928390516s ago: executing program 6 (id=3769): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x10, 0x3, 0xa) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 1m19.800292643s ago: executing program 6 (id=3783): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 1m19.712608725s ago: executing program 6 (id=3785): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a3100000000280004800800024000000000080001400000000514"], 0xe0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 1m19.499182261s ago: executing program 6 (id=3789): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m19.462000722s ago: executing program 41 (id=3789): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 30.650374648s ago: executing program 8 (id=4917): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 30.613789419s ago: executing program 8 (id=4919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/3, 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 30.357615335s ago: executing program 8 (id=4927): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 30.267188897s ago: executing program 8 (id=4931): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000700b00000000000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 30.216270798s ago: executing program 8 (id=4935): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 30.125762921s ago: executing program 8 (id=4937): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x80000308) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 14.887377974s ago: executing program 42 (id=4937): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x80000308) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 2.916930351s ago: executing program 4 (id=5220): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sync() 2.436201502s ago: executing program 4 (id=5221): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x5}, 0x0, 0x2, 0xfffffffe, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x35}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.270330896s ago: executing program 7 (id=5224): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 1.740316389s ago: executing program 0 (id=5228): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000000080)) 1.657637081s ago: executing program 0 (id=5229): r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x8000}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x2, 0x12000, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.589127432s ago: executing program 1 (id=5232): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78) fallocate(r0, 0x0, 0x0, 0x1001ed) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 1.483436815s ago: executing program 0 (id=5233): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x6, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) 1.416490707s ago: executing program 4 (id=5234): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x4084) 1.361671378s ago: executing program 7 (id=5235): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1.361306328s ago: executing program 1 (id=5236): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 1.25003563s ago: executing program 1 (id=5239): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8000000000000001}, 0x309359, 0x4, 0x0, 0x5, 0x2, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) 1.177587152s ago: executing program 4 (id=5240): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {}, {@dioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@mblk_io_submit}]}, 0x3, 0x578, &(0x7f0000000ec0)="$eJzs3VtrHFUcAPD/bJLetSmUoj5IoA9WajdN4qWC0PooWizoe12SaSjZdEt2U5pYaPtgX0SQIohYED+A7z4Wv4CfQtBCkRL0wZfIbGbbbbPbzWU1287vB5OcMzO7Z86cOWf/c1k2gMIay/6UIl6OiK+TiINty4YjXzi2tt7Kg2vT2ZTE6uonfyaR5PNa6yf5//155qWI+OWLiOOl9eXWl5bnKtVqupDnxxvzl8frS8snLs5XZtPZ9NLk1NSpt6Ym333n7b7V9fVzf3/38d0PTn15dOXbn+4dup3EmTiQL2uvxzbcaM+MxVi+T0bizBMrTvShsEGS9FqhwzHAzhvK+/lIZGPAwRjKez3w/LseEatAQSX6PxRUKw5ondv36Tz4mXH//bUToPb6f9W8CDK8dm0k9jTPjfatJI+dGWXnu6N9KD8r4+c/7tzOpuhxHeJ6H8oDaLlxMyJODg+vH/+TGIu923rvkxu46jf2RL5onz+wk+5m8c8bneK/0sP4JzrEP/s79N2t6N3/S/f6UExXWfz3Xsf49+HQNTqU515oxnwjyYWL1fRkRLwYEcdiZHeW3+r9nPb4L5uy8luxYL4d94Z3P/6amUqjssXi1rl/M+KVR/FvEo+N/9Fs/6S9/ZO1m1zZ/ji3wTKOpHde7basd/3b9T8CXv0x4rWO7f/ojlby9PuT483jYe1v7O5Qxl+3jvzarfzN1b//svbf9/T6jybt92vrmy/jhz3/pN2WbfX435V82kzvyuddrTQaCxMRu5KP1s+ffPTaVr61flb/Y0efPv4lHca/LDL6bIP1v3W4exg0CO0/s6n233zitw8//75b+Rtr/zebqWP5nI2MfxvdwO3sOwAAAAAAABg0pYg4EEmp/DBdKpXLa893HI59pWqt3jh+obZ4aSaa35UdjZFS6/mHg23PQ0zkz8O28pNP5Kci4lBEfDO0t5kvT9eqMztdeQAAAAAAAAAAAAAAAAAAABgQ+7t8/z/z+9BObx3wn/OT31BcPft/P37pCRhIPv+huPR/KC79H4pL/4fi0v+huPR/KC79H4pL/wcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+Onf2bDatrjy4Np3lZ64sLc7VrpyYSetz5fnF6fJ0beFyebZWm62m5enafK/3q9ZqlycmY/HqeCOtN8brS8vn52uLlxrnL85XZtPz6cj/UisAAAAAAAAAAAAAAAAAAAB4ttSXlucq1Wq6INE1cToGYjO2nEh6tfLp/GDYUhHDO1/BdGEoIgZgM56nxA4PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//wSRLzU=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r1, 0x10, 0x822, 0x7ffc) 1.177180692s ago: executing program 2 (id=5241): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814) connect$inet6(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.093686434s ago: executing program 1 (id=5242): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001014010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) 1.055711665s ago: executing program 7 (id=5243): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="e8020000190001"], 0x2e8}}, 0x4004) 1.055529505s ago: executing program 1 (id=5244): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x5}, 0x0, 0x2, 0xfffffffe, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x35}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.002988196s ago: executing program 0 (id=5245): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}, 0x9}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000001c0), 0x10, &(0x7f00000004c0)=""/121, 0x79}, 0x65}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/112, 0x70}, 0x7f}], 0x3, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 925.484068ms ago: executing program 2 (id=5246): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) timer_gettime(0x0, 0x0) 865.72094ms ago: executing program 0 (id=5247): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x7}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0xfffd, 0x400c0d4, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 755.415432ms ago: executing program 0 (id=5248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) 754.845612ms ago: executing program 2 (id=5258): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0x7}, 0x80, 0x400, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000010000000100000008000100030000002c000480050003000500000005000300010000000500030002000000050003000100000005000300060000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 511.973028ms ago: executing program 4 (id=5249): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.L'}, 0x15) 344.747612ms ago: executing program 4 (id=5250): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 275.233824ms ago: executing program 2 (id=5251): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3d, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 241.925145ms ago: executing program 7 (id=5252): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50) 185.044306ms ago: executing program 2 (id=5253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 27.95994ms ago: executing program 1 (id=5254): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 27.86452ms ago: executing program 2 (id=5255): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) 27.45912ms ago: executing program 7 (id=5265): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x2, 0x2, 0x0, 0x7, 0xe, 0x5, 0xfffffffffffffffa, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0x20007, 0x80000000000000, 0xcc0, 0x1, 0x5, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x5, 0x2000000000004}) 0s ago: executing program 7 (id=5256): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x400, 0x80000001, 0xfffffffd}, 0x10) kernel console output (not intermixed with test programs): 99: inode 13 [ 242.057106][T15127] loop0: lost filesystem error report for type 5 error -117 [ 242.059455][T15127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 242.231345][T15127] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.4123: dx entry: limit 65535 != root limit 120 [ 242.257546][T15127] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4123: Corrupt directory, running e2fsck is recommended [ 242.291695][ T424] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 242.330208][T15155] loop1: detected capacity change from 0 to 256 [ 242.394205][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4136'. [ 242.429979][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.444504][T15157] netlink: 'syz.7.4136': attribute type 30 has an invalid length. [ 242.467862][T15160] loop1: detected capacity change from 0 to 256 [ 242.473319][T15157] netlink: 'syz.7.4136': attribute type 29 has an invalid length. [ 242.507458][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4136'. [ 242.552855][T15163] loop0: detected capacity change from 0 to 512 [ 242.578221][T15163] EXT4-fs: inline encryption not supported [ 242.604474][T15165] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 242.620955][T15163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c198, mo2=0002] [ 242.636100][T15165] bond2 (unregistering): Released all slaves [ 242.642552][T15163] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.4138: corrupted in-inode xattr: e_value size too large [ 242.683943][T15163] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.684256][T15163] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4138: couldn't read orphan inode 15 (err -117) [ 242.693587][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 242.693611][ C1] EXT4-fs (loop0): initial error at time 1784945496: ext4_iget_extra_inode:5180: inode 15 [ 242.693644][ C1] EXT4-fs (loop0): last error at time 1784945496: ext4_iget_extra_inode:5180: inode 15 [ 242.767339][T15163] loop0: lost filesystem error report for type 5 error -117 [ 242.771711][T15163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.821916][T15177] loop8: detected capacity change from 0 to 512 [ 242.831197][ T28] audit: type=1400 audit(1784945497.077:1494): avc: denied { write } for pid=15162 comm="syz.0.4138" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.880166][T15177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.904399][T15179] loop1: detected capacity change from 0 to 512 [ 242.910683][ T28] audit: type=1400 audit(1784945497.147:1495): avc: denied { write } for pid=15175 comm="syz.8.4143" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.933182][T15179] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.949333][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.006903][ T9507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.160726][T15206] EXT4-fs: Ignoring removed oldalloc option [ 243.170826][T15206] EXT4-fs: Ignoring removed bh option [ 243.190733][T15206] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 243.203157][T15206] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.232900][ T28] audit: type=1400 audit(1784945497.467:1496): avc: denied { write } for pid=15205 comm="syz.7.4156" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.257977][ T28] audit: type=1400 audit(1784945497.477:1497): avc: denied { lock } for pid=15205 comm="syz.7.4156" path="/55/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.281556][ T28] audit: type=1400 audit(1784945497.477:1498): avc: denied { write } for pid=15205 comm="syz.7.4156" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.304340][ T28] audit: type=1400 audit(1784945497.477:1499): avc: denied { link } for pid=15205 comm="syz.7.4156" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.307075][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 243.357496][T15213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.383827][T15213] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 243.401543][T15213] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 3 with error 28 [ 243.414132][T15213] EXT4-fs (loop1): This should not happen!! Data will be lost [ 243.414132][T15213] [ 243.423886][T15213] EXT4-fs (loop1): Total free blocks count 0 [ 243.430252][T15213] EXT4-fs (loop1): Free/Dirty block details [ 243.436231][T15213] EXT4-fs (loop1): free_blocks=2415919504 [ 243.442304][T15213] EXT4-fs (loop1): dirty_blocks=16 [ 243.447501][T15213] EXT4-fs (loop1): Block reservation details [ 243.453642][T15213] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 243.461670][T15213] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 13 with error 28 [ 243.493766][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 243.561004][T15233] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4168'. [ 243.599995][T15239] sctp: [Deprecated]: syz.1.4170 (pid 15239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.599995][T15239] Use struct sctp_sack_info instead [ 243.809943][T15266] ext2: Unknown parameter 'noacl' [ 243.921188][T15278] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 243.938315][T15278] vhci_hcd vhci_hcd.2: invalid port number 96 [ 243.946227][T15278] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 243.977306][T15288] netlink: 'syz.2.4194': attribute type 2 has an invalid length. [ 244.067111][T15295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.089070][T15295] ext4 filesystem being mounted at /382/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.125259][T15306] netlink: 'syz.2.4200': attribute type 4 has an invalid length. [ 244.151482][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'. [ 244.173418][ T9507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.401673][T15335] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 244.454719][T15335] bond1 (unregistering): Released all slaves [ 244.457952][T15338] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4216'. [ 244.476695][T15338] openvswitch: netlink: Message has 6 unknown bytes. [ 244.586369][T15350] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 244.607911][T15350] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 244.651042][T15350] EXT4-fs (loop7): orphan cleanup on readonly fs [ 244.679735][T15350] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #13: comm syz.7.4229: iget: bad i_size value: 12154761577498 [ 244.724026][T15350] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 244.725147][T15350] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4229: couldn't read orphan inode 13 (err -117) [ 244.734434][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 244.734456][ C0] EXT4-fs (loop7): initial error at time 1784945498: ext4_orphan_get:1399: inode 13 [ 244.734487][ C0] EXT4-fs (loop7): last error at time 1784945498: ext4_orphan_get:1399: inode 13 [ 244.772053][T15350] loop7: lost filesystem error report for type 5 error -117 [ 244.773877][T15350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 244.839921][T15350] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.4229: dx entry: limit 65535 != root limit 120 [ 244.876279][T15350] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4229: Corrupt directory, running e2fsck is recommended [ 244.945054][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.064792][T15380] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 245.082266][T15380] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.4235: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.082358][T15380] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.083861][T15380] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.4235: Failed to acquire dquot type 0 [ 245.083885][T15380] loop2: lost filesystem error report for type 5 error -117 [ 245.085384][T15380] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.4235: Freeing blocks not in datazone - block = 0, count = 4096 [ 245.085420][T15380] loop2: lost filesystem error report for type 5 error -117 [ 245.085758][T15380] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.4235: Invalid inode bitmap blk 0 in block_group 0 [ 245.085790][T15380] loop2: lost filesystem error report for type 5 error -117 [ 245.087727][ C1] EXT4-fs (loop2): error count since last fsck: 4 [ 245.087748][ C1] EXT4-fs (loop2): initial error at time 1784945499: ext4_map_blocks:833: inode 3: block 1 [ 245.087803][ C1] EXT4-fs (loop2): last error at time 1784945499: ext4_read_inode_bitmap:141 [ 245.088630][T15380] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 245.088655][T15380] loop2: lost filesystem error report for type 5 error -117 [ 245.091746][T15380] EXT4-fs (loop2): 1 orphan inode deleted [ 245.092607][T15380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.116663][ T3453] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.116717][ T3453] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.267328][ T3453] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 0 [ 245.288501][T15380] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.4235: Invalid inode table block 17179869185 in block_group 0 [ 245.302541][T15380] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 245.327211][T13695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.430636][T15398] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4242'. [ 246.393540][T15431] sctp: [Deprecated]: syz.0.4255 (pid 15431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.393540][T15431] Use struct sctp_sack_info instead [ 246.493394][T15443] set_capacity_and_notify: 7 callbacks suppressed [ 246.493412][T15443] loop1: detected capacity change from 0 to 256 [ 246.741869][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 246.741889][ T28] audit: type=1400 audit(1784945500.987:1503): avc: denied { write } for pid=15447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.803151][ T28] audit: type=1400 audit(1784945501.047:1504): avc: denied { write } for pid=15472 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.167748][ T28] audit: type=1400 audit(1784945501.407:1505): avc: denied { write } for pid=15477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.237023][ T28] audit: type=1400 audit(1784945501.477:1506): avc: denied { write } for pid=15504 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.449572][ T28] audit: type=1400 audit(1784945501.687:1507): avc: denied { write } for pid=15509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.495461][ T28] audit: type=1400 audit(1784945501.737:1508): avc: denied { write } for pid=15527 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.617443][T15537] loop1: detected capacity change from 0 to 512 [ 247.625019][T15537] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 247.664085][T15537] EXT4-fs (loop1): failed to open journal device unknown-block(238,156) -ENXIO [ 247.705598][T15548] loop0: detected capacity change from 0 to 512 [ 247.724070][T15537] loop1: detected capacity change from 0 to 642 [ 247.730746][T15548] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 247.750755][T15537] EXT4-fs (loop1): failed to parse options in superblock: ÿÿ [ 247.767897][T15537] EXT4-fs (loop1): Invalid default hash set in the superblock [ 247.784440][ T28] audit: type=1400 audit(1784945502.027:1509): avc: denied { write } for pid=15530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.870899][ T410] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 247.892020][ T28] audit: type=1400 audit(1784945502.137:1510): avc: denied { write } for pid=15559 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.977114][T15573] loop8: detected capacity change from 0 to 512 [ 248.007936][T15573] EXT4-fs error (device loop8): ext4_read_inode_bitmap:141: comm syz.8.4299: Invalid inode bitmap blk 4 in block_group 0 [ 248.010108][T15576] __nla_validate_parse: 1 callbacks suppressed [ 248.010156][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'. [ 248.053958][T15573] loop8: lost filesystem error report for type 5 error -117 [ 248.057709][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 248.071621][ C1] EXT4-fs (loop8): initial error at time 1784945502: ext4_read_inode_bitmap:141 [ 248.080739][ C1] EXT4-fs (loop8): last error at time 1784945502: ext4_read_inode_bitmap:141 [ 248.094693][T15573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.148905][T15573] EXT4-fs (loop8): shut down requested (2) [ 248.155211][ T28] audit: type=1400 audit(1784945502.397:1511): avc: denied { write } for pid=15571 comm="syz.8.4299" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.199323][T15591] loop1: detected capacity change from 0 to 128 [ 248.238347][ T9507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.270484][T15591] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.338854][ T28] audit: type=1400 audit(1784945502.577:1512): avc: denied { write } for pid=15577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.380324][T15591] ext4 filesystem being mounted at /918/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 248.420528][T15604] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4305'. [ 248.620034][T15631] loop2: detected capacity change from 0 to 256 [ 249.326249][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.448972][T15659] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4323'. [ 249.757629][T15702] loop7: detected capacity change from 0 to 512 [ 249.810916][T15702] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.844293][T15702] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.860698][T15714] netlink: 320 bytes leftover after parsing attributes in process `syz.8.4340'. [ 249.896635][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.988692][T15720] batman_adv: batadv0: Interface deactivated: macsec1 [ 249.998647][T15727] loop7: detected capacity change from 0 to 164 [ 250.027490][T15720] batman_adv: batadv0: Removing interface: macsec1 [ 250.043612][T15732] loop8: detected capacity change from 0 to 512 [ 250.054276][T15727] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 250.072387][T15732] ------------[ cut here ]------------ [ 250.078002][T15732] EA inode 11 i_nlink=0 [ 250.078040][T15732] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.8.4345/15732 [ 250.093215][T15732] Modules linked in: [ 250.097185][T15732] CPU: 1 UID: 0 PID: 15732 Comm: syz.8.4345 Not tainted syzkaller #0 PREEMPT(lazy) [ 250.106628][T15732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 250.116911][T15732] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 250.123690][T15732] Code: 76 c1 96 ff 49 8d 7e 40 4c 8d 2d db 9f 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 f1 f8 d9 03 90 90 90 90 90 90 90 [ 250.143476][T15732] RSP: 0018:ffffc9000349f7f8 EFLAGS: 00010246 [ 250.143510][T15732] RAX: ffff888104800b30 RBX: ffff888105d33bb0 RCX: ffffffff81c29656 [ 250.143599][T15732] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3620 [ 250.143620][T15732] RBP: 000000000000000b R08: 0001888105d33b63 R09: 0000000000000000 [ 250.143640][T15732] R10: ffffc9000349f728 R11: 0001c9000349f728 R12: ffff888105d33b60 [ 250.143660][T15732] R13: ffffffff871d3620 R14: ffff888105d33b18 R15: 0000000000000001 [ 250.143705][T15732] FS: 00007ff4f76676c0(0000) GS:ffff8882ae9cc000(0000) knlGS:0000000000000000 [ 250.143731][T15732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.143751][T15732] CR2: 00007ff458c044e8 CR3: 0000000125196000 CR4: 00000000003506f0 [ 250.143775][T15732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 250.143795][T15732] DR3: 0000000000008d24 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 250.143831][T15732] Call Trace: [ 250.233303][T15732] [ 250.236314][T15732] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 250.242374][T15732] ext4_xattr_delete_inode+0x6b5/0x790 [ 250.247932][T15732] ext4_evict_inode+0xb18/0xdf0 [ 250.252856][T15732] ? __pfx_ext4_evict_inode+0x10/0x10 [ 250.258312][T15732] evict+0x2a5/0x510 [ 250.262254][T15732] iput+0x430/0x5a0 [ 250.266208][T15732] ext4_process_orphan+0x1a4/0x1c0 [ 250.271430][T15732] ext4_orphan_cleanup+0x6a6/0xa10 [ 250.276658][T15732] ? ext4_register_li_request+0x14c/0x440 [ 250.282484][T15732] ext4_fill_super+0x33ab/0x3760 [ 250.287592][T15732] ? set_blocksize+0x14c/0x270 [ 250.292441][T15732] ? __pfx_ext4_fill_super+0x10/0x10 [ 250.297908][T15732] get_tree_bdev_flags+0x291/0x300 [ 250.303186][T15732] ? __pfx_ext4_fill_super+0x10/0x10 [ 250.308654][T15732] get_tree_bdev+0x1f/0x30 [ 250.313206][T15732] ext4_get_tree+0x1c/0x30 [ 250.317751][T15732] vfs_get_tree+0x57/0x1d0 [ 250.322283][T15732] do_new_mount+0x288/0x8d0 [ 250.326865][T15732] path_mount+0x4ad/0xb90 [ 250.331279][T15732] __se_sys_mount+0x28c/0x2e0 [ 250.336094][T15732] __x64_sys_mount+0x67/0x80 [ 250.340778][T15732] x64_sys_call+0x2d61/0x3020 [ 250.345512][T15732] do_syscall_64+0x136/0x3c0 [ 250.350213][T15732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.356154][T15732] RIP: 0033:0x7ff4f8c0f10a [ 250.360644][T15732] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.380329][T15732] RSP: 002b:00007ff4f7666e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.388831][T15732] RAX: ffffffffffffffda RBX: 00007ff4f7666ee0 RCX: 00007ff4f8c0f10a [ 250.396858][T15732] RDX: 0000200000000180 RSI: 00002000000003c0 RDI: 00007ff4f7666ea0 [ 250.404906][T15732] RBP: 0000200000000180 R08: 00007ff4f7666ee0 R09: 0000000000800700 [ 250.412976][T15732] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000003c0 [ 250.421082][T15732] R13: 00007ff4f7666ea0 R14: 0000000000000470 R15: 000000000000002c [ 250.429131][T15732] [ 250.432183][T15732] ---[ end trace 0000000000000000 ]--- [ 250.449533][T15732] EXT4-fs (loop8): 1 orphan inode deleted [ 250.455880][T15732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.477202][T15732] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.4345: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 250.499668][T15732] EXT4-fs (loop8): Remounting filesystem read-only [ 250.559447][ T9507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.572412][T15742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=15742 comm=syz.2.4348 [ 250.613089][T15746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.789416][T15761] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 250.869479][T15761] EXT4-fs (loop7): failed to open journal device unknown-block(238,156) -ENXIO [ 250.889225][T15769] netlink: 'syz.1.4369': attribute type 12 has an invalid length. [ 250.907964][T15770] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 250.915142][T15769] netlink: 'syz.1.4369': attribute type 29 has an invalid length. [ 250.932325][T15761] EXT4-fs (loop7): failed to parse options in superblock: ÿÿ [ 250.962690][T15761] EXT4-fs (loop7): Invalid default hash set in the superblock [ 250.970439][T15769] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4369'. [ 251.005783][T15769] netlink: 'syz.1.4369': attribute type 1 has an invalid length. [ 251.034812][T15769] netlink: 'syz.1.4369': attribute type 2 has an invalid length. [ 251.315297][T15805] EXT4-fs: Ignoring removed orlov option [ 251.354121][T15805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.367282][T15805] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.399394][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.562256][T15825] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4383'. [ 252.150438][T15856] set_capacity_and_notify: 4 callbacks suppressed [ 252.150454][T15856] loop7: detected capacity change from 0 to 1024 [ 252.187869][T15856] EXT4-fs error (device loop7): __ext4_fill_super:5600: comm syz.7.4398: inode #2: comm syz.7.4398: iget: illegal inode # [ 252.231422][T15856] loop7: lost filesystem error report for type 5 error -117 [ 252.231653][T15856] EXT4-fs (loop7): get root inode failed [ 252.239061][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 252.239075][ C1] EXT4-fs (loop7): initial error at time 1784945506: __ext4_fill_super:5600 [ 252.239093][ C1] EXT4-fs (loop7): last error at time 1784945506: __ext4_fill_super:5600 [ 252.279856][T15856] EXT4-fs (loop7): mount failed [ 255.166457][T15876] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4405'. [ 255.175021][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 255.175089][ T28] audit: type=1400 audit(1784945509.407:1524): avc: denied { read } for pid=15869 comm="syz.1.