last executing test programs: 3m30.677024529s ago: executing program 32 (id=98): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2008052, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@errors_remount}, {@bsdgroups}]}, 0x3, 0x4cf, &(0x7f0000000740)="$eJzs3E9sFNUfAPDvbFta/v3oDxEFUYtobCS2UFA4mBiMJh40MeJBj01bCFKooSURgmZJDB4NiXfj0asHr+qFGE8mXvFoYkiI4QKYGNfM7szudpltabvt2vTzSZZ5b/699+bNm33zXpcANqyh9J+kFr4ZETsiotS6w1Btce/OlYn7d65MRLlSOflnUj3sbhrPZKeJrVlkuBRR+ixpbGgye+ny2fHp6akLWXx07txHo7OXLr945tz46anTU+fHjh8/euTwsZfHXlp6oQrSS8t1d++nM/v2vPnB9bcnevP1A9myuRydMhRDRVmpeq7TiXXZ9qZw0tvFjLAk6f2fVldftf3viJ5QebBRVCqVSn/7zeVKq6sPrAHWrSS6nQOgO/Iv+vT9N/8UdQQ2rU73o+tun6i9AKXlvpd9Ip6urszHQfpa3m87aSgi3i//9VX6iVUahwAAaPbDibwn2NL/G6zNjPx98car6fJ/2RzKYET8PyJ2RsQjEbErIh6NiN0R8VhEPN5y/p6IqCyQ/lBLvJ5+fRKqdKtDRS2U9v9eyea2Gv2/eRkY7Mli2yPyDvPUoeyaDEdf/6kz01OHF0jjx9d//aLdtub+X/pJ08/7glk+bvW2DNBNjs+NL7vALW5fjdjb21r+pDciqc8EJBGxJyL2LuG8g03hMy98s68e6Zu/3+Llr6oUzqN1YKqi8nXE87X6L8e8+m+kmCw8Pzk6ENNTh0bTu+BQYRo//3LtnXbpL1r+735vPeSNY9+fzFrWyqX1v6Xp/o98/rZR/sEkIqnP184uPY1rv33e9p1muff/puS9ajh/L/14fG7uwuGITclbD64faxybx9NllGvlHz5Q3P53ZsekV+KJiEhv4icj4qmovSGmed8fEc9ExIEFyv/Ta89+uPzyr660/JOFz7959d+Yr28XSMq1vQs29Zzdf/N+m4fHw9X/0WpoOFtT/PxL5j0i2uU0/7ZL1/yz0osHAAAA60QpIrY1jSVti1JpZKQ2BrQrtpSmZ2bnDp6auXh+Mt0WMRh9pXykqzYe3Jfk45+DTfGxlviRbNz4y57N1fjIxMz0ZFdLDmyttvmkNFJ/FtTaf+qPzgwxA/9lfvIDG9dC7T/txO++voaZAdbUw3//3/hkVTMCrLmm9l9us0t5GX/3BawD3v+BhnbdgAbPDFj/KtoybGhLav8HF+8bAOtHb7xbD5e6mhNgren/w4a06O/6VxSo9BdvGogHd46BhU/YE8vLxuaCtLoSSHtWXUl983KOyv83hbb7RGlpJ+yPztTpqRVejfKF2dO7O37zV7K/le90DX67Ju20KNCVxxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDH/RsAAP//sp/iug==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3m29.644555653s ago: executing program 33 (id=136): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = dup(r0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, 0x0) 3m10.848879632s ago: executing program 34 (id=614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000840)='\\', 0x1, 0x200440c0, &(0x7f00000001c0)={0xa, 0x2, 0x7ffc, @loopback, 0x8}, 0x1c) 2m27.877431318s ago: executing program 35 (id=1427): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0) 2m11.548335736s ago: executing program 36 (id=1813): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@nogrpid}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) fallocate(r0, 0x20, 0x4000, 0x3000000) 2m5.33180977s ago: executing program 37 (id=1926): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/175, 0xaf}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x40000001}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0) 1m56.466990222s ago: executing program 38 (id=1818): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) unshare(0x2c040480) r0 = semget$private(0x0, 0x4, 0x1a) semtimedop(r0, &(0x7f0000000040)=[{0x3, 0x4, 0x1800}, {0x3, 0x5, 0x800}], 0x2, 0x0) 1m54.811708207s ago: executing program 2 (id=2110): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 1m54.73307129s ago: executing program 2 (id=2112): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) 1m54.707231421s ago: executing program 2 (id=2114): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='p', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x5}, &(0x7f00000001c0)=0x8) 1m54.684181471s ago: executing program 2 (id=2116): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 1m54.519757197s ago: executing program 2 (id=2118): r0 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r0, &(0x7f0000000180)='q', 0x1, 0x100004) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendfile(r1, r0, 0x0, 0xd39a) 1m54.467539958s ago: executing program 2 (id=2119): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x6, 0x12) 1m54.39825606s ago: executing program 39 (id=2119): mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x6, 0x12) 1m5.713228224s ago: executing program 5 (id=3561): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 1m5.653609867s ago: executing program 5 (id=3563): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x2205, 0x0, 0x43a1bd76, 0x6, 0x8, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x68f84aa28b3c0f0d, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) time(0x0) 1m5.528665091s ago: executing program 5 (id=3566): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r1, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 1m5.409450914s ago: executing program 5 (id=3569): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount(0x0, &(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 1m5.377226866s ago: executing program 5 (id=3570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1m5.198976061s ago: executing program 5 (id=3574): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m5.198507511s ago: executing program 4 (id=3575): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 1m5.175014352s ago: executing program 4 (id=3576): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x1, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f00000003c0)=""/10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x49) 1m5.143715263s ago: executing program 40 (id=3574): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m5.055946566s ago: executing program 4 (id=3578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="31020002", 0x4}, {&(0x7f0000000a80)="683f0057954e837474512fcaea99", 0xe}], 0x2) 1m4.979849499s ago: executing program 4 (id=3579): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@quiet}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_lower}, {@fat=@flush}, {@numtail}, {@utf8}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) 1m4.839112493s ago: executing program 4 (id=3581): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr(r1, &(0x7f0000003480)=@random={'user.', '$#\xea@-@&\\^\x00'}, 0x0, 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 1m4.63985991s ago: executing program 4 (id=3584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x38, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x20, 0x5, 0x0, 0x0, {[@generic={0x3, 0x2}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x7, 0xde}]}}}}}, 0x46) 1m4.629724611s ago: executing program 41 (id=3584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x38, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x20, 0x5, 0x0, 0x0, {[@generic={0x3, 0x2}, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x7, 0xde}]}}}}}, 0x46) 1m3.869356835s ago: executing program 9 (id=3593): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0xf83, 0x7}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r1, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m3.703884441s ago: executing program 9 (id=3595): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0xa, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_icmp(0x2, 0x2, 0x1) unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m3.573996795s ago: executing program 9 (id=3597): r0 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x8) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 1m3.478056158s ago: executing program 9 (id=3598): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 1m3.43855296s ago: executing program 9 (id=3599): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x2048cc, &(0x7f0000000280)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec08b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bf1643938981322eea3d17c21444faa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES32=0x0, @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="04e086d6111b594b7b5cb08a1d3b529967cc282d711346a4e89752c55d9b9b384d1c1c3964af662d5e0a8dba129b3a6ffd8b8721dda066499dc3f6f760c4b10d8c186db3262d0e2e2b1eba33fb547ffaea3bbad91c7d544002e17a86ed17a714127a366087c5c96ec6bd05dcded3dc37dc01d033097f42cf34a2e8f16a029b810693f31e1c9100ab61bd", @ANYRESOCT], 0x1, 0x343, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m3.143747419s ago: executing program 9 (id=3600): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) lstat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r0, 0x0) 1m3.143540519s ago: executing program 42 (id=3600): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) lstat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r0, 0x0) 58.435021164s ago: executing program 1 (id=3679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xdaab}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc011}, 0x4000010) 58.321301408s ago: executing program 1 (id=3682): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) vmsplice(r2, &(0x7f0000001b80)=[{&(0x7f0000000300)='f', 0x1}], 0x1, 0x6) splice(r0, 0x0, r2, 0x0, 0xffffffffffffffff, 0x2) 57.446146747s ago: executing program 1 (id=3701): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 57.35972613s ago: executing program 1 (id=3704): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) 57.161230577s ago: executing program 1 (id=3709): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 57.096829808s ago: executing program 1 (id=3711): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x10000}, 0x1080e8, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x1) syz_open_dev$loop(0x0, 0x2, 0x2001) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpriority(0x1, 0xe6) 42.025458335s ago: executing program 43 (id=3711): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x10000}, 0x1080e8, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x1) syz_open_dev$loop(0x0, 0x2, 0x2001) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpriority(0x1, 0xe6) 1.443504452s ago: executing program 7 (id=4784): fsmount(0xffffffffffffffff, 0x0, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000200)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002}}}}}, 0x0) 1.407240353s ago: executing program 7 (id=4786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "33803fbae7579b75", "558963da244db07ec464b3a7ed03322c", "066d4ddb", "b807fdcd00"}, 0x28) write$binfmt_elf64(r0, 0x0, 0x78) 1.354531045s ago: executing program 7 (id=4788): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1fd, r2, 0x0, 0x0, 0x8, 0x0, 0x1, r3}]) 1.229011849s ago: executing program 7 (id=4791): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x8, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) dup(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) 1.054561595s ago: executing program 0 (id=4795): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000805000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1.047356055s ago: executing program 8 (id=4796): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0xffe0}, {0xfff2, 0xffe0}, {0xfff1, 0xe}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x34004804}, 0x840) 1.009997396s ago: executing program 7 (id=4797): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000180)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 986.444227ms ago: executing program 0 (id=4799): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r2, 0x80079a0) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0x1, 0x0) 952.799248ms ago: executing program 0 (id=4810): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x14083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x2, 0x4880) 899.09339ms ago: executing program 8 (id=4802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000600000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000040), &(0x7f0000000340)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10) 855.476092ms ago: executing program 8 (id=4805): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x4a}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001900)={0x9, 0x1, 0x0, &(0x7f00000017c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x1ae6, 0x6931, 0x17, 0x0, 0x0) 835.980092ms ago: executing program 0 (id=4806): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @broadcast}}, {{0x2, 0x0, @private}}}, 0x108) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x327e, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @remote}], 0x1c) io_uring_enter(r0, 0x5b3, 0x7ecd, 0x17, 0x0, 0x0) 785.842844ms ago: executing program 8 (id=4808): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 746.783805ms ago: executing program 0 (id=4809): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) 538.924652ms ago: executing program 0 (id=4819): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) close(r0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 518.745763ms ago: executing program 3 (id=4820): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in6=@loopback, {0x9, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 451.483325ms ago: executing program 3 (id=4821): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e1221b23bb63f7f77d3df163e75963d", 0x10}, {&(0x7f0000000240)="0000010100", 0x5}], 0x2) 368.831768ms ago: executing program 8 (id=4823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20004045}, 0x20040000) 307.889429ms ago: executing program 3 (id=4824): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 307.535899ms ago: executing program 8 (id=4825): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100"], 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20000810) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 294.25542ms ago: executing program 3 (id=4827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 246.396892ms ago: executing program 6 (id=4828): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 220.385623ms ago: executing program 6 (id=4829): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x51}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 214.251693ms ago: executing program 3 (id=4830): perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x5) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x40000000015, 0x5, 0x0) 