last executing test programs: 6m38.313881361s ago: executing program 4 (id=512): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000002008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_clone(0x808a000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 6m37.557633034s ago: executing program 4 (id=520): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x1001a, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x14, 0x0, 0x0) 6m36.821415288s ago: executing program 4 (id=530): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munlockall() mmap(&(0x7f00003d5000/0x3000)=nil, 0x3000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000013c000/0x3000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6m36.76911997s ago: executing program 4 (id=531): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000440)={[{@shortname_lower}, {@shortname_winnt}, {@fat=@nfs}, {@fat=@discard}, {@uni_xlate}, {@utf8}, {@fat=@sys_immutable}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@uni_xlate}, {@rodir}]}, 0x0, 0x2b2, &(0x7f0000000840)="$eJzs3E9rE08YwPGnSf+kKW1yKD/4HcQHvehlaeMrCNKCGFBqI+pBmNqNhqzZko2RiJjevPo6ikdPCuob6MWbd/VSBMFLD2Kkm127bRf7x9aN5vuBstOZeXZnMpvw7MLuxo1n92sVz6qYpqQyKimRVdkUyW+VAkPBNuWXRyVqVc5PfH1/6trNW5eLpdLcgup8cfFCQVWnTr9++Pj5mbfNiesvpl6NyXr+9saXwof1/9b/3/i+GO7dFTG65LpNs+TYulz1apbqVcc2nq3Vumc3mhpprzjuykpbTX15MrvSsD1PTb2tNbutTVebjbaau6ZaV8uydDIrgyZ96Ijy2sKCKZ7IYJCE8bjKRqNo0rGN5bU/MSgAANBfksr/71U9rXpad3fk93vz/5QcIv8XGdD8Pzbt28/HQ+b/Y0c5CJK3lf9ng+/vTuT/AAAAAAAAAAAAAAAAAAAAAAD8DTa73Vy3282F2/BvTEQyIhL+n/Q4cTJY/8EWeXAvI+I8bZVb5d62116sSFUcsWVmROSbfz4EeuX5S6W5GfXl5Y3TCeI7rXLaf2DMjw/l4+Nne/Eaje/IiGSjxy9ITqbj4wsx8a3yqJw72w2fWbPFkpy8uyOuOLLsn9fb8U9mVS9eKe2KH/f7AQAAAADwL7D0pz3X7367peFrQ3a19yq37w9Ibp/7A7uur4dlaDi5eQMAAAAAMEi89qOacRy70TeFcGTHv+fx49xz8h9dpmacTjClX3YeFpGg5mW/rPJBCqmtiR0xPP17q/xZRHbUTCe+3MdR+PQgOF0O0DmBHyMAAAAAJypM+oeSHggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsoC8PC/sf5d1jkcOlk5klAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B9+BAAA//8INhII") syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) pipe(&(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xcb08, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3b3741e, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) 6m36.481621089s ago: executing program 4 (id=532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) 6m34.764671834s ago: executing program 4 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xfffffffe, 0x9, 0x1, 0x8}, 0xe, 0x0, 0x32, 0x2, 0x3f1, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xa632, 0x23, 0x3, 0x3e, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) 6m34.715887745s ago: executing program 32 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0xfffffffe, 0x9, 0x1, 0x8}, 0xe, 0x0, 0x32, 0x2, 0x3f1, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xa632, 0x23, 0x3, 0x3e, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) 1m30.839475552s ago: executing program 0 (id=6239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpid() close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) close(0x3) 1m30.744280675s ago: executing program 0 (id=6241): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01", 0x30}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x77c6) 1m30.718156705s ago: executing program 0 (id=6242): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="300030802c000180080001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m30.667282097s ago: executing program 0 (id=6244): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x201, @private0={0xfc, 0x0, '\x00', 0x1}, 0x102}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb6b"], 0x28}}], 0x1, 0x854) 1m30.537380971s ago: executing program 0 (id=6249): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 1m29.64824931s ago: executing program 0 (id=6259): fsmount(0xffffffffffffffff, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x18, 0xa01, 0x600, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) fchmodat(0xffffffffffffffff, 0x0, 0x91) 1m14.483717654s ago: executing program 33 (id=6259): fsmount(0xffffffffffffffff, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x18, 0xa01, 0x600, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) fchmodat(0xffffffffffffffff, 0x0, 0x91) 1m5.436650883s ago: executing program 5 (id=6465): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32=r1, @ANYBLOB="1000100a160001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) 1m5.256069168s ago: executing program 5 (id=6469): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m5.232336439s ago: executing program 5 (id=6471): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x76421000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x20048084) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 1m4.341351318s ago: executing program 5 (id=6479): rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400002000000000, 0x0) close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@nullb, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') 1m4.217494591s ago: executing program 5 (id=6482): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x30) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/219) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, &(0x7f0000000280), 0x0, 0x1f1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x48) 1m3.078173167s ago: executing program 5 (id=6496): fsmount(0xffffffffffffffff, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x18, 0xa01, 0x600, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) fchmodat(0xffffffffffffffff, 0x0, 0x91) 47.95717921s ago: executing program 34 (id=6496): fsmount(0xffffffffffffffff, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x18, 0xa01, 0x600, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) fchmodat(0xffffffffffffffff, 0x0, 0x91) 40.669345763s ago: executing program 6 (id=6689): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) syz_read_part_table(0x5d1, &(0x7f0000000600)="$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") 39.792831881s ago: executing program 6 (id=6693): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000008c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 39.083311333s ago: executing program 6 (id=6708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$netlink(r0, 0x0, &(0x7f00000000c0)) 38.976969577s ago: executing program 6 (id=6710): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x83101a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) 38.845648541s ago: executing program 6 (id=6713): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="5e17e7", 0x3}, 0x1, 0x0, 0x0, 0x10000801}, 0x8044) 38.621174508s ago: executing program 6 (id=6722): socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) socket$igmp(0x2, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 38.518918331s ago: executing program 35 (id=6722): socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000030000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) socket$igmp(0x2, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.33485239s ago: executing program 3 (id=7298): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") lchown(&(0x7f0000000ac0)='./file1\x00', 0x0, 0xffffffffffffffff) 5.080023058s ago: executing program 3 (id=7303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.293549843s ago: executing program 1 (id=7310): r0 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.246074315s ago: executing program 1 (id=7313): semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x1f4) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)) syz_open_dev$sg(0x0, 0x0, 0x802) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="0100758a0000fedbdf250a000000040001808ee9a5693fcc42ce84"], 0x18}}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6d9b, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x10f}, &(0x7f00000002c0), &(0x7f00000001c0), &(0x7f0000000340)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000000206011800000000000000000000fffd1c00078005001500020000000800114000000000050015000c0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x68}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 4.207521135s ago: executing program 3 (id=7314): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") lchown(&(0x7f0000000ac0)='./file1\x00', 0x0, 0xffffffffffffffff) 3.186494788s ago: executing program 3 (id=7318): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 2.81185411s ago: executing program 8 (id=7322): io_uring_setup(0x5863, 0x0) open(0x0, 0x108843, 0x55) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 2.125938812s ago: executing program 1 (id=7323): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TSC(0x1a, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) 1.627462168s ago: executing program 8 (id=7326): socket$netlink(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.410363685s ago: executing program 3 (id=7329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x64}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x2, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x100, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@remote, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@tfcpad={0x8, 0x22, 0x80000000}]}, 0x100}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r7, &(0x7f00000005c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) r8 = socket$kcm(0x1e, 0x4, 0x0) fcntl$setflags(r7, 0x2, 0x1) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r8) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:'], 0xa) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(r0, 0x0, r2, 0x0, 0x8001, 0xd) 1.302999968s ago: executing program 8 (id=7330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x65dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x14}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f7", 0x29a}], 0x1, 0x0, 0x6b}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503222ed3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.25732128s ago: executing program 7 (id=7331): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 1.182376452s ago: executing program 7 (id=7332): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000540000000e0002006e657464657673"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 1.055217556s ago: executing program 1 (id=7333): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc4) lchown(&(0x7f0000000ac0)='./file1\x00', 0x0, 0xffffffffffffffff) 989.285378ms ago: executing program 8 (id=7334): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 988.823228ms ago: executing program 7 (id=7335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 969.924029ms ago: executing program 1 (id=7336): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2c60a, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x142) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 861.577572ms ago: executing program 1 (id=7337): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="000000000000e5d4a610424d1ca5000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff3]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r4, 0x2}, {r4, 0x2005}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f00000002c0)=0x6, 0x2) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffd}, &(0x7f0000000100)=0x8) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}, 0x1, 0x5d1, &(0x7f0000001680)="$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") 701.958997ms ago: executing program 8 (id=7339): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40, 0x0, 0x6, "fe8de2eede65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 494.118224ms ago: executing program 2 (id=7340): socket$netlink(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 457.525645ms ago: executing program 3 (id=7341): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000024c0)=""/4080, 0xff0}, {&(0x7f0000000400)=""/70, 0x46}], 0x2}, 0x2020) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 447.721525ms ago: executing program 7 (id=7342): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) 377.567998ms ago: executing program 2 (id=7343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xd, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012b", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000140)="23c420", 0x3}], 0x4}, 0x20008b88) 347.572799ms ago: executing program 7 (id=7344): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="ba", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="8c15d6644b8d3401adbf061fbe5223c5d59119f6ca7c1697e3", 0x19}, {&(0x7f0000000680)="1947597dea9f0f4a01f1d14a58f4c12c5e2fc94d10615872f04c99fb7fa4768198114d6f2510ef645c082160d4a1d575b85db7381c927db9d7355362f2d1953d5c5ad3278280521598d474b9d2b6165801c51b68a494d6b493afa4cb2019ddd1c69a6a801798028359c134d92be08d2d690364d1ebaef586df2c8792950a335316d24f75a7b9912d951482b1ff05a90462319f09ad2d683c4bc6f4f0736a67710d93c5a51db9a61fd209ba13d5d78fad6e43c7b1c25979e3f24469f68bf9b699", 0xc0}, {&(0x7f0000000900)="28d8", 0x2}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4004) 330.630659ms ago: executing program 2 (id=7345): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r1, 0x9}}, 0x10) 283.99479ms ago: executing program 7 (id=7346): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0xc4) lchown(&(0x7f0000000ac0)='./file1\x00', 0x0, 0xffffffffffffffff) 221.317442ms ago: executing program 2 (id=7347): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="ba", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="8c15d6644b8d3401adbf061fbe5223c5d59119f6ca7c1697e3", 0x19}, {&(0x7f0000000680)="1947597dea9f0f4a01f1d14a58f4c12c5e2fc94d10615872f04c99fb7fa4768198114d6f2510ef645c082160d4a1d575b85db7381c927db9d7355362f2d1953d5c5ad3278280521598d474b9d2b6165801c51b68a494d6b493afa4cb2019ddd1c69a6a801798028359c134d92be08d2d690364d1ebaef586df2c8792950a335316d24f75a7b9912d951482b1ff05a90462319f09ad2d683c4bc6f4f0736a67710d93c5a51db9a61fd209ba13d5d78fad6e43c7b1c25979e3f24469f68bf9b699", 0xc0}, {&(0x7f0000000900)="28d8", 0x2}], 0x3}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000cc0)="79bfc144c4c525e196e5dbc7b6859ccedeed94bdae5932f50a5fbb9fc4f04b471ab3d0235b362cb3233bdcb8a0cf02c28985d89da4b2", 0x36}, {&(0x7f0000000d00)="09fd9fe1d7cde071df1ee3288a6645058d1fcf7c25cd31fb50c12ddeb7921cca97a9e254aeb6ff9bfd5d9bb8d0bb9d40bce96872602cf7cd0206702aa1250a5d36810edaeb9835b7769280726c9ddae8e75930ba53ccdd5d41dd6c4e606e152994c9fea7cb0dc3544dd01e221e268a95f2593d5087789aa428f8283073dfd755f8e785f4d892c25d69bb73cd246efa2e1b0d2fda76d5397b7553dd357da59850d5db79a33865a206cc330bd07ddef9870c380de8453ae9d3b8a0f0349e2a405ac385bc11ea8f8b646e68a271859480bf6274f5d13dbd506c2edfd3594cb2a608150cb51f47a36ee4e9", 0xe9}, {&(0x7f0000000e00)="6e6fe6b112843ef70f427639093fe3e680d0e3c14f1dd5f90ea8c97ed4bdb11f764f522c3c8fe54a257ff664594910e188a0f90a356e30b2784ca46eb73afff82f2d1b23d5adf5627baf8cfef7be2a48545af4f69f9b8492080924a200a2535174dc39811decd149255144ff84cccd7110b899cb224ffb4cec49739a28eef5f5bdfd9d82c02284c333fca2b0e371db34a2a53c532b5aff57717debf3a60fd19c78779c75718e69279e9752bbcaf4fbe7cfee7ff804", 0xb5}, {&(0x7f0000001040)="f4f3dced06654bb0871debaccbf1f1f5dfcdb0d4da35323e2558b1bfa466a2d1877bf1534411b724fb2c0a23cf27f13a9b98c47ca5208737a64b2a5f8660485110a14ca161fc463febbf3e377a962460c330b5022653c071fa3ee6f2e00bf65a4cd93718ad90dc431aca7b8a34d707ef9a502366b0d75342da647e70dc674b2058", 