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 255.207439][T15874] tap0: tun_chr_ioctl cmd 1074025677 [ 255.213667][T15874] tap0: linktype set to 825 [ 255.506764][T15895] loop1: detected capacity change from 0 to 8192 [ 255.833846][ T28] audit: type=1326 audit(1784945510.077:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.7.4431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f6efde99 code=0x7ffc0000 [ 255.876885][T15932] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4432'. [ 255.892205][ T28] audit: type=1326 audit(1784945510.107:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.7.4431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff3f6efde99 code=0x7ffc0000 [ 255.928675][T15932] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4432'. [ 255.981417][ T28] audit: type=1326 audit(1784945510.107:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.7.4431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f6efde99 code=0x7ffc0000 [ 256.045047][ T28] audit: type=1326 audit(1784945510.107:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.7.4431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f6efde99 code=0x7ffc0000 [ 256.104558][ T28] audit: type=1326 audit(1784945510.107:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.7.4431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff3f6efde99 code=0x7ffc0000 [ 256.174509][ T28] audit: type=1326 audit(1784945510.107:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15929 comm="syz.7.4431" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f6efde99 code=0x7ffc0000 [ 256.290646][T15956] loop7: detected capacity change from 0 to 512 [ 256.313941][T15956] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 256.320848][T15956] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 256.321291][T15956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.324881][T15956] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.4443: Unimplemented hash flags: 0x0001 [ 256.324967][T15956] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4443: Corrupt directory, running e2fsck is recommended [ 256.325046][T15956] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 3: comm syz.7.4443: path /121/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 256.325278][T15956] EXT4-fs (loop7): Remounting filesystem read-only [ 256.505591][T15970] loop8: detected capacity change from 0 to 512 [ 256.526474][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.539838][T15970] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 256.572981][T15970] EXT4-fs (loop8): 1 truncate cleaned up [ 256.582409][T15970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.689533][ T28] audit: type=1400 audit(1784945510.937:1531): avc: denied { write } for pid=15969 comm="syz.8.4448" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.728802][T15982] hsr0 speed is unknown, defaulting to 1000 [ 256.741504][T15982] hsr0 speed is unknown, defaulting to 1000 [ 256.759113][T15982] hsr0 speed is unknown, defaulting to 1000 [ 256.791295][T15982] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 256.824936][T15982] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 256.833925][ T9507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.905642][T15982] hsr0 speed is unknown, defaulting to 1000 [ 256.928575][T15982] hsr0 speed is unknown, defaulting to 1000 [ 256.945065][T15982] hsr0 speed is unknown, defaulting to 1000 [ 256.952109][T15982] hsr0 speed is unknown, defaulting to 1000 [ 256.959276][T15982] hsr0 speed is unknown, defaulting to 1000 [ 256.965905][T15982] hsr0 speed is unknown, defaulting to 1000 [ 257.053616][ T28] audit: type=1400 audit(1784945511.297:1532): avc: denied { open } for pid=16007 comm="syz.2.4465" path="" dev="cgroup2" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.077059][ T28] audit: type=1400 audit(1784945511.297:1533): avc: denied { ioctl } for pid=16007 comm="syz.2.4465" path="" dev="cgroup2" ino=350 ioctlcmd=0x6e8b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.164853][T16010] loop0: detected capacity change from 0 to 8192 [ 257.481303][T16044] loop0: detected capacity change from 0 to 128 [ 257.489359][T16044] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.520502][T16044] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.547799][ T36] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.580629][T16049] loop0: detected capacity change from 0 to 512 [ 257.607908][T16049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.636650][T16049] ext4 filesystem being mounted at /409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 257.704723][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.734651][T16064] loop0: detected capacity change from 0 to 512 [ 257.743033][T16064] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 257.764452][T16064] EXT4-fs (loop0): 1 truncate cleaned up [ 257.774900][T16064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.858942][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.206617][T16119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4512'. [ 258.222887][T16119] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4512'. [ 258.471864][T16140] netlink: 'syz.8.4524': attribute type 10 has an invalid length. [ 258.501906][T16140] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.514974][T16140] team0: entered promiscuous mode [ 258.523846][T16140] team_slave_0: entered promiscuous mode [ 258.534167][T16140] team_slave_1: entered promiscuous mode [ 258.544734][T16140] team0: entered allmulticast mode [ 258.555309][T16142] netlink: 'syz.8.4524': attribute type 10 has an invalid length. [ 258.568941][T16140] team_slave_0: entered allmulticast mode [ 258.579078][T16142] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4524'. [ 258.594300][T16140] team_slave_1: entered allmulticast mode [ 258.605026][T16140] bond0: (slave team0): Enslaving as an active interface with an up link [ 258.621936][T16142] bond0: (slave team0): Releasing backup interface [ 258.639849][T16142] bridge0: port 5(team0) entered blocking state [ 258.647963][T16142] bridge0: port 5(team0) entered disabled state [ 259.686596][T16184] program syz.2.4542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.908577][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4548'. [ 259.980604][T16198] loop2: detected capacity change from 0 to 256 [ 260.167915][ T28] kauditd_printk_skb: 9000 callbacks suppressed [ 260.167935][ T28] audit: type=1326 audit(1784945514.407:10535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.220345][ T28] audit: type=1326 audit(1784945514.407:10536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.245984][ T28] audit: type=1326 audit(1784945514.407:10537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.272558][ T28] audit: type=1326 audit(1784945514.407:10538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.298136][ T28] audit: type=1326 audit(1784945514.407:10539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.326162][ T28] audit: type=1326 audit(1784945514.407:10540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.441175][ T28] audit: type=1326 audit(1784945514.407:10541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.519763][ T28] audit: type=1326 audit(1784945514.407:10542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.603631][ T28] audit: type=1326 audit(1784945514.407:10543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.676554][ T28] audit: type=1326 audit(1784945514.407:10544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16103 comm="syz.0.4508" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x50000 [ 260.915044][T16263] loop8: detected capacity change from 0 to 1024 [ 260.952364][T16263] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 260.973997][T16263] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.015971][T16263] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.4579: lblock 3 mapped to illegal pblock 3 (length 1) [ 261.047543][T16263] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 261.073650][T16263] EXT4-fs (loop8): This should not happen!! Data will be lost [ 261.073650][T16263] [ 261.096591][T16263] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.4579: Freeing blocks not in datazone - block = 3, count = 1 [ 261.176397][T16271] netlink: 'syz.0.4582': attribute type 10 has an invalid length. [ 261.202155][T16271] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.218435][T16271] bond0: (slave team0): Enslaving as an active interface with an up link [ 261.235567][T16271] netlink: 'syz.0.4582': attribute type 10 has an invalid length. [ 261.243707][T16271] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4582'. [ 261.252848][T16271] team0: entered promiscuous mode [ 261.258079][T16271] team_slave_0: entered promiscuous mode [ 261.263888][T16271] team_slave_1: entered promiscuous mode [ 261.269787][T16271] team0: entered allmulticast mode [ 261.275008][T16271] team_slave_0: entered allmulticast mode [ 261.280915][T16271] team_slave_1: entered allmulticast mode [ 261.714881][T16271] bond0: (slave team0): Releasing backup interface [ 261.722048][ T9507] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 261.744180][T16273] loop1: detected capacity change from 0 to 1024 [ 261.769392][T16271] bridge0: port 3(team0) entered blocking state [ 261.770075][ T9507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 261.786153][T16271] bridge0: port 3(team0) entered disabled state [ 261.793129][T16273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.808519][T16273] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 261.851751][T16273] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 261.864341][T16273] EXT4-fs (loop1): This should not happen!! Data will be lost [ 261.864341][T16273] [ 261.874213][T16273] EXT4-fs (loop1): Total free blocks count 0 [ 261.880486][T16273] EXT4-fs (loop1): Free/Dirty block details [ 261.886451][T16273] EXT4-fs (loop1): free_blocks=20480 [ 261.891825][T16273] EXT4-fs (loop1): dirty_blocks=80 [ 261.897075][T16273] EXT4-fs (loop1): Block reservation details [ 261.904226][T16284] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 261.916932][T16273] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 261.954471][T16282] loop8: detected capacity change from 0 to 128 [ 261.975664][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 262.016588][T16291] loop1: detected capacity change from 0 to 256 [ 262.045829][T16291] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.068549][T16293] loop0: detected capacity change from 0 to 256 [ 262.069207][T16282] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.097081][T16282] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.158153][ T30] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 262.201087][T16298] batadv_slave_1: entered promiscuous mode [ 262.211848][T16297] batadv_slave_1: left promiscuous mode [ 262.252303][T16300] loop7: detected capacity change from 0 to 2048 [ 262.293236][T16300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.372131][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.512345][T16328] loop7: detected capacity change from 0 to 1024 [ 262.545864][T16328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.581193][T16328] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 262.660502][T16338] program syz.0.4608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.703441][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.739552][T16343] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4611'. [ 262.822934][T16355] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4616'. [ 262.850574][T16357] loop1: detected capacity change from 0 to 128 [ 263.784286][T16449] loop7: detected capacity change from 0 to 512 [ 263.794014][T16449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.824162][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.090322][T16471] loop2: detected capacity change from 0 to 512 [ 264.153737][T16471] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 264.240433][T16476] tap0: tun_chr_ioctl cmd 1074025677 [ 264.246127][T16476] tap0: linktype set to 780 [ 264.504125][T16497] vhci_hcd vhci_hcd.0: invalid port number 98 [ 264.510932][T16497] vhci_hcd vhci_hcd.0: invalid port number 98 [ 264.665962][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4683'. [ 264.687133][T16507] netlink: 'syz.8.4683': attribute type 2 has an invalid length. [ 264.694099][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4684'. [ 264.724870][T16510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4684'. [ 264.750183][T16512] loop8: detected capacity change from 0 to 256 [ 264.782294][T16514] loop0: detected capacity change from 0 to 512 [ 264.803642][T16512] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 264.821886][T16514] EXT4-fs (loop0): 1 truncate cleaned up [ 264.836932][T16512] FAT-fs (loop8): Filesystem has been set read-only [ 264.836917][T16514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.859556][T16514] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4686: bg 0: block 465: padding at end of block bitmap is not set [ 264.867659][T16512] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 264.887415][T16514] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 264.903814][T16514] EXT4-fs (loop0): This should not happen!! Data will be lost [ 264.903814][T16514] [ 264.913095][T16512] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 264.927189][T16514] EXT4-fs (loop0): Total free blocks count 0 [ 264.957122][T16514] EXT4-fs (loop0): Free/Dirty block details [ 264.986699][T16514] EXT4-fs (loop0): free_blocks=0 [ 265.000689][T16514] EXT4-fs (loop0): dirty_blocks=65 [ 265.005974][T16514] EXT4-fs (loop0): Block reservation details [ 265.012408][T16514] EXT4-fs (loop0): i_reserved_data_blocks=65 [ 265.053948][ T9864] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 265.089353][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.101738][T16524] loop8: detected capacity change from 0 to 2048 [ 265.156977][T16524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.171999][T16524] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.184181][T16524] EXT4-fs (loop8): Online resizing not supported with bigalloc [ 265.205568][T16530] loop2: detected capacity change from 0 to 512 [ 265.216502][T16530] EXT4-fs: Ignoring removed bh option [ 265.222428][T16530] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.230861][T16530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 265.240043][ T9507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.267378][T16530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.320032][T16530] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.358283][ T28] kauditd_printk_skb: 1493 callbacks suppressed [ 265.358303][ T28] audit: type=1400 audit(1784945519.607:12037): avc: denied { write } for pid=16525 comm="syz.2.4694" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.392832][ T28] audit: type=1400 audit(1784945519.607:12038): avc: denied { write } for pid=16525 comm="syz.2.4694" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.443316][T16546] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4700'. [ 265.593805][T16555] sctp: [Deprecated]: syz.8.4705 (pid 16555) Use of int in max_burst socket option deprecated. [ 265.593805][T16555] Use struct sctp_assoc_value instead [ 265.677453][T16562] loop8: detected capacity change from 0 to 512 [ 265.723148][T16502] Set syz1 is full, maxelem 65536 reached [ 265.731610][T16562] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 265.770559][T16562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.799375][T16562] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.852043][ T28] audit: type=1400 audit(1784945520.077:12039): avc: denied { write } for pid=16561 comm="syz.8.4708" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.903882][ T9507] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.981704][T13695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.028806][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4715'. [ 266.155200][T16576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.168586][T16576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.178986][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4719'. [ 266.412294][T16607] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.492603][T16611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.522689][T16611] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 266.541227][ T28] audit: type=1400 audit(1784945520.767:12040): avc: denied { write } for pid=16610 comm="syz.7.4728" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.563404][T16611] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2 with error 28 [ 266.575998][T16611] EXT4-fs (loop7): This should not happen!! Data will be lost [ 266.575998][T16611] [ 266.585980][T16611] EXT4-fs (loop7): Total free blocks count 0 [ 266.592936][T16611] EXT4-fs (loop7): Free/Dirty block details [ 266.606748][T16611] EXT4-fs (loop7): free_blocks=2415919104 [ 266.612675][T16611] EXT4-fs (loop7): dirty_blocks=32 [ 266.617906][T16611] EXT4-fs (loop7): Block reservation details [ 266.624029][T16611] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 266.652486][ T36] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 266.665680][T13887] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 266.816033][T16629] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 266.867545][ T28] audit: type=1400 audit(1784945521.107:12041): avc: denied { nlmsg_read } for pid=16647 comm="syz.8.4743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 267.049206][ T28] audit: type=1326 audit(1784945521.297:12042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16663 comm="syz.0.4750" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x0 [ 267.163868][T16662] bio_check_eod: 8761 callbacks suppressed [ 267.163888][T16662] syz.7.4748: attempt to access beyond end of device [ 267.163888][T16662] loop7: rw=2049, sector=592, nr_sectors = 128 limit=512 [ 267.255478][ T36] kworker/u8:2: attempt to access beyond end of device [ 267.255478][ T36] loop7: rw=1, sector=720, nr_sectors = 2048 limit=512 [ 267.268046][T16676] sctp: [Deprecated]: syz.1.4756 (pid 16676) Use of int in maxseg socket option. [ 267.268046][T16676] Use struct sctp_assoc_value instead [ 267.277634][ T28] audit: type=1400 audit(1784945521.517:12043): avc: denied { setopt } for pid=16675 comm="syz.1.4756" lport=60188 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 267.329814][ T36] kworker/u8:2: attempt to access beyond end of device [ 267.329814][ T36] loop7: rw=1, sector=2768, nr_sectors = 2128 limit=512 [ 267.360797][ T36] kworker/u8:2: attempt to access beyond end of device [ 267.360797][ T36] loop7: rw=1, sector=4896, nr_sectors = 3040 limit=512 [ 267.401706][ T36] kworker/u8:2: attempt to access beyond end of device [ 267.401706][ T36] loop7: rw=1, sector=7936, nr_sectors = 3152 limit=512 [ 267.421742][T16686] set_capacity_and_notify: 4 callbacks suppressed [ 267.421831][T16686] loop1: detected capacity change from 0 to 512 [ 267.439676][ T36] kworker/u8:2: attempt to access beyond end of device [ 267.439676][ T36] loop7: rw=1, sector=11088, nr_sectors = 2160 limit=512 [ 267.458386][ T36] kworker/u8:2: attempt to access beyond end of device [ 267.458386][ T36] loop7: rw=1, sector=13248, nr_sectors = 2056 limit=512 [ 267.474999][ T36] kworker/u8:2: attempt to access beyond end of device [ 267.474999][ T36] loop7: rw=1, sector=15304, nr_sectors = 1160 limit=512 [ 267.501332][T16686] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 267.532823][T16690] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4762'. [ 267.572332][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4755'. [ 267.589871][ T3453] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.600082][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4755'. [ 267.609271][ T3453] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.610323][T16696] loop2: detected capacity change from 0 to 128 [ 267.631813][ T3453] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.634323][T16696] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.655804][ T3453] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.672249][T16696] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.722283][ T36] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.745035][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4768'. [ 267.901537][T16708] loop2: detected capacity change from 0 to 512 [ 267.956973][T16708] EXT4-fs error (device loop2): __ext4_iget:5533: inode #11: block 1: comm syz.2.4770: invalid block [ 267.977047][T16708] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 267.986174][T16708] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4770: couldn't read orphan inode 11 (err -117) [ 267.998662][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 267.998703][ C1] EXT4-fs (loop2): initial error at time 1784945522: __ext4_iget:5533: inode 11: block 1 [ 267.998884][ C1] EXT4-fs (loop2): last error at time 1784945522: __ext4_iget:5533: inode 11: block 1 [ 268.034878][T16726] netlink: 'syz.0.4778': attribute type 4 has an invalid length. [ 268.042258][T16708] loop2: lost filesystem error report for type 5 error -117 [ 268.059426][T16708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.112901][T16708] netlink: 560 bytes leftover after parsing attributes in process `syz.2.4770'. [ 268.177245][T13695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.182051][T16731] loop0: detected capacity change from 0 to 128 [ 268.235803][T16731] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.265860][T16731] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.358739][ T53] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.541974][ T28] audit: type=1326 audit(1784945522.787:12044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.2.4788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ac2de99 code=0x7ffc0000 [ 268.555123][T16736] loop1: detected capacity change from 0 to 512 [ 268.600484][T16752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16752 comm=syz.7.4790 [ 268.638161][ T28] audit: type=1326 audit(1784945522.817:12045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.2.4788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ac2de99 code=0x7ffc0000 [ 268.723437][ T28] audit: type=1326 audit(1784945522.817:12046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.2.4788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ac2de99 code=0x7ffc0000 [ 268.780789][T16736] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 268.918644][T16771] loop0: detected capacity change from 0 to 512 [ 268.933866][T16771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 268.949323][T16771] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.4798: bad orphan inode 131083 [ 268.961319][T16771] loop0: lost filesystem error report for type 5 error -117 [ 268.974057][T16771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.027384][T16778] vxcan0: tx address claim with different name [ 269.170694][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.211437][T16789] loop0: detected capacity change from 0 to 128 [ 269.252832][T16789] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 269.296230][T16789] ext4 filesystem being mounted at /466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.459368][ T9864] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.591827][T16797] hsr0 speed is unknown, defaulting to 1000 [ 269.604966][T16800] loop1: detected capacity change from 0 to 128 [ 269.672834][T16800] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.714732][T16800] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.836448][ T326] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.130261][T16829] loop1: detected capacity change from 0 to 512 [ 270.410545][T16836] syz.1.4824: attempt to access beyond end of device [ 270.410545][T16836] loop1: rw=2049, sector=592, nr_sectors = 128 limit=512 [ 270.480859][T16859] loop7: detected capacity change from 0 to 512 [ 270.497246][T16860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4839'. [ 270.497842][T16859] EXT4-fs: Ignoring removed orlov option [ 270.540029][T16859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.557906][T16859] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.559954][ T30] kworker/u8:1: attempt to access beyond end of device [ 270.559954][ T30] loop1: rw=1, sector=720, nr_sectors = 2096 limit=512 [ 270.597805][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 270.597823][ T28] audit: type=1400 audit(1784945524.837:12081): avc: denied { write } for pid=16857 comm="syz.7.4848" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.598071][T16859] EXT4-fs (loop7): shut down requested (0) [ 270.684096][T16869] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4842'. [ 270.716273][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.805304][T16877] netlink: 'syz.1.4844': attribute type 25 has an invalid length. [ 270.824090][T16877] netlink: 'syz.1.4844': attribute type 25 has an invalid length. [ 270.843182][T16877] netlink: 'syz.1.4844': attribute type 3 has an invalid length. [ 271.017081][T16897] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.4854: inode has both inline data and extents flags [ 271.019136][T16885] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 271.044924][T16897] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 271.045862][T16897] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.4854: couldn't read orphan inode 15 (err -117) [ 271.047336][T16885] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.055068][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 271.055084][ C1] EXT4-fs (loop0): initial error at time 1784945525: ext4_orphan_get:1399: inode 15 [ 271.055114][ C1] EXT4-fs (loop0): last error at time 1784945525: ext4_orphan_get:1399: inode 15 [ 271.055206][T16897] loop0: lost filesystem error report for type 5 error -117 [ 271.084758][T16897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.143966][ T28] audit: type=1400 audit(1784945525.387:12082): avc: denied { write } for pid=16896 comm="syz.0.4854" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.193830][ T36] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.204931][ T28] audit: type=1400 audit(1784945525.447:12083): avc: denied { map } for pid=16896 comm="syz.0.4854" path="/475/file1/file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 271.339430][T16912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.354275][T16912] EXT4-fs error (device loop7): ext4_ext_precache:631: inode #2: comm syz.7.4860: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 271.374287][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.408239][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.425747][T16923] EXT4-fs (loop0): unable to