last executing test programs: 3m21.242702038s ago: executing program 32 (id=99): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2ec) 3m10.982926771s ago: executing program 33 (id=245): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001c80)=@newlink={0x48, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b770", 0x3, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 3m10.315989058s ago: executing program 34 (id=259): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)='5', 0x1}], 0x1, 0x0, 0x0, 0x40883}], 0x1, 0x8881) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x81, @loopback, 0x47}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003600)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000040)=0x10) 2m52.06632589s ago: executing program 35 (id=299): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x288, 0x20a, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0x0, 0xffffffff, 0xff000000], 'veth0_to_bridge\x00', 'wlan1\x00', {0xff}, {0xff}, 0x5e, 0x5, 0x0, 0x29}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0}) 2m34.88512209s ago: executing program 36 (id=528): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 2m5.873756762s ago: executing program 37 (id=868): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x27}, @in=@private=0xa010102, 0x4e62, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x400, 0x100000000c, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@local, 0x800, 0x32}, 0x2, @in=@broadcast, 0x3501, 0x4, 0x2, 0x0, 0x0, 0x2, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) 1m57.907984159s ago: executing program 6 (id=1333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xfff2}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) 1m57.778743041s ago: executing program 38 (id=1348): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 1m57.728554702s ago: executing program 6 (id=1339): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x61, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 1m57.552110754s ago: executing program 6 (id=1342): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m57.269002977s ago: executing program 6 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m57.176320848s ago: executing program 6 (id=1347): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) 1m56.93628463s ago: executing program 6 (id=1351): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r2, r3) keyctl$setperm(0x5, r0, 0x30925) keyctl$read(0xb, r0, 0x0, 0x0) 1m56.91645983s ago: executing program 39 (id=1351): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r2, r3) keyctl$setperm(0x5, r0, 0x30925) keyctl$read(0xb, r0, 0x0, 0x0) 1m40.630694671s ago: executing program 3 (id=1599): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2, 0x0, 0x2000000}, 0x38) 1m40.331325634s ago: executing program 3 (id=1608): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f0000000f40)={[{@jqfmt_vfsold}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000001680)="$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") r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x8e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd699eebf900580600fe800000000000000000000000000039fe8000000000000000000000000000aa4e224e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c20001"], 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x10) 1m39.643728572s ago: executing program 3 (id=1620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x800001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000014c0)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m39.472095514s ago: executing program 3 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 1m39.376419824s ago: executing program 3 (id=1625): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x23, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1m38.652702153s ago: executing program 3 (id=1630): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000ac0)="a3", 0x1}], 0x1}}], 0x1, 0x4044c04) 1m38.537277044s ago: executing program 40 (id=1630): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000ac0)="a3", 0x1}], 0x1}}], 0x1, 0x4044c04) 45.731490443s ago: executing program 7 (id=2714): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1", 0x7}], 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000004c0)=""/112, 0x70}], 0x1}, 0x59635e78}], 0x1, 0x20000020, 0x0) 45.707042074s ago: executing program 7 (id=2715): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x39b3) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 45.687406154s ago: executing program 7 (id=2717): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 45.626745694s ago: executing program 7 (id=2719): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000003c0)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 45.574634595s ago: executing program 7 (id=2733): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffe0, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 45.272018978s ago: executing program 7 (id=2726): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@nombcache}, {@debug}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x30) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) writev(r1, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x69) 45.221850999s ago: executing program 41 (id=2726): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@nombcache}, {@debug}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x30) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) writev(r1, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x69) 40.284167263s ago: executing program 5 (id=2829): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = getpgrp(0x0) r1 = gettid() mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rt_tgsigqueueinfo(r0, r1, 0x21, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) rt_tgsigqueueinfo(r0, r1, 0x24, &(0x7f0000000040)={0xa, 0x8, 0x29b}) ppoll(0x0, 0x0, 0x0, &(0x7f0000002d40)={[0x100000001]}, 0x8) 40.217491593s ago: executing program 5 (id=2832): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x60600) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "000100", "16de86d67a8426bd"}, 0x28) poll(&(0x7f0000000080)=[{r0, 0x3154}], 0x1, 0x100) 40.175517254s ago: executing program 5 (id=2833): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_gettime(r1, 0x0) r2 = epoll_create1(0x80000) epoll_pwait2(r2, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000240)={[0xd]}, 0x8) 40.120046514s ago: executing program 5 (id=2837): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x90, &(0x7f0000000040)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000100)='./control\x00') 39.900167036s ago: executing program 5 (id=2842): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.821335408s ago: executing program 5 (id=2844): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaae1aa86dd606410a6002e0001fe8000000000000000600000000000120000000000000000000000000000000104"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) 39.795674628s ago: executing program 2 (id=2846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a3bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 39.737202429s ago: executing program 42 (id=2844): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaae1aa86dd606410a6002e0001fe8000000000000000600000000000120000000000000000000000000000000104"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) 39.662462469s ago: executing program 2 (id=2849): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nolazytime}, {@lazytime}, {@sysvgroups}, {@norecovery}, {@usrjquota}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000001b40)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}]) 39.324498153s ago: executing program 2 (id=2852): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 38.943322037s ago: executing program 2 (id=2861): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x98d887, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 38.757036639s ago: executing program 2 (id=2864): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x800008006, 0xfffffffffffff800}, 0x0, 0x10001, 0xde, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) 38.608368481s ago: executing program 2 (id=2867): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x50007a2) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff940208000200000040000000000000000000000000000000000000002d8f380005"], 0xed) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 38.606974971s ago: executing program 43 (id=2867): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x50007a2) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff940208000200000040000000000000000000000000000000000000002d8f380005"], 0xed) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2.74435314s ago: executing program 1 (id=3472): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 2.281153375s ago: executing program 1 (id=3479): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) 2.280815595s ago: executing program 1 (id=3481): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x2b, 0xb, 0x53, 0x5, 0x0, 0x4, 0x0, 0x13, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000440), 0x1}, 0x20, 0x10001, 0x21382424, 0x3, 0x5, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x5add, &(0x7f0000000440)={0x0, 0x231a, 0x100, 0xffffffff, 0xd}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000)) 1.928839268s ago: executing program 4 (id=3490): socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='cdg', 0x62) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) keyctl$set_reqkey_keyring(0xe, 0x1) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000200)=""/78) 1.83225402s ago: executing program 4 (id=3491): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1130, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x4}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xd9d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.79126744s ago: executing program 9 (id=3493): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x102) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 1.77583288s ago: executing program 4 (id=3494): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x2, 0x80, 0x1, 0x5, 0x2, 0x6}, @llc={@snap={0xab, 0x1, "8a", "c6409c", 0x6003}}}, 0x12) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x20, 0x0, 0x10000) 1.646215242s ago: executing program 9 (id=3495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2482, 0x10) 1.590401682s ago: executing program 9 (id=3497): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0xe1100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}}}, &(0x7f0000000300)=0x84) 1.568576792s ago: executing program 4 (id=3498): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, [@map_fd={0x18, 0x2}, @jmp={0x5, 0x0, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffffc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @ldst={0x2, 0x3, 0x6, 0x8, 0xb, 0x4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, @map_fd={0x18, 0x7}]}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.455339254s ago: executing program 4 (id=3502): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000340)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.429999814s ago: executing program 8 (id=3503): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x8003, 0x4, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) 1.368319205s ago: executing program 0 (id=3504): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x5ea7}}, 0x20}}, 0x2000e844) 1.368143295s ago: executing program 8 (id=3505): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x22) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x88, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e25, 0x0, 'sed\x00', 0x3e, 0x3, 0x1e}, 0x2c) 1.331848285s ago: executing program 8 (id=3506): syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.255112146s ago: executing program 0 (id=3507): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) 1.120292097s ago: executing program 0 (id=3508): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13d, 0x0, 0x4, 0x18e}) close_range(r1, 0xffffffffffffffff, 0x0) 976.178899ms ago: executing program 1 (id=3509): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) acct(&(0x7f00000000c0)='./file0\x00') 891.64597ms ago: executing program 0 (id=3510): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, @in6=@mcast1, 0x0, 0x0, 0xfffc, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffa}, {0x4}, 0x5, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 686.767422ms ago: executing program 9 (id=3511): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x7, 0x101}, 0x214, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x244cd1, &(0x7f00000009c0)=ANY=[@ANYBLOB="646f733178666c6d7070792c666d61736b3d3030303030303030303030303044469850303030303030303031312c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d936169843d302c64686e0850a32390aa30303030303030303030303030a1303030303430302c747a3d5554432c756e695f786c6174653d312c756e695f786c6174653d3d77696e6e742c000ba6a1bb52a31bc1a85bbff6263ad65872ca48f8ac986955b429759246337c388289e08a58"], 0x0, 0x284, &(0x7f0000000700)="$eJzs3E9rE10Ux/Ffk/5NaZPFwwMK4kE3uhna+AqCtCAGKrURdSFM7URDxqRkYiUitju3vguhuHQnqG+gG3fuxU0RBDddiJEmmSatgbbaONF8PxDmZs6czL2TmXBmIHf75vMHxXwQU0tM2tCOlNLeKg21YxrSqDpt6OLk1w9nrt+6fTWTze7G5jNLl9JmNn32zaMnL8+9q07eeDX9ekxbqTvbX9Ift/7fOrX9fSn89HLVXFsul6vusu/ZSiEoOmbXfM8NPCuUAq+yL573y6urNXNLK1OJ1YoXBOaWalb0alYtW7VSM/eeWyiZ4zg2ldCgiR87I7e5uOhmetIZRGGi28pKJePGuwZzm3+iUwAAoL+06n8n71YVG7ffrP/nFs2OVv/fLwRWCKx0WP0fE/V/71D/D4Ld+j/Run73o/4HAAAAAAAAAAAAAAAAAAAAAOBvsFOvJ+v1ejJchq8xSeOSwvdR9xO9wfc/2Dr+uDcu+c/Wcmu55rIZz+RVkC9PMyPSt8b50NJsz1/Jzs1YQ0pv/fVW/vpaLq6xMD+U6p4/28y3/fkjSnTuP62k/uuen+6aP6oL5zvyHSX1/q7K8rXSOK/b+U9nzS4vZA/kTzS2AwAAAADgX+DYnp/u3xtxx8JpQw7EmyvbzweUPOT5wIH762GdHo5u3AAAAAAADJKg9rjo+r5XoXGcxkKPDt2LfhlgPzRikiLa+2dJ/XEQTrTx6WHzqj/KxlH/MgEAAAA4ae2iP+qeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuI46eVi4/a/MPdaxu3g0owQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6w48AAAD//0zfHpw=") remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 577.422823ms ago: executing program 4 (id=3512): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x208000, &(0x7f0000000280)={[{@block_validity}, {}, {@data_err_ignore}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) 536.339434ms ago: executing program 9 (id=3522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 93.658729ms ago: executing program 1 (id=3513): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 93.552859ms ago: executing program 9 (id=3514): unshare(0x40200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@gettclass={0x0, 0x2a, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x5}, {0x10, 0x10}}, ["", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x240000c0}, 0x20004000) r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd}, {0x0, 0x4, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) unshare(0x40400) 93.446769ms ago: executing program 0 (id=3515): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 93.145019ms ago: executing program 8 (id=3524): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xa, 0x8, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x2, 0xf3, 0x9}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x1) 