0x81}, {&(0x7f0000001100)="0dd6066936dee6fc25b54e462b910274e8582a24387adf7571e5aec3ca40cf1b1a6074087d30d3583b5395ca93aa7b9d470504aac6427fbccda91606c3241d67f558d755be26ebf1cb20191d45c35b56cdad87dac8342ba276337a3297a00e7e2aabef40e5f93d94cd6084694aeef9163972c283d5d3f67f6954bfd44fc84d4a676885a9d766513416e250d1501dca72b4ab1e9c478076c998bd02a322", 0x9d}, {&(0x7f00000011c0)="575064afeda318e1b7", 0x9}], 0x6}}], 0x3, 0x4004) 202.021733ms ago: executing program 2 (id=7348): r0 = io_uring_setup(0xbbc, 0x0) io_uring_enter(r0, 0x100000, 0x1, 0xf, 0x0, 0x0) io_uring_enter(r0, 0x5c97, 0x37c4, 0x2, 0x0, 0x0) 159.671785ms ago: executing program 2 (id=7349): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4d0, &(0x7f00000013c0)="$eJzs3V9oVuUfAPDveffH/eb8bb9fUeLVSjBD3JyvSwQDvRKkhDQoqIuGezen71TchLaL6A+UUYHeeJMEdVEQXqyr6ibCi6gIuvAmKLwoiBxMyyK8CBbn/bOme7c5pzu6Ph84nOc55z3n+b7v43ne83w97A3gX6s9InZERF1EbIqI1sr2XGWJF8tL+rpCfuxAuiQxObnvchJJROzOjx2oniuprFdWTtAUEee+iGiun9nu0MjooZ5isXCsUu8cHjzaOTQyunFgsKe/0F84nO/ams/nu7flu2/Ze/3tr4OnPrm66/XTl3795qfzH59NYke0VPZNfx+3Snu0T30m09UnEY/e6sYy1pR1ACzY2cdPvZV1DADA0kvv8f8fEQ+W7v9boy7KN+sHx5+90hpX+mY7ru3Pdy4uZZwAAADAzZuM1tiermtqmHUPAAAAcPfIRURLJLmOyrMALZHLdXSUn+G9N5pzxSNDwxv6jhw/3BulZ2XboiHXN1AsVJ8VbouGJK13lcr/1DdfV89HxP8i4kTrf0r1jv1Hir1ZJz8AAABgmWuJuPDMK5/ev3KW+X/qh9asowQAAAAWI53/r7rQXPpTXX+Y5wMAAMCylM7/r7x66asw/wcAAIBlqzr/n/odLoXbWKj+ANqdEo+CwnyFjAcoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqGFyMolJAAAAYFnLOv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDdZXd+7EB1Wao2x3ctVUvMZmJnRLSV+79QWcp76qOptG6Khoho/j2J+mnHJRFRt8i2O9ZFtMeG706+8MtH6RKVf4eLPC13ibEfs46A261+jn2NW5YwEO44a57IOgKy9O2JrCMgS+cnso6ALO3dl3UEZGnPI1lHQJbevpx1BHy+MyI21cr/5WJ1aV3OAl2f/6mbZ253I74+E9EeHT9P3zYz/5MbX2QzzGFiZ8T2iCjMyP/lqi9pq6vUVpVShQ1J30CxsCki/hsR66NhRVrvmqON3avP1cz0vHlf2v/H91Tzf+mStl/NBVbiGK9fce1xvT3DPYt935RNvBSxpr5W/ydT+d9klvzvihtrIj1ssNaOq1+m/f/GZ3P3P7fT5LsRD9W8/pOp16SlzuHBo51DI6MbBwZ7+gv9hcP5rq35fL57W767szQedFZHhZk+fPn9mt/0D+wvjf8j+j876fXfPHf/l8b/oZHRQz3FYuHY0MLbeG3d6Zrf4R+cTvu/8dzNjP+NyZOlABsr257vGR4+1hXRmDw2c/vmhce8XFU/j+rnlfb/+rW1v/+r93/l8T83Y/y/p7LOlf8LcVYPv3ex5vbvT6b9n3/K9Z+dtP9757n+k2uu/4UXnlu7d32ttp+O0v3fmfmv/y2lYKoncf83vxvtoKzjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6f4OAAD//1/T7bc=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 0s ago: executing program 8 (id=7350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): lock 3 (level 2) [ 394.492798][T20527] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 394.493949][T20527] EXT4-fs (loop5): 1 orphan inode deleted [ 394.509156][T20527] EXT4-fs (loop5): 1 truncate cleaned up [ 394.515958][T20527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.641429][T20535] netlink: 4496 bytes leftover after parsing attributes in process `syz.1.6237'. [ 394.927574][T20551] netlink: 'syz.3.6245': attribute type 32 has an invalid length. [ 394.935756][T20551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6245'. [ 394.948476][T20550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6246'. [ 395.043298][T20555] syzkaller0: entered promiscuous mode [ 395.049590][T20555] syzkaller0: entered allmulticast mode [ 395.580295][T13400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.630101][T20564] tipc: Enabling of bearer rejected, failed to enable media [ 395.639553][T20564] syzkaller0: entered promiscuous mode [ 395.659010][T20564] syzkaller0: entered allmulticast mode [ 395.783795][T20571] loop3: detected capacity change from 0 to 512 [ 395.825755][T20571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.836181][T20571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.866520][T20571] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 395.898040][T20571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.913135][T20571] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.939301][T20585] loop1: detected capacity change from 0 to 1024 [ 395.946617][T20585] EXT4-fs: Ignoring removed bh option [ 396.033257][ T28] kauditd_printk_skb: 212 callbacks suppressed [ 396.033279][ T28] audit: type=1400 audit(1779392502.353:767): avc: denied { write } for pid=20569 comm="syz.3.6254" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 396.072038][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.081779][ T28] audit: type=1400 audit(1779392502.353:768): avc: denied { unlink } for pid=20569 comm="syz.3.6254" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 396.082381][T20585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.140309][ T28] audit: type=1400 audit(1779392502.353:769): avc: denied { write } for pid=20569 comm="syz.3.6254" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 396.283650][ T28] audit: type=1400 audit(1779392502.643:770): avc: denied { write } for pid=20584 comm="syz.1.6258" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 396.556110][ T28] audit: type=1400 audit(1779392502.683:771): avc: denied { append } for pid=20584 comm="syz.1.6258" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 396.601042][ T28] audit: type=1400 audit(1779392502.683:772): avc: denied { open } for pid=20584 comm="syz.1.6258" path="/24/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 396.631078][ T28] audit: type=1400 audit(1779392502.683:773): avc: denied { ioctl } for pid=20584 comm="syz.1.6258" path="/24/file1/file1" dev="loop1" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 396.652713][T19937] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.856961][T20612] loop2: detected capacity change from 0 to 512 [ 396.908259][T20615] loop5: detected capacity change from 0 to 512 [ 396.974461][T20610] syzkaller0: entered promiscuous mode [ 396.980332][T20610] syzkaller0: entered allmulticast mode [ 397.060712][T20615] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 397.095232][T20612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.202273][T20615] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 397.323905][ T28] audit: type=1400 audit(1779392503.673:774): avc: denied { setattr } for pid=20611 comm="syz.2.6267" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.360857][T20615] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 397.383544][T20621] loop1: detected capacity change from 0 to 512 [ 397.392197][T20615] EXT4-fs (loop5): 1 truncate cleaned up [ 397.403826][T20621] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 397.404363][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.425219][T20615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.444035][T20621] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.6269: iget: bad i_size value: 12154757448730 [ 397.457223][T20621] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 397.457487][T20621] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6269: couldn't read orphan inode 13 (err -117) [ 397.466681][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 397.466722][ C1] EXT4-fs (loop1): initial error at time 1779392503: ext4_orphan_get:1397: inode 13 [ 397.466760][ C1] EXT4-fs (loop1): last error at time 1779392503: ext4_orphan_get:1397: inode 13 [ 397.526525][ T28] audit: type=1400 audit(1779392503.873:775): avc: denied { write } for pid=20614 comm="syz.5.6268" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.556395][ T28] audit: type=1400 audit(1779392503.873:776): avc: denied { unlink } for pid=20614 comm="syz.5.6268" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.574177][T13400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.587717][T20621] loop1: lost filesystem error report for type 5 error -117 [ 397.596133][T20621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.619004][T20624] syzkaller0: entered promiscuous mode [ 397.626216][T20624] syzkaller0: entered allmulticast mode [ 397.664425][T19937] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.693894][ T8279] hid (null): report_id 3768460527 is invalid [ 397.701559][ T8279] hid-generic 0101:0008:0005.0001: report_id 3768460527 is invalid [ 397.723160][ T8279] hid-generic 0101:0008:0005.0001: item 0 4 1 8 parsing failed [ 397.731051][ T8279] hid-generic 0101:0008:0005.0001: probe with driver hid-generic failed with error -22 [ 397.859101][T20648] syzkaller0: entered promiscuous mode [ 397.864706][T20648] syzkaller0: entered allmulticast mode [ 397.987991][T20670] syzkaller0: entered promiscuous mode [ 397.999963][T20670] syzkaller0: entered allmulticast mode [ 398.076251][T20676] xt_hashlimit: size too large, truncated to 1048576 [ 398.290328][T20693] loop3: detected capacity change from 0 to 512 [ 398.335340][T20693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.362781][T20693] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.415865][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.595291][T20710] loop2: detected capacity change from 0 to 128 [ 398.603162][T20708] syzkaller0: entered promiscuous mode [ 398.608901][T20708] syzkaller0: entered allmulticast mode [ 398.615114][T20710] EXT4-fs: test_dummy_encryption option not supported [ 398.806290][T20714] syzkaller0: entered promiscuous mode [ 398.818878][T20714] syzkaller0: entered allmulticast mode [ 398.922042][T20724] xt_hashlimit: size too large, truncated to 1048576 [ 399.946023][T20755] loop1: detected capacity change from 0 to 128 [ 401.101041][T20786] loop1: detected capacity change from 0 to 512 [ 401.135099][T20786] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 401.175585][T20786] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 401.192626][T20786] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.6333: corrupted inode contents [ 401.204539][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 401.204561][ C1] EXT4-fs (loop1): initial error at time 1779392763: mb_free_blocks:2049: inode 11: block 64 [ 401.204606][ C1] EXT4-fs (loop1): last error at time 1779392763: mb_free_blocks:2049: inode 11: block 64 [ 401.231618][T20786] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 401.231911][T20786] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #11: comm syz.1.6333: mark_inode_dirty error [ 401.252694][T20786] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 401.252935][T20786] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6333: invalid indirect mapped block 1 (level 1) [ 401.284287][T20786] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 401.284794][T20786] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.6333: corrupted inode contents [ 401.306113][T20786] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 401.306464][T20786] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 401.325760][T20786] loop1: lost filesystem error report for type 5 error -117 [ 401.327338][T20786] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.6333: corrupted inode contents [ 401.348820][T20796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.359327][T20786] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 401.361564][T20786] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.6333: mark_inode_dirty error [ 401.382257][T20796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.391002][T20786] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 401.395306][T20786] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 401.419010][T20786] loop1: lost filesystem error report for type 5 error -117 [ 401.419215][T20786] EXT4-fs (loop1): 1 truncate cleaned up [ 401.433230][T20786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.448659][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 401.448677][ T28] audit: type=1400 audit(1779392763.813:844): avc: denied { write } for pid=20785 comm="syz.1.6333" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.477412][T20786] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.6333: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 401.497996][ T28] audit: type=1400 audit(1779392763.843:845): avc: denied { write } for pid=20785 comm="syz.1.6333" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.526543][ T28] audit: type=1400 audit(1779392763.843:846): avc: denied { rename } for pid=20785 comm="syz.1.6333" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.560375][ T28] audit: type=1400 audit(1779392763.863:847): avc: denied { connect } for pid=20797 comm="syz.5.6338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.563043][T19937] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.590681][ T28] audit: type=1400 audit(1779392763.863:848): avc: denied { accept } for pid=20797 comm="syz.5.6338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.611152][ T28] audit: type=1400 audit(1779392763.863:849): avc: denied { read } for pid=20797 comm="syz.5.6338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 401.699528][T20803] syzkaller0: entered promiscuous mode [ 401.722122][T20803] syzkaller0: entered allmulticast mode [ 401.944872][T20809] tipc: Enabled bearer , priority 0 [ 401.952292][T20809] syzkaller0: entered promiscuous mode [ 401.958124][T20809] syzkaller0: entered allmulticast mode [ 401.967022][T20809] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 401.978739][T20809] tipc: Resetting bearer [ 401.990818][T20808] tipc: Resetting bearer [ 402.005420][T20808] tipc: Disabling bearer [ 402.269495][T20813] netlink: 'syz.5.6344': attribute type 1 has an invalid length. [ 402.294352][T20813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 402.305579][T20813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6344'. [ 402.353293][T20816] xt_hashlimit: size too large, truncated to 1048576 [ 402.414052][T20819] syzkaller0: entered promiscuous mode [ 402.420114][T20819] syzkaller0: entered allmulticast mode [ 402.848895][T20830] syzkaller0: entered promiscuous mode [ 402.854743][T20830] syzkaller0: entered allmulticast mode [ 402.954135][T20843] tipc: Enabled bearer , priority 0 [ 402.961296][T20843] syzkaller0: entered promiscuous mode [ 402.967092][T20843] syzkaller0: entered allmulticast mode [ 402.976445][T20843] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 402.989300][T20843] tipc: Resetting bearer [ 403.001891][T20842] tipc: Resetting bearer [ 403.112869][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.186080][T20842] tipc: Disabling bearer [ 403.203821][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.294604][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.431917][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.471670][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.517382][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.559768][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.596511][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.638836][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.680559][ T8275] hid-generic 89CA:0005:7FFF.0002: unknown main item tag 0x0 [ 403.698836][T20855] syzkaller0: entered promiscuous mode [ 403.714040][T20855] syzkaller0: entered allmulticast mode [ 403.726184][ T8275] hid-generic 89CA:0005:7FFF.0002: hidraw0: HID v0.07 Device [syz1] on syz1 [ 403.896883][T20856] fido_id[20856]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 404.934083][T20871] netlink: 'syz.3.6365': attribute type 3 has an invalid length. [ 404.954226][T20871] netlink: 4496 bytes leftover after parsing attributes in process `syz.3.6365'. [ 405.150007][ T28] audit: type=1400 audit(1779392767.473:850): avc: denied { write } for pid=20868 comm="syz.2.6364" path="socket:[70379]" dev="sockfs" ino=70379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 