read superblock [ 271.489632][ T28] audit: type=1400 audit(1784945525.737:12084): avc: denied { setattr } for pid=16928 comm="syz.7.4865" name="use" dev="configfs" ino=47930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 271.559041][T16934] syzkaller1: entered promiscuous mode [ 271.567985][T16934] syzkaller1: entered allmulticast mode [ 271.674247][T16936] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 271.706743][T16936] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.807264][ T36] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.230655][T16952] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 272.284117][T16975] ext4: Bad value for 'auto_da_alloc' [ 272.284707][T16972] netlink: 67 bytes leftover after parsing attributes in process `syz.8.4886'. [ 272.452494][T16983] set_capacity_and_notify: 9 callbacks suppressed [ 272.452516][T16983] loop7: detected capacity change from 0 to 4096 [ 272.505963][T16987] futex_wake_op: syz.2.4893 tries to shift op by 144; fix this program [ 272.544148][T16983] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.553047][T16972] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.578903][T16987] futex_wake_op: syz.2.4893 tries to shift op by 144; fix this program [ 272.598460][ T28] audit: type=1400 audit(1784945526.837:12085): avc: denied { write } for pid=16982 comm="syz.7.4891" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.679281][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.775065][T16999] program syz.0.4898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.917899][ T28] audit: type=1400 audit(1784945527.157:12086): avc: denied { mounton } for pid=17005 comm="syz.0.4901" path="/485/file0" dev="tmpfs" ino=2517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 272.942411][T17006] ./file0: Can't open blockdev [ 272.975875][T17008] loop7: detected capacity change from 0 to 1024 [ 272.983534][ T28] audit: type=1400 audit(1784945527.227:12087): avc: denied { mounton } for pid=17007 comm="syz.7.4911" path="/file0" dev="bpf" ino=48059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:bpf_t tclass=dir permissive=1 [ 273.009437][T17008] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 273.034689][T17008] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.4911: lblock 2 mapped to illegal pblock 2 (length 1) [ 273.059725][T17008] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 273.062805][T17008] EXT4-fs (loop7): Remounting filesystem read-only [ 273.071922][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 273.071945][ C0] EXT4-fs (loop7): initial error at time 1784945527: ext4_map_blocks:791: inode 3: block 2 [ 273.071988][ C0] EXT4-fs (loop7): last error at time 1784945527: ext4_map_blocks:791: inode 3: block 2 [ 273.107304][T17008] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 273.116337][T17008] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 273.125428][T17008] EXT4-fs (loop7): 1 orphan inode deleted [ 273.131912][T17008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.145498][T17008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.177949][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.185192][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.205762][T16997] hsr0 speed is unknown, defaulting to 1000 [ 273.720916][T17014] loop0: detected capacity change from 0 to 1024 [ 273.735755][T17021] netlink: 'syz.1.4905': attribute type 2 has an invalid length. [ 273.743179][T17014] EXT4-fs: Ignoring removed orlov option [ 273.772612][T17014] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.845108][T17014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.862589][T17027] loop1: detected capacity change from 0 to 128 [ 273.888877][T17027] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.909756][ T28] audit: type=1400 audit(1784945528.147:12088): avc: denied { write } for pid=17012 comm="syz.0.4904" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.934149][T17027] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.965172][T17020] loop8: detected capacity change from 0 to 512 [ 274.016244][ T326] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.093640][T17020] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 274.155519][T15735] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 274.172527][T15735] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.189461][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.316981][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4918'. [ 274.557467][T17070] loop1: detected capacity change from 0 to 1024 [ 274.566410][T17070] EXT4-fs: Ignoring removed bh option [ 274.592672][T17070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.626132][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.736979][T17088] loop2: detected capacity change from 0 to 512 [ 274.745490][T17088] EXT4-fs: Ignoring removed orlov option [ 274.782046][T17088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.840698][T13695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.999808][T17114] sg_write: data in/out 163804/136 bytes for SCSI command 0x0-- guessing data in; [ 274.999808][T17114] program syz.7.4944 not setting count and/or reply_len properly [ 275.155729][T17119] syzkaller1: entered promiscuous mode [ 275.161537][T17119] syzkaller1: entered allmulticast mode [ 275.276174][T17121] loop7: detected capacity change from 0 to 512 [ 275.325620][T17121] EXT4-fs error (device loop7): __ext4_iget:5533: inode #11: block 1: comm syz.7.4947: invalid block [ 275.337944][T17121] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 275.339651][T17121] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4947: couldn't read orphan inode 11 (err -117) [ 275.357721][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 275.364589][T17121] loop7: lost filesystem error report for type 5 error -117 [ 275.368970][ C0] EXT4-fs (loop7): initial error at time 1784945529: __ext4_iget:5533: inode 11: block 1 [ 275.369025][ C0] EXT4-fs (loop7): last error at time 1784945529: __ext4_iget:5533: inode 11: block 1 [ 275.416992][T17121] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.475318][T17121] netlink: 560 bytes leftover after parsing attributes in process `syz.7.4947'. [ 275.554795][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.581516][T17135] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4953'. [ 275.591008][T17135] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4953'. [ 275.771707][T17146] loop7: detected capacity change from 0 to 128 [ 275.826720][T17146] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.846146][T17146] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.905035][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 275.905054][ T28] audit: type=1400 audit(1784945530.147:12096): avc: denied { mount } for pid=17159 comm="syz.0.4963" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 275.936789][ T28] audit: type=1400 audit(1784945530.147:12097): avc: denied { remount } for pid=17159 comm="syz.0.4963" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 275.964885][ T28] audit: type=1400 audit(1784945530.177:12098): avc: denied { unmount } for pid=9864 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 275.991111][ T3453] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 276.385107][T17173] loop2: detected capacity change from 0 to 4096 [ 276.411999][T17173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.456549][ T28] audit: type=1400 audit(1784945530.697:12099): avc: denied { write } for pid=17172 comm="syz.2.4969" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 276.846763][ T28] audit: type=1326 audit(1784945531.087:12100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.7.4965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f6efde99 code=0x7fc00000 [ 276.913696][T17181] tipc: Started in network mode [ 276.930503][T17181] tipc: Node identity ac14142f, cluster identity 4711 [ 276.939148][T17181] tipc: New replicast peer: 255.255.255.255 [ 276.955166][T17181] tipc: Enabled bearer , priority 10 [ 276.988106][T13695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.143352][T17191] netlink: 'syz.2.4975': attribute type 4 has an invalid length. [ 277.157200][T17189] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 277.187174][T17189] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.244108][ T326] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 277.345473][T17202] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 277.361690][T17202] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 277.531470][T17206] set_capacity_and_notify: 1 callbacks suppressed [ 277.531491][T17206] loop2: detected capacity change from 0 to 512 [ 277.614764][T17206] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.4981: inode has both inline data and extents flags [ 277.637961][T17206] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.642882][T17206] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4981: couldn't read orphan inode 15 (err -117) [ 277.652170][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 277.652194][ C1] EXT4-fs (loop2): initial error at time 1784945531: ext4_orphan_get:1399: inode 15 [ 277.652234][ C1] EXT4-fs (loop2): last error at time 1784945531: ext4_orphan_get:1399: inode 15 [ 277.794786][T17206] loop2: lost filesystem error report for type 5 error -117 [ 277.809664][T17206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.813600][T17208] loop1: detected capacity change from 0 to 512 [ 277.861395][ T28] audit: type=1400 audit(1784945532.087:12101): avc: denied { write } for pid=17205 comm="syz.2.4981" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.909994][T13695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.919023][ T28] audit: type=1400 audit(1784945532.087:12102): avc: denied { append } for pid=17205 comm="syz.2.4981" path="/242/file0/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.018979][T17218] loop2: detected capacity change from 0 to 128 [ 278.033048][T17208] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 278.077901][ T9433] tipc: Node number set to 2886997039 [ 278.137429][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4990'. [ 278.157962][T17226] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4990'. [ 278.172236][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4990'. [ 278.184467][T17224] loop2: detected capacity change from 0 to 128 [ 278.238805][T17224] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 278.271294][T17224] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.435927][T17228] loop1: detected capacity change from 0 to 512 [ 278.496186][ T28] audit: type=1326 audit(1784945532.737:12103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17233 comm="syz.0.4994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x7ffc0000 [ 278.509195][T17228] EXT4-fs (loop1): 1 truncate cleaned up [ 278.536947][ T326] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 278.547156][ T28] audit: type=1326 audit(1784945532.737:12104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17233 comm="syz.0.4994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f063a82de99 code=0x7ffc0000 [ 278.584100][ T28] audit: type=1326 audit(1784945532.737:12105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17233 comm="syz.0.4994" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f063a82de99 code=0x7ffc0000 [ 278.630030][T17228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.666962][T17228] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4991: bg 0: block 465: padding at end of block bitmap is not set [ 278.706480][T17228] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 278.736934][T17228] EXT4-fs (loop1): This should not happen!! Data will be lost [ 278.736934][T17228] [ 278.747878][T17228] EXT4-fs (loop1): Total free blocks count 0 [ 278.753957][T17228] EXT4-fs (loop1): Free/Dirty block details [ 278.761235][T17228] EXT4-fs (loop1): free_blocks=0 [ 278.766370][T17228] EXT4-fs (loop1): dirty_blocks=65 [ 278.772143][T17228] EXT4-fs (loop1): Block reservation details [ 278.778397][T17228] EXT4-fs (loop1): i_reserved_data_blocks=65 [ 278.821581][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 278.844506][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.920884][T17257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5003'. [ 280.069854][T17295] syzkaller1: entered promiscuous mode [ 280.075517][T17295] syzkaller1: entered allmulticast mode [ 280.160358][T17300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5021'. [ 280.357137][T17302] loop1: detected capacity change from 0 to 512 [ 280.409309][T17302] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 1: comm syz.1.5022: invalid block [ 280.421289][T17302] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 280.423243][T17302] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.5022: couldn't read orphan inode 11 (err -117) [ 280.432986][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 280.433013][ C0] EXT4-fs (loop1): initial error at time 1784945534: __ext4_iget:5533: inode 11: block 1 [ 280.433194][ C0] EXT4-fs (loop1): last error at time 1784945534: __ext4_iget:5533: inode 11: block 1 [ 280.476099][T17302] loop1: lost filesystem error report for type 5 error -117 [ 280.493223][T17302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.541383][T17302] netlink: 560 bytes leftover after parsing attributes in process `syz.1.5022'. [ 280.594731][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.847279][T17323] loop7: detected capacity change from 0 to 256 [ 281.487727][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 281.487742][ T28] audit: type=1326 audit(1784945535.727:12117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.1.5034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669a37de99 