121.493206ms ago: executing program 6 (id=4831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d4, 0x6c}, @in6=@loopback, {0x9, 0x192, 0x6, 0xffff, 0x8251a, 0x1, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 120.804806ms ago: executing program 7 (id=4841): r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f000000fcfffffffcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22e000000200000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 118.732526ms ago: executing program 3 (id=4832): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) 34.187329ms ago: executing program 6 (id=4833): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x2008001) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 18.329469ms ago: executing program 6 (id=4834): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x0) 0s ago: executing program 6 (id=4835): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x10) sendmsg$sock(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)='1U', 0x2}], 0x1}, 0x1) kernel console output (not intermixed with test programs): e syscall=37 compat=0 ip=0x7f63bc28ce59 code=0x7ffc0000 [ 178.671479][T13287] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.3318: inode has both inline data and extents flags [ 178.690518][T13287] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.690789][T13287] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3318: couldn't read orphan inode 15 (err -117) [ 178.699978][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 178.700000][ C0] EXT4-fs (loop9): initial error at time 1780488774: ext4_orphan_get:1397: inode 15 [ 178.700026][ C0] EXT4-fs (loop9): last error at time 1780488774: ext4_orphan_get:1397: inode 15 [ 178.780106][ T28] audit: type=1326 audit(1780488774.109:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.9.3312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bc28ce59 code=0x7ffc0000 [ 178.829674][T13287] loop9: lost filesystem error report for type 5 error -117 [ 178.830230][T13287] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.860404][ T28] audit: type=1326 audit(1780488774.109:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.9.3312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bc28ce59 code=0x7ffc0000 [ 178.946345][ T28] audit: type=1326 audit(1780488774.109:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.9.3312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63bc28ce59 code=0x7ffc0000 [ 179.172539][ T8721] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.211157][T13322] netlink: 'syz.5.3334': attribute type 29 has an invalid length. [ 179.238273][T13322] netlink: 'syz.5.3334': attribute type 29 has an invalid length. [ 179.252863][T13322] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3334'. [ 179.347030][T13336] loop4: detected capacity change from 0 to 128 [ 179.354636][T13333] Invalid argument reading file caps for ./file0 [ 179.371399][T13338] program syz.1.3341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.429102][T13344] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3343'. [ 179.662613][T13371] netlink: 'syz.0.3355': attribute type 17 has an invalid length. [ 179.819254][T13375] batman_adv: batadv0: Adding interface: macsec1 [ 179.832130][T13375] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.859835][T13375] batman_adv: batadv0: Interface activated: macsec1 [ 180.228644][T13417] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3378'. [ 180.245717][T13416] team0 (unregistering): Port device team_slave_0 removed [ 180.274630][T13416] team0 (unregistering): Port device team_slave_1 removed [ 180.576632][T13432] loop5: detected capacity change from 0 to 256 [ 180.650168][T13432] FAT-fs (loop5): Directory bread(block 64) failed [ 180.661695][T13432] FAT-fs (loop5): Directory bread(block 65) failed [ 180.681400][T13432] FAT-fs (loop5): Directory bread(block 66) failed [ 180.696301][T13432] FAT-fs (loop5): Directory bread(block 67) failed [ 180.711251][T13432] FAT-fs (loop5): Directory bread(block 68) failed [ 180.728692][T13432] FAT-fs (loop5): Directory bread(block 69) failed [ 180.749575][T13432] FAT-fs (loop5): Directory bread(block 70) failed [ 180.766856][T13432] FAT-fs (loop5): Directory bread(block 71) failed [ 180.779134][T13432] FAT-fs (loop5): Directory bread(block 72) failed [ 180.786436][T13432] FAT-fs (loop5): Directory bread(block 73) failed [ 180.838351][T13440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.858989][T13440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.879345][T13432] syz.5.3386: attempt to access beyond end of device [ 180.879345][T13432] loop5: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 180.897162][T13432] syz.5.3386: attempt to access beyond end of device [ 180.897162][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 180.911508][T13432] syz.5.3386: attempt to access beyond end of device [ 180.911508][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 180.926395][T13432] syz.5.3386: attempt to access beyond end of device [ 180.926395][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 180.949249][T13432] syz.5.3386: attempt to access beyond end of device [ 180.949249][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 180.965780][T13432] syz.5.3386: attempt to access beyond end of device [ 180.965780][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 180.981119][T13432] syz.5.3386: attempt to access beyond end of device [ 180.981119][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 180.995440][T13432] syz.5.3386: attempt to access beyond end of device [ 180.995440][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 181.012870][T13432] syz.5.3386: attempt to access beyond end of device [ 181.012870][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 181.027342][T13432] syz.5.3386: attempt to access beyond end of device [ 181.027342][T13432] loop5: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 181.067723][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 181.076855][T13447] netlink: 'syz.0.3393': attribute type 30 has an invalid length. [ 181.087981][T13447] netlink: 'syz.0.3393': attribute type 29 has an invalid length. [ 181.105108][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 182.285447][T13517] netlink: 348 bytes leftover after parsing attributes in process `syz.9.3426'. [ 183.070929][T13543] loop4: detected capacity change from 0 to 256 [ 183.299566][T13543] FAT-fs (loop4): Directory bread(block 64) failed [ 183.306609][T13543] FAT-fs (loop4): Directory bread(block 65) failed [ 183.314515][T13543] FAT-fs (loop4): Directory bread(block 66) failed [ 183.326103][T13543] FAT-fs (loop4): Directory bread(block 67) failed [ 183.343543][T13543] FAT-fs (loop4): Directory bread(block 68) failed [ 183.359079][T13543] FAT-fs (loop4): Directory bread(block 69) failed [ 183.388780][T13543] FAT-fs (loop4): Directory bread(block 70) failed [ 183.400121][T13543] FAT-fs (loop4): Directory bread(block 71) failed [ 183.411701][T13543] FAT-fs (loop4): Directory bread(block 72) failed [ 183.423191][T13543] FAT-fs (loop4): Directory bread(block 73) failed [ 184.107084][T13574] loop5: detected capacity change from 0 to 512 [ 184.122602][T13574] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3451: inode has both inline data and extents flags [ 184.136267][T13574] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 184.138304][T13574] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3451: couldn't read orphan inode 15 (err -117) [ 184.147518][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 184.147543][ C1] EXT4-fs (loop5): initial error at time 1780488779: ext4_orphan_get:1397: inode 15 [ 184.147567][ C1] EXT4-fs (loop5): last error at time 1780488779: ext4_orphan_get:1397: inode 15 [ 184.185647][T13574] loop5: lost filesystem error report for type 5 error -117 [ 184.187567][T13574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.239694][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 184.239711][ T28] audit: type=1400 audit(1780488779.989:1919): avc: denied { write } for pid=13573 comm="syz.5.3451" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.568099][ T3740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.570908][ T28] audit: type=1400 audit(1780488780.319:1920): avc: denied { write } for pid=13594 comm="syz.0.3460" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.618638][ T28] audit: type=1400 audit(1780488780.369:1921): avc: denied { write } for pid=13597 comm="syz.0.3461" name="/" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 184.642273][ T28] audit: type=1400 audit(1780488780.369:1922): avc: denied { add_name } for pid=13597 comm="syz.0.3461" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 184.642799][ T28] audit: type=1400 audit(1780488780.369:1923): avc: denied { create } for pid=13597 comm="syz.0.3461" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 184.877999][T13623] openvswitch: netlink: Unknown key attributes 2 [ 185.073793][T13634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3477'. [ 185.210983][T13641] netlink: 'syz.4.3480': attribute type 5 has an invalid length. [ 185.380892][T13665] program syz.9.3490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.412809][T13667] netlink: 'syz.1.3493': attribute type 17 has an invalid length. [ 185.512756][T13683] tap0: tun_chr_ioctl cmd 1074025675 [ 185.533392][T13683] tap0: persist enabled [ 185.540402][ T28] audit: type=1400 audit(1780488781.289:1924): avc: denied { write } for pid=13686 comm="syz.9.3502" path="socket:[39116]" dev="sockfs" ino=39116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 185.548652][T13677] tap0: tun_chr_ioctl cmd 1074025675 [ 185.582156][T13677] tap0: persist disabled [ 185.598526][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.622408][T13684] loop4: detected capacity change from 0 to 8192 [ 185.749879][ T28] audit: type=1400 audit(1780488781.499:1925): avc: denied { setopt } for pid=13686 comm="syz.9.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 185.814795][T13706] loop4: detected capacity change from 0 to 2048 [ 185.849253][T13712] tipc: Started in network mode [ 185.855336][T13712] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 185.862685][T13712] tipc: Enabled bearer , priority 10 [ 185.870147][T13706] loop4: p1 p4 [ 185.875311][T13706] loop4: p4 size 589824 extends beyond EOD, truncated [ 185.952351][ T28] audit: type=1400 audit(1780488781.699:1926): avc: denied { read write } for pid=13719 comm="syz.4.3517" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 185.977266][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 185.989033][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 186.011978][ T28] audit: type=1400 audit(1780488781.699:1927): avc: denied { open } for pid=13719 comm="syz.4.3517" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 186.012441][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 186.036320][ T28] audit: type=1400 audit(1780488781.729:1928): avc: denied { ioctl } for pid=13719 comm="syz.4.3517" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 186.047905][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 186.439066][T13732] loop4: detected capacity change from 0 to 8192 [ 186.448932][T13732] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.504528][T13739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3525'. [ 186.527629][T13739] netlink: 'syz.4.3525': attribute type 4 has an invalid length. [ 186.652369][T13750] loop4: detected capacity change from 0 to 1024 [ 186.661782][T13750] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.684845][T13750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.735507][ T9959] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.983609][ T9] tipc: Node number set to 10005162 [ 187.003592][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3547'. [ 187.100310][T13794] netlink: 'syz.4.3551': attribute type 17 has an invalid length. [ 187.117615][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.124788][T13794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.132120][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.139219][T13794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.199121][T13794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.268887][T13798] syzkaller1: entered promiscuous mode [ 187.274554][T13798] syzkaller1: entered allmulticast mode [ 187.330674][T13800] loop4: detected capacity change from 0 to 128 [ 187.337875][T13800] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 187.372918][T13800] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.514899][ T30] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 187.604104][ T3617] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.606671][ T4585] Bluetooth: hci0: command 0x1003 tx timeout [ 187.871339][T13831] loop4: detected capacity change from 0 to 256 [ 188.066917][ T7650] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.180539][ T7650] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.243733][ T7650] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.317088][T13857] loop4: detected capacity change from 0 to 128 [ 188.363240][ T7650] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.474680][ T7650] bridge_slave_1: left promiscuous mode [ 188.480663][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.488593][ T7650] bridge_slave_0: left allmulticast mode [ 188.494436][ T7650] bridge_slave_0: left promiscuous mode [ 188.500152][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.648045][ T7650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.673953][ T7650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.693896][ T7650] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 