405.431322][T20883] loop5: detected capacity change from 0 to 256 [ 405.442746][T20883] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.457243][T20881] loop1: detected capacity change from 0 to 4096 [ 405.464413][T20881] EXT4-fs: inline encryption not supported [ 405.496752][T20881] EXT4-fs: test_dummy_encryption option not supported [ 405.612980][T20885] syzkaller0: entered promiscuous mode [ 405.618620][T20885] syzkaller0: entered allmulticast mode [ 405.856437][ T8796] nci: nci_ntf_packet: unknown ntf opcode 0x130 [ 406.389064][T20907] loop1: detected capacity change from 0 to 128 [ 406.418210][T20907] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 406.434223][T20907] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 407.243920][T19937] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.272648][T20923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6383'. [ 407.374848][T20927] hub 8-0:1.0: USB hub found [ 407.379815][T20927] hub 8-0:1.0: 8 ports detected [ 407.397030][T20927] No such timeout policy "syz1" [ 408.185922][T20935] syzkaller0: entered promiscuous mode [ 408.191522][T20935] syzkaller0: entered allmulticast mode [ 408.704124][T20891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.844376][T20953] loop5: detected capacity change from 0 to 512 [ 408.861597][T20953] EXT4-fs: Ignoring removed i_version option [ 408.879282][T20953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.892319][T20953] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.910593][ T28] audit: type=1400 audit(1779392771.273:851): avc: denied { write } for pid=20952 comm="syz.5.6393" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.070354][T13400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.125334][ T28] audit: type=1326 audit(1779392771.483:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20963 comm="syz.3.6397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb16d6bce59 code=0x0 [ 409.205890][T20968] loop5: detected capacity change from 0 to 512 [ 409.212770][T20968] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 409.227553][T20968] EXT4-fs (loop5): 1 truncate cleaned up [ 409.233885][T20968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.668377][ T12] nci: nci_ntf_packet: unknown ntf opcode 0x130 [ 410.048544][T13400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.195295][T20991] syzkaller0: entered promiscuous mode [ 410.200815][T20991] syzkaller0: entered allmulticast mode [ 410.551574][T20995] netlink: 'syz.1.6406': attribute type 3 has an invalid length. [ 410.559877][T20995] netlink: 4496 bytes leftover after parsing attributes in process `syz.1.6406'. [ 411.268546][T16542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.299769][T21006] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.307310][T21006] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.316094][T21006] bridge_slave_0: entered allmulticast mode [ 411.322672][T21006] bridge_slave_0: entered promiscuous mode [ 411.332897][T16542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.344612][T21006] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.351900][T21006] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.359351][T21006] bridge_slave_1: entered allmulticast mode [ 411.366158][T21006] bridge_slave_1: entered promiscuous mode [ 411.385993][T16542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.399298][T21006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.410052][T21006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.432415][T16542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.446952][T21006] team0: Port device team_slave_0 added [ 411.454425][T21006] team0: Port device team_slave_1 added [ 411.470005][T21006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.478050][T21006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.504042][T21006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.515500][T21006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.522569][T21006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.548730][T21006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.588292][T16542] bridge_slave_1: left allmulticast mode [ 411.593969][T16542] bridge_slave_1: left promiscuous mode [ 411.599770][T16542] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.607990][T16542] bridge_slave_0: left allmulticast mode [ 411.613811][T16542] bridge_slave_0: left promiscuous mode [ 411.619733][T16542] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.747225][T16542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.757810][T16542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.767611][T16542] bond0 (unregistering): Released all slaves [ 411.790648][T21006] hsr_slave_0: entered promiscuous mode [ 411.798889][T21006] hsr_slave_1: entered promiscuous mode [ 411.804977][T21006] debugfs: 'hsr0' already exists in 'hsr' [ 411.810800][T21006] Cannot create hsr debugfs directory [ 411.816997][T16542] tipc: Left network mode [ 411.830794][T16542] hsr_slave_0: left promiscuous mode [ 411.836768][T16542] hsr_slave_1: left promiscuous mode [ 411.842750][T16542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.850356][T16542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.858506][T16542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.866410][T16542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.879674][T16542] veth1_macvtap: left promiscuous mode [ 411.886455][T16542] veth0_macvtap: left promiscuous mode [ 411.892205][T16542] veth1_vlan: left promiscuous mode [ 411.897573][T16542] veth0_vlan: left promiscuous mode [ 411.972165][T16542] team0 (unregistering): Port device team_slave_1 removed [ 411.982448][T16542] team0 (unregistering): Port device team_slave_0 removed [ 412.609113][T20972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.622597][T21006] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 412.645210][T21006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.672111][T21006] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 412.698691][T21006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.722505][T21006] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 412.803617][T21006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.823041][T21006] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 412.846243][T21006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.884310][ T28] audit: type=1400 audit(1779392775.243:853): avc: denied { write } for pid=21033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.954037][T21057] tipc: Enabled bearer , priority 0 [ 412.971403][T21057] syzkaller0: entered promiscuous mode [ 412.978231][ T28] audit: type=1400 audit(1779392775.343:854): avc: denied { write } for pid=21058 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.986697][T21057] syzkaller0: entered allmulticast mode [ 413.032771][T21062] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 413.216714][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 413.233606][T21063] tipc: Resetting bearer [ 413.245387][T21006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.256056][T21056] tipc: Resetting bearer [ 413.273603][T21056] tipc: Disabling bearer [ 413.315451][T21006] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.347320][T16544] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.354452][T16544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.530325][T16542] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.537527][T16542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.779601][ T28] audit: type=1400 audit(1779392776.883:855): avc: denied { execute_no_trans } for pid=21106 comm="syz.2.6429" path="/157/file0" dev="tmpfs" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 415.728457][T21006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.747474][ T28] audit: type=1400 audit(1779392778.103:856): avc: denied { write } for pid=21077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.880576][T21134] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 415.880576][T21134] The task syz.1.6435 (21134) triggered the difference, watch for misbehavior. [ 415.993671][ T28] audit: type=1400 audit(1779392778.353:857): avc: denied { write } for pid=21135 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.095863][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 416.283608][T21152] loop5: detected capacity change from 0 to 512 [ 416.348521][ T28] audit: type=1400 audit(1779392778.713:858): avc: denied { write } for pid=21148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.395888][T21152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.417124][T21152] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.437435][ T28] audit: type=1400 audit(1779392778.803:859): avc: denied { write } for pid=21150 comm="syz.5.6438" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.453604][T21006] veth0_vlan: entered promiscuous mode [ 416.471894][T21152] EXT4-fs (loop5): shut down requested (2) [ 416.485410][ T28] audit: type=1400 audit(1779392778.843:860): avc: denied { write } for pid=21168 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.536577][T13400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.545980][T21006] veth1_vlan: entered promiscuous mode [ 416.562998][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 416.620956][T21006] veth0_macvtap: entered promiscuous mode [ 416.631685][T21006] veth1_macvtap: entered promiscuous mode [ 416.656101][T21006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.691428][T21006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.708438][T21185] loop5: detected capacity change from 0 to 256 [ 416.743625][T21185] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.752039][T16546] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.765046][T16546] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.774519][T21188] loop2: detected capacity change from 0 to 1024 [ 416.784271][T16546] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.793545][T21185] Invalid ELF header magic: != ELF [ 416.797777][T21188] EXT4-fs: Invalid want_extra_isize 3 [ 416.804468][T16546] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.967961][ T28] audit: type=1400 audit(1779392779.323:861): avc: denied { mount } for pid=21006 comm="syz-executor" name="/" dev="gadgetfs" ino=4745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 417.006773][T21198] loop2: detected capacity change from 0 to 512 [ 417.054125][T21198] EXT4-fs (loop2): 1 orphan inode deleted [ 417.067601][T21198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.080818][T21198] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.648842][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.737442][T21212] loop6: detected capacity change from 0 to 512 [ 417.746757][ T28] audit: type=1400 audit(1779392780.103:862): avc: denied { write } for pid=21182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.850991][T21212] EXT4-fs (loop6): 1 truncate cleaned up [ 417.889640][T21212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.919034][ T28] audit: type=1400 audit(1779392780.283:863): avc: denied { write } for pid=21222 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.110733][ T28] audit: type=1400 audit(1779392780.443:864): avc: denied { unmount } for pid=19498 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 418.146971][T21231] loop3: detected capacity change from 0 to 256 [ 418.559649][T21232] netlink: 'syz.2.6446': attribute type 1 has an invalid length. [ 418.575987][T21235] loop5: detected capacity change from 0 to 512 [ 418.584467][T21231] vfat: Unknown parameter 'shortnamete' [ 418.654661][T21232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.666473][T21236] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6409: bg 0: block 465: padding at end of block bitmap is not set [ 418.681294][T21235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 418.702029][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 418.712856][T21235] EXT4-fs (loop5): 1 truncate cleaned up [ 418.732778][T21235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.807719][T21006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.230316][T21255] loop2: detected capacity change from 0 to 1024 [ 419.281553][T21255] EXT4-fs: Invalid want_extra_isize 3 [ 419.757637][T21267] loop6: detected capacity change from 0 to 512 [ 419.803086][T21267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 419.820736][T13400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.848044][T21272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.890747][T21272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.903216][T21274] loop2: detected capacity change from 0 to 512 [ 419.992340][T21274] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.6464: corrupted inode contents [ 420.035578][T21274] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 420.039592][T21267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.048923][T21274] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 420.048947][T21274] loop2: lost filesystem error report for type 5 error -117 [ 420.049296][T21274] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.6464: corrupted inode contents [ 420.061444][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 420.061465][ C0] EXT4-fs (loop2): initial error at time 1779392782: ext4_do_update_inode:5690: inode 15 [ 420.061501][ C0] EXT4-fs (loop2): last error at time 1779392782: ext4_orphan_del:303 [ 420.093807][T21267] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.096000][T21274] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 420.124509][T21274] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.6464: mark_inode_dirty error [ 420.143103][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 420.143152][ T28] audit: type=1400 audit(1779392782.503:872): avc: denied { write } for pid=21266 comm="syz.6.6460" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.154684][T21274] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 420.182275][T21283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6465'. [ 420.216988][T21274] EXT4-fs (loop2): 1 orphan inode deleted [ 420.228475][T21274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.229752][T21006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.271457][T21290] 9p: Bad value for 'rfdno' [ 420.280068][ T28] audit: type=1400 audit(1779392782.643:873): avc: denied { write } for pid=21273 comm="syz.2.6464" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.396586][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.448441][ T28] audit: type=1400 audit(1779392782.793:874): avc: denied { sqpoll } for pid=21295 comm="syz.6.6467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 421.031416][T21313] capability: warning: `syz.2.6476' uses deprecated v2 capabilities in a way that may be insecure [ 421.407440][T21330] loop6: detected capacity change from 0 to 512 [ 421.438924][T21330] EXT4-fs: Ignoring removed i_version option [ 421.463846][T21330] EXT4-fs: Ignoring removed nobh option [ 421.525497][T21330] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 421.572088][T21330] EXT4-fs (loop6): 1 truncate cleaned up [ 421.595228][T21330] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.643976][T21006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.825984][T21338] syzkaller0: entered promiscuous mode [ 421.844606][T21338] syzkaller0: entered allmulticast mode [ 422.210516][T21353] syzkaller0: entered promiscuous mode [ 422.234706][T21353] syzkaller0: entered allmulticast mode [ 422.282371][T21356] netlink: 'syz.1.6491': attribute type 1 has an invalid length. [ 422.320646][T21356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.344314][T21356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6491'. [ 422.460719][T21364] loop3: detected capacity change from 0 to 128 [ 422.516153][ T28] audit: type=1400 audit(1779392784.873:875): avc: denied { name_bind } for pid=21365 comm="syz.1.6495" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 423.244012][T21377] tipc: Enabling of bearer rejected, failed to enable media [ 423.278668][T21383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6502'. [ 423.297090][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.297090][ T3488] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 423.346975][T21387] netlink: 'syz.2.6503': attribute type 1 has an invalid length. [ 423.363591][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.363591][ T3488] loop3: rw=1, sector=161, nr_sectors = 8 limit=128 [ 423.392935][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.392935][ T3488] loop3: rw=1, sector=177, nr_sectors = 8 limit=128 [ 423.420349][T21377] syzkaller0: entered promiscuous mode [ 423.424178][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.424178][ T3488] loop3: rw=1, sector=193, nr_sectors = 8 limit=128 [ 423.427794][T21377] syzkaller0: entered allmulticast mode [ 423.443715][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.443715][ T3488] loop3: rw=1, sector=209, nr_sectors = 8 limit=128 [ 423.458799][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.458799][ T3488] loop3: rw=1, sector=225, nr_sectors = 8 limit=128 [ 423.473159][T21391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6503'. [ 423.486338][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.486338][ T3488] loop3: rw=1, sector=241, nr_sectors = 8 limit=128 [ 423.500322][T21387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.518622][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.518622][ T3488] loop3: rw=1, sector=257, nr_sectors = 8 limit=128 [ 423.532322][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.532322][ T3488] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 423.550881][ T3488] kworker/u8:8: attempt to access beyond end of device [ 423.550881][ T3488] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 423.782522][T21412] loop3: detected capacity change from 0 to 1024 [ 423.802783][T21415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6515'. [ 423.812112][T21412] EXT4-fs: Ignoring removed bh option [ 423.854612][T21412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 423.991630][T21421] tipc: Enabling of bearer rejected, failed to enable media [ 424.018029][ T28] audit: type=1326 audit(1779392786.383:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21422 comm="syz.2.6518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f752acace59 code=0x0 [ 424.121540][T21421] syzkaller0: entered promiscuous mode [ 424.144704][T21421] syzkaller0: entered allmulticast mode [ 424.484584][T21433] netlink: 'syz.6.6519': attribute type 1 has an invalid length. [ 424.514132][T21433] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6519'. [ 424.641054][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 424.651699][ T28] audit: type=1400 audit(1779392787.003:877): avc: denied { watch } for pid=21436 comm="syz.1.6521" path="/102/file0" dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 424.693153][T21439] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6522'. [ 424.731244][T21439] syzkaller0: entered promiscuous mode [ 424.734089][ T28] audit: type=1326 audit(1779392787.093:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21440 comm="syz.1.6524" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb954a9ce59 code=0x0 [ 424.737438][T21439] syzkaller0: entered allmulticast mode [ 424.788236][T21439] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6522'. [ 424.801568][T21439] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6522'. [ 424.923350][T21453] loop3: detected capacity change from 0 to 1024 [ 424.941608][T21453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 425.033766][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 425.432499][T21464] netlink: 'syz.3.6530': attribute type 1 has an invalid length. [ 425.456557][T21464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 425.737797][T21482] loop3: detected capacity change from 0 to 512 [ 426.005780][T21482] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 426.482340][T21488] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6538'. [ 426.583136][T21488] syzkaller0: entered promiscuous mode [ 426.624076][T21488] syzkaller0: entered allmulticast mode [ 426.643905][T21489] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6538'. [ 426.643928][T21489] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6538'. [ 426.703438][T21495] tipc: Enabling of bearer rejected, failed to enable media [ 426.949550][T21527] loop3: detected capacity change from 0 to 512 [ 426.958096][T21527] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 427.045800][T21527] EXT4-fs (loop3): orphan cleanup on readonly fs [ 427.053677][T21527] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.6549: Allocating blocks 41-42 which overlap fs metadata [ 427.067485][T21527] loop3: lost filesystem error report for type 5 error -117 [ 427.069964][T21527] Quota error (device loop3): write_blk: dquota write failed [ 427.077325][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 427.077347][ C1] EXT4-fs (loop3): initial error at time 1779392789: ext4_mb_mark_diskspace_used:4222 [ 427.077369][ C1] EXT4-fs (loop3): last error at time 1779392789: ext4_mb_mark_diskspace_used:4222 [ 427.110421][T21527] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 427.119658][T21527] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.6549: Allocating blocks 41-42 which overlap fs metadata [ 427.133484][T21527] loop3: lost filesystem error report for type 5 error -117 [ 427.150997][T21527] Quota error (device loop3): write_blk: dquota write failed [ 427.165846][T21527] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 427.175946][T21527] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.6549: Failed to acquire dquot type 1 [ 427.187280][T21527] loop3: lost filesystem error report for type 5 error -117 [ 427.193000][T21527] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 427.215161][T21527] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.6549: corrupted inode contents [ 427.227451][T21527] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 427.232590][T21527] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.6549: mark_inode_dirty error [ 427.253337][T21527] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 427.270911][T21527] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.6549: corrupted inode contents [ 427.292150][T21527] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 427.293418][T21527] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.6549: mark_inode_dirty error [ 427.313893][T21527] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 427.316050][T21527] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.6549: corrupted inode contents [ 427.337107][T21527] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 427.341769][T21527] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 427.359593][T21527] loop3: lost filesystem error report for type 5 error -117 [ 427.360869][T21527] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.6549: corrupted inode contents [ 427.380352][T21527] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 427.395273][T21527] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.6549: mark_inode_dirty error [ 427.415664][T21527] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 427.424886][T21527] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 427.442984][T21527] loop3: lost filesystem error report for type 5 error -117 [ 427.461635][T21527] EXT4-fs (loop3): 1 truncate cleaned up [ 427.835818][T21527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.939737][T21538] tipc: Enabling of bearer rejected, failed to enable media [ 427.952367][T21538] syzkaller0: entered promiscuous mode [ 427.958832][T21538] syzkaller0: entered allmulticast mode [ 428.009646][ T28] audit: type=1400 audit(1779392790.373:879): avc: denied { create } for pid=21540 comm="syz.6.6557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 428.049046][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.257058][T21554] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6560'. [ 428.268403][T21554] netlink: 'syz.2.6560': attribute type 3 has an invalid length. [ 428.276749][T21554] netlink: 4496 bytes leftover after parsing attributes in process `syz.2.6560'. [ 428.681818][T21562] loop2: detected capacity change from 0 to 512 [ 428.708551][T21562] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 428.718966][T21562] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 428.729611][T21562] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6564: Failed to acquire dquot type 1 [ 428.756821][T21562] loop2: lost filesystem error report for type 5 error -117 [ 428.757061][T21562] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 428.774488][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 428.774514][ C0] EXT4-fs (loop2): last error at time 1779392791: ext4_acquire_dquot:7034 [ 428.789750][T21562] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 428.799723][T21562] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6564: Failed to acquire dquot type 1 [ 428.812806][T21562] loop2: lost filesystem error report for type 5 error -117 [ 428.813573][T21562] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6564: bg 0: block 248: padding at end of block bitmap is not set [ 428.841768][T21562] loop2: lost filesystem error report for type 5 error -117 [ 428.859259][T21562] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 428.904960][T21562] loop2: lost filesystem error report for type 5 error -117 [ 428.905273][T21562] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 428.939032][T21562] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6564: Failed to acquire dquot type 1 [ 428.950536][T21562] loop2: lost filesystem error report for type 5 error -117 [ 428.951053][T21562] EXT4-fs (loop2): 1 orphan inode deleted [ 428.967145][T21562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.980010][T21562] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.052907][T21577] syzkaller0: entered promiscuous mode [ 429.058567][T21577] syzkaller0: entered allmulticast mode [ 429.201330][T21589] loop6: detected capacity change from 0 to 8192 [ 429.238418][T21590] syz.2.6564 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 429.253474][T21589] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 429.599692][T21614] syzkaller0: entered promiscuous mode [ 429.610763][T21614] syzkaller0: entered allmulticast mode [ 429.643999][T21622] loop6: detected capacity change from 0 to 512 [ 429.660416][T21622] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 429.679197][T21624] tipc: Enabling of bearer rejected, failed to enable media [ 429.698273][T21622] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 429.726097][T21622] EXT4-fs (loop6): orphan cleanup on readonly fs [ 429.737213][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.748930][T21622] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.6581: Allocating blocks 41-42 which overlap fs metadata [ 429.777077][T21622] EXT4-fs (loop6): Remounting filesystem read-only [ 429.783754][T21622] EXT4-fs (loop6): 1 truncate cleaned up [ 429.789800][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 429.789821][ C1] EXT4-fs (loop6): initial error at time 1779392792: ext4_mb_mark_diskspace_used:4222 [ 429.789866][ C1] EXT4-fs (loop6): last error at time 1779392792: ext4_mb_mark_diskspace_used:4222 [ 429.815652][T21622] EXT4-fs (loop6): pa ffff8881079648c0: logic 1, phys. 41, len 23 [ 429.824090][T21622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.880337][T21006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.888076][T21640] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6586'. [ 430.033391][T21638] syzkaller0: entered promiscuous mode [ 430.039178][T21638] syzkaller0: entered allmulticast mode [ 430.068794][T21660] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6592'. [ 430.099329][T21663] loop3: detected capacity change from 0 to 1024 [ 430.106274][T21663] EXT4-fs: Ignoring removed bh option [ 430.116701][T21660] syzkaller0: entered promiscuous mode [ 430.124623][T21660] syzkaller0: entered allmulticast mode [ 430.131034][T21663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 430.143294][T21663] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.157239][T21663] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 3) [ 430.171697][T21663] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 430.180850][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6592'. [ 430.184081][T21663] EXT4-fs (loop3): This should not happen!! Data will be lost [ 430.184081][T21663] [ 430.194190][T21660] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6592'. [ 430.213426][T21663] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.227860][T21663] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.243674][T21663] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.258119][T21663] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.273867][T21662] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.289075][T21663] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.303370][T21662] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.318350][T21663] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.333093][T21662] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #15: block 3: comm syz.3.6593: lblock 3 mapped to illegal pblock 3 (length 1) [ 430.366079][T19498] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 430.382662][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 430.386039][T21671] tipc: Enabled bearer , priority 0 [ 430.400812][T21671] tipc: Resetting bearer [ 430.410028][T21670] tipc: Disabling bearer [ 430.471882][T21676] syzkaller0: entered promiscuous mode [ 430.478986][T21676] syzkaller0: entered allmulticast mode [ 430.550856][T21680] loop2: detected capacity change from 0 to 1024 [ 430.569034][T21680] EXT4-fs: Invalid want_extra_isize 3 [ 430.578635][T21685] loop3: detected capacity change from 0 to 512 [ 430.618334][T21685] EXT4-fs (loop3): invalid journal inode [ 430.658956][T21685] EXT4-fs (loop3): can't get journal size [ 430.705518][T21685] EXT4-fs (loop3): 1 truncate cleaned up [ 430.718122][T21685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.831262][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.053608][T21718] tipc: Enabled bearer , priority 0 [ 431.063121][T21718] tipc: Resetting bearer [ 431.081581][T21717] tipc: Disabling bearer [ 431.154922][T21720] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6606'. [ 431.240819][T21729] syzkaller0: entered promiscuous mode [ 431.262932][T21729] syzkaller0: entered allmulticast mode [ 431.313628][T21732] veth0_to_team: entered promiscuous mode [ 431.514359][T21748] loop6: detected capacity change from 0 to 512 [ 431.522680][T21748] EXT4-fs: Ignoring removed i_version option [ 431.538060][T21748] EXT4-fs: Ignoring removed bh option [ 431.557924][T21748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.631583][T21748] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.663547][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6619'. [ 431.702850][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6619'. [ 431.718927][T21006] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.745042][T21765] netlink: 'syz.1.6619': attribute type 3 has an invalid length. [ 431.758603][T21765] netlink: 4496 bytes leftover after parsing attributes in process `syz.1.6619'. [ 431.783177][T21767] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6622'. [ 431.802830][T21760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6619'. [ 431.821492][T21767] syzkaller0: entered promiscuous mode [ 431.835277][T21767] syzkaller0: entered allmulticast mode [ 431.856555][T21767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6622'. [ 431.889320][T21767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6622'. [ 432.097229][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 432.097331][ T28] audit: type=1400 audit(1779392794.463:897): avc: denied { read } for pid=21797 comm="syz.3.6623" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 432.129121][ T28] audit: type=1400 audit(1779392794.463:898): avc: denied { open } for pid=21797 comm="syz.3.6623" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 432.153933][ T28] audit: type=1400 audit(1779392794.463:899): avc: denied { ioctl } for pid=21797 comm="syz.3.6623" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 432.459688][ T28] audit: type=1400 audit(1779392794.823:900): avc: denied { write } for pid=21811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.505681][ T28] audit: type=1400 audit(1779392794.873:901): avc: denied { write } for pid=21825 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.519030][T21822] syzkaller0: entered promiscuous mode [ 432.541260][T21822] syzkaller0: entered allmulticast mode [ 434.912822][T21779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 435.002752][ T28] audit: type=1400 audit(1779392797.363:902): avc: denied { setopt } for pid=21835 comm="syz.2.6637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 435.024397][T21842] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6639'. [ 435.151759][T21848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6641'. [ 435.331088][T21860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6643'. [ 435.784016][T21875] syzkaller0: entered promiscuous mode [ 435.791696][T21875] syzkaller0: entered allmulticast mode [ 437.797000][T16542] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.828416][T21884] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.835617][T21884] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.842782][T21884] bridge_slave_0: entered allmulticast mode [ 437.849544][T21884] bridge_slave_0: entered promiscuous mode [ 437.858313][T16542] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.870147][T21884] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.878618][T21884] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.886111][T21884] bridge_slave_1: entered allmulticast mode [ 437.892987][T21884] bridge_slave_1: entered promiscuous mode [ 437.906802][T16542] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.925491][T21884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.936385][T21884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.957641][T21884] team0: Port device team_slave_0 added [ 437.964452][T21884] team0: Port device team_slave_1 added [ 437.981486][T16542] team0: Port device netdevsim0 removed [ 437.988348][T16542] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.999973][T21884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.007218][T21884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.033385][T21884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.045216][T21884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.052213][T21884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.078403][T21884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.106785][T21884] hsr_slave_0: entered promiscuous mode [ 438.112968][T21884] hsr_slave_1: entered promiscuous mode [ 438.119053][T21884] debugfs: 'hsr0' already exists in 'hsr' [ 438.124837][T21884] Cannot create hsr debugfs directory [ 438.170205][T16542] bridge_slave_1: left promiscuous mode [ 438.176080][T16542] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.184025][T16542] bridge_slave_0: left allmulticast mode [ 438.189959][T16542] bridge_slave_0: left promiscuous mode [ 438.195848][T16542] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.235485][T16542] bond4 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 438.244371][T16542] bond4 (unregistering): (slave ip6gretap0): Releasing backup interface [ 438.273974][T16542] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 438.377075][T16542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.387128][T16542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.397272][T16542] bond0 (unregistering): Released all slaves [ 438.405189][T16542] bond1 (unregistering): Released all slaves [ 438.414588][T16542] bond2 (unregistering): Released all slaves [ 438.424223][T16542] bond3 (unregistering): Released all slaves [ 438.433469][T16542] bond4 (unregistering): Released all slaves [ 438.443298][T16542] bond5 (unregistering): Released all slaves [ 438.452794][T16542] bond6 (unregistering): Released all slaves [ 438.462836][T16542] bond7 (unregistering): Released all slaves [ 438.472328][T16542] bond8 (unregistering): Released all slaves [ 438.513700][T16542] tipc: Left network mode [ 438.524487][T16542] hsr_slave_0: left promiscuous mode [ 438.530844][T16542] hsr_slave_1: left promiscuous mode [ 438.536772][T16542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.544206][T16542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.552048][T16542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.559580][T16542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.570810][T16542] veth1_macvtap: left promiscuous mode [ 438.576427][T16542] veth0_macvtap: left promiscuous mode [ 438.582029][T16542] veth1_vlan: left promiscuous mode [ 438.587536][T16542] veth0_vlan: left promiscuous mode [ 438.602845][T21867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.744722][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.187749][T21909] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6655'. [ 439.208702][T21906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6654'. [ 439.935293][T16542] team0 (unregistering): Port device team_slave_1 removed [ 439.965563][T16542] team0 (unregistering): Port device team_slave_0 removed [ 440.042354][T16542] team0 (unregistering): Port device dummy0 removed [ 440.152799][T21884] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.203445][T21884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 440.249542][T21884] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.275892][T21884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.333642][T21884] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.357147][T21884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.373092][T21884] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.394599][ T28] audit: type=1400 audit(1779392802.753:903): avc: denied { write } for pid=21928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.395519][T21884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.550018][ T28] audit: type=1400 audit(1779392802.883:904): avc: denied { write } for pid=21958 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.573073][T21943] syzkaller0: entered promiscuous mode [ 440.592909][T21943] syzkaller0: entered allmulticast mode [ 440.616235][T16542] IPVS: stop unused estimator thread 0... [ 440.629477][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 440.696240][T16542] team0: left allmulticast mode [ 440.701256][T16542] team_slave_0: left allmulticast mode [ 440.707300][T16542] team_slave_1: left allmulticast mode [ 440.713029][T16542] team0: left promiscuous mode [ 440.717919][T16542] team_slave_0: left promiscuous mode [ 440.723522][T16542] team_slave_1: left promiscuous mode [ 440.729729][T16542] bridge0: port 3(team0) entered disabled state [ 440.736796][T16542] bridge_slave_1: left promiscuous mode [ 440.742446][T16542] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.927954][T16542] team0: Port device bridge2 removed [ 440.977561][T16542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.987934][T16542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.997958][T16542] bond0 (unregistering): Released all slaves [ 441.056181][T16542] tipc: Left network mode [ 441.063826][T16542] hsr_slave_0: left promiscuous mode [ 441.071161][T16542] hsr_slave_1: left promiscuous mode [ 441.076942][T16542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.084887][T16542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.092521][T16542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.100391][T16542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.112451][T16542] veth1_macvtap: left promiscuous mode [ 441.118368][T16542] veth1_vlan: left promiscuous mode [ 441.184963][T16542] team0 (unregistering): Port device team_slave_1 removed [ 441.196374][T16542] team0 (unregistering): Port device team_slave_0 removed [ 443.140202][T21930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.261587][T21992] syzkaller0: entered promiscuous mode [ 443.279225][T21992] syzkaller0: entered allmulticast mode [ 443.356778][T21884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.417928][ T28] audit: type=1400 audit(1779392805.753:905): avc: denied { write } for pid=21990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.539675][T21884] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.954687][ T28] audit: type=1400 audit(1779392806.303:906): avc: denied { mount } for pid=22011 comm="syz.2.6679" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 444.028648][ T28] audit: type=1400 audit(1779392806.353:907): avc: denied { write } for pid=22016 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.156516][ T28] audit: type=1400 audit(1779392806.363:908): avc: denied { create } for pid=22011 comm="syz.2.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 444.289546][T21884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.307690][T21884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.436944][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.444160][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.466984][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.474114][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.520613][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 444.533295][T22041] syzkaller0: entered promiscuous mode [ 444.544698][T22041] syzkaller0: entered allmulticast mode [ 444.601431][T21884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.652768][T22060] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6685'. [ 444.682557][T22060] syzkaller0: entered promiscuous mode [ 444.700865][T22060] syzkaller0: entered allmulticast mode [ 444.722653][T22060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6685'. [ 444.754969][T22060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6685'. [ 444.771997][T22070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6686'. [ 444.920507][ T28] audit: type=1400 audit(1779392807.283:909): avc: denied { write } for pid=22063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.174026][T22092] loop6: detected capacity change from 0 to 2048 [ 445.458823][T22094] loop3: detected capacity change from 0 to 164 [ 445.542373][T22094] Symlink component flag not implemented [ 445.555008][T22094] Symlink component flag not implemented (7) [ 445.572989][ T28] audit: type=1400 audit(1779392807.933:910): avc: denied { write } for pid=22096 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.659198][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 445.668671][T21884] veth0_vlan: entered promiscuous mode [ 445.695714][T21884] veth1_vlan: entered promiscuous mode [ 445.714593][T21884] veth0_macvtap: entered promiscuous mode [ 445.722528][T21884] veth1_macvtap: entered promiscuous mode [ 445.735516][T21884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.744300][T21884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.765857][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.808236][T22106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.834381][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.845637][T22106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.856446][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.882595][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.985306][T22126] tipc: Enabled bearer , priority 0 [ 445.992538][T22126] syzkaller0: entered promiscuous mode [ 446.007047][T22126] syzkaller0: entered allmulticast mode [ 446.028844][ T28] audit: type=1400 audit(1779392808.393:911): avc: denied { write } for pid=22109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.051333][T22126] tipc: Resetting bearer [ 446.076221][T22125] tipc: Resetting bearer [ 446.094716][T22125] tipc: Disabling bearer [ 446.098446][ T28] audit: type=1400 audit(1779392808.463:912): avc: denied { write } for pid=22134 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.129522][T22131] syzkaller0: entered promiscuous mode [ 446.135242][T22131] syzkaller0: entered allmulticast mode [ 446.153080][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 446.296994][T22151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6703'. [ 446.315954][T22149] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6701'. [ 446.449590][T22155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.514092][T22155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.552650][T22155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.609973][T22155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.653457][T22167] tipc: Enabling of bearer rejected, failed to enable media [ 446.943401][ T310] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.078249][ T310] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.134062][T22193] tipc: Enabled bearer , priority 0 [ 447.162636][ T310] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.193896][T22193] syzkaller0: entered promiscuous mode [ 447.200928][T22193] syzkaller0: entered allmulticast mode [ 447.210039][T22193] tipc: Resetting bearer [ 447.220070][T22192] tipc: Resetting bearer [ 447.243887][T22192] tipc: Disabling bearer [ 447.271002][ T310] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.376221][T22212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.402540][T22212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.437037][ T310] bridge_slave_1: left allmulticast mode [ 447.442778][ T310] bridge_slave_1: left promiscuous mode [ 447.448854][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.457117][ T310] bridge_slave_0: left allmulticast mode [ 447.462836][ T310] bridge_slave_0: left promiscuous mode [ 447.472635][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.587375][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.598525][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.608758][ T310] bond0 (unregistering): Released all slaves [ 447.679109][ T310] hsr_slave_0: left promiscuous mode [ 447.691656][ T310] hsr_slave_1: left promiscuous mode [ 447.700762][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.711698][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.720195][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.730014][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.753581][ T310] veth1_macvtap: left promiscuous mode [ 447.759330][ T310] veth0_macvtap: left promiscuous mode [ 447.764937][ T310] veth1_vlan: left promiscuous mode [ 447.771003][ T310] veth0_vlan: left promiscuous mode [ 447.845172][ T28] audit: type=1400 audit(1779392810.213:913): avc: denied { write } for pid=22216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.903430][ T28] audit: type=1400 audit(1779392810.263:914): avc: denied { write } for pid=22231 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.946037][ T310] team0 (unregistering): Port device team_slave_1 removed [ 447.964240][ T310] team0 (unregistering): Port device team_slave_0 removed [ 448.027239][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 448.105267][T22239] loop2: detected capacity change from 0 to 512 [ 448.187439][T22239] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 448.198327][T22239] EXT4-fs (loop2): orphan cleanup on readonly fs [ 448.205826][T22239] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.6731: Allocating blocks 41-42 which overlap fs metadata [ 448.219613][T22239] fserror_report: 1 callbacks suppressed [ 448.219683][T22239] loop2: lost filesystem error report for type 5 error -117 [ 448.226210][T22239] Quota error (device loop2): write_blk: dquota write failed [ 448.240958][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 448.240982][ C1] EXT4-fs (loop2): initial error at time 1779392810: ext4_mb_mark_diskspace_used:4222 [ 448.241013][ C1] EXT4-fs (loop2): last error at time 1779392810: ext4_mb_mark_diskspace_used:4222 [ 448.266584][T22239] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 448.275859][T22239] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.6731: Allocating blocks 41-42 which overlap fs metadata [ 448.289719][T22239] loop2: lost filesystem error report for type 5 error -117 [ 448.292899][T22239] Quota error (device loop2): write_blk: dquota write failed [ 448.307877][T22239] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 448.317947][T22239] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.6731: Failed to acquire dquot type 1 [ 448.329292][T22239] loop2: lost filesystem error report for type 5 error -117 [ 448.332464][T22239] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 448.354362][T22239] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.6731: corrupted inode contents [ 448.366326][T22239] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 448.378185][T22239] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.6731: mark_inode_dirty error [ 448.398867][T22239] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 448.407154][T22239] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.6731: corrupted inode contents [ 448.428358][T22239] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 448.432017][T22239] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.6731: mark_inode_dirty error [ 448.452640][T22239] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 448.455866][T22239] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.6731: corrupted inode contents [ 448.477068][T22239] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 448.477866][T22239] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 448.495774][T22239] loop2: lost filesystem error report for type 5 error -117 [ 448.496416][T22239] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.6731: corrupted inode contents [ 448.515751][T22239] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 448.518359][T22239] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.6731: mark_inode_dirty error [ 448.538618][T22239] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 448.539918][T22239] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 448.558088][T22239] loop2: lost filesystem error report for type 5 error -117 [ 448.560272][T22239] EXT4-fs (loop2): 1 truncate cleaned up [ 448.936850][T22239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.071494][T22197] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.094171][T22197] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.115566][T22197] bridge_slave_0: entered allmulticast mode [ 449.131172][T22197] bridge_slave_0: entered promiscuous mode [ 449.151597][T22197] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.156401][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.159184][T22197] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.174985][T22197] bridge_slave_1: entered allmulticast mode [ 449.181671][T22197] bridge_slave_1: entered promiscuous mode [ 449.211096][T22197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.222686][T22197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.246609][ T28] audit: type=1400 audit(1779392811.603:915): avc: denied { write } for pid=22252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.272265][T22197] team0: Port device team_slave_0 added [ 449.279427][T22197] team0: Port device team_slave_1 added [ 449.352999][T22197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.365889][T22197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.409408][T22197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.445486][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 449.464809][T22197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.487489][T22197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.515951][T22197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.622503][T22197] hsr_slave_0: entered promiscuous mode [ 449.719528][T22197] hsr_slave_1: entered promiscuous mode [ 449.741209][T22197] debugfs: 'hsr0' already exists in 'hsr' [ 449.857966][T22197] Cannot create hsr debugfs directory [ 450.284461][T22306] xt_hashlimit: size too large, truncated to 1048576 [ 450.306741][T22197] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 450.321529][T22197] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.335355][T22197] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 450.356893][T22197] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.375547][T22197] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 450.397937][T22319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.414988][T22197] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.423723][T22319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.437293][T22197] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 450.458803][T22197] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.467536][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 450.546590][T22197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.570991][T22197] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.582818][T16542] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.589953][T16542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.614653][T16542] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.621790][T16542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.692248][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 450.692265][ T28] audit: type=1400 audit(1779392813.053:920): avc: denied { write } for pid=22330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.760227][ T28] audit: type=1400 audit(1779392813.093:921): avc: denied { write } for pid=22344 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.781446][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 450.784294][T22350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.799444][T22350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.981557][T22197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.009731][T22370] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6755'. [ 451.138808][T22370] syzkaller0: entered promiscuous mode [ 451.174114][T22370] syzkaller0: entered allmulticast mode [ 451.249598][T22379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6755'. [ 451.317826][T22379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6755'. [ 451.575101][T22388] xt_hashlimit: size too large, truncated to 1048576 [ 451.884595][T22197] veth0_vlan: entered promiscuous mode [ 451.915861][T22197] veth1_vlan: entered promiscuous mode [ 452.014374][T22197] veth0_macvtap: entered promiscuous mode [ 452.033798][T22197] veth1_macvtap: entered promiscuous mode [ 452.078304][T22402] syzkaller0: entered promiscuous mode [ 452.098327][T22402] syzkaller0: entered allmulticast mode [ 452.124429][T22197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.188131][T22197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.235163][T16542] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.271050][T16542] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.299638][ T28] audit: type=1400 audit(1779392814.663:922): avc: denied { bind } for pid=22406 comm="syz.2.6766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 452.321464][T16542] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.353349][T16542] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.525563][T22420] loop8: detected capacity change from 0 to 1024 [ 452.565114][T22420] EXT4-fs: Invalid want_extra_isize 3 [ 452.595160][ T28] audit: type=1400 audit(1779392814.963:923): avc: denied { read } for pid=22423 comm="syz.3.6761" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 452.641456][ T28] audit: type=1400 audit(1779392814.983:924): avc: denied { open } for pid=22423 comm="syz.3.6761" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 452.680985][ T28] audit: type=1400 audit(1779392814.983:925): avc: denied { ioctl } for pid=22423 comm="syz.3.6761" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 453.041512][T22439] xt_hashlimit: size too large, truncated to 1048576 [ 453.110350][T22447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.119393][T22447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.263907][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6784'. [ 453.440271][T22484] syzkaller0: entered promiscuous mode [ 453.446078][T22484] syzkaller0: entered allmulticast mode [ 453.476228][T22490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.479696][T22488] xt_hashlimit: size too large, truncated to 1048576 [ 453.486698][T22490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.710322][ T28] audit: type=1400 audit(1779392816.073:926): avc: denied { recv } for pid=22502 comm="syz.2.6801" saddr=10.128.0.163 src=30036 daddr=10.128.0.62 dest=34394 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 453.767321][ T28] audit: type=1326 audit(1779392816.133:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22506 comm="syz.3.6803" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb16d6bce59 code=0x0 [ 453.922633][ T28] audit: type=1400 audit(1779392816.283:928): avc: denied { create } for pid=22514 comm="syz.2.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 453.942373][ T28] audit: type=1400 audit(1779392816.293:929): avc: denied { write } for pid=22514 comm="syz.2.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 454.638116][T22548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6820'. [ 454.647133][T22548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6820'. [ 454.807848][T22560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.816711][T22560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.937862][T22570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.947277][T22570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.990723][T22575] sg_write: data in/out 262108/160 bytes for SCSI command 0x0-- guessing data in; [ 454.990723][T22575] program syz.2.6833 not setting count and/or reply_len properly [ 455.033984][T22579] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6835'. [ 455.044397][T22579] syzkaller0: entered promiscuous mode [ 455.050159][T22579] syzkaller0: entered allmulticast mode [ 455.059707][T22579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6835'. [ 455.069135][T22579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6835'. [ 455.347180][T22605] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6847'. [ 455.357469][T22605] syzkaller0: entered promiscuous mode [ 455.363018][T22605] syzkaller0: entered allmulticast mode [ 455.488881][T22618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.497580][T22618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.613634][T22628] xt_hashlimit: size too large, truncated to 1048576 [ 455.650865][T22634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.667691][T22634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.705318][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 455.705336][ T28] audit: type=1400 audit(1779392818.073:933): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 455.744921][ T28] audit: type=1400 audit(1779392818.073:934): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 455.928279][T22648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.937019][T22648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.503974][T22662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.523974][T22662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.580219][T22667] xt_hashlimit: size too large, truncated to 1048576 [ 456.730624][ T28] audit: type=1400 audit(1779392819.093:935): avc: denied { mount } for pid=22680 comm="syz.8.6879" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 456.779885][ T28] audit: type=1400 audit(1779392819.123:936): avc: denied { search } for pid=22680 comm="syz.8.6879" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 456.804104][ T28] audit: type=1400 audit(1779392819.123:937): avc: denied { search } for pid=22680 comm="syz.8.6879" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 456.843587][ T28] audit: type=1400 audit(1779392819.123:938): avc: denied { search } for pid=22680 comm="syz.8.6879" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 456.865695][ T28] audit: type=1400 audit(1779392819.123:939): avc: denied { write search } for pid=22680 comm="syz.8.6879" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 456.964154][ T28] audit: type=1400 audit(1779392819.323:940): avc: denied { create } for pid=22688 comm="syz.7.6883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 456.978033][T22693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.000851][T22693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.009874][ T28] audit: type=1400 audit(1779392819.343:941): avc: denied { bind } for pid=22688 comm="syz.7.6883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 457.109371][T22703] loop2: detected capacity change from 0 to 1024 [ 457.118475][T22703] EXT4-fs: Invalid want_extra_isize 3 [ 457.145098][T22705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.155752][T22705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.347036][T22712] xt_hashlimit: size too large, truncated to 1048576 [ 457.499559][T22717] __nla_validate_parse: 2 callbacks suppressed [ 457.499582][T22717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6894'. [ 457.601885][T22727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.631418][T22727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.781671][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6899'. [ 457.793943][ T28] audit: type=1400 audit(1779392820.143:942): avc: denied { write } for pid=22730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.834505][T22743] tipc: Enabled bearer , priority 0 [ 457.849875][T22743] tipc: Resetting bearer [ 457.887202][T22742] tipc: Disabling bearer [ 458.188533][T22789] usb usb7: usbfs: process 22789 (syz.7.6912) did not claim interface 0 before use [ 458.234492][T22793] tipc: Enabled bearer , priority 0 [ 458.242645][T22795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.253746][T22793] tipc: Resetting bearer [ 458.258598][T22795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.272371][T22792] tipc: Disabling bearer [ 458.377966][T22804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.392136][T22804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.402947][T22804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.411684][T22804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.438175][T22807] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6920'. [ 458.448702][T22807] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6920'. [ 459.165987][T22826] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6926'. [ 460.788962][T22942] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6967'. [ 460.801075][T22942] syzkaller0: entered promiscuous mode [ 460.815363][T22942] syzkaller0: entered allmulticast mode [ 460.834766][T22946] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 460.841420][T22946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 460.851628][T22942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6967'. [ 460.877527][T22942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6967'. [ 460.882820][T22946] vhci_hcd vhci_hcd.0: Device attached [ 460.899880][T22947] vhci_hcd: connection closed [ 460.902915][ T406] vhci_hcd vhci_hcd.8: stop threads [ 460.913320][ T406] vhci_hcd vhci_hcd.8: release socket [ 460.918958][ T406] vhci_hcd vhci_hcd.8: disconnect device [ 462.060624][T22978] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6980'. [ 462.071736][T22978] syzkaller0: entered promiscuous mode [ 462.077368][T22978] syzkaller0: entered allmulticast mode [ 462.086136][T22978] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6980'. [ 462.128710][T22982] tipc: Enabled bearer , priority 0 [ 462.135970][T22982] syzkaller0: entered promiscuous mode [ 462.141513][T22982] syzkaller0: entered allmulticast mode [ 462.150404][T22981] syzkaller0: entered promiscuous mode [ 462.163859][T22981] syzkaller0: entered allmulticast mode [ 462.189622][T22982] tipc: Resetting bearer [ 462.212015][T22980] tipc: Resetting bearer [ 462.224862][T22980] tipc: Disabling bearer [ 462.274326][T22984] netlink: 'syz.7.6983': attribute type 3 has an invalid length. [ 462.387818][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 462.387861][ T28] audit: type=1400 audit(1779392824.753:959): avc: denied { write } for pid=22988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.960897][T23018] loop7: detected capacity change from 0 to 164 [ 463.437901][ T28] audit: type=1400 audit(1779392825.773:960): avc: denied { write } for pid=23007 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 463.744062][T23018] Symlink component flag not implemented [ 463.823799][T23018] Symlink component flag not implemented (7) [ 464.354813][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.378121][ T28] audit: type=1400 audit(1779392826.733:961): avc: denied { write } for pid=23034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.234761][ T28] audit: type=1400 audit(1779392827.583:962): avc: denied { write } for pid=23076 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.790867][ T28] audit: type=1326 audit(1779392828.153:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23092 comm="syz.7.7016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd602ace59 code=0x0 [ 465.907454][T23098] syzkaller0: entered promiscuous mode [ 465.924530][T23098] syzkaller0: entered allmulticast mode [ 466.058184][ T28] audit: type=1400 audit(1779392828.423:964): avc: denied { write } for pid=23090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.131266][ T28] audit: type=1400 audit(1779392828.493:965): avc: denied { write } for pid=23123 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 467.790889][ T28] audit: type=1400 audit(1779392830.153:966): avc: denied { read append } for pid=23151 comm="syz.2.7030" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 467.815199][ T28] audit: type=1400 audit(1779392830.153:967): avc: denied { open } for pid=23151 comm="syz.2.7030" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 467.944805][T23160] syzkaller0: entered promiscuous mode [ 467.953185][T23160] syzkaller0: entered allmulticast mode [ 467.976351][T23165] tipc: Enabled bearer , priority 0 [ 467.979064][ T28] audit: type=1400 audit(1779392830.343:968): avc: denied { write } for pid=23134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.015135][T23165] syzkaller0: entered promiscuous mode [ 468.024774][T23165] syzkaller0: entered allmulticast mode [ 468.087738][T23165] tipc: Resetting bearer [ 468.107267][T23164] tipc: Resetting bearer [ 468.118848][ T28] audit: type=1400 audit(1779392830.483:969): avc: denied { write } for pid=23168 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.153266][T23173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.172918][T23164] tipc: Disabling bearer [ 468.193492][T23173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.219334][ T28] audit: type=1326 audit(1779392830.583:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23176 comm="syz.7.7038" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd602ace59 code=0x0 [ 468.415985][T23188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.426031][T23188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.572320][T23194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.581800][T23194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.163997][T23225] __nla_validate_parse: 2 callbacks suppressed [ 469.164015][T23225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7057'. [ 469.281995][T23238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.297582][T23238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.332638][ T28] audit: type=1326 audit(1779392831.693:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23241 comm="syz.1.7066" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb954a9ce59 code=0x0 [ 469.386101][ T28] audit: type=1326 audit(1779392831.753:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23247 comm="syz.3.7069" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb16d6bce59 code=0x0 [ 469.418877][T23253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.428289][T23253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.530554][T23238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.540858][T23238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.572295][T23261] tipc: Started in network mode [ 469.577348][T23261] tipc: Node identity 0ae749cfda98, cluster identity 4711 [ 469.584765][T23261] tipc: Enabled bearer , priority 0 [ 469.592030][T23261] syzkaller0: entered promiscuous mode [ 469.597658][T23261] syzkaller0: entered allmulticast mode [ 469.607527][T23261] tipc: Resetting bearer [ 469.614167][T23260] tipc: Resetting bearer [ 469.621417][T23260] tipc: Disabling bearer [ 469.814711][T23275] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7081'. [ 470.666543][T23297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.686654][T23297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.785443][ T28] audit: type=1326 audit(1779392833.153:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23309 comm="syz.7.7095" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd602ace59 code=0x0 [ 470.859039][T23313] netlink: 204 bytes leftover after parsing attributes in process `syz.8.7096'. [ 471.072224][T23330] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7104'. [ 471.185295][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7108'. [ 471.440070][ T28] audit: type=1400 audit(1779392833.803:974): avc: denied { connect } for pid=23368 comm="syz.2.7121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.480659][T23371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7122'. [ 471.485341][ T28] audit: type=1400 audit(1779392833.833:975): avc: denied { ioctl } for pid=23368 comm="syz.2.7121" path="socket:[80109]" dev="sockfs" ino=80109 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.831263][ T7548] IPVS: starting estimator thread 0... [ 472.014683][T23390] IPVS: using max 2304 ests per chain, 115200 per kthread [ 472.045016][T23392] tipc: Enabled bearer , priority 0 [ 472.134877][T23395] syzkaller0: entered promiscuous mode [ 472.178325][T23395] syzkaller0: entered allmulticast mode [ 472.279137][T23407] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7134'. [ 472.319689][T23394] syzkaller0: entered promiscuous mode [ 472.329591][T23394] syzkaller0: entered allmulticast mode [ 472.361030][T23395] tipc: Resetting bearer [ 472.399841][T23391] tipc: Resetting bearer [ 472.407223][T23391] tipc: Disabling bearer [ 472.484936][T23419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.509134][T23419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.765471][T23444] syzkaller0: entered promiscuous mode [ 472.771046][T23444] syzkaller0: entered allmulticast mode [ 472.779425][T23446] loop2: detected capacity change from 0 to 1024 [ 472.790870][T23446] EXT4-fs: Invalid want_extra_isize 3 [ 473.470635][T23469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.490473][T23469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.581809][T23478] syzkaller0: entered promiscuous mode [ 473.590819][T23478] syzkaller0: entered allmulticast mode [ 473.624020][T23484] tipc: Started in network mode [ 473.630805][T23484] tipc: Node identity 3a2583764f21, cluster identity 4711 [ 473.638500][T23484] tipc: Enabled bearer , priority 0 [ 473.720433][T23484] syzkaller0: entered promiscuous mode [ 473.726896][T23484] syzkaller0: entered allmulticast mode [ 473.733338][T23484] tipc: Resetting bearer [ 473.746773][T23486] tipc: Enabled bearer , priority 0 [ 473.761749][T23494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.770551][T23483] tipc: Resetting bearer [ 473.776652][T23494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.801182][T23483] tipc: Disabling bearer [ 473.811006][T23486] syzkaller0: entered promiscuous mode [ 473.817241][T23486] syzkaller0: entered allmulticast mode [ 473.828112][T23490] tipc: Resetting bearer [ 473.835286][T23485] tipc: Resetting bearer [ 473.842433][T23485] tipc: Disabling bearer [ 473.929798][T23498] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.7170'. [ 473.939813][T23498] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.7170'. [ 473.995395][T23502] syzkaller0: entered promiscuous mode [ 474.001382][T23502] syzkaller0: entered allmulticast mode [ 474.130383][T23510] loop2: detected capacity change from 0 to 1024 [ 474.145164][T23510] EXT4-fs: Invalid want_extra_isize 3 [ 474.213442][ T28] audit: type=1400 audit(1779392836.573:976): avc: denied { module_load } for pid=23517 comm="syz.7.7179" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 474.246110][T23516] tipc: Enabled bearer , priority 0 [ 474.292605][T23522] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.7182'. [ 474.321870][T23516] syzkaller0: entered promiscuous mode [ 474.325247][T23522] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.7182'. [ 474.327755][T23516] syzkaller0: entered allmulticast mode [ 474.343382][T23516] tipc: Resetting bearer [ 474.391773][T23515] tipc: Resetting bearer [ 474.438572][T23515] tipc: Disabling bearer [ 474.659297][T23559] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.7197'. [ 474.679013][T23559] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.7197'. [ 475.236635][T23576] syzkaller0: entered promiscuous mode [ 475.245489][ T28] audit: type=1326 audit(1779392837.563:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23577 comm="syz.7.7205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd602ace59 code=0x0 [ 475.276214][T23576] syzkaller0: entered allmulticast mode [ 475.704452][T23602] netlink: 4560 bytes leftover after parsing attributes in process `syz.8.7214'. [ 475.724798][T23602] netlink: 4560 bytes leftover after parsing attributes in process `syz.8.7214'. [ 475.856848][T23613] loop8: detected capacity change from 0 to 512 [ 475.863711][T23613] EXT4-fs: test_dummy_encryption option not supported [ 475.934008][ T28] audit: type=1400 audit(1779392838.293:978): avc: denied { mount } for pid=23616 comm="syz.8.7222" name="/" dev="hugetlbfs" ino=80646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 476.240087][T23640] loop8: detected capacity change from 0 to 512 [ 476.251945][T23640] EXT4-fs: test_dummy_encryption option not supported [ 476.288301][ T28] audit: type=1400 audit(1779392838.653:979): avc: denied { remount } for pid=23639 comm="syz.8.7233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 476.385964][T23651] loop2: detected capacity change from 0 to 512 [ 476.408252][T23651] EXT4-fs: Ignoring removed nobh option [ 476.430562][T23651] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 476.457198][T23651] EXT4-fs (loop2): 1 truncate cleaned up [ 476.463494][T23651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.554399][T23661] loop8: detected capacity change from 0 to 4096 [ 476.561670][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.583767][T23661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.606278][ T28] audit: type=1400 audit(1779392838.973:980): avc: denied { write } for pid=23660 comm="syz.8.7241" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 476.676540][T23669] loop2: detected capacity change from 0 to 256 [ 476.725963][T22197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.743211][T23669] FAT-fs (loop2): IO charset cp850 not found [ 476.860673][T23682] loop2: detected capacity change from 0 to 512 [ 476.883418][T23682] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.7248: missing EA_INODE flag [ 477.029406][T23682] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 477.034647][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 477.050313][ C1] EXT4-fs (loop2): initial error at time 1779392839: ext4_xattr_inode_iget:441: inode 12 [ 477.060190][ C1] EXT4-fs (loop2): last error at time 1779392839: ext4_xattr_inode_iget:441: inode 12 [ 477.091752][T23682] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.7248: error while reading EA inode 12 err=-117 [ 477.249382][T23682] loop2: lost filesystem error report for type 5 error -117 [ 477.252050][T23682] EXT4-fs (loop2): 1 orphan inode deleted [ 477.422040][T23682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.531832][ T28] audit: type=1400 audit(1779392839.893:981): avc: denied { write } for pid=23680 