code=0x7ffc0000 [ 281.543649][ T28] audit: type=1326 audit(1784945535.727:12118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.1.5034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f669a37de99 code=0x7ffc0000 [ 281.602112][ T28] audit: type=1326 audit(1784945535.727:12119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.1.5034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669a37de99 code=0x7ffc0000 [ 281.649192][ T28] audit: type=1326 audit(1784945535.727:12120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17326 comm="syz.1.5034" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669a37de99 code=0x7ffc0000 [ 283.624152][T17329] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5033'. [ 283.647767][T17329] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5033'. [ 283.761156][ T28] audit: type=1400 audit(1784945538.007:12121): avc: denied { read } for pid=17334 comm="syz.0.5037" laddr=fe80::b lport=35937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 283.867179][T17349] loop2: detected capacity change from 0 to 256 [ 283.885677][T17349] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 283.939759][T17349] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.977597][T17353] loop5: detected capacity change from 0 to 7 [ 283.990016][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 283.999656][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 284.008540][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.018179][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 284.026128][T17353] loop5: unable to read partition table [ 284.032125][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.042344][T17353] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 284.052794][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.062444][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 284.072723][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.082370][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 284.090965][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.100608][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 284.110753][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.120359][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 284.128448][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.138124][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 284.585833][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5059'. [ 284.699464][T17373] hsr0 speed is unknown, defaulting to 1000 [ 284.868436][T17367] loop0: detected capacity change from 0 to 512 [ 284.984475][T17367] EXT4-fs error (device loop0): __ext4_iget:5533: inode #11: block 1: comm syz.0.5048: invalid block [ 285.026228][T17367] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 285.027478][T17367] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.5048: couldn't read orphan inode 11 (err -117) [ 285.027788][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 285.027976][ C1] EXT4-fs (loop0): initial error at time 1784945539: __ext4_iget:5533: inode 11: block 1 [ 285.028146][ C1] EXT4-fs (loop0): last error at time 1784945539: __ext4_iget:5533: inode 11: block 1 [ 285.079954][T17367] loop0: lost filesystem error report for type 5 error -117 [ 285.176837][T17367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.290813][T17367] netlink: 560 bytes leftover after parsing attributes in process `syz.0.5048'. [ 285.373078][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.888038][T17408] syzkaller1: entered promiscuous mode [ 285.913514][T17408] syzkaller1: entered allmulticast mode [ 290.091348][T14325] bridge0: port 3(syz_tun) entered disabled state [ 290.099751][T14325] syz_tun (unregistering): left allmulticast mode [ 290.106529][T14325] syz_tun (unregistering): left promiscuous mode [ 290.113299][T14325] bridge0: port 3(syz_tun) entered disabled state [ 290.179061][T17415] hsr0 speed is unknown, defaulting to 1000 [ 290.268472][T17415] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.275690][T17415] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.282991][T17415] bridge_slave_0: entered allmulticast mode [ 290.289796][T17415] bridge_slave_0: entered promiscuous mode [ 290.296575][T17415] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.303741][T17415] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.311070][T17415] bridge_slave_1: entered allmulticast mode [ 290.317600][T17415] bridge_slave_1: entered promiscuous mode [ 290.326693][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.337001][ T36] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.359480][T17415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.370051][T17415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.393195][T17415] team0: Port device team_slave_0 added [ 290.399995][T17415] team0: Port device team_slave_1 added [ 290.418273][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.428745][ T36] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.440497][T17415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.447532][T17415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.473601][T17415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.485071][T17415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.492195][T17415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.518228][T17415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.535076][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.545402][ T36] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.616945][T17415] hsr_slave_0: entered promiscuous mode [ 290.635280][T17415] hsr_slave_1: entered promiscuous mode [ 290.646185][T17415] debugfs: 'hsr0' already exists in 'hsr' [ 290.655175][T17415] Cannot create hsr debugfs directory [ 290.694872][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.707524][ T36] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.727645][T17439] hsr0 speed is unknown, defaulting to 1000 [ 290.949516][ T36] bridge0: port 5(team0) entered disabled state [ 290.961284][ T36] bond0: left allmulticast mode [ 290.966272][ T36] bond_slave_0: left allmulticast mode [ 290.974910][ T36] bond_slave_1: left allmulticast mode [ 290.987271][ T36] bond0: left promiscuous mode [ 290.995294][ T36] bond_slave_0: left promiscuous mode [ 291.005544][ T36] bond_slave_1: left promiscuous mode [ 291.017267][ T36] bridge0: port 4(bond0) entered disabled state [ 291.037812][ T36] bridge_slave_1: left allmulticast mode [ 291.043629][ T36] bridge_slave_1: left promiscuous mode [ 291.049642][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.070870][ T36] bridge_slave_0: left allmulticast mode [ 291.076693][ T36] bridge_slave_0: left promiscuous mode [ 291.082804][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.212661][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.223809][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.233805][ T36] bond0 (unregistering): Released all slaves [ 291.309478][ T36] hsr_slave_0: left promiscuous mode [ 291.315404][ T36] hsr_slave_1: left promiscuous mode [ 291.328052][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.340768][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.354564][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.356465][ T28] audit: type=1400 audit(1784945545.597:12122): avc: denied { write } for pid=17462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.362338][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.400731][ T36] veth1_macvtap: left promiscuous mode [ 291.416647][ T36] veth0_macvtap: left promiscuous mode [ 291.422448][ T36] veth1_vlan: left promiscuous mode [ 291.427981][ T36] veth0_vlan: left promiscuous mode [ 291.442310][ T28] audit: type=1400 audit(1784945545.687:12123): avc: denied { write } for pid=17473 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.554139][ T36] team_slave_1 (unregistering): left promiscuous mode [ 291.563499][ T36] team_slave_1 (unregistering): left allmulticast mode [ 291.570964][ T36] team0 (unregistering): Port device team_slave_1 removed [ 291.581453][ T36] team_slave_0 (unregistering): left promiscuous mode [ 291.588602][ T36] team_slave_0 (unregistering): left allmulticast mode [ 291.596030][ T36] team0 (unregistering): Port device team_slave_0 removed [ 291.645889][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 291.837825][ T28] audit: type=1400 audit(1784945546.077:12124): avc: denied { write } for pid=17485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.921419][ T28] audit: type=1400 audit(1784945546.157:12125): avc: denied { write } for pid=17504 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.943987][T17501] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0005 i0000 l2 [ 291.980923][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 292.213932][ T28] audit: type=1400 audit(1784945546.457:12126): avc: denied { write } for pid=17511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.275385][T17521] hsr0 speed is unknown, defaulting to 1000 [ 292.330089][ T28] audit: type=1400 audit(1784945546.577:12127): avc: denied { write } for pid=17530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.358688][T17531] loop2: detected capacity change from 0 to 1024 [ 292.382092][T17531] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 292.425408][T17531] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.5094: lblock 2 mapped to illegal pblock 2 (length 1) [ 292.439602][T17531] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 292.439758][T17531] EXT4-fs (loop2): Remounting filesystem read-only [ 292.448865][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 292.448889][ C0] EXT4-fs (loop2): initial error at time 1784945546: ext4_map_blocks:791: inode 3: block 2 [ 292.448928][ C0] EXT4-fs (loop2): last error at time 1784945546: ext4_map_blocks:791: inode 3: block 2 [ 292.511549][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 292.523817][T17415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.538058][T17415] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.549875][T17415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.556854][T17531] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 292.565054][T17531] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 292.576207][T17415] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.584097][T17531] EXT4-fs (loop2): 1 orphan inode deleted [ 292.601190][T17531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.620992][T17531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.644245][T17415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.669578][T17415] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.691010][T17415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.721459][T17415] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.787609][ T28] audit: type=1400 audit(1784945547.027:12128): avc: denied { write } for pid=17536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.837030][T17415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.857363][ T28] audit: type=1400 audit(1784945547.087:12129): avc: denied { write } for pid=17554 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.868067][T17415] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.924162][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.931318][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.943789][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.950984][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.979877][T17415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.001326][T17415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.179308][T17415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.318217][T17415] veth0_vlan: entered promiscuous mode [ 293.326382][T17415] veth1_vlan: entered promiscuous mode [ 293.345662][T17415] veth0_macvtap: entered promiscuous mode [ 293.353936][T17415] veth1_macvtap: entered promiscuous mode [ 293.365236][T17415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.377605][T17415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.388889][ T326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.397939][ T326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.406915][ T326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.423577][ T326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.664803][T17628] loop4: detected capacity change from 0 to 512 [ 293.673892][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 293.717721][T17628] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 1: comm syz.4.5069: invalid block [ 293.732309][T17628] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 293.734282][T17628] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5069: couldn't read orphan inode 11 (err -117) [ 293.744435][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 293.744463][ C1] EXT4-fs (loop4): initial error at time 1784945547: __ext4_iget:5533: inode 11: block 1 [ 293.745340][ C1] EXT4-fs (loop4): last error at time 1784945547: __ext4_iget:5533: inode 11: block 1 [ 293.796412][T17628] loop4: lost filesystem error report for type 5 error -117 [ 293.818194][T17628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.871158][T17628] netlink: 560 bytes leftover after parsing attributes in process `syz.4.5069'. [ 293.936930][T17415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.318275][T17713] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5111'. [ 294.357594][T17713] netlink: 35 bytes leftover after parsing attributes in process `syz.7.5111'. [ 294.384439][T17713] netlink: 'syz.7.5111': attribute type 5 has an invalid length. [ 294.399010][T17722] loop4: detected capacity change from 0 to 1024 [ 294.405661][T17713] netlink: 'syz.7.5111': attribute type 6 has an invalid length. [ 294.423114][T17722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 