55.836409ms ago: executing program 8 (id=3516): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 44.304179ms ago: executing program 1 (id=3517): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 260.14µs ago: executing program 0 (id=3518): timer_create(0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x20004, 0x0, 0x10000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0x8000000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x5a) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 0s ago: executing program 8 (id=3519): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): id=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.7.1677" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff78acdd9 code=0x7ffc0000 [ 148.595496][ T28] audit: type=1326 audit(1777979947.382:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.7.1677" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff78acdd9 code=0x7ffc0000 [ 148.650065][ T28] audit: type=1326 audit(1777979947.382:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.7.1677" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ff78acdd9 code=0x7ffc0000 [ 148.686859][ T28] audit: type=1326 audit(1777979947.382:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.7.1677" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff78acdd9 code=0x7ffc0000 [ 148.696650][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.714523][ T28] audit: type=1326 audit(1777979947.382:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8958 comm="syz.7.1677" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff78acdd9 code=0x7ffc0000 [ 148.722961][ T8975] loop2: detected capacity change from 0 to 512 [ 148.755781][ T8977] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 148.777042][ T8975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.803577][ T8977] bond1: (slave lo): Enslaving as an active interface with an up link [ 148.817175][ T8977] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 148.853339][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.985845][ T9013] hsr0: entered promiscuous mode [ 148.994337][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 149.071074][ T8835] veth0_vlan: entered promiscuous mode [ 149.081718][ T8835] veth1_vlan: entered promiscuous mode [ 149.099077][ T8835] veth0_macvtap: entered promiscuous mode [ 149.108310][ T8835] veth1_macvtap: entered promiscuous mode [ 149.121394][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.136588][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.320153][ T9041] loop5: detected capacity change from 0 to 512 [ 149.336060][ T9041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.362715][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.395766][ T9045] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.411284][ T9045] bond1: (slave lo): Enslaving as an active interface with an up link [ 149.420820][ T9045] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 149.599458][ T9062] hsr0: entered promiscuous mode [ 149.606255][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1705'. [ 149.781812][ T9068] loop7: detected capacity change from 0 to 128 [ 149.788960][ T9068] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.815053][ T9068] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.845364][ T12] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.921032][ T9073] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 149.936804][ T9073] bond1: (slave lo): Enslaving as an active interface with an up link [ 149.947435][ T9073] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.148737][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1728'. [ 150.197761][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1717'. [ 150.255966][ T9100] loop7: detected capacity change from 0 to 512 [ 150.263494][ T9103] 9p: Bad value for 'rfdno' [ 150.294597][ T9100] FAT-fs (loop7): Directory bread(block 199916) failed [ 150.310404][ T9100] FAT-fs (loop7): Directory bread(block 199917) failed [ 150.319104][ T9100] FAT-fs (loop7): Directory bread(block 199918) failed [ 150.327995][ T9100] FAT-fs (loop7): Directory bread(block 199919) failed [ 150.351066][ T9100] FAT-fs (loop7): Directory bread(block 199920) failed [ 150.367909][ T9100] FAT-fs (loop7): Directory bread(block 199921) failed [ 150.380097][ T9100] FAT-fs (loop7): Directory bread(block 199922) failed [ 150.392935][ T9100] FAT-fs (loop7): Directory bread(block 199923) failed [ 150.416913][ T9109] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.432171][ T9109] bond1: (slave lo): Enslaving as an active interface with an up link [ 150.442963][ T9109] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 150.491589][ T9118] loop2: detected capacity change from 0 to 512 [ 150.498601][ T9118] EXT4-fs: Ignoring removed oldalloc option [ 150.514410][ T9118] EXT4-fs (loop2): 1 truncate cleaned up [ 150.525271][ T9118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.609089][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.730432][ T9145] netlink: 'syz.7.1742': attribute type 7 has an invalid length. [ 150.745546][ T9145] netlink: 'syz.7.1742': attribute type 7 has an invalid length. [ 151.109754][ T9189] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1756'. [ 151.547318][ T9245] loop5: detected capacity change from 0 to 256 [ 151.556248][ T9245] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.985869][ T9303] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1770'. [ 152.027238][ T9307] dummy0: entered allmulticast mode [ 152.045471][ T9307] dummy0: left allmulticast mode [ 152.238118][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.312178][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.394479][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.477760][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.602873][ T12] bridge_slave_1: left allmulticast mode [ 152.609216][ T12] bridge_slave_1: left promiscuous mode [ 152.615875][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.627572][ T12] bridge_slave_0: left allmulticast mode [ 152.639992][ T12] bridge_slave_0: left promiscuous mode [ 152.651688][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.918710][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.937783][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.956400][ T12] bond0 (unregistering): Released all slaves [ 153.004221][ T9378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1800'. [ 153.028766][ T9381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1803'. [ 153.029573][ T9378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1800'. [ 153.049779][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1803'. [ 153.063788][ T12] hsr_slave_0: left promiscuous mode [ 153.085013][ T12] hsr_slave_1: left promiscuous mode [ 153.094273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.133383][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.161176][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.179883][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.207466][ T12] veth1_macvtap: left promiscuous mode [ 153.217787][ T12] veth0_macvtap: left promiscuous mode [ 153.232857][ T12] veth1_vlan: left promiscuous mode [ 153.247378][ T12] veth0_vlan: left promiscuous mode [ 153.461425][ T12] team0 (unregistering): Port device team_slave_1 removed [ 153.485492][ T12] team0 (unregistering): Port device team_slave_0 removed [ 153.582040][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 153.735281][ T9430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1816'. [ 153.757912][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 153.802006][ T9437] netlink: get zone limit has 8 unknown bytes [ 153.836949][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 153.836967][ T28] audit: type=1400 audit(1777979952.782:927): avc: denied { write } for pid=9419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.917307][ T28] audit: type=1400 audit(1777979952.862:928): avc: denied { write } for pid=9450 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.001492][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 154.234249][ T28] audit: type=1400 audit(1777979953.172:929): avc: denied { write } for pid=9473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.295310][ T9498] netlink: get zone limit has 8 unknown bytes [ 154.319098][ T28] audit: type=1400 audit(1777979953.252:930): avc: denied { write } for pid=9496 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.379443][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 154.426647][ T9509] pim6reg: entered allmulticast mode [ 154.444471][ T9509] pim6reg: left allmulticast mode [ 154.663553][ T28] audit: type=1400 audit(1777979953.582:931): avc: denied { write } for pid=9514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.733503][ T28] audit: type=1400 audit(1777979953.672:932): avc: denied { write } for pid=9541 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.811107][ T9545] netem: change failed [ 154.846384][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28 [ 155.052689][ T9575] netlink: 'syz.1.1864': attribute type 1 has an invalid length. [ 155.063657][ T9575] netlink: 'syz.1.1864': attribute type 2 has an invalid length. [ 155.162271][ T9578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.784749][ T9609] loop5: detected capacity change from 0 to 256 [ 155.794801][ T9609] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.814791][ T9609] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 155.833921][ T9609] FAT-fs (loop5): Filesystem has been set read-only [ 155.892440][ T9616] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.911521][ T9609] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 155.921948][ T9609] FAT-fs (loop5): Filesystem has been set read-only [ 155.928978][ T9609] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 155.942386][ T9609] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 155.963692][ T9609] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 155.973141][ T9609] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 156.015865][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 156.039215][ T28] audit: type=1400 audit(1777979954.982:933): avc: denied { ioctl } for pid=9623 comm="syz.7.1884" path="socket:[25153]" dev="sockfs" ino=25153 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 156.076530][ T9622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.091508][ T28] audit: type=1326 audit(1777979955.032:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.4.1885" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 156.129065][ T28] audit: type=1326 audit(1777979955.062:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.4.1885" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 156.158075][ T28] audit: type=1326 audit(1777979955.062:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9628 comm="syz.4.1885" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 156.333611][ T9651] netlink: 'syz.4.1895': attribute type 1 has an invalid length. [ 156.368820][ T9651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.402293][ T9651] bond2: (slave geneve2): making interface the new active one [ 156.412550][ T9651] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 157.260232][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 157.277674][ T9793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.110790][ T9810] loop2: detected capacity change from 0 to 512 [ 158.120252][ T9810] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 158.146290][ T9810] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 158.173525][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 158.180346][ C1] EXT4-fs (loop2): initial error at time 1777979957: mb_free_blocks:2049: inode 11: block 64 [ 158.192772][ C1] EXT4-fs (loop2): last error at time 1777979957: mb_free_blocks:2049: inode 11: block 64 [ 158.206214][ T9810] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1928: corrupted inode contents [ 158.224155][ T9810] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.224336][ T9810] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #11: comm syz.2.1928: mark_inode_dirty error [ 158.252317][ T9810] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.252641][ T9810] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1928: invalid indirect mapped block 1 (level 1) [ 158.276323][ T9810] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.277160][ T9810] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1928: corrupted inode contents [ 158.298828][ T9810] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.299099][ T9810] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 158.321364][ T9810] loop2: lost filesystem error report for type 5 error -117 [ 158.321585][ T9810] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #11: comm syz.2.1928: corrupted inode contents [ 158.344582][ T9810] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.347454][ T9810] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.1928: mark_inode_dirty error [ 158.369312][ T9810] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 158.369586][ T9810] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 158.388331][ T9810] loop2: lost filesystem error report for type 5 error -117 [ 158.388604][ T9810] EXT4-fs (loop2): 1 truncate cleaned up [ 158.403748][ T9810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.437854][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.467289][ T3437] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 158.479117][ T3437] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.126798][ T9867] IPv4: Oversized IP packet from 127.202.26.0 [ 159.967681][ T9895] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 159.981633][ T9895] bond2: entered promiscuous mode [ 159.987185][ T9895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.004196][ T9895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.011716][ T9895] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 160.022558][ T9895] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 160.034697][ T9895] bond2: (slave vcan1): making interface the new active one [ 160.042111][ T9895] vcan1: entered promiscuous mode [ 160.050142][ T9895] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 160.147393][ T9901] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 160.162209][ T9901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.180506][ T9901] bond3: (slave geneve2): making interface the new active one [ 160.188448][ T9780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.200600][ T9901] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 160.258581][ T9905] netlink: 'syz.2.1959': attribute type 25 has an invalid length. [ 160.269246][ T9906] loop7: detected capacity change from 0 to 1024 [ 160.276078][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 160.278275][ T9906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.304218][ T9906] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01d, mo2=0003] [ 160.307633][ T9905] netlink: 'syz.2.1959': attribute type 25 has an invalid length. [ 160.313391][ T9906] System zones: 0-1, 3-36 [ 160.325820][ T9905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 