188.723241][ T7650] bond0 (unregistering): Released all slaves [ 188.759051][ T7650] bond1 (unregistering): Released all slaves [ 188.768181][ T7650] bond2 (unregistering): Released all slaves [ 188.806873][T13865] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 188.827832][T13865] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 188.845205][ T7650] tipc: Disabling bearer [ 188.850595][ T7650] tipc: Left network mode [ 188.923114][ T7650] hsr_slave_0: left promiscuous mode [ 188.947201][ T7650] hsr_slave_1: left promiscuous mode [ 188.958900][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.975724][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.000218][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.017978][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.037381][ T7650] batman_adv: batadv0: Interface deactivated: macsec1 [ 189.044411][ T7650] batman_adv: batadv0: Removing interface: macsec1 [ 189.074867][ T7650] veth1_macvtap: left promiscuous mode [ 189.090720][ T7650] veth0_macvtap: left promiscuous mode [ 189.110489][ T7650] veth1_vlan: left promiscuous mode [ 189.122442][ T7650] veth0_vlan: left promiscuous mode [ 189.282278][ T7650] team0 (unregistering): Port device team_slave_1 removed [ 189.303271][ T7650] team0 (unregistering): Port device team_slave_0 removed [ 189.359049][ T7642] Bluetooth: hci0: Frame reassembly failed (-84) [ 189.386953][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 189.408039][T13845] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.416298][T13845] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.427214][T13845] bridge_slave_0: entered allmulticast mode [ 189.434037][T13845] bridge_slave_0: entered promiscuous mode [ 189.441654][T13913] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 189.456423][T13845] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.464812][T13845] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.472096][T13845] bridge_slave_1: entered allmulticast mode [ 189.478872][T13845] bridge_slave_1: entered promiscuous mode [ 189.541911][T13845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.579581][T13845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.613449][T13845] team0: Port device team_slave_0 added [ 189.624474][T13845] team0: Port device team_slave_1 added [ 189.638706][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 189.638723][ T28] audit: type=1400 audit(1780489041.386:1954): avc: denied { write } for pid=13917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.686396][ T28] audit: type=1400 audit(1780489041.436:1955): avc: denied { write } for pid=13935 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.716807][T13845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.723846][T13845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.751473][T13845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.773011][ T28] audit: type=1326 audit(1780489041.516:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.0.3596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fed56ce59 code=0x7ffc0000 [ 189.776859][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 189.810095][T13845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.817397][T13845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.844542][T13845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.858835][ T28] audit: type=1326 audit(1780489041.546:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.0.3596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fed56ce59 code=0x7ffc0000 [ 189.887289][ T28] audit: type=1326 audit(1780489041.546:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.0.3596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fed56ce59 code=0x7ffc0000 [ 189.913238][ T28] audit: type=1326 audit(1780489041.546:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.0.3596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f3fed56ce59 code=0x7ffc0000 [ 189.938926][ T28] audit: type=1326 audit(1780489041.606:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.0.3596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3fed52d68e code=0x7ffc0000 [ 189.964555][ T28] audit: type=1326 audit(1780489041.616:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.0.3596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3fed52d68e code=0x7ffc0000 [ 189.990112][ T28] audit: type=1326 audit(1780489041.616:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.0.3596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3fed52d68e code=0x7ffc0000 [ 190.016383][ T28] audit: type=1326 audit(1780489041.626:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.0.3596" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3fed52d68e code=0x7ffc0000 [ 190.064837][T13845] hsr_slave_0: entered promiscuous mode [ 190.071060][T13845] hsr_slave_1: entered promiscuous mode [ 190.082789][T13845] debugfs: 'hsr0' already exists in 'hsr' [ 190.091168][T13845] Cannot create hsr debugfs directory [ 190.131587][ T7650] IPVS: stop unused estimator thread 0... [ 190.137537][T13867] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.152741][T13867] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.190181][T13867] bridge_slave_0: entered allmulticast mode [ 190.202229][T13867] bridge_slave_0: entered promiscuous mode [ 190.214786][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 190.229873][T13867] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.237126][T13867] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.244420][T13867] bridge_slave_1: entered allmulticast mode [ 190.251003][T13867] bridge_slave_1: entered promiscuous mode [ 190.268843][T13867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.303275][T13867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.325423][ T7650] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.350242][T13867] team0: Port device team_slave_0 added [ 190.371246][T13867] team0: Port device team_slave_1 added [ 190.407758][T13867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.424079][T13867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.454932][T13867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.497676][T13867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.504694][T13867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.531826][T13867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.584708][T13867] hsr_slave_0: entered promiscuous mode [ 190.590760][T13867] hsr_slave_1: entered promiscuous mode [ 190.598041][T13867] debugfs: 'hsr0' already exists in 'hsr' [ 190.603809][T13867] Cannot create hsr debugfs directory [ 190.635553][ T7650] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.694258][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 190.708751][ T7650] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.780421][ T7650] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.806118][T13965] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.813344][T13965] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.820657][T13965] bridge_slave_0: entered allmulticast mode [ 190.827814][T13965] bridge_slave_0: entered promiscuous mode [ 190.841929][T13965] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.850056][T13965] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.857438][T13965] bridge_slave_1: entered allmulticast mode [ 190.864271][T13965] bridge_slave_1: entered promiscuous mode [ 190.911257][T13965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.937711][T13965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.964313][ T7650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.980861][T13965] team0: Port device team_slave_0 added [ 190.992758][T13965] team0: Port device team_slave_1 added [ 191.014726][T13965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.021806][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.048436][T13965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.060110][T13965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.067310][T13965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.095545][T13965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.113711][ T7650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.154233][T13965] hsr_slave_0: entered promiscuous mode [ 191.170292][T13965] hsr_slave_1: entered promiscuous mode [ 191.176395][T13965] debugfs: 'hsr0' already exists in 'hsr' [ 191.182158][T13965] Cannot create hsr debugfs directory [ 191.191734][ T7650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.257513][ T7650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.364009][ T4585] Bluetooth: hci0: command 0x1003 tx timeout [ 191.370324][ T3617] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 191.379781][ T7650] bridge_slave_1: left allmulticast mode [ 191.385744][ T7650] bridge_slave_1: left promiscuous mode [ 191.395618][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.413388][ T7650] bridge_slave_0: left allmulticast mode [ 191.425488][ T7650] bridge_slave_0: left promiscuous mode [ 191.436922][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.684583][ T7650] bridge_slave_1: left allmulticast mode [ 191.690366][ T7650] bridge_slave_1: left promiscuous mode [ 191.696186][ T7650] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.703964][ T7650] bridge_slave_0: left allmulticast mode [ 191.709603][ T7650] bridge_slave_0: left promiscuous mode [ 191.715264][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.789243][ T7650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.799073][ T7650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.808864][ T7650] bond0 (unregistering): Released all slaves [ 191.876252][ T7650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.886437][ T7650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.895803][ T7650] bond0 (unregistering): Released all slaves [ 191.903775][ T7650] bond1 (unregistering): Released all slaves [ 191.912331][ T7650] bond2 (unregistering): Released all slaves [ 191.989054][ T7650] tipc: Left network mode [ 192.004497][ T7650] hsr_slave_0: left promiscuous mode [ 192.010232][ T7650] hsr_slave_1: left promiscuous mode [ 192.016237][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.023890][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.034385][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.044484][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.052574][ T7650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.060293][ T7650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.075440][ T7650] veth1_macvtap: left promiscuous mode [ 192.081072][ T7650] veth0_macvtap: left promiscuous mode [ 192.087405][ T7650] veth1_vlan: left promiscuous mode [ 192.093670][ T7650] veth0_vlan: left promiscuous mode [ 192.104969][ T7650] veth1_macvtap: left promiscuous mode [ 192.110531][ T7650] veth0_macvtap: left promiscuous mode [ 192.120046][ T7650] veth1_vlan: left promiscuous mode [ 192.126244][ T7650] veth0_vlan: left promiscuous mode [ 192.229047][ T7650] team0 (unregistering): Port device team_slave_1 removed [ 192.239978][ T7650] team0 (unregistering): Port device team_slave_0 removed [ 192.391227][T13845] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 192.400076][T13845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.410737][T13845] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 192.419362][T13845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.427118][T13845] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 192.435889][T13845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.444281][T13845] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 192.463127][T13845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 192.511756][T13845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.524482][T13845] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.535383][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.542482][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.552997][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.560104][ T7640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.625488][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 192.764500][T13845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.855176][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 192.864871][T14244] batadv_slave_0: entered promiscuous mode [ 192.873692][T14243] batadv_slave_0: left promiscuous mode [ 192.917422][T13867] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 192.937729][T13867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.948241][T13867] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 192.958035][T13867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.973626][T13867] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 192.982570][T13867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 192.990417][T13867] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 193.000163][T13867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.050403][T13845] veth0_vlan: entered promiscuous mode [ 193.070243][T13867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.083255][ T7650] IPVS: stop unused estimator thread 0... [ 193.092271][T13845] veth1_vlan: entered promiscuous mode [ 193.099387][ T7438] IPVS: starting estimator thread 0... [ 193.117430][T13867] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.137452][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.144586][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.162633][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.169734][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.194700][T13845] veth0_macvtap: entered promiscuous mode [ 193.211413][T13845] veth1_macvtap: entered promiscuous mode [ 