294.442026][T17722] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.456479][T17713] netlink: 35 bytes leftover after parsing attributes in process `syz.7.5111'. [ 294.486124][T17722] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5113: bg 0: block 112: padding at end of block bitmap is not set [ 294.513760][T17722] EXT4-fs (loop4): Remounting filesystem read-only [ 294.560115][T17415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 294.797452][T17765] veth1_macvtap: left promiscuous mode [ 294.803362][T17765] macsec0: entered allmulticast mode [ 294.813329][T17765] veth1_macvtap: entered promiscuous mode [ 294.820111][T17765] veth1_macvtap: entered allmulticast mode [ 294.826513][T17765] macsec0: entered promiscuous mode [ 294.862421][T17773] batadv_slave_0: entered promiscuous mode [ 294.876708][T17771] batadv_slave_0: left promiscuous mode [ 294.961730][T17789] loop0: detected capacity change from 0 to 256 [ 294.968991][T17789] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 295.036736][T17797] loop0: detected capacity change from 0 to 512 [ 295.061091][T17797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.073950][T17797] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.100749][T17802] loop1: detected capacity change from 0 to 128 [ 295.115746][ T9864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.126786][T17802] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 295.140194][T17802] ext4 filesystem being mounted at /1065/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 295.233040][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.378831][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5135'. [ 295.394553][T17832] vlan2: entered allmulticast mode [ 295.400398][T17832] bridge0: port 4(vlan2) entered blocking state [ 295.406984][T17832] bridge0: port 4(vlan2) entered disabled state [ 295.414356][T17832] vlan2: entered promiscuous mode [ 295.460401][T17838] loop4: detected capacity change from 0 to 2 [ 295.470106][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.480589][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.497796][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.506521][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.536828][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.550208][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.565709][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.580195][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.594180][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.602555][T17424] Buffer I/O error on dev loop4, logical block 0, async page read [ 295.877211][T17856] loop0: detected capacity change from 0 to 128 [ 295.884238][T17856] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 295.896307][T17858] loop2: detected capacity change from 0 to 512 [ 295.917950][T17858] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 295.931442][T17856] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.945514][T17858] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.5138: bad orphan inode 131083 [ 295.959980][T17858] loop2: lost filesystem error report for type 5 error -117 [ 295.960663][T17858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.998799][ T9864] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 296.017246][ T9864] FAT-fs (loop0): Filesystem has been set read-only [ 296.024412][ T9864] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 296.361217][T13695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.374217][ T3453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.454760][ T3453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.482408][ T3453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.552289][ T3453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.593245][T17870] loop1: detected capacity change from 0 to 8192 [ 296.761359][ T3453] vlan2: left promiscuous mode [ 296.777929][ T3453] bridge0: port 4(vlan2) entered disabled state [ 296.803884][ T3453] bridge0: port 3(team0) entered disabled state [ 296.825649][ T3453] bridge_slave_1: left allmulticast mode [ 296.831540][ T3453] bridge_slave_1: left promiscuous mode [ 296.843357][ T3453] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.865703][ T3453] bridge_slave_0: left promiscuous mode [ 296.871676][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.993493][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.006426][ T3453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.018808][ T3453] bond0 (unregistering): Released all slaves [ 297.031656][ T3453] bond1 (unregistering): Released all slaves [ 297.132070][ T3453] hsr_slave_0: left promiscuous mode [ 297.146747][ T3453] hsr_slave_1: left promiscuous mode [ 297.152896][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.165535][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.176994][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.204058][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.212444][T17918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.237238][ T3453] veth1_macvtap: left promiscuous mode [ 297.243078][ T3453] veth0_macvtap: left promiscuous mode [ 297.248709][ T3453] veth1_vlan: left promiscuous mode [ 297.254141][ T3453] veth0_vlan: left promiscuous mode [ 297.261815][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 297.261831][ T28] audit: type=1400 audit(1784945551.507:12163): avc: denied { write } for pid=17917 comm="syz.1.5162" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.312287][ T28] audit: type=1400 audit(1784945551.557:12164): avc: denied { write } for pid=17919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.366830][ T28] audit: type=1400 audit(1784945551.607:12165): avc: denied { write } for pid=17934 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.426942][ T3453] team_slave_1 (unregistering): left promiscuous mode [ 297.427296][ T410] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 297.434767][ T3453] team_slave_1 (unregistering): left allmulticast mode [ 297.456079][ T410] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 9 with error 28 [ 297.470632][ T3453] team0 (unregistering): Port device team_slave_1 removed [ 297.480140][ T410] EXT4-fs (loop1): This should not happen!! Data will be lost [ 297.480140][ T410] [ 297.485244][ T3453] team_slave_0 (unregistering): left promiscuous mode [ 297.501378][ T410] EXT4-fs (loop1): Total free blocks count 0 [ 297.507413][T17939] set_capacity_and_notify: 1 callbacks suppressed [ 297.507437][T17939] loop7: detected capacity change from 0 to 512 [ 297.507462][ T410] EXT4-fs (loop1): Free/Dirty block details [ 297.515069][ T3453] team_slave_0 (unregistering): left allmulticast mode [ 297.521366][ T410] EXT4-fs (loop1): free_blocks=2415919504 [ 297.540530][ T3453] team0 (unregistering): Port device team_slave_0 removed [ 297.549993][T17939] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.5166: inode has both inline data and extents flags [ 297.565217][T17939] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.565548][ T410] EXT4-fs (loop1): dirty_blocks=16 [ 297.572201][T17939] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.5166: couldn't read orphan inode 15 (err -117) [ 297.574813][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 297.598098][ C0] EXT4-fs (loop7): initial error at time 1784945551: ext4_orphan_get:1399: inode 15 [ 297.600734][T17939] loop7: lost filesystem error report for type 5 error -117 [ 297.607500][ C0] EXT4-fs (loop7): last error at time 1784945551: ext4_orphan_get:1399: inode 15 [ 297.624328][ T410] EXT4-fs (loop1): Block reservation details [ 297.630511][ T410] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 297.637232][T17939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.650866][ T3295] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 297.662561][ T28] audit: type=1400 audit(1784945551.897:12166): avc: denied { write } for pid=17938 comm="syz.7.5166" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.688130][ T28] audit: type=1400 audit(1784945551.927:12167): avc: denied { read } for pid=17938 comm="syz.7.5166" path="/283/file1/file1" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 297.712088][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.738724][ T28] audit: type=1400 audit(1784945551.987:12168): avc: denied { map } for pid=17938 comm="syz.7.5166" path="/283/file1/file1" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 297.778909][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 297.789687][T17892] hsr0 speed is unknown, defaulting to 1000 [ 297.899471][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.915226][ T28] audit: type=1326 audit(1784945552.157:12169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.1.5171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669a37de99 code=0x7ffc0000 [ 297.943893][T17950] loop4: detected capacity change from 0 to 4096 [ 297.967501][T17950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.972631][ T28] audit: type=1326 audit(1784945552.157:12170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.1.5171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669a37de99 code=0x7ffc0000 [ 298.007775][ T28] audit: type=1326 audit(1784945552.157:12171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.1.5171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f669a37de99 code=0x7ffc0000 [ 298.033423][ T28] audit: type=1326 audit(1784945552.197:12172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17955 comm="syz.1.5171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f669a37de99 code=0x7ffc0000 [ 298.080904][T17962] loop7: detected capacity change from 0 to 256 [ 298.347407][T17892] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.382276][T17892] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.422275][T17892] bridge_slave_0: entered allmulticast mode [ 298.460801][T17892] bridge_slave_0: entered promiscuous mode [ 298.481337][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 298.505045][T17892] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.525321][T17892] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.545349][T17892] bridge_slave_1: entered allmulticast mode [ 298.554538][T17415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.557296][T17892] bridge_slave_1: entered promiscuous mode [ 298.607293][T17995] loop7: detected capacity change from 0 to 512 [ 298.620743][T17997] loop2: detected capacity change from 0 to 1024 [ 298.633249][T17995] EXT4-fs (loop7): unable to read superblock [ 298.653144][T17892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.663851][T17997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.693010][T17892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.707118][T17997] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.778711][T17997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5181: bg 0: block 112: padding at end of block bitmap is not set [ 298.805289][T18003] SELinux: Context  is not valid (left unmapped). [ 298.824312][T18005] loop4: detected capacity change from 0 to 512 [ 298.831837][T17892] team0: Port device team_slave_0 added [ 298.844823][T17892] team0: Port device team_slave_1 added [ 298.856218][T18005] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.5184: bad orphan inode 15 [ 298.887975][T13695] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 298.904473][T17892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.911554][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.912054][T18005] loop4: lost filesystem error report for type 5 error -117 [ 298.937565][T17892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.939627][T17892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.963097][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.998960][T17892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.024065][T18005] ext4_test_bit(bit=14, block=5) = 0 [ 299.029611][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 299.029651][ C0] EXT4-fs (loop4): initial error at time 1784945553: ext4_orphan_get:1425 [ 299.029682][ C0] EXT4-fs (loop4): last error at time 1784945553: ext4_orphan_get:1425 [ 299.104775][T18005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.117935][T17892] hsr_slave_0: entered promiscuous mode [ 299.135175][T17892] hsr_slave_1: entered promiscuous mode [ 299.146150][T18005] EXT4-fs error (device loop4): __ext4_new_inode:1081: comm syz.4.5184: reserved inode found cleared - inode=1 [ 299.171668][T18005] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 299.249031][T17415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.313186][T18032] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5188'. [ 299.335569][T18029] loop1: detected capacity change from 0 to 4096 [ 299.342731][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 299.363337][T18032] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.370637][T18032] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.381283][T18029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.485644][T18040] IPv6: Can't replace route, no match found [ 299.590789][T17892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.610336][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.625050][T17892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.638739][T18046] loop4: detected capacity change from 0 to 512 [ 299.642211][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.668500][T17892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.684552][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.695168][T17892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.715037][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.733227][T18046] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 1: comm syz.4.5192: invalid block [ 