last executing test programs: 1m23.437778682s ago: executing program 0 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40142, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.305913467s ago: executing program 0 (id=33): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0x19, 0x0, @gue={{0x2, 0x1, 0x3, 0x1, 0x100}, "7f23c5fb59f2e54ced"}}}}, 0x3b) 1m22.462592164s ago: executing program 0 (id=38): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x2000000000000234, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1m22.26205633s ago: executing program 0 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m22.24702374s ago: executing program 0 (id=41): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 1m22.044368097s ago: executing program 0 (id=45): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0xf}]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) fcntl$dupfd(r1, 0x0, r1) 1m22.044278187s ago: executing program 32 (id=45): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0xf}]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) fcntl$dupfd(r1, 0x0, r1) 4.280538034s ago: executing program 3 (id=1094): listen(0xffffffffffffffff, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r0, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) 4.056208431s ago: executing program 3 (id=1098): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x0, 0x400000000, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.942551837s ago: executing program 3 (id=1114): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.664178705s ago: executing program 3 (id=1121): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x0, r0}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x180000000) 2.500316821s ago: executing program 3 (id=1122): socket$inet(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000f000000040000000100000000000000", @ANYRES32], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'bridge0\x00', @random='\x00\x00\x00\x00\x00 '}) 2.417032523s ago: executing program 3 (id=1124): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x10020, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x200}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000000)='^', 0x1}], 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 1.744773185s ago: executing program 2 (id=1133): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) splice(r1, 0x0, r0, 0x0, 0x20000000000002, 0x2) 1.120000145s ago: executing program 5 (id=1138): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1.076201856s ago: executing program 1 (id=1141): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x80007, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32], 0x20) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.034965827s ago: executing program 1 (id=1142): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) writev(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2720df49, 0x5}, 0x0, 0x80000000, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x0, 'lblc\x00'}, 0x2c) 1.017948927s ago: executing program 1 (id=1143): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.000602998s ago: executing program 1 (id=1144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0fecb", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/36, 0x24}, {0x0}], 0x2}, 0xc66}], 0x1, 0x10020, 0x0) 979.751159ms ago: executing program 1 (id=1145): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) tee(r0, r4, 0x8f5, 0x0) write(r2, 0x0, 0x0) 966.295369ms ago: executing program 5 (id=1146): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r3 = dup2(r2, r1) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40041}, 0x40885) close_range(r0, 0xffffffffffffffff, 0x0) 893.057621ms ago: executing program 2 (id=1147): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f1, &(0x7f00000005c0)="$eJzs3U9rHGUYAPBndjepSdakgoiKh4igopg/TcV6USv01oOgNxEazKYN3SYhiWByas56kNIvILlIT4VeRETEr+DFe29CFdF7ZDIzm5jsNivJOrbz+8Fs3nff3bwz++TZnXnIzgRQWZPpTS3iuYi4kkRMHBhrRD44mT1uZ+7utXRJYnf3w9+TSCLi1tzda8Xjk/znWP60CxHxfiNirHZ03vXNrevz7XZrLe9Pb9xYnV7f3Hpj6cb81dbV1vLc3JtvvzVzYfb8+VPb1sUXf7uzOn75m3ufDE9cunTvh3R9m/nYwe04LZMx2XlNDps+7clK1iXEPALqeZ4PRcQzMRH1POuBx99uPWIXqKhE/kNFFfsB6fFvsZS7R8J/6cHF7ADwVl7b2enEv5HVhuKJvWPD0T+TfxwZJkXt6ITS3/Hs/S9fS5cYUB0GAIB9N7cjYqbROLr/n5x4/+69Ph5zeA77fwAweD9eTD//u9X/ap36T3Sp/zSzp52Yz/9yFfW/nSP1v/3413vU/z7oc44vluN+r7GD9b90SecvaoEM3oPtiOe7xj/pxD/pEv9aRFzpc453R6a/7TUm/uXa/Trilege/0Ly8P/PnF5cardmstuuc7zw/c/bveYX/3Kl+T/aI/7Hvf+v9jnHd82P7/QaOz7+tV+Hk4/2/hiH83s+n9/YWJuNGE4uH73/3L/Z+uopXqPiNUzj/+pLD//87/b+PxIRN/uc8+U/xs/0GpP/5Urjv3BM/neLf3rfV33Ocfund8QfAAAAAAAAAAAAAAAAAAAAAAAA8vN4NiOpTXXatdrUVHYN76djtNZeWd94fXHls+WF7Jy/Z2OoVpzpcSLrJ2l/dq+93z93qD8XEU9FxO36yF5/6tOV9kLZGw8AAAAAAAAAAAAAAAAAAAD/E2OHvv//Vz37/j9QEY2yVwAojfyH6pL/UF3yH6pL/kN1yX+oLvkP1SX/obrkP1SX/Ifqkv8AAAAAAAAAAAAAAAAAAAAAAAAAADAQzUPX/29Gdv3/JyPibAwli0vt1kxEjEfEL/WhM2l/tuyVBgAAAAAAAAAAAAAAAAAAgMfM+ubW9fl2u7WmoaGh0WmU/c4EAAAAAAAAAAAAAAAAAADVs/+l37LXBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADKs3/9/8E1yt5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR9HcAAAD//6D00WM=") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 881.385452ms ago: executing program 5 (id=1148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x0, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfe33) 794.759035ms ago: executing program 5 (id=1150): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) syz_clone(0x2342400, 0x0, 0x0, 0x0, 0x0, 0x0) 702.687898ms ago: executing program 1 (id=1151): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x4, 0x0, 0x800}, {0x2}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)) 465.956815ms ago: executing program 4 (id=1153): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x80007, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32], 0x20) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 464.077745ms ago: executing program 5 (id=1163): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 463.584045ms ago: executing program 2 (id=1154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 389.483357ms ago: executing program 4 (id=1155): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x20003}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 332.905359ms ago: executing program 4 (id=1156): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffa, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendto$inet6(r0, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0) 332.411889ms ago: executing program 2 (id=1157): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 250.718242ms ago: executing program 4 (id=1158): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x1f, 0x0, 0x0) 227.213313ms ago: executing program 4 (id=1159): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x5c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x208}, 0x40000) mount(&(0x7f0000000240), &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='ramfs\x00', 0x1000, 0x0) 108.651416ms ago: executing program 2 (id=1160): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 79.917787ms ago: executing program 4 (id=1161): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x1, 0x6}, {0x0, 0x0, 0x400000003, 0x4}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@local, 0x4, 0x33}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 69.120708ms ago: executing program 2 (id=1162): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) exit(0x105) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) 0s ago: executing program 5 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 37.619318][ T3674] EXT4-fs (loop4): dirty_blocks=512 [ 37.630831][ T3674] EXT4-fs (loop4): Block reservation details [ 37.647104][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.654291][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.654911][ T3674] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 37.667518][ T3656] bridge_slave_0: entered allmulticast mode [ 37.679980][ T3656] bridge_slave_0: entered promiscuous mode [ 37.697075][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.707190][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.714840][ T3656] bridge_slave_1: entered allmulticast mode [ 37.724360][ T3656] bridge_slave_1: entered promiscuous mode [ 37.736908][ T3702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 37.797097][ T3656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.810013][ T3674] syz.4.55 (3674) used greatest stack depth: 10064 bytes left [ 37.827333][ T30] bridge_slave_1: left allmulticast mode [ 37.833172][ T30] bridge_slave_1: left promiscuous mode [ 37.839999][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.856956][ T30] bridge_slave_0: left allmulticast mode [ 37.863472][ T30] bridge_slave_0: left promiscuous mode [ 37.871171][ T3706] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 37.873674][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.892104][ T49] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 320 with max blocks 162 with error 28 [ 37.918340][ T3310] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 38.004171][ T3710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.64'. [ 38.022200][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.038238][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.048966][ T30] bond0 (unregistering): Released all slaves [ 38.066258][ T3656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.105525][ T30] hsr_slave_0: left promiscuous mode [ 38.131473][ T30] hsr_slave_1: left promiscuous mode [ 38.145366][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.153435][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.169837][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.177355][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.210661][ T30] veth1_macvtap: left promiscuous mode [ 38.218289][ T30] veth0_macvtap: left promiscuous mode [ 38.226682][ T30] veth1_vlan: left promiscuous mode [ 38.231992][ T30] veth0_vlan: left promiscuous mode [ 38.411237][ T30] team0 (unregistering): Port device team_slave_1 removed [ 38.422725][ T30] team0 (unregistering): Port device team_slave_0 removed [ 38.460617][ T3656] team0: Port device team_slave_0 added [ 38.470582][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.481809][ T3656] team0: Port device team_slave_1 added [ 38.524223][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.537480][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.570218][ T3656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.593243][ T3656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.606774][ T3656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.633910][ T3656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.681898][ T3656] hsr_slave_0: entered promiscuous mode [ 38.688096][ T3656] hsr_slave_1: entered promiscuous mode [ 38.694249][ T3656] debugfs: 'hsr0' already exists in 'hsr' [ 38.700209][ T3656] Cannot create hsr debugfs directory [ 38.881296][ T3757] loop4: detected capacity change from 0 to 1024 [ 38.895569][ T3757] EXT4-fs: Ignoring removed nobh option [ 38.907728][ T3757] EXT4-fs: Ignoring removed bh option [ 38.914932][ T3757] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 38.940698][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.958510][ T3757] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.005951][ T3757] syz.4.74 (3757) used greatest stack depth: 9984 bytes left [ 39.028719][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.523223][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 39.523238][ T28] audit: type=1400 audit(1778665717.390:300): avc: denied { read write } for pid=3769 comm="syz.3.79" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 39.554932][ T28] audit: type=1400 audit(1778665717.430:301): avc: denied { open } for pid=3769 comm="syz.3.79" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 39.585626][ T3770] Zero length message leads to an empty skb [ 41.007189][ T3786] netlink: 'syz.4.85': attribute type 4 has an invalid length. [ 41.018877][ T3786] netlink: 'syz.4.85': attribute type 4 has an invalid length. [ 41.045834][ T3786] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.053031][ T3786] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.085661][ T3786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.095210][ T3786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.103244][ T3720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.172409][ T3656] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.182862][ T28] audit: type=1400 audit(1778665719.040:302): avc: denied { mounton } for pid=3790 comm="syz.2.87" path="/21/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.229680][ T3656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.244866][ T3656] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.264966][ T3656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.270972][ T28] audit: type=1400 audit(1778665719.130:303): avc: denied { watch watch_reads } for pid=3805 comm="syz.2.90" path="/22/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 41.296267][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.308685][ T3656] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.321969][ T3656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.333670][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.350673][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.369301][ T28] audit: type=1400 audit(1778665719.230:304): avc: denied { write } for pid=3795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.402028][ T3656] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.415204][ T3656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.431613][ T28] audit: type=1400 audit(1778665719.280:305): avc: denied { write } for pid=3818 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.435012][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.493993][ T28] audit: type=1400 audit(1778665719.340:306): avc: denied { setopt } for pid=3815 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.523730][ T28] audit: type=1326 audit(1778665719.350:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.4.94" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c62ce59 code=0x7ffc0000 [ 41.539870][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 41.548977][ T28] audit: type=1326 audit(1778665719.350:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.4.94" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c62ce59 code=0x7ffc0000 [ 41.581176][ T28] audit: type=1326 audit(1778665719.350:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.4.94" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c62ce59 code=0x7ffc0000 [ 41.664429][ T3838] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 41.671691][ T3838] IPv6: NLM_F_CREATE should be set when creating new route [ 41.678892][ T3838] IPv6: NLM_F_CREATE should be set when creating new route [ 41.687569][ T3838] sit0: entered promiscuous mode [ 41.695483][ T3838] netlink: 'syz.3.98': attribute type 1 has an invalid length. [ 41.719334][ T3838] netlink: 1 bytes leftover after parsing attributes in process `syz.3.98'. [ 43.869096][ T3871] loop4: detected capacity change from 0 to 256 [ 43.875886][ T3871] vfat: Bad value for 'dmask' [ 43.948493][ T3877] loop4: detected capacity change from 0 to 512 [ 43.970787][ T3877] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.113: bad orphan inode 11862016 [ 43.981316][ T3877] loop4: lost filesystem error report for type 5 error -117 [ 43.981742][ T3877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.001602][ T3877] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.026213][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.110324][ T3884] loop4: detected capacity change from 0 to 512 [ 44.131339][ T3884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.144017][ T3884] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.264307][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.416498][ T3822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.501972][ T3656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.535803][ T3656] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.563632][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.570714][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.579026][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 44.579110][ T28] audit: type=1400 audit(1778665722.440:364): avc: denied { kexec_image_load } for pid=3902 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 44.646296][ T2089] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.653460][ T2089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.700607][ T28] audit: type=1400 audit(1778665722.570:365): avc: denied { write } for pid=3898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.775600][ T28] audit: type=1400 audit(1778665722.630:366): avc: denied { write } for pid=3917 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.816497][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.934073][ T3656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.008885][ T28] audit: type=1400 audit(1778665722.870:367): avc: denied { write } for pid=3930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.068718][ T28] audit: type=1400 audit(1778665722.920:368): avc: denied { write } for pid=3950 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.098261][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 45.121135][ T28] audit: type=1400 audit(1778665722.920:369): avc: denied { create } for pid=3947 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.163875][ T28] audit: type=1400 audit(1778665722.920:370): avc: denied { write } for pid=3947 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.233193][ T28] audit: type=1400 audit(1778665722.920:371): avc: denied { nlmsg_write } for pid=3947 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.312433][ T28] audit: type=1400 audit(1778665722.990:372): avc: denied { read } for pid=3954 comm="syz.2.124" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.356154][ T3656] veth0_vlan: entered promiscuous mode [ 45.376051][ T3656] veth1_vlan: entered promiscuous mode [ 45.415128][ T3656] veth0_macvtap: entered promiscuous mode [ 45.422760][ T3903] kexec: Could not allocate control_code_buffer [ 45.431381][ T3656] veth1_macvtap: entered promiscuous mode [ 45.454872][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.472298][ T3656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.482226][ T3961] loop4: detected capacity change from 0 to 512 [ 45.503549][ T947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.518387][ T3973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.127'. [ 45.539496][ T3961] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 45.552789][ T947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.575163][ T947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.577322][ T3961] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 45.594859][ T947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.645497][ T28] audit: type=1400 audit(1778665723.510:373): avc: denied { mounton } for pid=3656 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 45.667721][ T3961] syz.4.125 (3961) used greatest stack depth: 9536 bytes left [ 45.854214][ T3993] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.861536][ T3993] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.797018][ T3993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.818937][ T4012] netlink: 'syz.4.139': attribute type 1 has an invalid length. [ 46.831125][ T3993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.861611][ T4014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.140'. [ 46.872421][ T4014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.140'. [ 46.883724][ T4014] netlink: 'syz.1.140': attribute type 6 has an invalid length. [ 46.897927][ T4012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.909719][ T292] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.924445][ T4019] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 46.933870][ T292] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.972117][ T292] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.986293][ T292] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.006293][ T4030] loop1: detected capacity change from 0 to 512 [ 47.021739][ T4030] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.147: bad orphan inode 13 [ 47.045036][ T4030] loop1: lost filesystem error report for type 5 error -117 [ 47.045244][ T4030] ext4_test_bit(bit=12, block=4) = 1 [ 47.052598][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 47.052615][ C1] EXT4-fs (loop1): initial error at time 1778665724: ext4_orphan_get:1423 [ 47.052640][ C1] EXT4-fs (loop1): last error at time 1778665724: ext4_orphan_get:1423 [ 47.082364][ T4030] is_bad_inode(inode)=0 [ 47.087414][ T4030] NEXT_ORPHAN(inode)=0 [ 47.091929][ T4030] max_ino=32 [ 47.095133][ T4030] i_nlink=1 [ 47.098715][ T4030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.125633][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.132345][ T4039] loop5: detected capacity change from 0 to 128 [ 47.142866][ T4039] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.155387][ T4039] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.232540][ T4047] loop2: detected capacity change from 0 to 764 [ 47.254942][ T4047] Symlink component flag not implemented [ 47.272951][ T4047] Symlink component flag not implemented (116) [ 47.369964][ T4053] loop3: detected capacity change from 0 to 1024 [ 47.396476][ T4053] EXT4-fs: Ignoring removed orlov option [ 47.441437][ T4053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.482608][ T4067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 47.520360][ T4071] wg1 speed is unknown, defaulting to 1000 [ 47.526410][ T4071] wg1 speed is unknown, defaulting to 1000 [ 47.535866][ T4071] wg1 speed is unknown, defaulting to 1000 [ 47.555778][ T4071] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.564000][ T4071] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 47.575190][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.587459][ T4073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 47.594271][ T4071] wg1 speed is unknown, defaulting to 1000 [ 47.599079][ T4073] ip6gre1: entered promiscuous mode [ 47.608131][ T4073] ip6gre1: entered allmulticast mode [ 47.618261][ T4071] wg1 speed is unknown, defaulting to 1000 [ 47.632688][ T4071] wg1 speed is unknown, defaulting to 1000 [ 47.644551][ T4073] netlink: 'syz.2.163': attribute type 6 has an invalid length. [ 47.652632][ T4073] netlink: 72 bytes leftover after parsing attributes in process `syz.2.163'. [ 47.661764][ T4071] wg1 speed is unknown, defaulting to 1000 [ 47.675491][ T4071] wg1 speed is unknown, defaulting to 1000 [ 47.927740][ T4091] siw: device registration error -23 [ 48.266850][ T4110] netlink: 'syz.2.179': attribute type 4 has an invalid length. [ 48.324054][ T4110] netlink: 'syz.2.179': attribute type 4 has an invalid length. [ 48.400396][ T4108] loop1: detected capacity change from 0 to 512 [ 48.426541][ T4108] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 48.487845][ T4108] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 48.560013][ T4110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.582632][ T4110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.739687][ T2089] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.749856][ T2089] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.790840][ T2089] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.818143][ T2089] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.831868][ T4121] geneve2: entered promiscuous mode [ 48.848823][ T2089] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 48.876872][ T4121] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.889825][ T2089] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 48.899946][ T2089] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 48.998496][ T4129] siw: device registration error -23 [ 49.497631][ T4152] can0: slcan on ttyS3. [ 49.559380][ T4151] can0 (unregistered): slcan off ttyS3. [ 49.667402][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 49.667415][ T28] audit: type=1400 audit(1778665727.530:403): avc: denied { ioctl } for pid=4167 comm="syz.4.199" path="socket:[8748]" dev="sockfs" ino=8748 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.700447][ T4170] siw: device registration error -23 [ 49.724765][ T4169] syzkaller0: entered promiscuous mode [ 49.741658][ T4169] syzkaller0: entered allmulticast mode [ 49.743730][ T28] audit: type=1400 audit(1778665727.570:404): avc: denied { write } for pid=4157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.796068][ T28] audit: type=1400 audit(1778665727.620:405): avc: denied { write } for pid=4174 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.909683][ T28] audit: type=1400 audit(1778665727.780:406): avc: denied { write } for pid=4176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.971150][ T28] audit: type=1400 audit(1778665727.820:407): avc: denied { write } for pid=4187 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.122727][ T28] audit: type=1400 audit(1778665727.990:408): avc: denied { read } for pid=4194 comm="syz.4.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.444417][ T4156] kexec: Could not allocate control_code_buffer [ 51.022521][ T4121] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.032982][ T4121] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 51.053226][ T4208] loop4: detected capacity change from 0 to 128 [ 51.062672][ T4208] EXT4-fs: Ignoring removed i_version option [ 51.096836][ T4121] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.110826][ T4208] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.118761][ T4121] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 51.137263][ T4208] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.150728][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 51.183456][ T28] audit: type=1400 audit(1778665729.050:409): avc: denied { write } for pid=4207 comm="syz.4.205" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.206230][ T28] audit: type=1400 audit(1778665729.050:410): avc: denied { append } for pid=4207 comm="syz.4.205" path="/59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.io_wait_time" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.252236][ T28] audit: type=1400 audit(1778665729.070:411): avc: denied { write } for pid=4207 comm="syz.4.205" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.282779][ T28] audit: type=1400 audit(1778665729.070:412): avc: denied { write } for pid=4207 comm="syz.4.205" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.306218][ T4121] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.307013][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.326209][ T4121] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 51.377076][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 51.385630][ T12] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 51.406178][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 51.435529][ T12] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 51.454103][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 51.489240][ T12] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 51.500555][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 51.518601][ T12] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 51.518644][ T4227] loop1: detected capacity change from 0 to 8192 [ 51.595706][ T4229] wg1 speed is unknown, defaulting to 1000 [ 51.760862][ T4238] can0: slcan on ttyS3. [ 51.805450][ T4250] syzkaller1: entered promiscuous mode [ 51.817201][ T4250] syzkaller1: entered allmulticast mode [ 51.849382][ T4237] can0 (unregistered): slcan off ttyS3. [ 52.191749][ T4276] can0: slcan on ttyS3. [ 52.279457][ T4275] can0 (unregistered): slcan off ttyS3. [ 52.305247][ T4285] loop2: detected capacity change from 0 to 512 [ 52.363564][ T4285] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 52.412348][ T4285] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 52.596528][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 53.038141][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 54.492324][ T4351] bridge_slave_1: left allmulticast mode [ 54.503056][ T4351] bridge_slave_1: left promiscuous mode [ 54.614126][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.687556][ T4351] bridge_slave_0: left allmulticast mode [ 54.720737][ T4351] bridge_slave_0: left promiscuous mode [ 54.755532][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.095384][ T4371] syzkaller0: entered promiscuous mode [ 55.095901][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 55.095913][ T28] audit: type=1400 audit(1778665732.960:467): avc: denied { write } for pid=4365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.107026][ T4371] syzkaller0: entered allmulticast mode [ 55.140077][ T28] audit: type=1400 audit(1778665733.010:468): avc: denied { write } for pid=4379 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.310605][ T4393] loop2: detected capacity change from 0 to 512 [ 55.323795][ T4393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.336569][ T4393] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.347813][ T4393] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.411121][ T28] audit: type=1400 audit(1778665733.280:469): avc: denied { setopt } for pid=4404 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.468399][ T4409] loop2: detected capacity change from 0 to 2048 [ 55.483138][ T4409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.496399][ T28] audit: type=1400 audit(1778665733.370:470): avc: denied { write } for pid=4408 comm="syz.2.261" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.550100][ T2089] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 55.551293][ T28] audit: type=1400 audit(1778665733.420:471): avc: denied { create } for pid=4412 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.565106][ T2089] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 55.584654][ T28] audit: type=1400 audit(1778665733.420:472): avc: denied { write } for pid=4412 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.597188][ T2089] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.597188][ T2089] [ 55.616058][ T28] audit: type=1400 audit(1778665733.460:473): avc: denied { setopt } for pid=4412 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.625184][ T2089] EXT4-fs (loop2): Total free blocks count 0 [ 55.645016][ T28] audit: type=1400 audit(1778665733.460:474): avc: denied { connect } for pid=4412 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.669883][ T2089] EXT4-fs (loop2): Free/Dirty block details [ 55.669902][ T2089] EXT4-fs (loop2): free_blocks=4096 [ 55.681049][ T2089] EXT4-fs (loop2): dirty_blocks=512 [ 55.686331][ T2089] EXT4-fs (loop2): Block reservation details [ 55.700675][ T2089] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 55.704442][ T4417] loop3: detected capacity change from 0 to 1024 [ 55.714004][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 55.728466][ T3300] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 55.734818][ T4417] EXT4-fs: Ignoring removed orlov option [ 55.757993][ T4417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.827185][ T28] audit: type=1400 audit(1778665733.690:475): avc: denied { write } for pid=4415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.851921][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.862187][ T4425] bridge0: port 1(gretap0) entered blocking state [ 55.868718][ T28] audit: type=1400 audit(1778665733.730:476): avc: denied { write } for pid=4431 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.870105][ T4425] bridge0: port 1(gretap0) entered disabled state [ 55.913961][ T4425] gretap0: entered allmulticast mode [ 55.924222][ T4425] gretap0: entered promiscuous mode [ 55.975593][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 55.992070][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 56.028034][ T4446] team1: entered promiscuous mode [ 56.037719][ T4446] team1: entered allmulticast mode [ 56.046827][ T4456] loop2: detected capacity change from 0 to 512 [ 56.054802][ T4446] 8021q: adding VLAN 0 to HW filter on device team1 [ 56.061992][ T4456] EXT4-fs: Ignoring removed i_version option [ 56.070975][ T4456] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.099890][ T4456] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 56.107910][ T4456] EXT4-fs (loop2): orphan cleanup on readonly fs [ 56.114779][ T4456] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.129923][ T4456] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 56.136658][ T4456] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.269: bad orphan inode 67108864 [ 56.147426][ T4456] loop2: lost filesystem error report for type 5 error -117 [ 56.148071][ T4456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.354921][ T4456] EXT4-fs warning (device loop2): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 56.390486][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.450919][ T4489] process 'syz.3.279' launched '/dev/fd/6' with NULL argv: empty string added [ 56.625570][ T4511] loop4: detected capacity change from 0 to 512 [ 56.632415][ T3395] kernel read not supported for file /input/event2 (pid: 3395 comm: kworker/1:4) [ 56.653029][ T4511] EXT4-fs: Ignoring removed bh option [ 56.700571][ T4511] EXT4-fs: Mount option(s) incompatible with ext2 [ 56.766915][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 56.781302][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 56.781354][ T4511] loop4: detected capacity change from 0 to 512 [ 56.815130][ T4527] loop2: detected capacity change from 0 to 512 [ 56.845190][ T4511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.864867][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.928424][ T4511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.977243][ T4511] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.002215][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.495569][ T4564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.583479][ T4565] erspan0: entered promiscuous mode [ 57.604580][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 57.659528][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.747361][ T4574] tmpfs: Bad value for 'mpol' [ 57.956862][ T4589] capability: warning: `syz.2.315' uses 32-bit capabilities (legacy support in use) [ 58.044583][ T4589] netlink: 'syz.2.315': attribute type 8 has an invalid length. [ 58.812713][ T4571] syz.1.306 (4571) used greatest stack depth: 8952 bytes left [ 58.902568][ T4620] loop4: detected capacity change from 0 to 128 [ 58.936749][ T4620] msdos: Bad value for 'gid' [ 58.977744][ T4620] msdos: Bad value for 'gid' [ 58.995211][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 59.029492][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 59.062100][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 59.089863][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 59.109291][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 59.353711][ T4636] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 59.884702][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.898572][ T4671] Bluetooth: hci0: unexpected event 0x10 length: 0 < 1 [ 59.989944][ T4678] loop5: detected capacity change from 0 to 2048 [ 60.017989][ T4678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.042747][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.180918][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.198316][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.282135][ T4697] netlink: 'syz.5.357': attribute type 21 has an invalid length. [ 60.290931][ T4697] netlink: 156 bytes leftover after parsing attributes in process `syz.5.357'. [ 60.466939][ T4704] netlink: 'syz.4.361': attribute type 11 has an invalid length. [ 60.512163][ T4708] loop4: detected capacity change from 0 to 512 [ 60.530417][ T4708] EXT4-fs: Ignoring removed nobh option [ 60.539149][ T4685] Set syz1 is full, maxelem 65536 reached [ 60.552442][ T4708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.572487][ T4708] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.584211][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 60.584226][ T28] audit: type=1400 audit(1778665738.460:521): avc: denied { write } for pid=4707 comm="syz.4.362" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.612143][ T4708] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.362: iget: bad i_size value: 2533274857506816 [ 60.654874][ T28] audit: type=1400 audit(1778665738.460:522): avc: denied { remove_name } for pid=4707 comm="syz.4.362" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.702318][ T28] audit: type=1400 audit(1778665738.460:523): avc: denied { unlink } for pid=4707 comm="syz.4.362" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.752014][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.924877][ T28] audit: type=1400 audit(1778665738.790:524): avc: denied { mount } for pid=4722 comm="syz.5.366" name="/" dev="autofs" ino=9645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 60.990515][ T4727] loop5: detected capacity change from 0 to 764 [ 60.999929][ T28] audit: type=1400 audit(1778665738.870:525): avc: denied { setopt } for pid=4728 comm="syz.4.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.959214][ T4671] Bluetooth: hci0: command 0x1003 tx timeout [ 61.965260][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 62.191016][ T28] audit: type=1326 audit(1778665740.060:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 62.225773][ T28] audit: type=1326 audit(1778665740.060:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 62.251331][ T28] audit: type=1326 audit(1778665740.060:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 62.276698][ T28] audit: type=1326 audit(1778665740.060:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 62.304665][ T28] audit: type=1326 audit(1778665740.060:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.3.378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 62.415256][ T4764] loop4: detected capacity change from 0 to 2048 [ 62.435207][ T4764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.461570][ T4764] xt_hashlimit: invalid rate [ 62.523840][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.595050][ T4778] netlink: 'syz.3.387': attribute type 8 has an invalid length. [ 62.612739][ T4782] netlink: 'syz.4.389': attribute type 21 has an invalid length. [ 62.629337][ T4782] netlink: 156 bytes leftover after parsing attributes in process `syz.4.389'. [ 62.654464][ T4784] loop3: detected capacity change from 0 to 2048 [ 62.663572][ T4784] journal_path: Lookup failure for './bus' [ 62.669750][ T4784] EXT4-fs: error: could not find journal device path [ 63.150918][ T4807] netlink: 'syz.5.400': attribute type 8 has an invalid length. [ 63.214447][ T4811] sctp: [Deprecated]: syz.5.403 (pid 4811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.214447][ T4811] Use struct sctp_sack_info instead [ 63.255712][ T4814] netlink: 'syz.3.404': attribute type 13 has an invalid length. [ 63.774847][ T4843] netlink: 'syz.4.414': attribute type 8 has an invalid length. [ 64.690186][ T4867] netlink: 'syz.5.421': attribute type 39 has an invalid length. [ 65.359392][ T4879] loop2: detected capacity change from 0 to 1024 [ 67.622716][ T4884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'. [ 