193.211482][T14277] IPVS: using max 2688 ests per chain, 134400 per kthread [ 193.237595][T13845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.273681][T13845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.306878][ T310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.320254][ T310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.338308][ T310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.356506][ T310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.482373][T13965] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 193.520062][T13965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.539061][T13965] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 193.549168][T13965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.564728][T14324] @0Ù: renamed from bond_slave_1 (while UP) [ 193.577369][T13965] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 193.600093][T13965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.609434][T13965] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 193.619325][T13965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.651334][T13867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.770004][T14361] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.770544][T13965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.815295][T13965] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.849132][ T7650] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.856341][ T7650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.899709][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.906825][ T7640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.024233][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 194.062952][T13867] veth0_vlan: entered promiscuous mode [ 194.108112][T13867] veth1_vlan: entered promiscuous mode [ 194.176131][T13867] veth0_macvtap: entered promiscuous mode [ 194.209618][T13867] veth1_macvtap: entered promiscuous mode [ 194.251918][T13867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.294360][T13965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.319863][T13867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.365608][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.381614][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.419262][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.443169][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.463517][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 194.713009][T13965] veth0_vlan: entered promiscuous mode [ 194.735363][T13965] veth1_vlan: entered promiscuous mode [ 194.738373][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 194.738462][ T28] audit: type=1400 audit(1780489046.486:2040): avc: denied { write } for pid=14456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.767455][T13965] veth0_macvtap: entered promiscuous mode [ 194.782189][T13965] veth1_macvtap: entered promiscuous mode [ 194.793671][T13965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.802829][T13965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.830669][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.844889][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.871765][ T28] audit: type=1400 audit(1780489046.616:2041): avc: denied { write } for pid=14491 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.908742][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.930881][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.957914][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 195.075962][ T7432] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 195.093447][ T7432] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.222601][ T28] audit: type=1400 audit(1780489046.966:2042): avc: denied { write } for pid=14510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.303085][ T28] audit: type=1400 audit(1780489047.046:2043): avc: denied { write } for pid=14525 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.373906][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26 [ 195.452337][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 195.566578][ T28] audit: type=1400 audit(1780489047.316:2044): avc: denied { write } for pid=14535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.592183][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3692'. [ 195.597303][ T28] audit: type=1400 audit(1780489047.316:2045): avc: denied { write } for pid=14560 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.613978][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27 [ 195.632059][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3692'. [ 195.733082][T14582] sctp: [Deprecated]: syz.6.3699 (pid 14582) Use of int in max_burst socket option deprecated. [ 195.733082][T14582] Use struct sctp_assoc_value instead [ 195.742325][ T28] audit: type=1400 audit(1780489047.486:2046): avc: denied { write } for pid=14567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.810806][ T28] audit: type=1400 audit(1780489047.556:2047): avc: denied { write } for pid=14587 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.868714][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28 [ 195.959755][T14604] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.3705'. [ 195.992226][ T28] audit: type=1400 audit(1780489047.736:2048): avc: denied { write } for pid=14599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.047056][ T28] audit: type=1400 audit(1780489047.736:2049): avc: denied { create } for pid=14596 comm="syz.1.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 196.070707][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3707'. [ 196.092902][T14617] netlink: 'syz.8.3707': attribute type 5 has an invalid length. [ 196.115119][T14617] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3707'. [ 196.142577][T14617] geneve2: entered promiscuous mode [ 196.179655][T14617] geneve2: entered allmulticast mode [ 196.210903][ T7650] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 196.237037][ T7650] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 196.273684][ T49] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 196.303184][ T49] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 196.429917][T14658] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3717'. [ 196.439685][T14659] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3718'. [ 196.488224][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 197.164071][T14722] loop6: detected capacity change from 0 to 512 [ 197.221074][T14722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.342664][T13965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.563256][ T3617] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.564184][ T4585] Bluetooth: hci0: command 0x1003 tx timeout [ 198.621415][T14853] netlink: 'syz.0.3747': attribute type 12 has an invalid length. [ 198.665992][T14853] netlink: 'syz.0.3747': attribute type 29 has an invalid length. [ 198.700543][T14853] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3747'. [ 198.714857][T14853] netlink: 'syz.0.3747': attribute type 1 has an invalid length. [ 198.723385][T14853] netlink: 'syz.0.3747': attribute type 1 has an invalid length. [ 198.863585][T14879] sctp: [Deprecated]: syz.6.3753 (pid 14879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.863585][T14879] Use struct sctp_sack_info instead [ 199.106467][ T7430] bridge0: entered promiscuous mode [ 199.266520][T14933] xt_hashlimit: size too large, truncated to 1048576 [ 199.550181][T14958] loop8: detected capacity change from 0 to 128 [ 199.573555][T14958] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 199.592793][T14958] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.671282][T13867] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.880519][T14988] ve: renamed from veth0_vlan (while UP) [ 199.945948][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 199.945963][ T28] audit: type=1400 audit(1780489051.696:2098): avc: denied { write } for pid=14976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.061145][ T28] audit: type=1400 audit(1780489051.806:2099): avc: denied { setopt } for pid=15004 comm="syz.6.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.090242][ T28] audit: type=1400 audit(1780489051.836:2100): avc: denied { write } for pid=15005 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.325702][ T28] audit: type=1400 audit(1780489052.076:2101): avc: denied { write } for pid=15013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.415062][ T28] audit: type=1400 audit(1780489052.156:2102): avc: denied { write } for pid=15031 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.642640][ T28] audit: type=1400 audit(1780489052.386:2103): avc: denied { write } for pid=15036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.741075][ T28] audit: type=1400 audit(1780489052.486:2104): avc: denied { write } for pid=15054 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.812170][ T28] audit: type=1326 audit(1780489052.556:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.7.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecd39ce59 code=0x7ffc0000 [ 200.888276][ T28] audit: type=1326 audit(1780489052.556:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.7.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecd39ce59 code=0x7ffc0000 [ 200.954569][ T28] audit: type=1326 audit(1780489052.556:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.7.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ecd39ce59 code=0x7ffc0000 [ 201.094573][T15074] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.101765][T15074] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.247770][T15074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.262056][T15074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.324231][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 201.338755][ T49] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.360979][ T49] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.411889][ T49] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.431044][ T49] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.455843][ T49] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.480658][ T49] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.507575][ T49] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.520667][ T49] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.567066][T15123] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3810'. [ 201.583657][T15123] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3810'. [ 201.611931][T15127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15127 comm=syz.0.3811 [ 201.769575][T15150] loop8: detected capacity change from 0 to 256 [ 201.792685][T15150] FAT-fs (loop8): error, clusters badly computed (0 != 128) [ 201.810525][T15150] FAT-fs (loop8): Filesystem has been set read-only [ 201.828295][T15150] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.851343][T15155] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 201.914951][T15161] loop8: detected capacity change from 0 to 128 [ 201.948351][T15161] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 201.999188][T15161] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.076230][T13867] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.338654][T15197] netem: change failed [ 202.504143][T15210] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3826'. [ 202.531300][T15210] netlink: 9 bytes leftover after parsing attributes in process `syz.7.3826'. [ 203.098810][T15237] netlink: 'syz.7.3838': attribute type 11 has an invalid length. [ 203.118800][T15239] loop8: detected capacity change from 0 to 512 [ 203.129091][T15239] EXT4-fs: Ignoring removed oldalloc option [ 203.174837][T15239] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 203.197477][T15239] EXT4-fs (loop8): 1 truncate cleaned up [ 203.203775][T15239] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.239041][T15239] EXT4-fs (loop8): shut down requested (1) [ 203.281222][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.441902][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881173a4000: rx timeout, send abort [ 203.612166][T15205] loop6: detected capacity change from 0 to 512 [ 203.778784][T15205] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.941962][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b660600: rx timeout, send abort [ 203.950267][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881173a4000: abort rx timeout. Force session deactivation [ 204.192090][ T30] tipc: Subscription rejected, illegal request [ 204.450224][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b660600: abort rx timeout. Force session deactivation [ 204.467582][T15205] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 204.524587][T15331] support for the xor transformation has been removed. [ 204.621707][T15205] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3829: bg 0: block 248: padding at end of block bitmap is not set [ 204.668143][T15205] loop6: lost filesystem error report for type 5 error -117 [ 204.673272][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 204.690490][ C1] EXT4-fs (loop6): last error at time 1780489056: ext4_validate_block_bitmap:441 [ 204.807021][T15205] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3829: Failed to acquire dquot type 1 [ 204.820570][T15205] loop6: lost filesystem error report for type 5 error -28 [ 204.900951][T15205] EXT4-fs (loop6): 1 truncate cleaned up [ 205.175488][T15357] loop8: detected capacity change from 0 to 1024 [ 205.191331][T15357] EXT4-fs: Ignoring removed bh option [ 205.210810][T15205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 205.238880][T15357] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.269776][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 205.269792][ T28] audit: type=1400 audit(1780489057.016:2171): avc: denied { write } for pid=15356 comm="syz.8.3870" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.331252][T15366] lo: entered allmulticast mode [ 205.350177][T15366] lo: left allmulticast mode [ 205.421940][T15205] syz.6.3829 (15205) used greatest stack depth: 8016 bytes left [ 205.466912][T13965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 205.491288][ T28] audit: type=1326 audit(1780489057.226:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15337 comm="syz.0.3861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fed56ce59 code=0x7fc00000 [ 205.559683][ T28] audit: type=1400 audit(1780489057.296:2173): avc: denied { ioctl } for pid=15371 comm="syz.0.3875" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 205.620330][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.998047][T15404] loop7: detected capacity change from 0 to 512 [ 206.043290][ T28] audit: type=1400 audit(1780489057.796:2174): avc: denied { connect } for pid=15407 comm="syz.0.