160.336722][ T9906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.370580][ T9906] EXT4-fs (loop7): shut down requested (2) [ 160.464286][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.614323][ T9936] xt_TCPMSS: Only works on TCP SYN packets [ 160.645530][ T9942] loop7: detected capacity change from 0 to 512 [ 160.671066][ T9942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 160.688723][ T9942] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.746412][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 160.746431][ T28] audit: type=1400 audit(1777979959.692:954): avc: denied { remount } for pid=9941 comm="syz.7.1973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 160.766121][ T9942] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.781800][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 160.791273][ T9951] netlink: 'syz.1.1976': attribute type 11 has an invalid length. [ 160.802825][ T9951] vxlan0: entered promiscuous mode [ 160.810935][ T4785] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.825176][ T4785] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.834611][ T4785] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.843612][ T4785] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.860022][ T9942] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000d40000. [ 160.898073][ T9957] loop5: detected capacity change from 0 to 1024 [ 160.905703][ T9957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.921311][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 160.930997][ T9957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01d, mo2=0003] [ 160.942033][ T9957] System zones: 0-1, 3-36 [ 160.948332][ T9957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.965246][ T9957] EXT4-fs (loop5): shut down requested (2) [ 160.985011][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.009074][ T9960] loop7: detected capacity change from 0 to 128 [ 161.036106][ T9960] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.050891][ T9960] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.060032][ T9964] syzkaller1: entered promiscuous mode [ 161.071487][ T28] audit: type=1400 audit(1777979960.012:955): avc: denied { write } for pid=9959 comm="syz.7.1980" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.087925][ T9964] syzkaller1: entered allmulticast mode [ 161.138053][ T9970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9970 comm=syz.4.1983 [ 161.139441][ T7788] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.198038][ T9975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9975 comm=syz.4.1985 [ 161.211574][ T9975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=9975 comm=syz.4.1985 [ 161.279101][ T9981] pimreg: entered allmulticast mode [ 161.285477][ T28] audit: type=1400 audit(1777979960.232:956): avc: denied { cpu } for pid=9984 comm="syz.4.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.306363][ T9981] pimreg: left allmulticast mode [ 161.341408][ T9992] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1991'. [ 161.352007][ T9992] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1991'. [ 161.393876][ T28] audit: type=1400 audit(1777979960.342:957): avc: denied { connect } for pid=9995 comm="syz.5.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 161.451322][T10000] loop2: detected capacity change from 0 to 1024 [ 161.495323][T10000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.513140][ T28] audit: type=1400 audit(1777979960.452:958): avc: denied { write } for pid=9999 comm="syz.2.1994" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.555011][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.640715][T10015] syzkaller1: entered promiscuous mode [ 161.646729][T10015] syzkaller1: entered allmulticast mode [ 161.767870][T10027] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2003'. [ 161.777782][T10027] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2003'. [ 161.815434][T10032] netlink: 'syz.4.2005': attribute type 25 has an invalid length. [ 161.825313][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 161.847026][T10032] netlink: 'syz.4.2005': attribute type 25 has an invalid length. [ 161.855248][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 161.864416][T10036] loop2: detected capacity change from 0 to 256 [ 161.939219][T10043] xt_TCPMSS: Only works on TCP SYN packets [ 162.473511][T10057] loop5: detected capacity change from 0 to 8192 [ 162.484467][T10057] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.564175][T10061] loop5: detected capacity change from 0 to 512 [ 162.575025][T10061] EXT4-fs: Ignoring removed oldalloc option [ 162.590002][T10061] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.607551][T10061] EXT4-fs (loop5): 1 truncate cleaned up [ 162.624208][T10061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.669153][T10068] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2019'. [ 162.694882][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.907027][T10093] loop5: detected capacity change from 0 to 1024 [ 162.929192][T10093] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.943435][T10093] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.959104][ T28] audit: type=1400 audit(1777979961.902:959): avc: denied { write } for pid=10092 comm="syz.5.2033" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.965242][T10093] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2033: bg 0: block 112: padding at end of block bitmap is not set [ 163.003840][T10093] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 163.019847][T10093] EXT4-fs (loop5): This should not happen!! Data will be lost [ 163.019847][T10093] [ 163.032119][T10093] EXT4-fs (loop5): Total free blocks count 0 [ 163.039066][T10093] EXT4-fs (loop5): Free/Dirty block details [ 163.045950][T10093] EXT4-fs (loop5): free_blocks=0 [ 163.052774][T10093] EXT4-fs (loop5): dirty_blocks=64 [ 163.059159][T10093] EXT4-fs (loop5): Block reservation details [ 163.065595][T10093] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 163.102441][ T8835] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 163.117264][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.357019][ T28] audit: type=1400 audit(1777979962.302:960): avc: denied { ioctl } for pid=10121 comm="syz.4.2043" path="socket:[26726]" dev="sockfs" ino=26726 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 163.398704][T10137] loop2: detected capacity change from 0 to 512 [ 163.417662][T10137] EXT4-fs: Ignoring removed oldalloc option [ 163.429774][T10137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.452156][T10137] EXT4-fs (loop2): 1 truncate cleaned up [ 163.467142][T10137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.762898][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.754924][T10177] netlink: 'syz.1.2065': attribute type 1 has an invalid length. [ 164.950504][ T28] audit: type=1400 audit(1777979963.892:961): avc: denied { watch watch_reads } for pid=10192 comm="syz.7.2071" path="/126/file1" dev="tmpfs" ino=670 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 165.155809][ T28] audit: type=1400 audit(1777979964.102:962): avc: denied { listen } for pid=10207 comm="syz.7.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.305944][ T28] audit: type=1400 audit(1777979964.252:963): avc: denied { write } for pid=10210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.876857][T10270] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 165.893832][T10268] __nla_validate_parse: 3 callbacks suppressed [ 165.893853][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 165.938442][T10270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.968941][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 165.968960][ T28] audit: type=1400 audit(1777979964.912:966): avc: denied { write } for pid=10252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.016221][T10270] bond3: (slave geneve2): making interface the new active one [ 166.027904][T10270] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 166.077072][ T28] audit: type=1400 audit(1777979965.002:967): avc: denied { write } for pid=10279 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.362096][ T28] audit: type=1400 audit(1777979965.302:968): avc: denied { write } for pid=10291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.456664][ T28] audit: type=1400 audit(1777979965.402:969): avc: denied { write } for pid=10318 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.771387][ T28] audit: type=1400 audit(1777979965.712:970): avc: denied { write } for pid=10324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.865845][ T28] audit: type=1400 audit(1777979965.802:971): avc: denied { write } for pid=10350 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.044210][ T28] audit: type=1326 audit(1777979965.982:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.7.2109" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ff78acdd9 code=0x0 [ 167.395262][T10410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.498615][T10423] netlink: 'syz.2.2118': attribute type 4 has an invalid length. [ 167.509047][ T3348] IPVS: starting estimator thread 0... [ 167.603751][T10426] IPVS: using max 2064 ests per chain, 103200 per kthread [ 167.862290][T10436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2124'. [ 167.965568][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 168.003708][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 168.021641][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2133'. [ 168.043368][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 168.125719][T10465] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2136'. [ 168.194937][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 169.027277][T10470] ip6erspan0: entered promiscuous mode [ 169.072641][ T28] audit: type=1326 audit(1777979968.012:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.7.2146" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ff78acdd9 code=0x0 [ 169.146013][T10497] loop2: detected capacity change from 0 to 512 [ 169.160714][T10497] EXT4-fs: Mount option(s) incompatible with ext2 [ 169.306224][ T28] audit: type=1400 audit(1777979968.242:974): avc: denied { name_bind } for pid=10499 comm="syz.2.2150" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 169.556933][ T28] audit: type=1326 audit(1777979968.502:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.4.2159" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 169.747830][T10530] loop2: detected capacity change from 0 to 512 [ 169.778904][T10530] ext4: Unknown parameter 'smackfstransmute' [ 169.817195][T10537] loop5: detected capacity change from 0 to 136 [ 169.851141][T10537] iso9660: Unknown parameter 'sessionI“Zו²PÙ8†ÀÖ·' [ 170.054657][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 170.075974][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 171.145750][T10617] loop7: detected capacity change from 0 to 2048 [ 171.635886][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 171.635902][ T28] audit: type=1326 audit(1777979970.582:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10652 comm="syz.4.2217" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24dea3cdd9 code=0x0 [ 171.865547][T10643] __nla_validate_parse: 2 callbacks suppressed [ 171.865569][T10643] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2212'. [ 171.977478][T10693] loop5: detected capacity change from 0 to 1024 [ 171.987768][T10693] EXT4-fs: Ignoring removed orlov option [ 172.017455][T10693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.609827][ T28] audit: type=1326 audit(1777979971.552:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10769 comm="syz.1.2230" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13844fcdd9 code=0x0 [ 172.647811][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2231'. [ 172.768070][ T28] audit: type=1400 audit(1777979971.712:1070): avc: denied { unlink } for pid=7813 comm="syz-executor" name="file0" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 172.886050][ T28] audit: type=1326 audit(1777979971.832:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.2.2239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 172.943095][ T28] audit: type=1326 audit(1777979971.832:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.2.2239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 172.982004][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.985890][ T28] audit: type=1326 audit(1777979971.862:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.2.2239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 173.022076][ T28] audit: type=1326 audit(1777979971.862:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.2.2239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 173.065847][ T28] audit: type=1326 audit(1777979971.862:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.2.2239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 173.139390][ T28] audit: type=1326 audit(1777979971.862:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.2.2239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 173.213520][ T28] audit: type=1326 audit(1777979971.872:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10806 comm="syz.2.2239" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 173.480978][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2259'. [ 173.645354][T10867] loop7: detected capacity change from 0 to 512 [ 173.700073][T10867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.724685][T10867] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.784624][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 173.822582][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.459523][T10899] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.467287][T10899] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.761566][T10899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.779512][T10899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.246055][T10929] loop2: detected capacity change from 0 to 512 [ 175.287798][T10929] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2283: corrupted in-inode xattr: invalid ea_ino [ 175.351967][T10929] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.352199][T10929] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2283: couldn't read orphan inode 15 (err -117) [ 175.361558][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 175.361586][ C0] EXT4-fs (loop2): initial error at time 1777979974: ext4_iget_extra_inode:5128: inode 15 [ 175.361625][ C0] EXT4-fs (loop2): last error at time 1777979974: ext4_iget_extra_inode:5128: inode 15 [ 175.437636][T10929] loop2: lost filesystem error report for type 5 error -117 [ 175.449937][T10929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.572947][T10940] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2287'. [ 175.585051][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.769328][T10950] loop2: detected capacity change from 0 to 128 [ 175.791517][T10950] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.816582][T10950] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.850760][T10953] loop7: detected capacity change from 0 to 512 [ 175.859435][T10953] EXT4-fs: Ignoring removed oldalloc option [ 