67.672866][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 67.672878][ T28] audit: type=1400 audit(1778665745.540:572): avc: denied { write } for pid=4885 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.699851][ T28] audit: type=1400 audit(1778665745.570:573): avc: denied { read } for pid=4885 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.733607][ T4888] loop4: detected capacity change from 0 to 512 [ 67.743123][ T4888] ======================================================= [ 67.743123][ T4888] WARNING: The mand mount option has been deprecated and [ 67.743123][ T4888] and is ignored by this kernel. Remove the mand [ 67.743123][ T4888] option from the mount to silence this warning. [ 67.743123][ T4888] ======================================================= [ 67.779434][ T4888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.791364][ T4888] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.430: corrupted xattr entries [ 67.792239][ T28] audit: type=1400 audit(1778665745.660:574): avc: denied { setopt } for pid=4885 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.803763][ T4888] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.822657][ T4888] EXT4-fs (loop4): 1 truncate cleaned up [ 67.831818][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 67.831831][ C1] EXT4-fs (loop4): initial error at time 1778665745: xattr_find_entry:337: inode 15 [ 67.831851][ C1] EXT4-fs (loop4): last error at time 1778665745: xattr_find_entry:337: inode 15 [ 67.863259][ T4888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.877069][ T4888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.012498][ T4911] Illegal XDP return value 4292464640 on prog (id 117) dev syz_tun, expect packet loss! [ 68.015060][ T4910] wg1 speed is unknown, defaulting to 1000 [ 68.042882][ T4914] loop1: detected capacity change from 0 to 512 [ 68.061123][ T4914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.096406][ T28] audit: type=1400 audit(1778665745.960:575): avc: denied { write } for pid=4906 comm="syz.1.436" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.221655][ T28] audit: type=1326 audit(1778665746.090:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4908 comm="syz.5.437" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c10ce59 code=0x0 [ 68.247209][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.480943][ T28] audit: type=1400 audit(1778665746.350:577): avc: denied { read } for pid=4927 comm="syz.1.444" path="socket:[11046]" dev="sockfs" ino=11046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.548196][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 68.557931][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 68.594813][ T28] audit: type=1326 audit(1778665746.460:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.1.448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 68.646996][ T3418] kernel write not supported for file bpf-map (pid: 3418 comm: kworker/1:6) [ 68.659350][ T28] audit: type=1326 audit(1778665746.460:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.1.448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 68.709284][ T28] audit: type=1326 audit(1778665746.460:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.1.448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 68.764691][ T28] audit: type=1326 audit(1778665746.460:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4935 comm="syz.1.448" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 68.983864][ T4952] loop5: detected capacity change from 0 to 512 [ 69.004103][ T4952] EXT4-fs: Ignoring removed bh option [ 69.023017][ T4952] EXT4-fs: Mount option(s) incompatible with ext2 [ 69.052911][ T4952] loop5: detected capacity change from 0 to 512 [ 69.085099][ T4952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.135331][ T4952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.150044][ T4952] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.160936][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 69.255982][ T4966] loop2: detected capacity change from 0 to 128 [ 69.353929][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.447082][ T3305] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 69.462335][ T3305] CPU: 1 UID: 0 PID: 3305 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 69.462400][ T3305] Tainted: [W]=WARN [ 69.462406][ T3305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.462419][ T3305] Call Trace: [ 69.462426][ T3305] [ 69.462433][ T3305] __dump_stack+0x1d/0x30 [ 69.462456][ T3305] dump_stack_lvl+0x95/0xd0 [ 69.462517][ T3305] dump_stack+0x15/0x1b [ 69.462534][ T3305] dump_header+0x80/0x240 [ 69.462617][ T3305] oom_kill_process+0x295/0x350 [ 69.462666][ T3305] out_of_memory+0x97d/0xb80 [ 69.462695][ T3305] try_charge_memcg+0x62f/0xa10 [ 69.462717][ T3305] ? radix_tree_lookup+0xfa/0x140 [ 69.462829][ T3305] charge_memcg+0x6d/0x120 [ 69.462848][ T3305] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 69.462875][ T3305] __swap_cache_prepare_and_add+0x69/0x4a0 [ 69.462953][ T3305] ? alloc_pages_mpol+0x217/0x260 [ 69.462973][ T3305] swap_cache_alloc_folio+0xa2/0x120 [ 69.463019][ T3305] swap_cluster_readahead+0x25f/0x3c0 [ 69.463048][ T3305] swapin_readahead+0xde/0x840 [ 69.463104][ T3305] ? tick_program_event+0x79/0xc0 [ 69.463125][ T3305] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 69.463271][ T3305] ? __rcu_read_unlock+0x4e/0x70 [ 69.463288][ T3305] ? swap_cache_get_folio+0x1e0/0x1f0 [ 69.463387][ T3305] do_swap_page+0x31e/0x2180 [ 69.463490][ T3305] ? __schedule+0x951/0xd40 [ 69.463589][ T3305] ? __rcu_read_lock+0x36/0x50 [ 69.463605][ T3305] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 69.463628][ T3305] handle_mm_fault+0xb2e/0x2e70 [ 69.463695][ T3305] ? vma_start_read+0x1c7/0x2c0 [ 69.463723][ T3305] do_user_addr_fault+0x62f/0x1050 [ 69.463752][ T3305] ? trace_page_fault_user+0x1f/0xa0 [ 69.463845][ T3305] exc_page_fault+0x62/0xa0 [ 69.463862][ T3305] asm_exc_page_fault+0x26/0x30 [ 69.463881][ T3305] RIP: 0033:0x7f9ea75d7fd7 [ 69.463897][ T3305] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 69.463986][ T3305] RSP: 002b:00007ffe4aaf2320 EFLAGS: 00010202 [ 69.464003][ T3305] RAX: 0000000000000000 RBX: 000055558b325500 RCX: 00007f9ea75d7fd7 [ 69.464017][ T3305] RDX: 00007ffe4aaf2360 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.464030][ T3305] RBP: 00007ffe4aaf23cc R08: 0000000000000000 R09: 0000000000000000 [ 69.464043][ T3305] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 69.464056][ T3305] R13: 00000000000927c0 R14: 0000000000010b05 R15: 00007ffe4aaf2420 [ 69.464073][ T3305] [ 69.464181][ T3305] memory: usage 307200kB, limit 307200kB, failcnt 535 [ 69.719077][ T3305] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 69.727519][ T3305] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 69.734918][ T3305] Memory cgroup stats for /syz3: [ 69.735124][ T3305] cache 4096 [ 69.743548][ T3305] rss 0 [ 69.746314][ T3305] shmem 0 [ 69.749515][ T3305] mapped_file 0 [ 69.752977][ T3305] dirty 0 [ 69.755932][ T3305] writeback 0 [ 69.759474][ T3305] workingset_refault_anon 41 [ 69.764139][ T3305] workingset_refault_file 376 [ 69.768807][ T3305] swap 184320 [ 69.772312][ T3305] swapcached 360448 [ 69.776114][ T3305] pgpgin 18317 [ 69.779667][ T3305] pgpgout 18314 [ 69.783154][ T3305] pgfault 32731 [ 69.786625][ T3305] pgmajfault 27 [ 69.790313][ T3305] inactive_anon 0 [ 69.794042][ T3305] active_anon 8192 [ 69.797850][ T3305] inactive_file 0 [ 69.801752][ T3305] active_file 4096 [ 69.805494][ T3305] unevictable 0 [ 69.809040][ T3305] hierarchical_memory_limit 314572800 [ 69.814669][ T3305] hierarchical_memsw_limit 9223372036854771712 [ 69.821020][ T3305] total_cache 4096 [ 69.824879][ T3305] total_rss 0 [ 69.828225][ T3305] total_shmem 0 [ 69.831964][ T3305] total_mapped_file 0 [ 69.835962][ T3305] total_dirty 0 [ 69.840612][ T3305] total_writeback 0 [ 69.844524][ T3305] total_workingset_refault_anon 41 [ 69.849720][ T3305] total_workingset_refault_file 376 [ 69.854989][ T3305] total_swap 184320 [ 69.858904][ T3305] total_swapcached 360448 [ 69.869346][ T3305] total_pgpgin 18317 [ 69.873322][ T3305] total_pgpgout 18314 [ 69.883187][ T3305] total_pgfault 32731 [ 69.889227][ T4977] capability: warning: `syz.2.467' uses deprecated v2 capabilities in a way that may be insecure [ 69.900075][ T3305] total_pgmajfault 27 [ 69.904201][ T3305] total_inactive_anon 0 [ 69.908400][ T3305] total_active_anon 8192 [ 69.913087][ T3305] total_inactive_file 0 [ 69.917435][ T3305] total_active_file 4096 [ 69.941362][ T3305] total_unevictable 0 [ 69.948615][ T3305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.441,pid=4921,uid=0 [ 69.970192][ T3305] Memory cgroup out of memory: Killed process 4921 (syz.3.441) total-vm:96072kB, anon-rss:1228kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 70.175422][ T4994] io-wq is not configured for unbound workers [ 70.240933][ T5001] loop3: detected capacity change from 0 to 512 [ 70.273882][ T5001] EXT4-fs: Ignoring removed bh option [ 70.293821][ T5001] EXT4-fs: Mount option(s) incompatible with ext2 [ 70.354237][ T5001] loop3: detected capacity change from 0 to 512 [ 70.381826][ T5001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.424381][ T5001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.443953][ T5001] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.474697][ T5013] netlink: 'syz.5.489': attribute type 1 has an invalid length. [ 70.518817][ T2089] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.529755][ T5019] Bluetooth: hci0: Frame reassembly failed (-90) [ 70.557036][ T5013] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 70.567475][ T5013] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 70.578126][ T5013] bond1: (slave vxcan3): making interface the new active one [ 70.585877][ T5013] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 70.603212][ T5013] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 70.614735][ T5013] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 70.677723][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.848480][ T5040] syz_tun: entered allmulticast mode [ 70.870497][ T5039] syz_tun: left allmulticast mode [ 71.868656][ T5115] loop2: detected capacity change from 0 to 512 [ 71.894143][ T5115] EXT4-fs: Ignoring removed bh option [ 71.902581][ T5115] EXT4-fs: Mount option(s) incompatible with ext2 [ 71.935646][ T5115] loop2: detected capacity change from 0 to 512 [ 71.952011][ T5115] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 71.981370][ T5115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.994126][ T5115] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.126048][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.129808][ T5125] wg1 speed is unknown, defaulting to 1000 [ 72.519205][ T4671] Bluetooth: hci0: command 0x1003 tx timeout [ 72.525257][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.764012][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 72.764028][ T28] audit: type=1326 audit(1778665750.630:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5159 comm="syz.2.514" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3226fce59 code=0x0 [ 72.802438][ T5156] loop5: detected capacity change from 0 to 512 [ 72.814007][ T5156] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 72.844257][ T5156] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 [ 72.864499][ T28] audit: type=1400 audit(1778665750.730:672): avc: denied { ioctl } for pid=5164 comm="syz.1.515" path="socket:[11395]" dev="sockfs" ino=11395 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.869394][ T5165] syzkaller1: entered promiscuous mode [ 72.898721][ T5165] syzkaller1: entered allmulticast mode [ 72.971204][ T5170] netlink: 40 bytes leftover after parsing attributes in process `syz.5.517'. [ 73.064983][ T28] audit: type=1400 audit(1778665750.930:673): avc: denied { getopt } for pid=5175 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.095847][ T5182] netlink: 160 bytes leftover after parsing attributes in process `syz.1.523'. [ 73.536640][ T28] audit: type=1400 audit(1778665751.400:674): avc: denied { write } for pid=5190 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.646543][ T5195] bridge0: port 3(gretap0) entered blocking state [ 73.655774][ T5195] bridge0: port 3(gretap0) entered disabled state [ 73.665777][ T5195] gretap0: entered allmulticast mode [ 73.684922][ T5195] gretap0: entered promiscuous mode [ 73.856155][ T28] audit: type=1400 audit(1778665751.720:675): avc: denied { firmware_load } for pid=5200 comm="syz.5.539" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 73.915254][ T5199] loop3: detected capacity change from 0 to 512 [ 73.943562][ T5199] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 73.989632][ T28] audit: type=1400 audit(1778665751.860:676): avc: denied { execute } for pid=5206 comm="syz.2.532" name="file1" dev="tmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.015517][ T5199] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 74.110019][ T28] audit: type=1326 audit(1778665751.970:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.1.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 74.184347][ T28] audit: type=1326 audit(1778665751.980:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.1.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 74.191474][ T5215] wg1 speed is unknown, defaulting to 1000 [ 74.210214][ T28] audit: type=1326 audit(1778665751.980:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.1.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 74.241619][ T28] audit: type=1326 audit(1778665752.020:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.1.534" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 74.324905][ T5232] bridge0: port 3(gretap0) entered blocking state [ 74.334109][ T5232] bridge0: port 3(gretap0) entered disabled state [ 74.342078][ T5232] gretap0: entered allmulticast mode [ 74.354753][ T5232] gretap0: entered promiscuous mode [ 74.380337][ T5235] loop1: detected capacity change from 0 to 512 [ 74.389848][ T5235] EXT4-fs: Ignoring removed bh option [ 74.402392][ T5235] EXT4-fs: Mount option(s) incompatible with ext2 [ 74.439735][ T5235] loop1: detected capacity change from 0 to 512 [ 74.459087][ T5235] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.472321][ T5235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.485576][ T5235] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.594374][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.772375][ T5256] sit1: entered allmulticast mode [ 74.905936][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 75.168475][ T5275] geneve2: entered promiscuous mode [ 75.174612][ T5275] geneve2: entered allmulticast mode [ 75.194784][ T5277] bridge0: port 1(gretap0) entered blocking state [ 75.202528][ T5277] bridge0: port 1(gretap0) entered disabled state [ 75.211368][ T5277] gretap0: entered allmulticast mode [ 75.238093][ T5277] gretap0: entered promiscuous mode [ 75.265892][ T5280] syz_tun: entered allmulticast mode [ 75.281132][ T5279] syz_tun: left allmulticast mode [ 75.300772][ T5284] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 75.312450][ T5287] netlink: 52 bytes leftover after parsing attributes in process `syz.5.562'. [ 75.322042][ T5287] netlink: 76 bytes leftover after parsing attributes in process `syz.5.562'. [ 75.329140][ T5284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.338447][ T5287] bridge0: port 1(gretap0) entered blocking state [ 75.344938][ T5287] bridge0: port 1(gretap0) entered forwarding state [ 75.352749][ T5287] netlink: 52 bytes leftover after parsing attributes in process `syz.5.562'. [ 75.357134][ T5284] erspan0: left promiscuous mode [ 75.366666][ T5284] erspan0: entered allmulticast mode [ 75.374174][ T5284] bond1: (slave