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.606507][T15445] loop6: detected capacity change from 0 to 512 [ 206.627650][T15445] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.641081][T15446] loop8: detected capacity change from 0 to 512 [ 206.671916][T15446] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 206.750562][T15446] EXT4-fs (loop8): failed to open journal device unknown-block(11,127) -6 [ 207.241262][T15461] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 207.249772][T15461] sch_fq: defrate 16 ignored. [ 207.270430][T15463] SELinux: truncated policydb string identifier [ 207.276987][T15463] SELinux: failed to load policy [ 207.552691][T15477] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 207.784157][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3928'. [ 207.913941][ T28] audit: type=1326 audit(1780489059.656:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.8.3933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 207.964911][ T28] audit: type=1326 audit(1780489059.666:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.8.3933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 207.993616][ T28] audit: type=1326 audit(1780489059.666:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.8.3933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 208.021154][ T28] audit: type=1326 audit(1780489059.666:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.8.3933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 208.053612][ T28] audit: type=1326 audit(1780489059.666:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.8.3933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 208.105482][ T7436] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 208.124426][ T7436] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.155783][T15517] loop8: detected capacity change from 0 to 4096 [ 208.169769][ T28] audit: type=1326 audit(1780489059.666:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15505 comm="syz.8.3933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 208.197193][T15517] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 208.461816][T15528] loop8: detected capacity change from 0 to 1024 [ 208.470338][T15512] loop7: detected capacity change from 0 to 2048 [ 208.477786][T15528] EXT4-fs: Ignoring removed oldalloc option [ 208.477809][T15528] EXT4-fs: Ignoring removed oldalloc option [ 208.506546][T15528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.555503][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.629226][T15535] netlink: 'syz.8.3942': attribute type 1 has an invalid length. [ 208.645233][T15535] netlink: 'syz.8.3942': attribute type 1 has an invalid length. [ 208.663234][T15535] netlink: 'syz.8.3942': attribute type 1 has an invalid length. [ 208.683118][T15535] netlink: 'syz.8.3942': attribute type 1 has an invalid length. [ 209.365369][T15566] netlink: 'syz.6.3953': attribute type 1 has an invalid length. [ 209.384886][T15566] netlink: 'syz.6.3953': attribute type 2 has an invalid length. [ 209.457489][T15568] loop6: detected capacity change from 0 to 512 [ 209.472965][T15568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.490607][T15568] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.538662][T13965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.743006][T15512] FAT-fs (loop7): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 210.337397][T15623] lo: entered allmulticast mode [ 210.356517][T15623] lo: left allmulticast mode [ 210.531393][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 210.531484][ T28] audit: type=1400 audit(1780489062.276:2201): avc: denied { write } for pid=15622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.592504][T15653] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 210.624492][ T28] audit: type=1400 audit(1780489062.336:2202): avc: denied { write } for pid=15650 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.686808][T15658] loop7: detected capacity change from 0 to 128 [ 210.705600][T15658] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 210.728070][T15658] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.754769][T15658] ext2 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.790174][ T28] audit: type=1400 audit(1780489062.536:2203): avc: denied { write } for pid=15657 comm="syz.7.3987" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.008502][T15663] IPVS: persistence engine module ip_vs_pe_€ not found [ 211.044203][T13845] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.119195][T15669] loop6: detected capacity change from 0 to 512 [ 211.169922][T15669] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 211.190130][T15674] loop8: detected capacity change from 0 to 512 [ 211.202036][T15669] EXT4-fs (loop6): 1 truncate cleaned up [ 211.209193][T15674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 211.224060][T15669] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.236238][T15674] EXT4-fs (loop8): orphan cleanup on readonly fs [ 211.251002][T15674] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 211.302057][T15674] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 211.310450][ T28] audit: type=1400 audit(1780489063.046:2204): avc: denied { write } for pid=15668 comm="syz.6.3992" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.344759][T15674] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.3994: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 211.368058][T15674] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 211.368414][T15674] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3994: couldn't read orphan inode 13 (err -117) [ 211.378138][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 211.378175][ C0] EXT4-fs (loop8): last error at time 1780489063: ext4_ext_check_inode:521: inode 13 [ 211.408986][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.424382][T15674] loop8: lost filesystem error report for type 5 error -117 [ 211.425856][T15674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.453607][T13965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.474750][T15674] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 211.485593][T15674] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 211.494114][T15674] EXT4-fs warning (device loop8): read_mmp_block:111: Error -117 while reading MMP block 8 [ 211.494829][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.530278][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.565478][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.639655][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.117119][T15679] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.128179][T15679] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.135843][T15679] bridge_slave_0: entered allmulticast mode [ 212.142522][T15679] bridge_slave_0: entered promiscuous mode [ 212.193211][ T49] bridge_slave_1: left allmulticast mode [ 212.198952][ T49] bridge_slave_1: left promiscuous mode [ 212.205201][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.221517][ T49] bridge_slave_0: left allmulticast mode [ 212.227781][ T49] bridge_slave_0: left promiscuous mode [ 212.232399][ T28] audit: type=1400 audit(1780489063.966:2205): avc: denied { write } for pid=15711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.233943][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.370711][ T28] audit: type=1400 audit(1780489064.116:2206): avc: denied { write } for pid=15744 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.609592][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.634008][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.660265][ T49] bond0 (unregistering): Released all slaves [ 212.679290][ T49] bond1 (unregistering): Released all slaves [ 212.694826][T15679] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.703439][T15679] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.715685][T15679] bridge_slave_1: entered allmulticast mode [ 212.728251][T15679] bridge_slave_1: entered promiscuous mode [ 212.756008][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 212.778412][ T49] tipc: Disabling bearer [ 212.799992][ T49] tipc: Left network mode [ 212.849951][T15679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.877582][ T49] hsr_slave_0: left promiscuous mode [ 212.900756][ T49] hsr_slave_1: left promiscuous mode [ 212.910391][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.921061][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.941616][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.956012][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.987253][ T49] veth1_macvtap: left promiscuous mode [ 212.997430][ T49] veth0_macvtap: left promiscuous mode [ 212.998529][ T28] audit: type=1326 audit(1780489064.746:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b06ce59 code=0x7ffc0000 [ 213.005466][ T49] veth1_vlan: left promiscuous mode [ 213.061978][ T28] audit: type=1326 audit(1780489064.746:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b06ce59 code=0x7ffc0000 [ 213.067453][ T49] veth0_vlan: left promiscuous mode [ 213.152358][ T28] audit: type=1326 audit(1780489064.756:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b06ce59 code=0x7ffc0000 [ 213.221406][ T28] audit: type=1326 audit(1780489064.756:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15777 comm="syz.6.4025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424b06ce59 code=0x7ffc0000 [ 213.395463][ T49] team0 (unregistering): Port device team_slave_1 removed [ 213.482693][T15679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.559792][T15679] team0: Port device team_slave_0 added [ 213.577130][T15679] team0: Port device team_slave_1 added [ 213.618448][T15679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.631145][T15679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.679579][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4038'. [ 213.688683][T15679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.707452][T15679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.716439][T15679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.742901][T15679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.764480][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4038'. [ 213.795154][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4038'. [ 213.832314][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4038'. [ 213.849212][T15679] hsr_slave_0: entered promiscuous mode [ 213.864025][T15679] hsr_slave_1: entered promiscuous mode [ 213.894930][ T49] IPVS: stop unused estimator thread 0... [ 213.927348][T15827] loop8: detected capacity change from 0 to 1024 [ 213.935848][T15827] EXT4-fs: Ignoring removed bh option [ 214.012765][T15827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.117061][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.146196][T15855] sock: sock_set_timeout: `syz.0.4050' (pid 15855) tries to set negative timeout [ 214.226970][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 214.371813][T15882] loop7: detected capacity change from 0 to 512 [ 214.383600][T15882] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 214.407887][T15679] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.434515][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.451982][T15679] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.465983][T15882] EXT4-fs (loop7): failed to open journal device unknown-block(11,127) -6 [ 214.493222][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.505474][T15679] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.514947][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.549581][T15679] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.560874][T15679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.621374][T15679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.646722][T15679] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.666648][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.673761][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.688583][ T7650] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.695714][ T7650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.908623][T15679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.314512][T15679] veth0_vlan: entered promiscuous mode [ 215.348597][T15679] veth1_vlan: entered promiscuous mode [ 215.397853][T15679] veth0_macvtap: entered promiscuous mode [ 215.457188][T15679] veth1_macvtap: entered promiscuous mode [ 215.493531][T15679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.521919][T15679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.544882][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.563458][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.583976][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 215.583992][ T28] audit: type=1400 audit(1780489067.336:2233): avc: denied { write } for pid=15984 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.627893][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.652724][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.887504][ T28] audit: type=1400 audit(1780489067.636:2234): avc: denied { bind } for pid=16017 comm="syz.7.