175.868612][T10953] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 175.901912][T10950] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.2291: Logical block already allocated [ 175.930032][T10953] EXT4-fs (loop7): 1 truncate cleaned up [ 175.951933][T10953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.972054][ T7248] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.998731][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.149994][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 176.229020][T10965] loop2: detected capacity change from 0 to 512 [ 176.248170][T10965] EXT4-fs (loop2): 1 truncate cleaned up [ 176.265412][T10965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.330830][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.634243][T10993] loop5: detected capacity change from 0 to 512 [ 176.646945][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 176.646965][ T28] audit: type=1326 audit(1777979975.592:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 176.665711][T10993] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.745040][ T28] audit: type=1326 audit(1777979975.592:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 176.791134][T10993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.800845][ T28] audit: type=1326 audit(1777979975.632:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 176.830859][ T28] audit: type=1326 audit(1777979975.632:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 176.857230][ T28] audit: type=1326 audit(1777979975.642:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 176.884054][ T28] audit: type=1326 audit(1777979975.642:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 176.913571][ T28] audit: type=1326 audit(1777979975.642:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 176.941145][ T28] audit: type=1326 audit(1777979975.642:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 176.960481][T10993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.001056][ T28] audit: type=1326 audit(1777979975.642:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 177.027506][ T28] audit: type=1326 audit(1777979975.642:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.4.2307" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 177.103762][T10993] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.249572][T11020] loop2: detected capacity change from 0 to 512 [ 177.277834][T11020] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.298263][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.330100][T11020] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2317: iget: bad i_size value: 38620345925642 [ 177.351385][T11023] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.358712][T11023] bridge0: port 2(bridge_slave_1) entered listening state [ 177.366092][T11023] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.373290][T11023] bridge0: port 1(bridge_slave_0) entered listening state [ 177.403930][T11020] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 177.404110][T11020] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2317: couldn't read orphan inode 15 (err -117) [ 177.413551][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 177.413570][ C0] EXT4-fs (loop2): initial error at time 1777979976: ext4_orphan_get:1397: inode 15 [ 177.413604][ C0] EXT4-fs (loop2): last error at time 1777979976: ext4_orphan_get:1397: inode 15 [ 177.500663][T11020] loop2: lost filesystem error report for type 5 error -117 [ 177.501442][T11020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.615045][T11020] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2317: bg 0: block 5: invalid block bitmap [ 177.666047][T11023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.674060][T11020] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 632 with error 28 [ 177.708030][T11020] EXT4-fs (loop2): This should not happen!! Data will be lost [ 177.708030][T11020] [ 177.735576][T11020] EXT4-fs (loop2): Total free blocks count 0 [ 177.750919][T11020] EXT4-fs (loop2): Free/Dirty block details [ 177.760377][T11041] xt_TCPMSS: Only works on TCP SYN packets [ 177.764504][T11020] EXT4-fs (loop2): free_blocks=0 [ 177.780047][T11020] EXT4-fs (loop2): dirty_blocks=636 [ 177.793996][T11020] EXT4-fs (loop2): Block reservation details [ 177.808007][T11020] EXT4-fs (loop2): i_reserved_data_blocks=636 [ 177.878680][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.958350][T11043] netlink: 'syz.5.2327': attribute type 20 has an invalid length. [ 177.983696][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2327'. [ 177.998730][T11050] loop2: detected capacity change from 0 to 128 [ 178.055434][T11043] netlink: 'syz.5.2327': attribute type 20 has an invalid length. [ 178.072631][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2327'. [ 178.117067][T11054] 9p: Bad value for 'rfdno' [ 178.850139][T11083] loop2: detected capacity change from 0 to 256 [ 178.929331][T11083] FAT-fs (loop2): IO charset macgaelic not found [ 178.958730][T11086] netlink: 35 bytes leftover after parsing attributes in process `syz.7.2346'. [ 178.981075][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2346'. [ 179.116166][T11092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2349'. [ 179.510087][T11094] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2350'. [ 181.228931][T11116] bond1: option mode: unable to set because the bond device has slaves [ 181.258999][T11116] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 181.314798][T11122] syzkaller1: entered promiscuous mode [ 181.322353][T11122] syzkaller1: entered allmulticast mode [ 181.446497][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2369'. [ 181.502596][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 181.529673][T11141] vhci_hcd vhci_hcd.1: default hub control req: 010b v0000 i0000 l0 [ 181.614754][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2371'. [ 181.788870][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 181.788889][ T28] audit: type=1326 audit(1777979980.732:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 181.832681][ T28] audit: type=1326 audit(1777979980.772:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 181.858712][ T28] audit: type=1326 audit(1777979980.772:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 181.887535][ T28] audit: type=1326 audit(1777979980.772:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 181.914664][ T28] audit: type=1326 audit(1777979980.772:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 181.941929][ T28] audit: type=1326 audit(1777979980.772:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 181.968176][ T28] audit: type=1326 audit(1777979980.772:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 182.002352][ T28] audit: type=1326 audit(1777979980.772:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 182.039934][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 182.049523][T11179] netlink: 'syz.4.2386': attribute type 26 has an invalid length. [ 182.058408][T11179] netlink: 'syz.4.2386': attribute type 26 has an invalid length. [ 182.070515][ T28] audit: type=1326 audit(1777979980.772:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff79155cdd9 code=0x7ffc0000 [ 182.134734][ T28] audit: type=1326 audit(1777979980.802:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11166 comm="syz.2.2382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff79151d60e code=0x7ffc0000 [ 182.186998][T11186] macsec0: entered promiscuous mode [ 182.201318][T11186] macsec0: entered allmulticast mode [ 182.220557][T11190] loop5: detected capacity change from 0 to 1024 [ 182.228245][T11186] veth1_macvtap: entered allmulticast mode [ 182.244056][T11186] macsec0: left promiscuous mode [ 182.256443][T11190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.258968][T11186] macsec0: left allmulticast mode [ 182.289076][T11186] veth1_macvtap: left allmulticast mode [ 182.345031][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.519754][T11216] ªªªªªª: renamed from vlan0 [ 183.443640][T11301] netlink: 'syz.4.2424': attribute type 15 has an invalid length. [ 183.466417][T11301] __nla_validate_parse: 3 callbacks suppressed [ 183.466440][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 183.509425][T11301] netlink: 'syz.4.2424': attribute type 15 has an invalid length. [ 183.536388][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2424'. [ 184.001401][T11357] netlink: zone id is out of range [ 184.150882][T11365] loop7: detected capacity change from 0 to 512 [ 184.220705][T11365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.301455][T11365] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.420614][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.799058][T11400] xt_TCPMSS: Only works on TCP SYN packets [ 184.811635][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2461'. [ 186.791614][T11478] xt_hashlimit: size too large, truncated to 1048576 [ 186.982181][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 186.982256][ T28] audit: type=1400 audit(1777979985.922:1304): avc: denied { setopt } for pid=11489 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.069807][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 187.767888][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2505'. [ 187.910529][T11549] loop2: detected capacity change from 0 to 1024 [ 187.929463][T11549] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 187.954548][T11551] 9p: Invalid gid '0x00000000ffffffff' [ 187.965818][T11549] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 188.014573][T11549] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 188.031362][T11549] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #5: comm syz.2.2510: unexpected bad inode w/o EXT4_IGET_BAD [ 188.048510][T11549] loop2: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 188.049017][T11549] EXT4-fs (loop2): no journal found [ 188.059951][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 188.059976][ C0] EXT4-fs (loop2): initial error at time 1777979986: ext4_get_journal_inode:5896: inode 5 [ 188.060013][ C0] EXT4-fs (loop2): last error at time 1777979986: ext4_get_journal_inode:5896: inode 5 [ 188.097121][T11549] EXT4-fs (loop2): can't get journal size [ 188.104490][T11549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.174661][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.428382][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2527'. [ 188.481780][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2527'. [ 188.531340][T11589] netlink: 'syz.5.2527': attribute type 7 has an invalid length. [ 188.550419][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.558047][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.830447][T11587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.847483][T11587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.084152][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2527'. [ 189.106893][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2527'. [ 189.127525][T11589] netlink: 'syz.5.2527': attribute type 7 has an invalid length. [ 189.433960][T11612] xt_TCPMSS: Only works on TCP SYN packets [ 189.520570][ T28] audit: type=1326 audit(1777979988.462:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.5.2537" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeba2cdd9 code=0x7ffc0000 [ 189.578052][ T28] audit: type=1326 audit(1777979988.462:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.5.2537" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeba2cdd9 code=0x7ffc0000 [ 189.614785][ T28] audit: type=1326 audit(1777979988.492:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.5.2537" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeba2cdd9 code=0x7ffc0000 [ 189.635987][T11633] loop2: detected capacity change from 0 to 512 [ 189.643651][ T28] audit: type=1326 audit(1777979988.492:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.5.2537" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbfeba2cdd9 code=0x7ffc0000 [ 189.683541][T11637] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2543'. [ 189.695922][T11633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.697145][ T28] audit: type=1326 audit(1777979988.502:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.5.2537" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfeba2cdd9 code=0x7ffc0000 [ 189.734771][T11633] ext4 filesystem being mounted at /275/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.752975][T11637] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2543'. [ 189.765972][T11633] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 189.789622][T11633] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 189.829506][ T28] audit: type=1326 audit(1777979988.552:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.5.2537" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfeb9ed60e code=0x7ffc0000 [ 189.856504][T11633] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2541: Failed to acquire dquot type 1 [ 189.889796][T11633] EXT4-fs (loop2): Remounting filesystem read-only [ 189.896877][ T28] audit: type=1326 audit(1777979988.552:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11619 comm="syz.5.2537" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfeb9ed60e code=0x7ffc0000 [ 189.954344][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.976511][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 190.219521][T11679] bridge0: port 3(bond0) entered blocking state [ 190.226277][T11679] bridge0: port 3(bond0) entered listening state [ 190.233471][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.241778][T11679] bridge0: port 2(bridge_slave_1) entered listening state [ 190.249183][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.256548][T11679] bridge0: port 1(bridge_slave_0) entered listening state [ 190.368412][T11679] bridge0: port 4(batadv1) entered blocking state [ 190.375986][T11679] bridge0: port 4(batadv1) entered listening state [ 190.388380][T11679] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.581087][T11697] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2567'. [ 191.081171][T11736] ip6tnl1: entered promiscuous mode [ 191.086760][T11736] ip6tnl1: entered allmulticast mode [ 191.106456][T11738] netlink: 'syz.4.2588': attribute type 19 has an invalid length. [ 191.121491][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 191.131933][T11738] netlink: 'syz.4.2588': attribute type 19 has an invalid length. [ 191.141291][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 191.188815][T11745] netlink: 'syz.7.2591': attribute type 8 has an invalid length. [ 191.197062][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2591'. [ 191.213799][T11745] erspan0: entered promiscuous mode [ 191.227673][T11745] gretap0: entered promiscuous mode [ 191.235506][T11745] erspan0: left promiscuous mode [ 191.244778][T11745] gretap0: left promiscuous mode [ 192.230854][T11872] loop7: detected capacity change from 0 to 1024 [ 192.254148][T11872] EXT4-fs: Ignoring removed bh option [ 192.299513][T11872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.352880][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 192.352900][ T28] audit: type=1400 audit(1777979991.292:1373): avc: denied { write } for pid=11871 comm="syz.7.2613" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.403512][ T28] audit: type=1400 audit(1777979991.292:1374): avc: denied { append } for pid=11871 comm="syz.7.2613" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.426809][ T28] audit: type=1400 audit(1777979991.332:1375): avc: denied { write } for pid=11871 comm="syz.7.2613" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.450728][ T28] audit: type=1400 audit(1777979991.332:1376): avc: denied { mounton } for pid=11871 comm="syz.7.2613" path="/230/file1/file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 192.506248][T11882] loop5: detected capacity change from 0 to 128 [ 192.540070][T11882] FAT-fs (loop5): bogus logical sector size 0 [ 192.568834][T11882] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 192.602576][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.615694][T11882] FAT-fs (loop5): Can't find a valid FAT filesystem [ 192.984748][T11907] syzkaller1: entered promiscuous mode [ 193.013346][T11910] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 193.015277][T11907] syzkaller1: entered allmulticast mode [ 193.098726][ T28] audit: type=1326 audit(1777979992.042:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11912 comm="syz.2.2629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff79155cdd9 code=0x0 [ 193.557598][T11942] ip6gretap0: entered promiscuous mode [ 193.568373][T11942] macvtap1: entered promiscuous mode [ 193.574451][T11942] macvtap1: entered allmulticast mode [ 193.580196][T11942] ip6gretap0: entered allmulticast mode [ 193.665119][ T28] audit: type=1326 audit(1777979992.602:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.4.2645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 193.699596][T11953] __nla_validate_parse: 3 callbacks suppressed [ 193.699618][T11953] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2642'. [ 193.722940][ T28] audit: type=1326 audit(1777979992.602:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.4.2645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 193.750931][T11953] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2642'. [ 193.773001][ T28] audit: type=1326 audit(1777979992.602:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.4.2645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 193.825902][ T28] audit: type=1326 audit(1777979992.602:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.4.2645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 193.887221][ T28] audit: type=1326 audit(1777979992.602:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11949 comm="syz.4.2645" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 194.732429][T12010] futex_wake_op: syz.7.2667 tries to shift op by 32; fix this program [ 194.923415][T12019] loop5: detected capacity change from 0 to 512 [ 194.947443][T12019] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.998786][T12019] EXT4-fs (loop5): 1 truncate cleaned up [ 195.008033][T12019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.041181][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.625026][T12110] loop5: detected capacity change from 0 to 512 [ 196.639060][T12110] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.653128][T12111] loop7: detected capacity change from 0 to 512 [ 196.667261][T12110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.675884][T12111] EXT4-fs: Ignoring removed bh option [ 196.695495][T12110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.704846][T12111] EXT4-fs: inline encryption not supported [ 196.709166][T12110] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.734392][T12111] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.775795][T12111] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 196.794316][T12111] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2705: bg 0: block 248: padding at end of block bitmap is not set [ 196.813155][T12111] loop7: lost filesystem error report for type 5 error -117 [ 196.813403][T12111] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.2705: Failed to acquire dquot type 1 [ 196.820884][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 196.820907][ C1] EXT4-fs (loop7): last error at time 1777979995: ext4_validate_block_bitmap:441 [ 196.850222][T12111] loop7: lost filesystem error report for type 5 error -28 [ 196.850768][T12111] EXT4-fs (loop7): 1 truncate cleaned up [ 196.851553][ T8835] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.859609][T12111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 196.963150][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.972468][ T7788] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 197.129033][T11990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.501036][ T4794] bridge_slave_1: left allmulticast mode [ 197.528993][ T4794] bridge_slave_1: left promiscuous mode [ 197.554724][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.575893][ T4794] bridge_slave_0: left allmulticast mode [ 197.590441][ T4794] bridge_slave_0: left promiscuous mode [ 197.607311][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.704934][T12171] netlink: 'syz.1.2729': attribute type 12 has an invalid length. [ 197.741970][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2729'. [ 197.873336][ T4794] ip6gretap0 (unregistering): left allmulticast mode [ 198.121680][ T4794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.145560][ T4794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.174522][ T4794] bond0 (unregistering): Released all slaves [ 198.189640][ T4794] bond1 (unregistering): (slave lo): Releasing backup interface [ 198.211116][ T4794] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 198.231072][ T4794] bond1 (unregistering): Released all slaves [ 198.251130][T12171] netlink: 'syz.1.2729': attribute type 12 has an invalid length. [ 198.262807][T12171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2729'. [ 198.331105][ T4794] hsr_slave_0: left promiscuous mode [ 198.348707][ T4794] hsr_slave_1: left promiscuous mode [ 198.361625][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.370627][ T4794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.378822][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.387088][ T4794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.400964][ T4794] veth1_macvtap: left promiscuous mode [ 198.407111][ T4794] veth0_macvtap: left promiscuous mode [ 198.413301][ T4794] veth1_vlan: left promiscuous mode [ 198.418940][ T4794] veth0_vlan: left promiscuous mode [ 198.425923][T12202] netlink: 'syz.5.2741': attribute type 4 has an invalid length. [ 198.434184][T12202] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2741'. [ 198.534289][ T4794] team0 (unregistering): Port device team_slave_1 removed [ 198.546545][ T4794] team0 (unregistering): Port device team_slave_0 removed [ 198.592893][T12202] bond_slave_1: mtu greater than device maximum [ 198.814684][T12224] pimreg: tun_chr_ioctl cmd 1074025692 [ 198.911285][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.919073][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.926621][T12167] bridge_slave_0: entered allmulticast mode [ 198.936761][T12167] bridge_slave_0: entered promiscuous mode [ 198.944441][T12167] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.951698][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.960815][T12167] bridge_slave_1: entered allmulticast mode [ 198.967475][T12167] bridge_slave_1: entered promiscuous mode [ 198.987184][T12167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.000650][T12167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.019824][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 199.019843][ T28] audit: type=1326 audit(1777979997.962:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.059492][T12167] team0: Port device team_slave_0 added [ 199.066825][T12167] team0: Port device team_slave_1 added [ 199.083182][T12167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.090838][ T28] audit: type=1326 audit(1777979998.012:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.117446][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.133663][ T28] audit: type=1326 audit(1777979998.012:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.154175][T12167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.181239][ T28] audit: type=1326 audit(1777979998.012:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.209252][ T28] audit: type=1326 audit(1777979998.012:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.210057][T12167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.235976][ T28] audit: type=1326 audit(1777979998.012:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.268614][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.295832][ T28] audit: type=1326 audit(1777979998.032:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.326231][T12167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.346616][ T28] audit: type=1326 audit(1777979998.032:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.374793][ T28] audit: type=1326 audit(1777979998.052:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.401885][ T28] audit: type=1326 audit(1777979998.052:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12242 comm="syz.4.2756" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f24dea3cdd9 code=0x7ffc0000 [ 199.453577][T12167] hsr_slave_0: entered promiscuous mode [ 199.459972][T12167] hsr_slave_1: entered promiscuous mode [ 199.550829][T12266] loop2: detected capacity change from 0 to 512 [ 199.559666][T12266] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.580619][T12266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.595900][T12266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.609444][T12266] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.628499][T12167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.644687][T12167] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.655091][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.662435][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.683095][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.683271][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.690233][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.773501][T12280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2769'. [ 199.790788][T12283] loop5: detected capacity change from 0 to 512 [ 199.793881][T12280] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2769'. [ 199.924002][T12167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.201868][T12167] veth0_vlan: entered promiscuous mode [ 200.215983][T12167] veth1_vlan: entered promiscuous mode [ 200.249049][T12167] veth0_macvtap: entered promiscuous mode [ 200.265562][T12167] veth1_macvtap: entered promiscuous mode [ 200.289922][T12167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.320363][T12167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.498735][T12325] batadv_slave_1: Caught tx_queue_len zero misconfig [ 200.545710][T12329] loop2: detected capacity change from 0 to 512 [ 200.567327][T12329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.585039][T12329] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.621743][T12329] EXT4-fs (loop2): Online defrag not supported for non-extent files [ 200.687748][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.941433][T12365] loop0: detected capacity change from 0 to 512 [ 200.958175][T12365] EXT4-fs: Ignoring removed oldalloc option [ 200.986556][T12365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.997291][T12365] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.2791: iget: bad i_size value: 38620345925642 [ 201.010133][T12365] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 201.011553][T12365] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2791: couldn't read orphan inode 15 (err -117) [ 201.020852][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 201.020887][ C1] EXT4-fs (loop0): initial error at time 1777979999: ext4_orphan_get:1397: inode 15 [ 201.020916][ C1] EXT4-fs (loop0): last error at time 1777979999: ext4_orphan_get:1397: inode 15 [ 201.057918][T12365] loop0: lost filesystem error report for type 5 error -117 [ 201.060215][T12365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.124627][T12369] loop2: detected capacity change from 0 to 8192 [ 201.136547][T12167] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.174710][T12369] syz.2.2793: attempt to access beyond end of device [ 201.174710][T12369] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 201.658404][T12411] loop5: detected capacity change from 0 to 128 [ 201.797053][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2815'. [ 202.682133][T12473] loop5: detected capacity change from 0 to 128 [ 202.719146][T12476] loop2: detected capacity change from 0 to 512 [ 202.734217][T12476] EXT4-fs: Ignoring removed bh option [ 202.743597][T12473] loop5: detected capacity change from 128 to 0 [ 202.750433][ C0] I/O error, dev loop5, sector 120 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.771438][T12476] EXT4-fs: Mount option(s) incompatible with ext2 [ 202.778853][T12478] FAT-fs (loop5): Directory bread(block 14) failed [ 202.791661][T12478] FAT-fs (loop5): Directory bread(block 3) failed [ 202.845503][ T8835] FAT-fs (loop5): Directory bread(block 3) failed [ 202.918997][T10234] FAT-fs (loop5): unable to read boot sector to mark fs as dirty [ 203.172187][T12494] loop2: detected capacity change from 0 to 1024 [ 203.216971][T12494] EXT4-fs: Ignoring removed orlov option [ 203.247217][T12494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.323620][T12494] EXT4-fs (loop2): shut down requested (1) [ 203.462683][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.534085][T12518] loop2: detected capacity change from 0 to 512 [ 203.568479][T12518] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.619856][T12518] EXT4-fs (loop2): 1 truncate cleaned up [ 203.637009][T12518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.741690][T12495] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.749358][T12495] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.756862][T12495] bridge_slave_0: entered allmulticast mode [ 203.764169][T12495] bridge_slave_0: entered promiscuous mode [ 203.771403][T12495] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.778735][T12495] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.786170][T12495] bridge_slave_1: entered allmulticast mode [ 203.793146][T12495] bridge_slave_1: entered promiscuous mode [ 203.814779][T12495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.826338][T12495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.847793][T12495] team0: Port device team_slave_0 added [ 203.852060][ T7248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.856631][T12495] team0: Port device team_slave_1 added [ 203.880073][T12495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.887208][T12495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.913779][T12495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.925159][T12495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.932482][T12495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.958867][T12495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.022861][T12495] hsr_slave_0: entered promiscuous mode [ 204.039352][T12495] hsr_slave_1: entered promiscuous mode [ 204.053982][T12495] debugfs: 'hsr0' already exists in 'hsr' [ 204.060037][T12495] Cannot create hsr debugfs directory [ 204.224825][T12495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.247040][T12495] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.267088][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.274498][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.297634][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.304799][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.667721][T12495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.836459][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 204.836476][ T28] audit: type=1326 audit(1777980003.782:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x0 [ 204.865160][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.875769][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.883081][T12567] bridge_slave_0: entered allmulticast mode [ 204.891617][T12567] bridge_slave_0: entered promiscuous mode [ 204.899552][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.906773][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.923164][T12567] bridge_slave_1: entered allmulticast mode [ 204.930376][T12567] bridge_slave_1: entered promiscuous mode [ 204.959196][T12567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.970117][T12567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.992056][T12567] team0: Port device team_slave_0 added [ 204.999020][T12567] team0: Port device team_slave_1 added [ 205.029909][T12567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.047430][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.094903][T12567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.122405][T12567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.141126][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.170637][T12567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.255941][T12567] hsr_slave_0: entered promiscuous mode [ 205.262247][T12567] hsr_slave_1: entered promiscuous mode [ 205.268764][T12567] debugfs: 'hsr0' already exists in 'hsr' [ 205.274705][T12567] Cannot create hsr debugfs directory [ 205.291872][T12495] veth0_vlan: entered promiscuous mode [ 205.312052][T12495] veth1_vlan: entered promiscuous mode [ 205.343601][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 205.350820][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 205.358160][ C1] bridge0: port 3(bond0) entered learning state [ 205.500734][T12495] veth0_macvtap: entered promiscuous mode [ 205.523756][T12495] veth1_macvtap: entered promiscuous mode [ 205.553644][T12495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.573304][T12495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.635205][T12567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.663863][T12567] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.685851][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.693046][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.731911][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.739139][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.750146][T12650] loop8: detected capacity change from 0 to 512 [ 205.766915][T12650] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.786999][T12650] EXT4-fs: Mount option(s) incompatible with ext2 [ 205.839408][ T3387] Process accounting resumed [ 205.983522][ C0] bridge0: port 4(batadv1) entered learning state [ 206.033990][T12567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.057215][T12677] loop8: detected capacity change from 0 to 512 [ 206.135174][T12683] syz.8.2892: attempt to access beyond end of device [ 206.135174][T12683] loop8: rw=2049, sector=560, nr_sectors = 32 limit=512 [ 206.190236][T12683] syz.8.2892: attempt to access beyond end of device [ 206.190236][T12683] loop8: rw=2049, sector=624, nr_sectors = 32 limit=512 [ 206.241927][T12683] syz.8.2892: attempt to access beyond end of device [ 206.241927][T12683] loop8: rw=2049, sector=688, nr_sectors = 32 limit=512 [ 206.278903][T12683] syz.8.2892: attempt to access beyond end of device [ 206.278903][T12683] loop8: rw=2049, sector=752, nr_sectors = 32 limit=512 [ 206.293767][T12683] syz.8.2892: attempt to access beyond end of device [ 206.293767][T12683] loop8: rw=2049, sector=816, nr_sectors = 32 limit=512 [ 206.365283][T12683] syz.8.2892: attempt to access beyond end of device [ 206.365283][T12683] loop8: rw=2049, sector=880, nr_sectors = 32 limit=512 [ 206.388522][T12694] loop0: detected capacity change from 0 to 2048 [ 206.404082][T12567] veth0_vlan: entered promiscuous mode [ 206.423609][T12567] veth1_vlan: entered promiscuous mode [ 206.431860][T12694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.443196][T12683] syz.8.2892: attempt to access beyond end of device [ 206.443196][T12683] loop8: rw=2049, sector=944, nr_sectors = 32 limit=512 [ 206.478273][ T28] audit: type=1400 audit(1777980005.422:1446): avc: denied { write } for pid=12693 comm="syz.0.2895" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.506125][T12694] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 206.525744][T12567] veth0_macvtap: entered promiscuous mode [ 206.550851][T12683] syz.8.2892: attempt to access beyond end of device [ 206.550851][T12683] loop8: rw=2049, sector=1008, nr_sectors = 32 limit=512 [ 206.574961][T12567] veth1_macvtap: entered promiscuous mode [ 206.581564][T12694] EXT4-fs (loop0): Remounting filesystem read-only [ 206.586852][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2896'. [ 206.623419][T12700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.634784][T12683] syz.8.2892: attempt to access beyond end of device [ 206.634784][T12683] loop8: rw=2049, sector=1072, nr_sectors = 32 limit=512 [ 206.648523][T12700] bond4: option ad_select: unable to set because the bond device is up [ 206.649965][T12167] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.669002][T12567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.673776][T12683] syz.8.2892: attempt to access beyond end of device [ 206.673776][T12683] loop8: rw=2049, sector=1136, nr_sectors = 32 limit=512 [ 206.690041][T12683] syz.8.2892: attempt to access beyond end of device [ 206.690041][T12683] loop8: rw=2049, sector=1200, nr_sectors = 32 limit=512 [ 206.717342][T12567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.804493][T12704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.979659][T12714] No such timeout policy "syz1" [ 207.081686][ T28] audit: type=1400 audit(1777980006.022:1447): avc: denied { connect } for pid=12719 comm="syz.1.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.431603][T12731] loop8: detected capacity change from 0 to 2048 [ 207.456119][T12731] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.488424][ T28] audit: type=1400 audit(1777980006.432:1448): avc: denied { write } for pid=12730 comm="syz.8.2907" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.533930][T12741] syzkaller1: entered promiscuous mode [ 207.553368][T12741] syzkaller1: entered allmulticast mode [ 207.601444][T12731] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 207.617113][T12731] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 32 with error 28 [ 207.629957][T12731] EXT4-fs (loop8): This should not happen!! Data will be lost [ 207.629957][T12731] [ 207.640206][T12731] EXT4-fs (loop8): Total free blocks count 0 [ 207.646453][T12731] EXT4-fs (loop8): Free/Dirty block details [ 207.652565][T12731] EXT4-fs (loop8): free_blocks=4096 [ 207.658298][T12731] EXT4-fs (loop8): dirty_blocks=272 [ 207.668570][T12731] EXT4-fs (loop8): Block reservation details [ 207.675478][T12731] EXT4-fs (loop8): i_reserved_data_blocks=17 [ 207.687857][T12744] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 124 with error 28 [ 207.733121][ T28] audit: type=1400 audit(1777980006.672:1449): avc: denied { accept } for pid=12745 comm="syz.9.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 207.800992][T12495] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 207.951650][T12755] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2916'. [ 207.989851][ T28] audit: type=1400 audit(1777980006.932:1450): avc: denied { bind } for pid=12757 comm="syz.8.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.015717][ T28] audit: type=1400 audit(1777980006.952:1451): avc: denied { read } for pid=12757 comm="syz.8.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 208.417236][ T28] audit: type=1400 audit(1777980007.362:1452): avc: denied { write } for pid=12776 comm="syz.0.2926" path="socket:[32645]" dev="sockfs" ino=32645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.840836][ T28] audit: type=1400 audit(1777980007.782:1453): avc: denied { create } for pid=12795 comm="syz.4.2933" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 208.941443][T10912] Process accounting resumed [ 209.138782][T12814] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2942'. [ 209.149529][ T28] audit: type=1400 audit(1777980008.092:1454): avc: denied { write } for pid=12815 comm="syz.4.2943" lport=54576 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 209.289724][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 209.578611][T12845] all: renamed from bridge_slave_1 (while UP) [ 209.642572][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'. [ 209.653297][T12851] netlink: 'syz.1.2960': attribute type 3 has an invalid length. [ 209.661990][T12851] netlink: 'syz.1.2960': attribute type 1 has an invalid length. [ 209.671433][T12851] netlink: 198116 bytes leftover after parsing attributes in process `syz.1.2960'. [ 209.687469][T12854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.702955][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'. [ 209.734665][T12859] bond1: Unable to set up delay as MII monitoring is disabled [ 209.906294][T12879] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2971'. [ 210.063561][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.387211][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.404694][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.858619][T12929] loop9: detected capacity change from 0 to 512 [ 210.865681][T12929] EXT4-fs: Ignoring removed orlov option [ 210.886260][T12929] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.899218][T12929] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.912947][ T28] audit: type=1400 audit(1777980009.852:1455): avc: denied { write } for pid=12928 comm="syz.9.3000" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.940692][T12929] EXT4-fs (loop9): shut down requested (1) [ 211.002417][T12567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.145198][ T28] audit: type=1400 audit(1777980010.092:1456): avc: denied { accept } for pid=12948 comm="syz.8.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.229962][ T28] audit: type=1400 audit(1777980010.172:1457): avc: denied { connect } for pid=12956 comm="syz.0.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 211.269358][ T28] audit: type=1400 audit(1777980010.192:1458): avc: denied { write } for pid=12956 comm="syz.0.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 212.632748][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3020'. [ 212.657850][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3020'. [ 212.691776][T12999] sctp: [Deprecated]: syz.9.3021 (pid 12999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.691776][T12999] Use struct sctp_sack_info instead [ 213.599271][ T28] audit: type=1400 audit(1777980012.542:1459): avc: denied { listen } for pid=13034 comm="syz.8.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.715085][T13038] loop9: detected capacity change from 0 to 8192 [ 213.765072][T13038] loop9: p1 p2 p3 p4 [ 213.773417][T13038] loop9: p1 start 16777216 is beyond EOD, truncated [ 213.780738][T13038] loop9: p2 start 268435456 is beyond EOD, truncated [ 213.792803][T13038] loop9: p4 size 33554432 extends beyond EOD, truncated [ 213.945636][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 213.957008][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 214.035059][T13046] loop9: detected capacity change from 0 to 512 [ 214.066334][T13046] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 214.100086][T13046] EXT4-fs (loop9): mount failed [ 214.191613][T13052] loop9: detected capacity change from 0 to 512 [ 214.215583][T13052] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 214.250821][T13052] EXT4-fs (loop9): 1 truncate cleaned up [ 214.263936][T13052] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.299651][ T28] audit: type=1400 audit(1777980013.242:1460): avc: denied { write } for pid=13051 comm="syz.9.3042" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.442438][T13059] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 214.505849][T13064] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3047'. [ 214.528020][T13064] erspan0: entered promiscuous mode [ 214.538420][T13066] loop0: detected capacity change from 0 to 1024 [ 214.545978][T13064] gretap0: entered promiscuous mode [ 214.551802][T13064] hsr1: entered promiscuous mode [ 214.561688][T12567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.577652][T13066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.643635][T13066] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.670132][T13066] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.3048: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.683479][ T28] audit: type=1400 audit(1777980013.612:1461): avc: denied { write } for pid=13065 comm="syz.0.3048" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.755108][T13066] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 214.814668][T13066] EXT4-fs (loop0): This should not happen!! Data will be lost [ 214.814668][T13066] [ 214.891080][ T4785] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 214.927015][ T4785] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 214.954847][ T4785] EXT4-fs (loop0): This should not happen!! Data will be lost [ 214.954847][ T4785] [ 214.979470][ T4785] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 112: padding at end of block bitmap is not set [ 215.016889][ T4785] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 215.048143][ T4785] EXT4-fs (loop0): This should not happen!! Data will be lost [ 215.048143][ T4785] [ 215.072354][ T4785] EXT4-fs (loop0): Total free blocks count 0 [ 215.085898][ T4785] EXT4-fs (loop0): Free/Dirty block details [ 215.099478][ T4785] EXT4-fs (loop0): free_blocks=0 [ 215.115640][T12167] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 216.036111][ T28] audit: type=1400 audit(1777980014.982:1462): avc: denied { read } for pid=13132 comm="syz.9.