comm="syz.2.7248" name="bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 477.577835][ T28] audit: type=1400 audit(1779392839.923:982): avc: denied { write } for pid=23680 comm="syz.2.7248" name="bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 477.640318][ T28] audit: type=1400 audit(1779392839.923:983): avc: denied { write } for pid=23680 comm="syz.2.7248" name="bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 477.656331][T23700] loop7: detected capacity change from 0 to 512 [ 477.663923][ T28] audit: type=1400 audit(1779392839.923:984): avc: denied { write } for pid=23680 comm="syz.2.7248" name="bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 477.705991][T23700] EXT4-fs: test_dummy_encryption option not supported [ 477.713446][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.813407][ T28] audit: type=1400 audit(1779392839.923:985): avc: denied { remove_name } for pid=23680 comm="syz.2.7248" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 477.942404][T23724] loop7: detected capacity change from 0 to 512 [ 477.955477][T23724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 477.980589][T23724] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.7265: iget: bad i_size value: 38620345925642 [ 477.994966][T23724] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 477.995715][T23724] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7265: couldn't read orphan inode 15 (err -117) [ 478.004916][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 478.004935][ C0] EXT4-fs (loop7): initial error at time 1779392840: ext4_orphan_get:1397: inode 15 [ 478.004972][ C0] EXT4-fs (loop7): last error at time 1779392840: ext4_orphan_get:1397: inode 15 [ 478.175491][T23724] loop7: lost filesystem error report for type 5 error -117 [ 478.181683][T23724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.627666][T21884] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.710503][T23742] loop3: detected capacity change from 0 to 2048 [ 478.772966][T23742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.879054][T23759] binfmt_misc: register: failed to install interpreter file ./file0 [ 479.041455][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.055501][T23764] loop7: detected capacity change from 0 to 1764 [ 479.498212][T23772] loop8: detected capacity change from 0 to 512 [ 479.566231][T23772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 479.603058][T23772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.634025][T23772] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 479.736116][T23772] EXT4-fs (loop8): shut down requested (2) [ 479.780406][T22197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.798383][T16550] __quota_error: 3 callbacks suppressed [ 479.798398][T16550] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 479.820274][T23789] loop3: detected capacity change from 0 to 512 [ 479.837299][T23787] tipc: Enabled bearer , priority 0 [ 479.871762][T23789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.931016][ T28] audit: type=1400 audit(1779392842.293:989): avc: denied { remount } for pid=23788 comm="syz.3.7290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 479.969840][T23789] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 479.984447][T23787] syzkaller0: entered promiscuous mode [ 479.990054][T23787] syzkaller0: entered allmulticast mode [ 479.995813][ T28] audit: type=1326 audit(1779392842.343:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23799 comm="syz.1.7295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb954a9ce59 code=0x0 [ 480.023086][T23787] tipc: Resetting bearer [ 480.029537][T23789] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 480.052752][T23786] tipc: Resetting bearer [ 480.070102][T23786] tipc: Disabling bearer [ 480.079986][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.188031][T23796] syzkaller0: entered promiscuous mode [ 480.197692][T23796] syzkaller0: entered allmulticast mode [ 480.252856][T23813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7299'. [ 480.262722][T23811] loop3: detected capacity change from 0 to 512 [ 480.270263][T23811] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.317877][T23811] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.7298: iget: bad i_size value: 38620345925642 [ 480.333836][T23811] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 480.334631][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 480.350293][ C1] EXT4-fs (loop3): initial error at time 1779392842: ext4_orphan_get:1397: inode 15 [ 480.359759][ C1] EXT4-fs (loop3): last error at time 1779392842: ext4_orphan_get:1397: inode 15 [ 480.370144][T23811] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7298: couldn't read orphan inode 15 (err -117) [ 480.382578][T23811] loop3: lost filesystem error report for type 5 error -117 [ 480.383596][T23811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.474948][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.487929][T23820] loop2: detected capacity change from 0 to 512 [ 480.531251][T23820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.602093][T23824] tipc: Enabled bearer , priority 0 [ 480.609819][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.620724][T23824] syzkaller0: entered promiscuous mode [ 480.633499][T23824] syzkaller0: entered allmulticast mode [ 480.819880][T23824] tipc: Resetting bearer [ 480.964295][ T28] audit: type=1400 audit(1779392843.323:991): avc: denied { open } for pid=23826 comm="syz.7.7305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 481.023689][T23823] tipc: Resetting bearer [ 481.119819][T23823] tipc: Disabling bearer [ 481.127291][ T28] audit: type=1400 audit(1779392843.323:992): avc: denied { kernel } for pid=23826 comm="syz.7.7305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 481.376094][T23848] loop3: detected capacity change from 0 to 512 [ 481.384357][T23848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 481.401105][T23851] loop2: detected capacity change from 0 to 512 [ 481.446464][T23845] loop8: detected capacity change from 0 to 512 [ 481.456830][T23845] EXT4-fs: Ignoring removed nobh option [ 481.469808][T23845] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 481.486162][T23851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.498326][T23848] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.7314: iget: bad i_size value: 38620345925642 [ 481.517943][T23848] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 481.518232][T23848] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.7314: couldn't read orphan inode 15 (err -117) [ 481.527495][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 481.527517][ C0] EXT4-fs (loop3): initial error at time 1779392843: ext4_orphan_get:1397: inode 15 [ 481.527552][ C0] EXT4-fs (loop3): last error at time 1779392843: ext4_orphan_get:1397: inode 15 [ 481.565384][T23848] loop3: lost filesystem error report for type 5 error -117 [ 481.566052][T23845] EXT4-fs (loop8): 1 truncate cleaned up [ 481.589303][T23845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.612359][ T28] audit: type=1400 audit(1779392843.973:993): avc: denied { create } for pid=23844 comm="syz.8.7312" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 481.614306][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.906730][T23848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.919517][ T28] audit: type=1400 audit(1779392844.083:994): avc: denied { write } for pid=23843 comm="syz.1.7313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 482.370117][T19498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.391734][T23859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 482.404309][T23857] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.411613][T23857] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.431514][T23859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.463277][T23857] bridge0: entered allmulticast mode [ 482.468936][T23859] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 482.491553][T23859] EXT4-fs (loop7): shut down requested (2) [ 482.528005][T21884] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.635847][T22197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.179837][T23890] set_capacity_and_notify: 1 callbacks suppressed [ 484.179863][T23890] loop2: detected capacity change from 0 to 512 [ 484.222548][T23890] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 484.243935][T23895] syzkaller0: entered promiscuous mode [ 484.264172][T23890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=804ee02c, mo2=0002] [ 484.276567][T23895] syzkaller0: entered allmulticast mode [ 484.304934][T23890] EXT4-fs (loop2): orphan cleanup on readonly fs [ 484.340653][T23890] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.7327: invalid block [ 484.380198][T23890] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 484.381012][T23890] EXT4-fs (loop2): Remounting filesystem read-only [ 484.390271][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 484.390298][ C1] EXT4-fs (loop2): initial error at time 1779392846: ext4_get_branch:178: inode 11: block 33619980 [ 484.390357][ C1] EXT4-fs (loop2): last error at time 1779392846: ext4_get_branch:178: inode 11: block 33619980 [ 484.576064][T23907] loop8: detected capacity change from 0 to 512 [ 484.609642][T23909] tipc: Enabled bearer , priority 0 [ 484.643879][T23909] syzkaller0: entered promiscuous mode [ 484.654568][T23907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.690981][T23909] syzkaller0: entered allmulticast mode [ 484.723274][T23890] EXT4-fs (loop2): 1 truncate cleaned up [ 484.756538][T23890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 484.771996][T23907] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 484.784268][T23890] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.7327: dx entry: limit 0 != root limit 125 [ 484.796501][T23890] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.7327: Corrupt directory, running e2fsck is recommended [ 484.825565][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 484.852091][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 484.861802][T22197] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.876858][T23909] tipc: Resetting bearer [ 484.899241][T23908] tipc: Resetting bearer [ 484.917124][T23908] tipc: Disabling bearer [ 485.303075][T23939] loop7: detected capacity change from 0 to 512 [ 485.327910][T23939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 485.415606][T23939] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.7346: iget: bad i_size value: 38620345925642 [ 485.430436][T23946] loop2: detected capacity change from 0 to 512 [ 485.449337][T23946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.470477][T23939] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 485.473406][T23939] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7346: couldn't read orphan inode 15 (err -117) [ 485.482718][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 485.482741][ C0] EXT4-fs (loop7): initial error at time 1779392847: ext4_orphan_get:1397: inode 15 [ 485.482774][ C0] EXT4-fs (loop7): last error at time 1779392847: ext4_orphan_get:1397: inode 15 [ 485.814833][T23939] loop7: lost filesystem error report for type 5 error -117 [ 486.021373][T23939] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.178956][T22197] ================================================================== [ 486.187107][T22197] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 486.195087][T22197] [ 486.197619][T22197] read-write to 0xffff88811bcae7d0 of 8 bytes by task 23953 on cpu 0: [ 486.205801][T22197] shmem_add_to_page_cache+0x4b2/0x5b0 [ 486.211321][T22197] shmem_get_folio_gfp+0x4f3/0xd60 [ 486.216550][T22197] shmem_write_begin+0xfc/0x1f0 [ 486.221434][T22197] generic_perform_write+0x183/0x490 [ 486.226841][T22197] shmem_file_write_iter+0xc5/0xf0 [ 486.231989][T22197] __kernel_write_iter+0x319/0x590 [ 486.237154][T22197] dump_user_range+0xa73/0xd00 [ 486.241975][T22197] elf_core_dump+0x21a2/0x2330 [ 486.246875][T22197] coredump_write+0xacc/0xdd0 [ 486.251680][T22197] vfs_coredump+0x26dd/0x31e0 [ 486.256396][T22197] get_signal+0xd5c/0xf20 [ 486.260777][T22197] arch_do_signal_or_restart+0x96/0x480 [ 486.266377][T22197] irqentry_exit+0x145/0x5d0 [ 486.271011][T22197] asm_exc_page_fault+0x26/0x30 [ 486.275900][T22197] [ 486.278262][T22197] read to 0xffff88811bcae7d0 of 8 bytes by task 22197 on cpu 1: [ 486.286008][T22197] shmem_getattr+0x68/0x200 [ 486.290644][T22197] vfs_getattr_nosec+0x146/0x1e0 [ 486.295621][T22197] vfs_getattr+0x48/0x60 [ 486.299897][T22197] vfs_statx_path+0x28/0x140 [ 486.304522][T22197] vfs_statx+0xc4/0x170 [ 486.308733][T22197] vfs_fstatat+0x118/0x170 [ 486.313186][T22197] __se_sys_newfstatat+0x55/0x3e0 [ 486.318254][T22197] __x64_sys_newfstatat+0x55/0x70 [ 486.323319][T22197] x64_sys_call+0x2c64/0x3020 [ 486.328042][T22197] do_syscall_64+0x12c/0x3b0 [ 486.332672][T22197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.338603][T22197] [ 486.340950][T22197] value changed: 0x0000000000003405 -> 0x0000000000003408 [ 486.348081][T22197] [ 486.350434][T22197] Reported by Kernel Concurrency Sanitizer on: [ 486.357067][T22197] CPU: 1 UID: 0 PID: 22197 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 486.368243][T22197] Tainted: [W]=WARN [ 486.372073][T22197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.382183][T22197] ================================================================== [ 486.450090][T23946] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 486.488520][T18865] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.507092][T21884] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.990876][T23957] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7351'. [ 487.016072][T23956] loop8: detected capacity change from 0 to 1024 [ 495.067966][ T36] bridge_slave_1: left promiscuous mode [ 495.073780][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.081841][ T36] ¾x9ÿ: left allmulticast mode [ 495.086716][ T36] ¾x9ÿ: left promiscuous mode [ 495.091581][ T36] bridge0: port 1(1¾x9ÿ) entered disabled state [ 495.126077][ T36] bond2 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 495.135059][ T36] bond2 (unregistering): (slave ip6gretap0): Releasing backup interface [ 495.327494][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.338284][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.347865][ T36] bond0 (unregistering): Released all slaves [ 495.355953][ T36] bond1 (unregistering): Released all slaves [ 495.364895][ T36] bond2 (unregistering): Released all slaves [ 495.416422][ T36] tipc: Left network mode [ 495.425621][ T36] hsr_slave_0: left promiscuous mode [ 495.431335][ T36] hsr_slave_1: left promiscuous mode [ 495.437166][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.444555][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.452575][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.460074][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.470814][ T36] veth1_macvtap: left promiscuous mode [ 495.476404][ T36] veth0_macvtap: left promiscuous mode [ 495.481970][ T36] veth1_vlan: left promiscuous mode [ 495.487296][ T36] veth0_vlan: left promiscuous mode [ 495.559795][ T36] team0 (unregistering): Port device team_slave_1 removed [ 495.569819][ T36] team0 (unregistering): Port device team_slave_0 removed