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 215.957560][ T28] audit: type=1400 audit(1780489067.696:2235): avc: denied { write } for pid=15993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.063167][ T28] audit: type=1400 audit(1780489067.776:2236): avc: denied { write } for pid=16030 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.166810][T16040] loop7: detected capacity change from 0 to 512 [ 216.196921][T16040] EXT4-fs: Ignoring removed bh option [ 216.240340][T16049] syz.0.4086 (16049): /proc/16047/oom_adj is deprecated, please use /proc/16047/oom_score_adj instead. [ 216.280672][T16040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.297189][ T28] audit: type=1400 audit(1780489068.046:2237): avc: denied { write } for pid=16044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.327726][T16040] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.379256][ T28] audit: type=1400 audit(1780489068.126:2238): avc: denied { write } for pid=16039 comm="syz.7.4087" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.437602][T13845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.491327][ T28] audit: type=1400 audit(1780489068.126:2239): avc: denied { write } for pid=16065 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.617631][ T28] audit: type=1400 audit(1780489068.356:2240): avc: denied { getopt } for pid=16084 comm="syz.8.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 216.785454][ T28] audit: type=1400 audit(1780489068.526:2241): avc: denied { write } for pid=16075 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.847864][ T28] audit: type=1400 audit(1780489068.596:2242): avc: denied { write } for pid=16095 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.003722][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4099'. [ 217.516658][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 217.563096][T16154] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 217.628466][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'. [ 217.648648][T16163] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.655173][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'. [ 217.669949][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4115'. [ 217.679258][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4115'. [ 217.691669][T16163] bond1: (slave lo): Enslaving as an active interface with an up link [ 217.701836][T16163] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 217.737299][T16174] batman_adv: batadv0: Adding interface: ip6gretap1 [ 217.774393][T16174] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.819843][T16174] batman_adv: batadv0: Interface activated: ip6gretap1 [ 217.967354][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4126'. [ 217.996665][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 218.019496][T16206] tun0: tun_chr_ioctl cmd 1074025672 [ 218.031927][T16206] tun0: ignored: set checksum enabled [ 218.086905][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b41ca00: rx timeout, send abort [ 218.126011][T16218] loop6: detected capacity change from 0 to 1024 [ 218.133576][T16218] EXT4-fs: Ignoring removed bh option [ 218.150058][T16218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.269140][T13965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.341543][T16250] loop6: detected capacity change from 0 to 1024 [ 218.390145][T16250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 218.404942][T16250] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.543114][T16267] batman_adv: batadv0: Adding interface: ip6gretap1 [ 218.564468][T16267] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.595170][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b41ca00: abort rx timeout. Force session deactivation [ 218.641942][T16267] batman_adv: batadv0: Interface activated: ip6gretap1 [ 218.937907][T16268] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4133: bg 0: block 112: padding at end of block bitmap is not set [ 218.995587][T16268] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 2048 with error 28 [ 219.050408][T16268] EXT4-fs (loop6): This should not happen!! Data will be lost [ 219.050408][T16268] [ 219.099834][T16268] EXT4-fs (loop6): Total free blocks count 0 [ 219.128992][T16268] EXT4-fs (loop6): Free/Dirty block details [ 219.144460][T16268] EXT4-fs (loop6): free_blocks=0 [ 219.154583][T16268] EXT4-fs (loop6): dirty_blocks=7680 [ 219.166318][T16268] EXT4-fs (loop6): Block reservation details [ 219.189614][T16268] EXT4-fs (loop6): i_reserved_data_blocks=480 [ 219.282933][ T7642] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 133636 with max blocks 2048 with error 28 [ 219.394444][T13965] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 219.605820][T16343] loop8: detected capacity change from 0 to 512 [ 219.657200][T16343] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4157: Failed to acquire dquot type 1 [ 219.684237][T16343] loop8: lost filesystem error report for type 5 error -117 [ 219.685205][T16343] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4157: Failed to acquire dquot type 1 [ 219.703840][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 219.703873][ C1] EXT4-fs (loop8): last error at time 1780489071: ext4_acquire_dquot:7034 [ 219.723517][T16343] loop8: lost filesystem error report for type 5 error -117 [ 219.731129][T16343] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4157: bg 0: block 248: padding at end of block bitmap is not set [ 219.794020][T16343] loop8: lost filesystem error report for type 5 error -117 [ 219.795327][T16343] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 219.834707][T16343] loop8: lost filesystem error report for type 5 error -117 [ 219.836254][T16343] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4157: Failed to acquire dquot type 1 [ 219.865776][T16343] loop8: lost filesystem error report for type 5 error -117 [ 219.867090][T16343] EXT4-fs (loop8): 1 orphan inode deleted [ 219.917980][T16343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.953282][T16343] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.978157][T16343] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.4157: Failed to acquire dquot type 1 [ 220.064712][T16368] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.110000][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.166060][T16368] bond1: (slave lo): Enslaving as an active interface with an up link [ 220.206278][T16368] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 220.655338][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 220.655371][ T28] audit: type=1326 audit(1780489072.406:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 220.733790][ T28] audit: type=1326 audit(1780489072.436:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 220.768418][ T28] audit: type=1326 audit(1780489072.436:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 220.828976][ T28] audit: type=1326 audit(1780489072.436:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 220.933969][ T28] audit: type=1326 audit(1780489072.436:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 221.045245][ T28] audit: type=1326 audit(1780489072.446:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 221.152802][ T28] audit: type=1326 audit(1780489072.446:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 221.275190][ T28] audit: type=1326 audit(1780489072.446:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 221.371866][ T28] audit: type=1326 audit(1780489072.446:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 221.422121][ T28] audit: type=1326 audit(1780489072.446:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16417 comm="syz.3.4175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 221.449676][T16474] block device autoloading is deprecated and will be removed. [ 221.696974][T16501] loop6: detected capacity change from 0 to 128 [ 221.957380][ T6096] IPVS: starting estimator thread 0... [ 221.976941][T16516] tun0: tun_chr_ioctl cmd 1074025672 [ 221.977037][T16516] tun0: ignored: set checksum enabled [ 222.073800][T16519] IPVS: using max 2496 ests per chain, 124800 per kthread [ 223.969917][T16633] loop8: detected capacity change from 0 to 4096 [ 224.008170][T16633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.096173][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.798321][T16682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.823402][T16682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.940501][T16684] __nla_validate_parse: 1 callbacks suppressed [ 224.940612][T16684] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4255'. [ 224.964845][T16684] netlink: 232 bytes leftover after parsing attributes in process `syz.7.4255'. [ 225.264624][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4263'. [ 225.275732][T16702] netlink: 'syz.7.4263': attribute type 26 has an invalid length. [ 225.290341][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4263'. [ 225.300342][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4263'. [ 225.310177][T16702] netlink: 'syz.7.4263': attribute type 26 has an invalid length. [ 225.318434][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4263'. [ 225.472272][T16712] loop7: detected capacity change from 0 to 512 [ 225.479874][T16712] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 225.496366][T16712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 225.517924][T16712] System zones: 1-12 [ 225.526841][T16712] EXT4-fs (loop7): 1 truncate cleaned up [ 225.538173][T16712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.586325][T13845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.624786][T16723] loop8: detected capacity change from 0 to 164 [ 225.639467][T16723] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 225.665708][T16723] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 225.683285][T16723] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 225.768929][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4279'. [ 225.850796][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4283'. [ 225.963654][T16752] syzkaller1: entered allmulticast mode [ 226.068895][T16762] loop6: detected capacity change from 0 to 128 [ 226.178260][T16768] loop7: detected capacity change from 0 to 1024 [ 226.193397][T16768] EXT4-fs: Ignoring removed bh option [ 226.217682][T16768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.268906][T16768] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.296711][T16777] loop6: detected capacity change from 0 to 512 [ 226.324122][T16777] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 226.339766][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 226.339784][ T28] audit: type=1400 audit(1780489078.086:2342): avc: denied { write } for pid=16767 comm="syz.7.4293" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.356744][T16777] EXT4-fs (loop6): 1 truncate cleaned up [ 226.375533][T16777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.382353][T16768] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.4293: lblock 3 mapped to illegal pblock 3 (length 3) [ 226.445521][ T28] audit: type=1400 audit(1780489078.186:2343): avc: denied { write } for pid=16776 comm="syz.6.4296" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.469265][T16768] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 226.501645][T16768] EXT4-fs (loop7): This should not happen!! Data will be lost [ 226.501645][T16768] [ 226.523350][T16779] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.4293: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.565287][ T49] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 226.597285][ T49] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 226.611105][T13965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.621181][ T49] EXT4-fs (loop7): This should not happen!! Data will be lost [ 226.621181][ T49] [ 226.631713][T13845] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 226.649038][T13845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 226.736336][T16794] netlink: 'syz.8.4304': attribute type 11 has an invalid length. [ 226.772215][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4304'. [ 226.807945][T16799] bridge1: entered promiscuous mode [ 226.811630][T16801] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4306'. [ 226.825940][T16799] bridge1: entered allmulticast mode [ 226.842582][T16794] netlink: 'syz.8.4304': attribute type 11 has an invalid length. [ 226.852277][ T310] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.866171][ T7642] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.877784][ T7642] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.913313][ T7642] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.033375][T16819] loop8: detected capacity change from 0 to 128 [ 227.046871][T16819] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.074689][ T28] audit: type=1326 audit(1780489078.826:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16822 comm="syz.3.4316" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb68849ce59 code=0x0 [ 227.114894][T16819] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.172459][T16819] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 227.182909][T16819] FAT-fs (loop8): Filesystem has been set read-only [ 227.258754][T13867] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.368319][ T28] audit: type=1400 audit(1780489079.116:2345): avc: denied { map } for pid=16845 comm="syz.0.4326" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 227.393548][T16846] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 227.401089][T16846] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 227.874335][ T28] audit: type=1400 audit(1780489079.616:2346): avc: denied { getopt } for pid=16866 comm="syz.8.