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 216.071817][T13136] lo: Caught tx_queue_len zero misconfig [ 216.370483][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3087'. [ 216.877653][T13163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.923737][T13163] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 216.973484][T13172] loop8: detected capacity change from 0 to 512 [ 217.001753][T13172] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 217.027436][T13172] EXT4-fs (loop8): 1 truncate cleaned up [ 217.034915][T13172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.050883][ T28] audit: type=1400 audit(1777980015.992:1463): avc: denied { write } for pid=13171 comm="syz.8.3093" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.129608][T13183] loop9: detected capacity change from 0 to 512 [ 217.138846][T13183] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 217.156493][T13183] EXT4-fs (loop9): 1 truncate cleaned up [ 217.168705][T13183] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.210168][ T28] audit: type=1400 audit(1777980016.152:1464): avc: denied { write } for pid=13182 comm="syz.9.3098" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.266714][T12567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.482293][T12495] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.611265][T13226] SELinux: failed to load policy [ 217.720746][T13236] xt_hashlimit: size too large, truncated to 1048576 [ 218.146636][T13279] netlink: 'syz.8.3137': attribute type 1 has an invalid length. [ 218.170150][T13279] netlink: 'syz.8.3137': attribute type 2 has an invalid length. [ 218.191423][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3137'. [ 218.241089][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3139'. [ 218.254523][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3139'. [ 218.332746][ T28] audit: type=1400 audit(1777980017.272:1465): avc: denied { remount } for pid=13289 comm="syz.9.3142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 218.997644][ T4785] bridge_slave_1: left allmulticast mode [ 219.014961][ T4785] bridge_slave_1: left promiscuous mode [ 219.025843][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.044575][ T4785] bridge_slave_0: left allmulticast mode [ 219.061286][ T4785] bridge_slave_0: left promiscuous mode [ 219.074474][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.201576][T10917] IPVS: starting estimator thread 0... [ 219.210566][ T4785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.220885][ T4785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.231000][ T4785] bond0 (unregistering): Released all slaves [ 219.297303][T13343] IPVS: using max 1968 ests per chain, 98400 per kthread [ 219.385227][T13340] wireguard0: entered promiscuous mode [ 219.392355][T13340] wireguard0: entered allmulticast mode [ 219.513945][ T4785] hsr_slave_0: left promiscuous mode [ 219.538095][ T4785] hsr_slave_1: left promiscuous mode [ 219.546306][ T4785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.554746][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.569842][ T4785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.580116][ T4785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.591892][ T4785] veth1_macvtap: left promiscuous mode [ 219.598024][ T4785] veth0_macvtap: left promiscuous mode [ 219.605200][ T4785] veth1_vlan: left promiscuous mode [ 219.610486][ T4785] veth0_vlan: left promiscuous mode [ 219.918524][ T4785] team0 (unregistering): Port device team_slave_1 removed [ 219.943257][ T4785] team0 (unregistering): Port device team_slave_0 removed [ 220.005213][T13386] xt_hashlimit: size too large, truncated to 1048576 [ 220.239345][T13396] loop8: detected capacity change from 0 to 4096 [ 220.256701][T13396] EXT4-fs: inline encryption not supported [ 220.288490][T13396] EXT4-fs: test_dummy_encryption option not supported [ 220.713605][ C1] bridge0: port 3(bond0) entered forwarding state [ 220.720447][ C1] bridge0: topology change detected, propagating [ 220.728104][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.735991][ C1] bridge0: topology change detected, propagating [ 220.742621][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.750109][ C1] bridge0: topology change detected, propagating [ 220.871706][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3194'. [ 221.343596][ C0] bridge0: port 4(batadv1) entered forwarding state [ 221.350285][ C0] bridge0: topology change detected, propagating [ 221.365035][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3206'. [ 221.393728][ T28] audit: type=1326 audit(1777980020.342:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.428993][ T28] audit: type=1326 audit(1777980020.342:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.460467][ T28] audit: type=1326 audit(1777980020.342:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.492259][ T28] audit: type=1326 audit(1777980020.342:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.521041][ T28] audit: type=1326 audit(1777980020.342:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.555072][ T28] audit: type=1326 audit(1777980020.342:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.586245][ T28] audit: type=1326 audit(1777980020.342:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.615280][ T28] audit: type=1326 audit(1777980020.342:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.644150][ T28] audit: type=1326 audit(1777980020.342:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 221.706508][ T28] audit: type=1326 audit(1777980020.342:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.3200" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00205acdd9 code=0x7ffc0000 [ 222.187364][T13474] sch_tbf: burst 545 is lower than device lo mtu (65550) ! [ 222.765505][T13511] loop0: detected capacity change from 0 to 512 [ 222.787964][T13511] EXT4-fs: Invalid want_extra_isize 2 [ 222.852691][T13518] geneve3: entered promiscuous mode [ 222.860995][T13518] geneve3: entered allmulticast mode [ 222.868692][T13521] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3234'. [ 222.883620][ T30] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.894216][ T30] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.903159][ T30] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.918848][ T30] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.989431][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 223.181100][T13540] loop8: detected capacity change from 0 to 164 [ 226.138516][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.184962][T13550] bridge_slave_0 (unregistering): left allmulticast mode [ 226.184989][T13550] bridge_slave_0 (unregistering): left promiscuous mode [ 226.185021][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.374263][T13579] loop9: detected capacity change from 0 to 1024 [ 226.408117][T13579] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.422076][T13579] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.448448][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 226.448466][ T28] audit: type=1400 audit(1777980025.392:1488): avc: denied { shutdown } for pid=13585 comm="syz.0.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 226.477212][ T28] audit: type=1400 audit(1777980025.422:1489): avc: denied { write } for pid=13578 comm="syz.9.3261" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.500336][T13579] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.3261: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.527568][T13579] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 226.567173][T13579] EXT4-fs (loop9): This should not happen!! Data will be lost [ 226.567173][T13579] [ 226.604150][T12567] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 226.616274][T12567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 226.831996][T13607] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3271'. [ 227.028002][T13622] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3278'. [ 227.203953][T13634] ipip0: entered promiscuous mode [ 227.533115][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 227.584248][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 227.665783][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 227.687656][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 227.709576][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 227.722478][T13659] Invalid option length (63119) for dns_resolver key [ 227.731409][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 227.748709][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 227.766598][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3293'. [ 228.175172][T13654] xfrm1: left allmulticast mode [ 228.247098][T13654] bond2: left promiscuous mode [ 228.252318][T13654] vcan1: left promiscuous mode [ 228.288164][T13654] vxlan0: left promiscuous mode [ 228.320277][T13654] geneve3: left promiscuous mode [ 228.327889][T13654] geneve3: left allmulticast mode [ 228.340104][T13657] ip6tnl1: entered promiscuous mode [ 228.346898][T13657] ip6tnl1: entered allmulticast mode [ 228.410473][ T28] audit: type=1400 audit(1777980027.352:1490): avc: denied { read } for pid=13681 comm="syz.0.3304" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 228.443722][ T28] audit: type=1400 audit(1777980027.352:1491): avc: denied { open } for pid=13681 comm="syz.0.3304" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 228.517668][ T28] audit: type=1400 audit(1777980027.462:1492): avc: denied { create } for pid=13686 comm="syz.9.3306" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 229.307216][T13713] loop8: detected capacity change from 0 to 256 [ 229.508149][T13720] loop9: detected capacity change from 0 to 128 [ 229.584102][T10910] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 60 sec [ 230.061149][T13747] loop9: detected capacity change from 0 to 512 [ 230.073475][T13747] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 230.099734][T13747] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 230.125612][T13747] EXT4-fs (loop9): 1 truncate cleaned up [ 230.133449][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 230.139947][ C1] EXT4-fs (loop9): initial error at time 1777980029: ext4_mb_generate_buddy:1317 [ 230.149313][ C1] EXT4-fs (loop9): last error at time 1777980029: ext4_mb_generate_buddy:1317 [ 230.160859][T13747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.587649][ T28] audit: type=1400 audit(1777980029.532:1493): avc: denied { create } for pid=13755 comm="syz.4.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 231.107246][T12567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.319648][T13796] cgroup: Unexpected value for 'nofavordynmods' [ 233.417917][T13875] loop9: detected capacity change from 0 to 128 [ 233.465595][ T28] audit: type=1400 audit(233.427:1494): avc: denied { append } for pid=13876 comm="syz.8.3379" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.553110][T13885] loop9: detected capacity change from 0 to 512 [ 233.597604][T13885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.620848][ T28] audit: type=1400 audit(233.577:1495): avc: denied { write } for pid=13884 comm="syz.9.3383" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.704283][T12567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.849150][T13900] __nla_validate_parse: 82 callbacks suppressed [ 233.849169][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 233.903162][T13900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3387'. [ 233.933314][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 233.967176][T13900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3387'. [ 233.992838][T13900] netlink: 'syz.0.3387': attribute type 6 has an invalid length. [ 234.628013][ T28] audit: type=1400 audit(234.577:1496): avc: denied { mounton } for pid=13912 comm="syz.8.3392" path="/proc/265/cgroup" dev="proc" ino=36279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 234.743164][T13921] loop0: detected capacity change from 0 to 2048 [ 234.765298][T13921] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.790494][T13921] EXT4-fs: Ignoring removed i_version option [ 234.815768][T13921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.843470][ T28] audit: type=1400 audit(234.797:1497): avc: denied { write } for pid=13920 comm="syz.0.3396" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.889433][T12167] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.890195][ T28] audit: type=1400 audit(234.807:1498): avc: denied { execute } for pid=13920 comm="syz.0.3396" path="/127/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 234.929348][T13924] ------------[ cut here ]------------ [ 234.935210][T13924] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.8.3392/13924 [ 234.946846][T13924] Modules linked in: [ 234.950905][T13924] CPU: 1 UID: 0 PID: 13924 Comm: syz.8.3392 Not tainted syzkaller #0 PREEMPT(full) [ 234.962335][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 234.972894][T13924] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 234.978728][T13924] Code: 8b 05 f1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d4 a8 5e 04 cc e8 5e 12 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 50 12 1e 00 90 0f 0b 90 e9 af fa ff ff [ 234.998888][T13924] RSP: 0018:ffffc90000f73dd8 EFLAGS: 00010093 [ 235.004992][T13924] RAX: ffffffff813b1652 RBX: ffff8881049ae600 RCX: ffff8881049ae600 [ 235.013001][T13924] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 235.021139][T13924] RBP: 0000000000000080 R08: ffff8881049af0f8 R09: 0000000000000000 [ 235.029283][T13924] R10: ffffc90000f73df0 R11: 0001c90000f73df0 R12: ffff8881049ae600 [ 235.037352][T13924] R13: ffff8881049aee28 R14: ffff888103aff610 R15: 0000000000000080 [ 235.045610][T13924] FS: 0000000000000000(0000) GS:ffff8882ae9fe000(0000) knlGS:0000000000000000 [ 235.054561][T13924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.061171][T13924] CR2: 00002000003d9030 CR3: 0000000006c32000 CR4: 00000000003506f0 [ 235.069191][T13924] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.077248][T13924] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 235.085246][T13924] Call Trace: [ 235.088553][T13924] [ 235.091536][T13924] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 235.097059][T13924] ? __list_add_valid_or_report+0x38/0xe0 [ 235.102822][T13924] do_exit+0xc13/0x1530 [ 235.107050][T13924] ? switch_fpu_return+0xe7/0x1b0 [ 235.112120][T13924] __x64_sys_exit+0x1f/0x20 [ 235.116673][T13924] x64_sys_call+0x301d/0x3020 [ 235.121487][T13924] do_syscall_64+0x12c/0x3b0 [ 235.126131][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.132123][T13924] RIP: 0033:0x7ffb3c64cdd9 [ 235.136655][T13924] Code: Unable to access opcode bytes at 0x7ffb3c64cdaf. [ 235.143749][T13924] RSP: 002b:00007ffb3b0a6fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 235.152280][T13924] RAX: ffffffffffffffda RBX: 00007ffb3c8c5fa0 RCX: 00007ffb3c64cdd9 [ 235.160413][T13924] RDX: 00007ffb3b0a79c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.168500][T13924] RBP: 00007ffb3c6e2d69 R08: 0000000000000000 R09: 0000000000000000 [ 235.177033][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.185310][T13924] R13: 00007ffb3c8c6038 R14: 00007ffb3c8c5fa0 R15: 00007ffd579e5308 [ 235.193522][T13924] [ 235.196658][T13924] ---[ end trace 0000000000000000 ]--- [ 235.363205][T13951] netlink: 'syz.0.3408': attribute type 1 has an invalid length. [ 235.380311][T13951] netlink: 'syz.0.3408': attribute type 4 has an invalid length. [ 235.388745][T13951] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3408'. [ 235.802350][T14000] loop0: detected capacity change from 0 to 256 [ 237.258514][T14054] xt_hashlimit: size too large, truncated to 1048576 [ 237.431144][ T3387] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 237.441611][T14060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.455496][ T3387] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 237.495976][T14060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.698163][ T28] audit: type=1326 audit(237.655:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14063 comm="syz.8.3448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb3c64cdd9 code=0x0 [ 237.835475][T10909] IPVS: starting estimator thread 0... [ 237.954355][T14071] IPVS: using max 2208 ests per chain, 110400 per kthread [ 238.002268][T14070] wireguard0: entered promiscuous mode [ 238.008259][T14070] wireguard0: entered allmulticast mode [ 238.030468][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3453'. [ 238.042137][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3453'. [ 238.070290][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3453'. [ 238.090975][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3453'. [ 238.111559][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3453'. [ 238.459318][T14083] wireguard0: left promiscuous mode [ 238.467979][T14083] wireguard0: left allmulticast mode [ 238.478427][T14083] ip6tnl1: left promiscuous mode [ 238.485399][T14083] ip6tnl1: left allmulticast mode [ 239.489124][T14115] netlink: 'syz.8.3474': attribute type 13 has an invalid length. [ 239.508987][T14115] netlink: 'syz.8.3474': attribute type 17 has an invalid length. [ 239.555413][T14111] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.562834][T14111] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.622819][ T28] audit: type=1400 audit(239.575:1500): avc: denied { setattr } for pid=14124 comm="syz.1.3468" name="/" dev="configfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 239.702590][T14111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.727817][T14111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.837749][ T28] audit: type=1400 audit(239.795:1501): avc: denied { create } for pid=14131 comm="syz.4.