299.755010][T18046] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 299.757686][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 299.773359][ C1] EXT4-fs (loop4): initial error at time 1784945553: __ext4_iget:5533: inode 11: block 1 [ 299.783241][ C1] EXT4-fs (loop4): last error at time 1784945553: __ext4_iget:5533: inode 11: block 1 [ 299.784151][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.794810][T18046] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5192: couldn't read orphan inode 11 (err -117) [ 299.815780][T18046] loop4: lost filesystem error report for type 5 error -117 [ 299.840211][T18046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.906596][T17892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.932504][T17892] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.951889][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.959060][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.977019][T18046] netlink: 560 bytes leftover after parsing attributes in process `syz.4.5192'. [ 299.990644][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.997766][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.012356][T18080] tipc: Enabling of bearer rejected, already enabled [ 300.057526][T17415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.450522][T17892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.220737][T17892] veth0_vlan: entered promiscuous mode [ 301.229725][T17892] veth1_vlan: entered promiscuous mode [ 301.260979][T17892] veth0_macvtap: entered promiscuous mode [ 301.276348][T17892] veth1_macvtap: entered promiscuous mode [ 301.288186][T17892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.301743][T17892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.323020][ T410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.338389][ T410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.359038][ T410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.369735][ T410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.456274][T18186] ipvlan0: entered allmulticast mode [ 301.464839][T18186] batadv_slave_1: entered allmulticast mode [ 301.472806][T18186] batman_adv: batadv0: Adding interface: ipvlan0 [ 301.480172][T18186] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.506360][T18186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.609606][T18186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.623231][T18186] batman_adv: batadv0: Interface activated: ipvlan0 [ 302.316122][T18230] syz.0.5212 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 302.359261][T18230] CPU: 0 UID: 0 PID: 18230 Comm: syz.0.5212 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 302.359369][T18230] Tainted: [W]=WARN [ 302.359375][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 302.359388][T18230] Call Trace: [ 302.359395][T18230] [ 302.359405][T18230] __dump_stack+0x1d/0x30 [ 302.359484][T18230] dump_stack_lvl+0x95/0xd0 [ 302.359511][T18230] dump_stack+0x15/0x1b [ 302.359535][T18230] dump_header+0x80/0x240 [ 302.359563][T18230] oom_kill_process+0x295/0x350 [ 302.359669][T18230] out_of_memory+0x981/0xbc0 [ 302.359801][T18230] try_charge_memcg+0x621/0xa00 [ 302.359834][T18230] charge_memcg+0x6d/0x120 [ 302.359867][T18230] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 302.359939][T18230] swap_cache_alloc_folio+0x47b/0x5e0 [ 302.360154][T18230] swap_cluster_readahead+0x2b1/0x460 [ 302.360201][T18230] swapin_readahead+0xd8/0x8a0 [ 302.360235][T18230] ? _raw_spin_unlock+0x9/0x30 [ 302.360314][T18230] ? swap_put_entries_cluster+0x49c/0x4c0 [ 302.360361][T18230] ? __rcu_read_unlock+0x4e/0x70 [ 302.360390][T18230] ? swap_cache_get_folio+0x1f7/0x200 [ 302.360419][T18230] do_swap_page+0x2a2/0x1ec0 [ 302.360599][T18230] ? __css_rstat_updated+0xbb/0x280 [ 302.360634][T18230] ? __rcu_read_lock+0x36/0x50 [ 302.360658][T18230] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 302.360700][T18230] handle_mm_fault+0xb3c/0x2da0 [ 302.360743][T18230] do_user_addr_fault+0x634/0x1060 [ 302.360773][T18230] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 302.360802][T18230] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 302.360905][T18230] ? trace_page_fault_user+0x1f/0xa0 [ 302.360936][T18230] exc_page_fault+0x62/0xa0 [ 302.360979][T18230] asm_exc_page_fault+0x26/0x30 [ 302.361056][T18230] RIP: 0033:0x7f26d3168ff8 [ 302.361075][T18230] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 302.361099][T18230] RSP: 002b:00007fff7026c520 EFLAGS: 00010246 [ 302.361116][T18230] RAX: 0000000000000000 RBX: 0000555591775500 RCX: 00007f26d316e6ce [ 302.361129][T18230] RDX: 00007fff7026c570 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.361142][T18230] RBP: 00007f26d3437da0 R08: 0000000000000000 R09: 0000000000000000 [ 302.361210][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000049d96 [ 302.361222][T18230] R13: 00007f26d343609c R14: 0000000000049ac8 R15: 00007f26d3436090 [ 302.361247][T18230] [ 302.361276][T18230] memory: usage 307200kB, limit 307200kB, failcnt 192 [ 302.617048][T18230] memory+swap: usage 144624kB, limit 9007199254740988kB, failcnt 0 [ 302.625132][T18230] kmem: usage 139668kB, limit 9007199254740988kB, failcnt 0 [ 302.626394][T18258] loop1: detected capacity change from 0 to 1024 [ 302.637021][T18230] Memory cgroup stats for [ 302.639162][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 302.639178][ T28] audit: type=1400 audit(1784945556.887:12230): avc: denied { getopt } for pid=18259 comm="syz.7.5231" lport=52570 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 302.685724][T18230] /syz0: [ 302.685902][T18230] cache 0 [ 302.693924][T18230] rss 0 [ 302.698861][T18230] shmem 0 [ 302.703610][T18230] mapped_file 0 [ 302.710378][T18230] dirty 0 [ 302.715495][T18258] EXT4-fs: Ignoring removed orlov option [ 302.736629][T18230] writeback 0 [ 302.748478][T18230] workingset_refault_anon 28 [ 302.749451][T18258] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.759265][T18230] workingset_refault_file 0 [ 302.771085][T18230] swap 188416 [ 302.778311][T18230] swapcached 356352 [ 302.786153][T18230] pgpgin 61323 [ 302.796249][T18230] pgpgout 61323 [ 302.803789][T18230] pgfault 100575 [ 302.812731][T18230] pgmajfault 18 [ 302.815030][T18258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.820855][T18230] inactive_anon 0 [ 302.844600][T18230] active_anon 0 [ 302.854226][T18230] inactive_file 0 [ 302.862674][ T28] audit: type=1400 audit(1784945557.107:12231): avc: denied { write } for pid=18257 comm="syz.1.5223" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.882332][T18230] active_file 0 [ 302.903131][T18230] unevictable 0 [ 302.916579][T18230] hierarchical_memory_limit 314572800 [ 302.932145][T18230] hierarchical_memsw_limit 9223372036854771712 [ 302.949126][T18230] total_cache 0 [ 302.953914][T18230] total_rss 0 [ 302.957237][T18230] total_shmem 0 [ 302.960756][T18230] total_mapped_file 0 [ 302.964794][T18230] total_dirty 0 [ 302.968315][T18230] total_writeback 0 [ 302.972485][T18230] total_workingset_refault_anon 28 [ 302.977624][T18230] total_workingset_refault_file 0 [ 302.982745][T18230] total_swap 188416 [ 302.986599][T18230] total_swapcached 356352 [ 302.990982][T18230] total_pgpgin 61323 [ 302.994892][T18230] total_pgpgout 61323 [ 302.998965][T18230] total_pgfault 100575 [ 303.003224][T18230] total_pgmajfault 18 [ 303.007310][T18230] total_inactive_anon 0 [ 303.012854][T18230] total_active_anon 0 [ 303.016894][T18230] total_inactive_file 0 [ 303.021178][T18230] total_active_file 0 [ 303.025229][T18230] total_unevictable 0 [ 303.038634][T18230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5212,pid=18230,uid=0 [ 303.053730][T18230] Memory cgroup out of memory: Killed process 18230 (syz.0.5212) total-vm:96156kB, anon-rss:1240kB, file-rss:22104kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 303.166973][ T28] audit: type=1400 audit(1784945557.407:12232): avc: denied { listen } for pid=18272 comm="syz.0.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 303.206806][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.373181][T18284] loop1: detected capacity change from 0 to 1024 [ 303.389705][T18284] EXT4-fs: Ignoring removed orlov option [ 303.423533][T18284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.476722][ T28] audit: type=1400 audit(1784945557.717:12233): avc: denied { write } for pid=18283 comm="syz.1.5232" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.508261][ T28] audit: type=1400 audit(1784945557.747:12234): avc: denied { write } for pid=18283 comm="syz.1.5232" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.531018][ T28] audit: type=1400 audit(1784945557.747:12235): avc: denied { write } for pid=18283 comm="syz.1.5232" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 303.572380][T18291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.584035][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.650682][T18291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.714750][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5238'. [ 303.786161][T18305] loop4: detected capacity change from 0 to 1024 [ 303.802941][T18305] EXT4-fs: Ignoring removed orlov option [ 303.822763][T18309] netlink: 'syz.1.5242': attribute type 6 has an invalid length. [ 303.823352][T18305] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.875860][T18305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.897649][ T28] audit: type=1400 audit(1784945558.137:12236): avc: denied { write } for pid=18304 comm="syz.4.5240" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.022406][ T28] audit: type=1326 audit(1784945558.267:12237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18320 comm="syz.2.5246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ac2de99 code=0x7ffc0000 [ 304.089678][ T28] audit: type=1326 audit(1784945558.267:12238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18320 comm="syz.2.5246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ac2de99 code=0x7ffc0000 [ 304.162102][ T28] audit: type=1326 audit(1784945558.267:12239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18320 comm="syz.2.5246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1ac2de99 code=0x7ffc0000 [ 304.244409][T18314] loop7: detected capacity change from 0 to 512 [ 304.328474][T18314] EXT4-fs error (device loop7): __ext4_iget:5533: inode #11: block 1: comm syz.7.5243: invalid block [ 304.366321][T18314] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 304.367930][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 304.385028][ C0] EXT4-fs (loop7): initial error at time 1784945558: __ext4_iget:5533: inode 11: block 1 [ 304.396160][ C0] EXT4-fs (loop7): last error at time 1784945558: __ext4_iget:5533: inode 11: block 1 [ 304.443774][T17415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.499651][T18314] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.5243: couldn't read orphan inode 11 (err -117) [ 304.532462][T18314] loop7: lost filesystem error report for type 5 error -117 [ 304.551109][T18314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.613286][ T410] Bluetooth: hci0: Frame reassembly failed (-84) [ 304.643657][T18314] netlink: 560 bytes leftover after parsing attributes in process `syz.7.5243'. [ 304.707107][T13887] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.743350][T18340] ipvlan2: entered allmulticast mode [ 304.750519][T18340] batadv_slave_1: entered allmulticast mode [ 304.758601][T18340] batman_adv: batadv0: Adding interface: ipvlan2 [ 304.765055][T18340] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.792300][T18340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.803864][T18340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.813997][T18340] batman_adv: batadv0: Interface activated: ipvlan2 [ 305.039902][ T2981] ================================================================== [ 305.048032][ T2981] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 305.055539][ T2981] [ 305.057864][ T2981] write to 0xffff88811b5c9180 of 4 bytes by task 17890 on cpu 0: [ 305.065579][ T2981] d_make_discardable+0x4f/0x90 [ 305.070440][ T2981] simple_unlink+0x68/0x80 [ 305.074877][ T2981] shmem_unlink+0x12d/0x140 [ 305.079422][ T2981] vfs_unlink+0x1c3/0x490 [ 305.083757][ T2981] filename_unlinkat+0x1dc/0x410 [ 305.088724][ T2981] __se_sys_unlink+0x2b/0xe0 [ 305.093320][ T2981] __x64_sys_unlink+0x1f/0x30 [ 305.098005][ T2981] x64_sys_call+0x2eb6/0x3020 [ 305.102698][ T2981] do_syscall_64+0x136/0x3c0 [ 305.107294][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.113206][ T2981] [ 305.115533][ T2981] read to 0xffff88811b5c9180 of 4 bytes by task 2981 on cpu 1: [ 305.123071][ T2981] do_readlinkat+0xa0/0x2f0 [ 305.127592][ T2981] __x64_sys_readlink+0x47/0x60 [ 305.132461][ T2981] x64_sys_call+0x2b51/0x3020 [ 305.137159][ T2981] do_syscall_64+0x136/0x3c0 [ 305.141773][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.147698][ T2981] [ 305.150063][ T2981] value changed: 0x08300080 -> 0x00300180 [ 305.155785][ T2981] [ 305.158154][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 305.164319][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 305.174747][ T2981] Tainted: [W]=WARN [ 305.178545][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.188600][ T2981] ================================================================== [ 306.627742][ T8673] Bluetooth: hci0: command 0x1003 tx timeout [ 306.628781][ T3741] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 307.797499][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 307.797518][ T28] audit: type=1400 audit(1784945562.037:12253): avc: denied { write } for pid=18393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.835453][ T28] audit: type=1400 audit(1784945562.077:12254): avc: denied { write } for pid=18404 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1