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 227.933581][T16869] loop7: detected capacity change from 0 to 128 [ 227.953605][T16869] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.986666][T16869] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.125952][T16878] sctp: [Deprecated]: syz.6.4337 (pid 16878) Use of int in max_burst socket option deprecated. [ 228.125952][T16878] Use struct sctp_assoc_value instead [ 228.254865][ T310] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.317670][ T28] audit: type=1326 audit(1780489080.066:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.8.4341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 228.364729][ T28] audit: type=1326 audit(1780489080.066:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.8.4341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 228.393264][ T28] audit: type=1326 audit(1780489080.096:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.8.4341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 228.425843][ T28] audit: type=1326 audit(1780489080.096:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.8.4341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 228.453305][ T28] audit: type=1326 audit(1780489080.096:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.8.4341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 228.599231][T16909] xt_hashlimit: size too large, truncated to 1048576 [ 229.472862][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b742800: rx timeout, send abort [ 229.981147][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b742800: abort rx timeout. Force session deactivation [ 230.017787][T16987] loop8: detected capacity change from 0 to 256 [ 230.416054][ T7427] kernel read not supported for file /vcs (pid: 7427 comm: kworker/1:13) [ 230.672010][T17027] netlink: 'syz.7.4392': attribute type 6 has an invalid length. [ 231.485417][T17057] loop7: detected capacity change from 0 to 512 [ 231.514346][T17057] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 231.561063][T17057] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4402: invalid indirect mapped block 9 (level 0) [ 231.587865][T17057] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.588405][T17057] EXT4-fs (loop7): Remounting filesystem read-only [ 231.598144][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 231.598174][ C0] EXT4-fs (loop7): initial error at time 1780489083: ext4_free_branches:1023: inode 11 [ 231.598218][ C0] EXT4-fs (loop7): last error at time 1780489083: ext4_free_branches:1023: inode 11 [ 231.633280][T17057] EXT4-fs (loop7): 1 truncate cleaned up [ 231.640001][T17057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.679558][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 231.679601][ T28] audit: type=1400 audit(1780489083.426:2381): avc: denied { write } for pid=17055 comm="syz.7.4402" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.738026][T17063] __nla_validate_parse: 6 callbacks suppressed [ 231.738064][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4404'. [ 231.765692][T13845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.785138][T17063] netlink: 'syz.8.4404': attribute type 5 has an invalid length. [ 231.804972][T17063] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4404'. [ 231.834579][T17063] geneve3: entered promiscuous mode [ 231.839948][T17063] geneve3: entered allmulticast mode [ 232.003381][T17073] loop8: detected capacity change from 0 to 4096 [ 232.040158][T17073] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.057727][T17079] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 232.068481][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103c45000: rx timeout, send abort [ 232.082906][T17079] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 232.090403][T17086] sg_write: data in/out 483412/136 bytes for SCSI command 0x0-- guessing data in; [ 232.090403][T17086] program syz.0.4415 not setting count and/or reply_len properly [ 232.104212][ T28] audit: type=1400 audit(1780489083.836:2382): avc: denied { write } for pid=17072 comm="syz.8.4410" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.469016][T17103] loop6: detected capacity change from 0 to 164 [ 232.522035][ T28] audit: type=1400 audit(1780489084.266:2383): avc: denied { read } for pid=17100 comm="syz.3.4420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.546486][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.568503][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af8c200: rx timeout, send abort [ 232.576847][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103c45000: abort rx timeout. Force session deactivation [ 232.646869][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4422'. [ 232.684237][T17116] loop8: detected capacity change from 0 to 1024 [ 232.716742][T17116] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.742566][T17121] netlink: 'syz.7.4426': attribute type 20 has an invalid length. [ 232.751091][ T28] audit: type=1400 audit(1780489084.486:2384): avc: denied { write } for pid=17114 comm="syz.8.4425" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.773441][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4426'. [ 232.776235][T17116] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4425: bg 0: block 385: padding at end of block bitmap is not set [ 232.790048][T17121] netlink: 'syz.7.4426': attribute type 20 has an invalid length. [ 232.798729][ T30] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.805555][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4426'. [ 232.825844][ T28] audit: type=1400 audit(1780489084.486:2385): avc: denied { write } for pid=17114 comm="syz.8.4425" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.849207][ T30] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.849325][ T30] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.849379][ T30] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.879208][ T28] audit: type=1400 audit(1780489084.486:2386): avc: denied { rename } for pid=17114 comm="syz.8.4425" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 232.942916][ T28] audit: type=1400 audit(1780489084.686:2387): avc: denied { write } for pid=17104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.972335][T13867] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.070876][ T28] audit: type=1400 audit(1780489084.816:2388): avc: denied { write } for pid=17131 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.076750][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af8c200: abort rx timeout. Force session deactivation [ 233.103283][T17132] loop7: detected capacity change from 0 to 1024 [ 233.132786][T17132] EXT4-fs: Ignoring removed oldalloc option [ 233.162632][T17132] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 233.218044][T17132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.302459][ T28] audit: type=1400 audit(1780489085.046:2389): avc: denied { write } for pid=17142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.327631][T13845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.410548][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4434'. [ 233.425610][ T28] audit: type=1400 audit(1780489085.176:2390): avc: denied { write } for pid=17165 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.542104][T17174] netlink: 'syz.7.4439': attribute type 19 has an invalid length. [ 233.568319][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4439'. [ 233.579031][T17174] netlink: 'syz.7.4439': attribute type 19 has an invalid length. [ 233.610545][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4439'. [ 237.557091][T17250] loop7: detected capacity change from 0 to 1764 [ 237.610045][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 237.610075][ T28] audit: type=1400 audit(1780489345.412:2393): avc: denied { bind } for pid=17254 comm="syz.0.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.692750][T17263] loop7: detected capacity change from 0 to 128 [ 237.718271][T17267] hsr0: entered promiscuous mode [ 237.735782][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4471'. [ 237.770222][ T28] audit: type=1400 audit(1780489345.562:2394): avc: denied { name_bind } for pid=17273 comm="syz.3.4475" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 238.089194][T17267] hsr_slave_0: left promiscuous mode [ 238.104731][T17267] hsr_slave_1: left promiscuous mode [ 238.118151][T17267] hsr0 (unregistering): left promiscuous mode [ 238.271315][T17292] netlink: 'syz.8.4483': attribute type 18 has an invalid length. [ 238.280919][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 238.290272][T17292] netlink: 'syz.8.4483': attribute type 18 has an invalid length. [ 238.298470][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4483'. [ 238.301628][T17294] loop6: detected capacity change from 0 to 512 [ 238.338832][T17294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.391139][ T28] audit: type=1400 audit(1780489346.192:2395): avc: denied { write } for pid=17293 comm="syz.6.4484" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.455180][T13965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.522971][T17313] loop6: detected capacity change from 0 to 8 [ 238.547366][T17314] loop7: detected capacity change from 0 to 256 [ 238.554319][T17314] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.575128][T17313] loop6: detected capacity change from 8 to 7 [ 238.582827][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 238.594714][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.604187][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.643923][T17316] loop6: detected capacity change from 7 to 0 [ 238.645833][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 238.659956][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.668504][T17313] loop6: unable to read partition table [ 238.682473][T17313] loop6: partition table beyond EOD, truncated [ 238.696502][T17313] loop_reread_partitions: partition scan of loop6 (ÛuêƒG Ÿ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð [ 238.696502][T17313] å’ rejected, failed to enable media [ 242.841547][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4598'. [ 242.850852][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4598'. [ 242.982590][T17568] syz.8.4600 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 242.994592][T17568] CPU: 0 UID: 0 PID: 17568 Comm: syz.8.4600 Not tainted syzkaller #0 PREEMPT(lazy) [ 242.994636][T17568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.994724][T17568] Call Trace: [ 242.994732][T17568] [ 242.994742][T17568] __dump_stack+0x1d/0x30 [ 242.994771][T17568] dump_stack_lvl+0x95/0xd0 [ 242.994792][T17568] dump_stack+0x15/0x1b [ 242.994811][T17568] dump_header+0x80/0x240 [ 242.994831][T17568] oom_kill_process+0x295/0x350 [ 242.994936][T17568] out_of_memory+0x97d/0xb80 [ 242.995010][T17568] try_charge_memcg+0x62f/0xa10 [ 242.995049][T17568] charge_memcg+0x6d/0x120 [ 242.995074][T17568] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 242.995112][T17568] __swap_cache_prepare_and_add+0x69/0x4a0 [ 242.995143][T17568] ? alloc_pages_mpol+0x217/0x260 [ 242.995174][T17568] swap_cache_alloc_folio+0xa2/0x120 [ 242.995198][T17568] swap_cluster_readahead+0x25f/0x3c0 [ 242.995265][T17568] swapin_readahead+0xde/0x840 [ 242.995293][T17568] ? _raw_spin_unlock+0x9/0x30 [ 242.995316][T17568] ? swap_put_entries_cluster+0x46c/0x490 [ 242.995410][T17568] ? __rcu_read_unlock+0x4e/0x70 [ 242.995435][T17568] ? swap_cache_get_folio+0x1e0/0x1f0 [ 242.995457][T17568] do_swap_page+0x31e/0x2180 [ 242.995479][T17568] ? __css_rstat_updated+0xbb/0x280 [ 242.995620][T17568] ? __rcu_read_lock+0x36/0x50 [ 242.995641][T17568] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 242.995661][T17568] handle_mm_fault+0xb30/0x2e70 [ 242.995727][T17568] ? vma_start_read+0x1c7/0x2c0 [ 242.995760][T17568] do_user_addr_fault+0x62f/0x1050 [ 242.995794][T17568] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 242.995893][T17568] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 242.995915][T17568] ? trace_page_fault_user+0x1f/0xa0 [ 242.995964][T17568] exc_page_fault+0x62/0xa0 [ 242.995994][T17568] asm_exc_page_fault+0x26/0x30 [ 242.996013][T17568] RIP: 0033:0x7ff85ab8a7d0 [ 242.996031][T17568] Code: c4 4c 0f 42 e0 83 3d fa d5 3a 00 00 0f 8e d9 fd ff ff e8 23 80 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d be ae ed 00 e8 03 00 00 48 8d 1d bf b7 3a 00 e8 8a 31 13 00 [ 242.996048][T17568] RSP: 002b:00007fffabf3fba0 EFLAGS: 00010206 [ 242.996083][T17568] RAX: 000000000003b4f5 RBX: 00007ff85af37da0 RCX: 000000000003b150 [ 242.996097][T17568] RDX: 00000000000003a5 RSI: 00007fffabf3fb80 RDI: 0000000000000001 [ 242.996113][T17568] RBP: 00007ff85af37da0 R08: 00000000379c88d3 R09: 3fffffffffffffff [ 242.996129][T17568] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000003b7f8 [ 242.996145][T17568] R13: 00007ff85af3609c R14: 000000000003b520 R15: 00007ff85af36090 [ 242.996195][T17568] [ 242.996379][T17568] memory: usage 307200kB, limit 307200kB, failcnt 143 [ 243.269210][T17568] memory+swap: usage 800kB, limit 