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 240.006220][T14135] netlink: 'syz.1.3472': attribute type 1 has an invalid length. [ 240.041474][T14115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.048484][ T28] audit: type=1400 audit(240.015:1502): avc: denied { getopt } for pid=14136 comm="syz.9.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.062845][T14115] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.079262][T14115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.101948][T14140] __nla_validate_parse: 62 callbacks suppressed [ 240.101964][T14140] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3473'. [ 240.139236][T14115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.149033][T14115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.211280][T14115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.222039][T14115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.237573][T14115] veth1_vlan: left promiscuous mode [ 240.244446][T14115] veth0_vlan: left promiscuous mode [ 240.250639][T14115] veth0_vlan: entered promiscuous mode [ 240.260960][T14115] veth1_vlan: entered promiscuous mode [ 240.280775][T14115] veth1_macvtap: left promiscuous mode [ 240.296627][T14115] veth0_macvtap: left promiscuous mode [ 240.312423][T14115] veth0_macvtap: entered promiscuous mode [ 240.326292][T14115] veth1_macvtap: entered promiscuous mode [ 240.344938][T14115] hsr1: left promiscuous mode [ 240.357966][T14121] syzkaller1: entered promiscuous mode [ 240.365517][T14121] syzkaller1: entered allmulticast mode [ 240.379136][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.386288][ T4785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.395553][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.402777][ T4785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.435218][T14135] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.450429][T14138] bond5: (slave gretap2): making interface the new active one [ 240.459214][T14138] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 240.508578][T14150] syzkaller0: entered promiscuous mode [ 240.521129][T14150] syzkaller0: entered allmulticast mode [ 240.540192][ T28] audit: type=1400 audit(240.495:1503): avc: denied { map } for pid=14157 comm="syz.1.3481" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.574385][ T12] ip6_tunnel:  xmit: Local address not yet configured! [ 240.631501][ T28] audit: type=1400 audit(240.495:1504): avc: denied { read write } for pid=14157 comm="syz.1.3481" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 240.980059][T14184] loop0: detected capacity change from 0 to 512 [ 241.010249][T14184] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.040898][T14184] EXT4-fs (loop0): 1 truncate cleaned up [ 241.072580][T14184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.115168][ T28] audit: type=1400 audit(241.075:1505): avc: denied { write } for pid=14183 comm="syz.0.3492" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.163073][T12167] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.276877][T14204] loop0: detected capacity change from 0 to 128 [ 241.288977][T14204] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.307659][T14204] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.371763][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.418231][T14213] bond0: (slave bond_slave_1): Releasing backup interface [ 241.461875][ T28] audit: type=1400 audit(241.415:1506): avc: denied { append } for pid=14216 comm="syz.8.3506" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 242.110822][T14230] loop9: detected capacity change from 0 to 128 [ 242.831635][ C1] ================================================================== [ 242.839801][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 242.847076][ C1] [ 242.849440][ C1] read-write to 0xffff88814cdd1ec0 of 4 bytes by interrupt on cpu 0: [ 242.857545][ C1] can_can_gw_rcv+0x863/0x870 [ 242.862287][ C1] can_rcv_filter+0xc3/0x480 [ 242.866917][ C1] can_receive+0x13e/0x190 [ 242.871369][ C1] can_rcv+0x17d/0x1f0 [ 242.875478][ C1] process_backlog+0x363/0x670 [ 242.880299][ C1] __napi_poll+0x61/0x300 [ 242.884667][ C1] net_rx_action+0x452/0x930 [ 242.889311][ C1] handle_softirqs+0xb9/0x280 [ 242.894107][ C1] do_softirq+0x45/0x60 [ 242.898311][ C1] __local_bh_enable_ip+0x70/0x80 [ 242.903369][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 242.908448][ C1] nsim_dev_trap_report_work+0x53b/0x640 [ 242.914136][ C1] process_scheduled_works+0x4f0/0x9c0 [ 242.919635][ C1] worker_thread+0x58a/0x780 [ 242.924273][ C1] kthread+0x22a/0x280 [ 242.928377][ C1] ret_from_fork+0x146/0x330 [ 242.933026][ C1] ret_from_fork_asm+0x1a/0x30 [ 242.937912][ C1] [ 242.940275][ C1] read-write to 0xffff88814cdd1ec0 of 4 bytes by interrupt on cpu 1: [ 242.948493][ C1] can_can_gw_rcv+0x863/0x870 [ 242.953858][ C1] can_rcv_filter+0xc3/0x480 [ 242.958514][ C1] can_receive+0x13e/0x190 [ 242.963075][ C1] can_rcv+0x17d/0x1f0 [ 242.967192][ C1] process_backlog+0x363/0x670 [ 242.972005][ C1] __napi_poll+0x61/0x300 [ 242.976385][ C1] net_rx_action+0x452/0x930 [ 242.981026][ C1] handle_softirqs+0xb9/0x280 [ 242.985744][ C1] run_ksoftirqd+0x1c/0x30 [ 242.990198][ C1] smpboot_thread_fn+0x32a/0x510 [ 242.995287][ C1] kthread+0x22a/0x280 [ 242.999484][ C1] ret_from_fork+0x146/0x330 [ 243.004127][ C1] ret_from_fork_asm+0x1a/0x30 [ 243.008934][ C1] [ 243.011287][ C1] value changed: 0x000011b1 -> 0x000011b2 [ 243.017032][ C1] [ 243.019381][ C1] Reported by Kernel Concurrency Sanitizer on: [ 243.025589][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 243.036679][ C1] Tainted: [W]=WARN [ 243.040533][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.050971][ C1] ================================================================== [ 244.633840][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 245.976037][ C0] ================================================================== [ 245.984183][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 245.991449][ C0] [ 245.993793][ C0] read-write to 0xffff88814cdd1ec0 of 4 bytes by interrupt on cpu 1: [ 246.002153][ C0] can_can_gw_rcv+0x863/0x870 [ 246.006939][ C0] can_rcv_filter+0xc3/0x480 [ 246.011573][ C0] can_receive+0x13e/0x190 [ 246.016026][ C0] can_rcv+0x17d/0x1f0 [ 246.020136][ C0] process_backlog+0x363/0x670 [ 246.025036][ C0] __napi_poll+0x61/0x300 [ 246.029405][ C0] net_rx_action+0x452/0x930 [ 246.034043][ C0] handle_softirqs+0xb9/0x280 [ 246.038772][ C0] run_ksoftirqd+0x1c/0x30 [ 246.043227][ C0] smpboot_thread_fn+0x32a/0x510 [ 246.048212][ C0] kthread+0x22a/0x280 [ 246.052317][ C0] ret_from_fork+0x146/0x330 [ 246.056961][ C0] ret_from_fork_asm+0x1a/0x30 [ 246.061796][ C0] [ 246.064233][ C0] read-write to 0xffff88814cdd1ec0 of 4 bytes by interrupt on cpu 0: [ 246.072341][ C0] can_can_gw_rcv+0x863/0x870 [ 246.077087][ C0] can_rcv_filter+0xc3/0x480 [ 246.081712][ C0] can_receive+0x13e/0x190 [ 246.086172][ C0] can_rcv+0x17d/0x1f0 [ 246.090472][ C0] process_backlog+0x363/0x670 [ 246.095282][ C0] __napi_poll+0x61/0x300 [ 246.099645][ C0] net_rx_action+0x452/0x930 [ 246.104276][ C0] handle_softirqs+0xb9/0x280 [ 246.109077][ C0] do_softirq+0x45/0x60 [ 246.113269][ C0] __local_bh_enable_ip+0x70/0x80 [ 246.118324][ C0] __alloc_skb+0x658/0x690 [ 246.122785][ C0] nsim_dev_trap_report_work+0x18a/0x640 [ 246.128466][ C0] process_scheduled_works+0x4f0/0x9c0 [ 246.133976][ C0] worker_thread+0x58a/0x780 [ 246.138605][ C0] kthread+0x22a/0x280 [ 246.142706][ C0] ret_from_fork+0x146/0x330 [ 246.147339][ C0] ret_from_fork_asm+0x1a/0x30 [ 246.152146][ C0] [ 246.154509][ C0] value changed: 0x0004d064 -> 0x0004d065 [ 246.160424][ C0] [ 246.162775][ C0] Reported by Kernel Concurrency Sanitizer on: [ 246.168958][ C0] CPU: 0 UID: 0 PID: 176 Comm: kworker/u8:5 Tainted: G W syzkaller #0 PREEMPT(full) [ 246.179968][ C0] Tainted: [W]=WARN [ 246.183802][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.193982][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 246.200809][ C0] ================================================================== [ 249.034881][ C0] ================================================================== [ 249.043043][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 249.050308][ C0] [ 249.052679][ C0] read-write to 0xffff88814cdd1ec0 of 4 bytes by interrupt on cpu 1: [ 249.060900][ C0] can_can_gw_rcv+0x863/0x870 [ 249.065633][ C0] can_rcv_filter+0xc3/0x480 [ 249.070359][ C0] can_receive+0x13e/0x190 [ 249.074813][ C0] can_rcv+0x17d/0x1f0 [ 249.078934][ C0] process_backlog+0x363/0x670 [ 249.083756][ C0] __napi_poll+0x61/0x300 [ 249.088131][ C0] net_rx_action+0x452/0x930 [ 249.092764][ C0] handle_softirqs+0xb9/0x280 [ 249.097477][ C0] do_softirq+0x45/0x60 [ 249.101671][ C0] __local_bh_enable_ip+0x70/0x80 [ 249.106735][ C0] __alloc_skb+0x658/0x690 [ 249.111206][ C0] nsim_dev_trap_report_work+0x18a/0x640 [ 249.116886][ C0] process_scheduled_works+0x4f0/0x9c0 [ 249.122390][ C0] worker_thread+0x58a/0x780 [ 249.128616][ C0] kthread+0x22a/0x280 [ 249.132746][ C0] ret_from_fork+0x146/0x330 [ 249.137384][ C0] ret_from_fork_asm+0x1a/0x30 [ 249.142192][ C0] [ 249.144587][ C0] read-write to 0xffff88814cdd1ec0 of 4 bytes by interrupt on cpu 0: [ 249.152706][ C0] can_can_gw_rcv+0x863/0x870 [ 249.157519][ C0] can_rcv_filter+0xc3/0x480 [ 249.162143][ C0] can_receive+0x13e/0x190 [ 249.166670][ C0] can_rcv+0x17d/0x1f0 [ 249.170781][ C0] process_backlog+0x363/0x670 [ 249.175587][ C0] __napi_poll+0x61/0x300 [ 249.179965][ C0] net_rx_action+0x452/0x930 [ 249.184629][ C0] handle_softirqs+0xb9/0x280 [ 249.189357][ C0] __irq_exit_rcu+0x42/0xd0 [ 249.193902][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 249.199596][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.205628][ C0] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 249.211313][ C0] hrtimer_start_range_ns+0x58c/0x10a0 [ 249.216830][ C0] j1939_tp_schedule_txtimer+0x68/0xa0 [ 249.222345][ C0] j1939_sk_sendmsg+0x8b2/0xc00 [ 249.227239][ C0] ____sys_sendmsg+0x563/0x5b0 [ 249.232042][ C0] ___sys_sendmsg+0x195/0x1e0 [ 249.236767][ C0] __sys_sendmmsg+0x185/0x320 [ 249.241478][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 249.246368][ C0] x64_sys_call+0x27aa/0x3020 [ 249.251171][ C0] do_syscall_64+0x12c/0x3b0 [ 249.255896][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.261823][ C0] [ 249.264183][ C0] value changed: 0x00098a42 -> 0x00098a43 [ 249.269927][ C0] [ 249.272275][ C0] Reported by Kernel Concurrency Sanitizer on: [ 249.278483][ C0] CPU: 0 UID: 0 PID: 14250 Comm: syz.0.3518 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.289470][ C0] Tainted: [W]=WARN [ 249.293305][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.303387][ C0] ================================================================== [ 252.159338][ C0] ================================================================== [ 252.167598][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 252.174863][ C0] [ 252.177213][ C0] read-write to 0xffff88814cdd1ec0 of 4 bytes by interrupt on cpu 1: [ 252.185311][ C0] can_can_gw_rcv+0x863/0x870 [ 252.190041][ C0] can_rcv_filter+0xc3/0x480 [ 252.194665][ C0] can_receive+0x13e/0x190 [ 252.199280][ C0] can_rcv+0x17d/0x1f0 [ 252.203394][ C0] process_backlog+0x363/0x670 [ 252.208200][ C0] __napi_poll+0x61/0x300 [ 252.212576][ C0] net_rx_action+0x452/0x930 [ 252.217207][ C0] handle_softirqs+0xb9/0x280 [ 252.221922][ C0] do_softirq+0x45/0x60 [ 252.226110][ C0] __local_bh_enable_ip+0x70/0x80 [ 252.231279][ C0] __alloc_skb+0x658/0x690 [ 252.235761][ C0] nsim_dev_trap_report_work+0x18a/0x640 [ 252.241448][ C0] process_scheduled_works+0x4f0/0x9c0 [ 252.246952][ C0] worker_thread+0x58a/0x780 [ 252.251594][ C0] kthread+0x22a/0x280 [ 252.255703][ C0] ret_from_fork+0x146/0x330 [ 252.260340][ C0] ret_from_fork_asm+0x1a/0x30 [ 252.265168][ C0] [ 252.267520][ C0] read-write to 0xffff88814cdd1ec0 of 4 bytes by interrupt on cpu 0: [ 252.275623][ C0] can_can_gw_rcv+0x863/0x870 [ 252.280367][ C0] can_rcv_filter+0xc3/0x480 [ 252.284999][ C0] can_receive+0x13e/0x190 [ 252.289451][ C0] can_rcv+0x17d/0x1f0 [ 252.293559][ C0] process_backlog+0x363/0x670 [ 252.298377][ C0] __napi_poll+0x61/0x300 [ 252.302748][ C0] net_rx_action+0x452/0x930 [ 252.307389][ C0] handle_softirqs+0xb9/0x280 [ 252.312105][ C0] do_softirq+0x45/0x60 [ 252.316300][ C0] __local_bh_enable_ip+0x70/0x80 [ 252.321366][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 252.326380][ C0] nsim_dev_trap_report_work+0x53b/0x640 [ 252.332132][ C0] process_scheduled_works+0x4f0/0x9c0 [ 252.337665][ C0] worker_thread+0x58a/0x780 [ 252.342328][ C0] kthread+0x22a/0x280 [ 252.346533][ C0] ret_from_fork+0x146/0x330 [ 252.351263][ C0] ret_from_fork_asm+0x1a/0x30 [ 252.356080][ C0] [ 252.358540][ C0] value changed: 0x000e5bcf -> 0x000e5bd0 [ 252.364320][ C0] [ 252.366670][ C0] Reported by Kernel Concurrency Sanitizer on: [ 252.372866][ C0] CPU: 0 UID: 0 PID: 4783 Comm: kworker/u8:11 Tainted: G W syzkaller #0 PREEMPT(full) [ 252.384016][ C0] Tainted: [W]=WARN [ 252.387890][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.398096][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 252.404920][ C0] ==================================================================