9007199254740988kB, failcnt 0 [ 243.276954][T17568] kmem: usage 476kB, limit 9007199254740988kB, failcnt 0 [ 243.284343][T17568] Memory cgroup stats for /syz8: [ 243.284721][T17568] cache 0 [ 243.293044][T17568] rss 28672 [ 243.296338][T17568] shmem 0 [ 243.299399][T17568] mapped_file 0 [ 243.303138][T17568] dirty 0 [ 243.306240][T17568] writeback 8192 [ 243.309907][T17568] workingset_refault_anon 1081 [ 243.314915][T17568] workingset_refault_file 0 [ 243.319626][T17568] swap 143360 [ 243.323057][T17568] swapcached 20484096 [ 243.327270][T17568] pgpgin 44419 [ 243.330745][T17568] pgpgout 44406 [ 243.334430][T17568] pgfault 66500 [ 243.338052][T17568] pgmajfault 152 [ 243.341755][T17568] inactive_anon 8192 [ 243.345890][T17568] active_anon 45056 [ 243.349854][T17568] inactive_file 0 [ 243.353727][T17568] active_file 0 [ 243.357365][T17568] unevictable 0 [ 243.360991][T17568] hierarchical_memory_limit 314572800 [ 243.366764][T17568] hierarchical_memsw_limit 9223372036854771712 [ 243.373554][T17568] total_cache 0 [ 243.375596][ T4585] Bluetooth: hci0: command 0x1003 tx timeout [ 243.377280][T17568] total_rss 28672 [ 243.383150][ T3617] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 243.393805][T17568] total_shmem 0 [ 243.397579][T17568] total_mapped_file 0 [ 243.401801][T17568] total_dirty 0 [ 243.405508][T17568] total_writeback 8192 [ 243.409923][T17568] total_workingset_refault_anon 1081 [ 243.415554][T17568] total_workingset_refault_file 0 [ 243.420993][T17568] total_swap 143360 [ 243.423580][T17578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4603'. [ 243.425219][T17568] total_swapcached 20484096 [ 243.439447][T17568] total_pgpgin 44419 [ 243.443603][T17568] total_pgpgout 44406 [ 243.447770][T17568] total_pgfault 66506 [ 243.452002][T17568] total_pgmajfault 152 [ 243.456427][T17568] total_inactive_anon 8192 [ 243.461173][T17568] total_active_anon 45056 [ 243.465792][T17568] total_inactive_file 0 [ 243.470150][T17568] total_active_file 0 [ 243.474414][T17568] total_unevictable 0 [ 243.478608][T17568] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.4600,pid=17568,uid=0 [ 243.494247][T17568] Memory cgroup out of memory: Killed process 17568 (syz.8.4600) total-vm:94168kB, anon-rss:1256kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 243.543846][ T28] audit: type=1326 audit(1780489351.352:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.593948][ T28] audit: type=1326 audit(1780489351.372:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.636155][ T28] audit: type=1326 audit(1780489351.382:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.691083][ T28] audit: type=1326 audit(1780489351.382:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.718431][ T28] audit: type=1326 audit(1780489351.382:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.745468][ T28] audit: type=1326 audit(1780489351.382:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.791903][T17593] usb usb5: usbfs: process 17593 (syz.7.4610) did not claim interface 0 before use [ 243.804559][ T28] audit: type=1326 audit(1780489351.382:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.832347][ T28] audit: type=1326 audit(1780489351.382:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.864629][ T28] audit: type=1326 audit(1780489351.382:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 243.911950][ T28] audit: type=1326 audit(1780489351.382:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="syz.8.4604" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ff85acbce59 code=0x7ffc0000 [ 244.287318][T17624] set_capacity_and_notify: 2 callbacks suppressed [ 244.287362][T17624] loop8: detected capacity change from 0 to 256 [ 244.303670][T17624] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.316609][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4621'. [ 244.328667][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4621'. [ 244.645361][T17643] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 244.813946][T17645] loop8: detected capacity change from 0 to 8192 [ 244.822832][T17645] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.878767][T17645] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 244.937551][T17645] FAT-fs (loop8): Filesystem has been set read-only [ 245.128477][T17678] ip_vti0: entered promiscuous mode [ 245.156138][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4646'. [ 245.291945][T17688] netlink: 'syz.3.4652': attribute type 6 has an invalid length. [ 245.536001][T17708] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4660'. [ 246.062741][T17742] dummy0: entered promiscuous mode [ 246.072305][T17742] gretap0: entered promiscuous mode [ 246.079639][T17742] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 246.090918][T17742] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 246.102163][T17742] hsr1: entered allmulticast mode [ 246.107638][T17742] dummy0: entered allmulticast mode [ 246.115568][T17742] gretap0: entered allmulticast mode [ 246.129356][T17730] loop8: detected capacity change from 0 to 32768 [ 246.183855][T17730] loop8: p1 [ 246.372161][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 246.635764][T17768] netlink: 'syz.0.4686': attribute type 8 has an invalid length. [ 246.697006][T17772] loop7: detected capacity change from 0 to 512 [ 246.719666][T17772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.775947][T17772] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.853351][T13845] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.386115][T17801] loop6: detected capacity change from 0 to 512 [ 247.423941][T17801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.436571][T17801] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.784188][T17818] loop8: detected capacity change from 0 to 512 [ 247.806777][T17818] ext4: Unknown parameter 'obj_role' [ 247.855117][T17825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.872818][T17825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.991704][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4708'. [ 248.200541][T17825] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.207861][T17825] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.285559][T13965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.368846][T17825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.412571][T17825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.640376][T17825] dummy0: left promiscuous mode [ 248.810614][T17851] loop6: detected capacity change from 0 to 8192 [ 248.868838][T17851] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.912533][T17851] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 248.914485][T17825] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 248.944636][T17851] FAT-fs (loop6): Filesystem has been set read-only [ 248.964793][T17851] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 249.080308][ T7650] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.111761][ T7650] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.186761][ T7650] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.218717][ T7650] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.574884][T17872] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 249.615205][T17872] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 249.808943][T17868] loop7: detected capacity change from 0 to 32768 [ 249.867814][T17868] loop7: p1 [ 249.948963][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 249.948978][ T28] audit: type=1326 audit(1780489357.752:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.3.4723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 249.997889][ T28] audit: type=1326 audit(1780489357.782:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.3.4723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 250.023865][ T28] audit: type=1326 audit(1780489357.782:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.3.4723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 250.084353][ T28] audit: type=1326 audit(1780489357.782:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.3.4723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 250.110562][ T28] audit: type=1326 audit(1780489357.782:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.3.4723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 250.138125][ T28] audit: type=1326 audit(1780489357.782:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.3.4723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 250.184151][ T28] audit: type=1326 audit(1780489357.782:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.3.4723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 250.246000][ T28] audit: type=1326 audit(1780489358.052:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17881 comm="syz.3.4723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb68849ce59 code=0x7ffc0000 [ 250.296642][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 250.453592][ T28] audit: type=1400 audit(1780489358.262:2443): avc: denied { accept } for pid=17903 comm="syz.3.4738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 250.673599][T17925] netlink: 'syz.0.4747': attribute type 1 has an invalid length. [ 250.699057][T17925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.770926][T17925] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 250.921400][T17941] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 250.946298][ T28] audit: type=1400 audit(1780489358.752:2444): avc: denied { relabelto } for pid=17940 comm="syz.0.4754" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=5646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="/sbin/dhclient" [ 251.290246][T17965] futex_wake_op: syz.7.4764 tries to shift op by -1; fix this program [ 251.512875][T17985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4771'. [ 251.517200][T17986] xt_hashlimit: size too large, truncated to 1048576 [ 252.114791][T18006] loop8: detected capacity change from 0 to 32768 [ 252.185590][T18006] loop8: p1 p3 < > [ 252.259841][T18042] veth0: entered promiscuous mode [ 252.296969][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4796'. [ 252.324922][T18042] veth0 (unregistering): left promiscuous mode [ 252.444820][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 252.457758][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 252.523336][T18072] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.578918][T18072] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.616536][T18085] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4814'. [ 252.627011][T18085] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.634662][T18085] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.649466][T18072] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.650083][T18085] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4814'. [ 252.726142][T18072] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.810552][ T7650] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.830193][ T7650] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.846027][ T7650] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.858279][ T7650] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.954231][T18110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.962878][T18110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.984631][T18110] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 253.011044][ T7642] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.028332][ T7642] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.037215][ T7642] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.046068][ T7642] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.068725][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4829'. [ 253.077911][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4829'. [ 253.090449][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4829'. [ 253.093846][ T310] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.100900][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4829'. [ 253.112844][ T310] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.131482][ T310] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.141864][ T310] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.542549][ T2981] ================================================================== [ 253.550669][ T2981] BUG: KCSAN: data-race in d_make_discardable / do_readlinkat [ 253.558194][ T2981] [ 253.560518][ T2981] write to 0xffff88811b0b0cc0 of 4 bytes by task 3290 on cpu 1: [ 253.568238][ T2981] d_make_discardable+0x4f/0xa0 [ 253.573100][ T2981] simple_unlink+0x68/0x80 [ 253.577518][ T2981] shmem_unlink+0x12d/0x140 [ 253.582051][ T2981] vfs_unlink+0x1c7/0x490 [ 253.586409][ T2981] filename_unlinkat+0x1e2/0x410 [ 253.591381][ T2981] __se_sys_unlink+0x2b/0xe0 [ 253.595977][ T2981] __x64_sys_unlink+0x1f/0x30 [ 253.600694][ T2981] x64_sys_call+0x2eb6/0x3020 [ 253.605386][ T2981] do_syscall_64+0x12c/0x3b0 [ 253.609995][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.615899][ T2981] [ 253.618317][ T2981] read to 0xffff88811b0b0cc0 of 4 bytes by task 2981 on cpu 0: [ 253.625862][ T2981] do_readlinkat+0xa0/0x2f0 [ 253.630384][ T2981] __x64_sys_readlink+0x47/0x60 [ 253.635242][ T2981] x64_sys_call+0x2b51/0x3020 [ 253.639929][ T2981] do_syscall_64+0x12c/0x3b0 [ 253.644529][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.650429][ T2981] [ 253.652752][ T2981] value changed: 0x08300080 -> 0x00300180 [ 253.658465][ T2981] [ 253.660791][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 253.666951][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 253.675803][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.685859][ T2981] ==================================================================