erspan0): making interface the new active one [ 75.382814][ T5284] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 75.391864][ T5287] bridge0: port 1(gretap0) entered disabled state [ 75.773629][ T5306] gretap0: left allmulticast mode [ 75.778859][ T5306] gretap0: left promiscuous mode [ 75.785516][ T5306] bridge0: port 1(gretap0) entered disabled state [ 75.844393][ T5306] bond0: (slave bond_slave_0): Releasing backup interface [ 75.860973][ T5306] bond0: (slave bond_slave_1): Releasing backup interface [ 75.881034][ T5306] team0: Port device team_slave_0 removed [ 75.908473][ T5306] team0: Port device team_slave_1 removed [ 75.929520][ T5306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.949458][ T5306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.964225][ T5306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.974913][ T5306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.985357][ T5306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 76.204270][ T5321] loop3: detected capacity change from 0 to 512 [ 76.215045][ T5321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.236193][ T5321] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.576: invalid indirect mapped block 4294967295 (level 1) [ 76.283219][ T5321] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.283368][ T5321] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.576: invalid indirect mapped block 4294967295 (level 1) [ 76.292601][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 76.292621][ C0] EXT4-fs (loop3): initial error at time 1778665754: ext4_free_branches:1023: inode 11 [ 76.292662][ C0] EXT4-fs (loop3): last error at time 1778665754: ext4_free_branches:1023: inode 11 [ 76.332900][ T5321] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.333324][ T5321] EXT4-fs (loop3): 2 truncates cleaned up [ 76.348718][ T5321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.367665][ T5321] netlink: 104 bytes leftover after parsing attributes in process `syz.3.576'. [ 76.402845][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.702974][ T5342] loop2: detected capacity change from 0 to 512 [ 76.723686][ T5342] EXT4-fs: Ignoring removed bh option [ 76.742777][ T5342] EXT4-fs: Mount option(s) incompatible with ext2 [ 76.785624][ T5342] loop2: detected capacity change from 0 to 512 [ 76.808260][ T5342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.832551][ T5342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.852919][ T5342] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.006986][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.046761][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 77.058188][ T5353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.587'. [ 77.068482][ T5353] tc_dump_action: action bad kind [ 77.076963][ T5357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.588'. [ 78.040928][ T5355] kexec: Could not allocate control_code_buffer [ 78.360780][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 78.360794][ T28] audit: type=1400 audit(1778665756.230:697): avc: denied { mount } for pid=5384 comm="syz.5.609" name="/" dev="hugetlbfs" ino=12713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 78.656524][ T5402] tipc: Started in network mode [ 78.672432][ T5402] tipc: Node identity 82887a2359b2, cluster identity 4711 [ 78.686295][ T5402] tipc: Enabled bearer , priority 0 [ 78.693114][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 78.721804][ T5402] syzkaller0: entered promiscuous mode [ 78.727370][ T5402] syzkaller0: entered allmulticast mode [ 78.732865][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.607'. [ 78.734222][ T5402] tipc: Resetting bearer [ 78.771772][ T5401] tipc: Resetting bearer [ 78.816630][ T28] audit: type=1400 audit(1778665756.680:698): avc: denied { setopt } for pid=5409 comm="syz.1.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.824244][ T5401] tipc: Disabling bearer [ 78.970089][ T5418] loop5: detected capacity change from 0 to 2048 [ 78.994650][ T5418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.081985][ T28] audit: type=1400 audit(1778665756.950:699): avc: denied { write } for pid=5417 comm="syz.5.613" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 79.125647][ T5418] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 79.158586][ T5418] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 79.214363][ T5418] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.214363][ T5418] [ 79.258396][ T5418] EXT4-fs (loop5): Total free blocks count 0 [ 79.266480][ T5436] ref_ctr increment failed for inode: 0x2af offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103e0ca40 [ 79.272283][ T5418] EXT4-fs (loop5): Free/Dirty block details [ 79.292315][ T5435] uprobe: syz.3.618:5435 failed to unregister, leaking uprobe [ 79.297477][ T5418] EXT4-fs (loop5): free_blocks=2415919504 [ 79.315577][ T5418] EXT4-fs (loop5): dirty_blocks=32 [ 79.333212][ T5418] EXT4-fs (loop5): Block reservation details [ 79.352531][ T5418] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 79.369686][ T3082] IPVS: starting estimator thread 0... [ 79.391461][ T28] audit: type=1400 audit(1778665757.260:700): avc: denied { cmd } for pid=5443 comm="syz.3.621" path="socket:[12051]" dev="sockfs" ino=12051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.415684][ T5059] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 79.438301][ T3656] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 79.489347][ T5442] IPVS: using max 2592 ests per chain, 129600 per kthread [ 79.741229][ T5463] loop5: detected capacity change from 0 to 512 [ 79.793169][ T5463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.843888][ T5463] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.919260][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.004020][ T5468] netem: change failed [ 80.097005][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.631'. [ 80.145053][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.631'. [ 80.523429][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 80.545509][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 80.678707][ T5481] netlink: 104 bytes leftover after parsing attributes in process `syz.4.636'. [ 80.725382][ T5481] wg1 speed is unknown, defaulting to 1000 [ 81.078461][ T5500] gretap0: left allmulticast mode [ 81.095341][ T5500] gretap0: left promiscuous mode [ 81.105526][ T5500] bridge0: port 1(gretap0) entered disabled state [ 81.120968][ T5500] bond1: (slave erspan0): Releasing active interface [ 81.121650][ T28] audit: type=1400 audit(1778665758.990:701): avc: denied { ioctl } for pid=5502 comm="syz.5.645" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.177137][ T5500] bond0: (slave bond_slave_0): Releasing backup interface [ 81.195376][ T5500] bond0: (slave bond_slave_1): Releasing backup interface [ 81.211161][ T5500] team0: Port device team_slave_0 removed [ 81.223133][ T5492] loop4: detected capacity change from 0 to 32768 [ 81.230537][ T5500] team0: Port device team_slave_1 removed [ 81.236911][ T5500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.245345][ T28] audit: type=1400 audit(1778665759.120:702): avc: denied { write } for pid=5491 comm="syz.4.641" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.245709][ T5500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.302371][ T5492] loop4: p1 p2 p3 < p5 > [ 81.311429][ T5492] loop4: p1 size 242222080 extends beyond EOD, truncated [ 81.322047][ T5492] loop4: p2 start 16777215 is beyond EOD, truncated [ 81.395710][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 81.397015][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 81.406073][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 81.529970][ T5510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'. [ 81.833650][ T5528] loop4: detected capacity change from 0 to 512 [ 81.860483][ T5528] EXT4-fs: Ignoring removed orlov option [ 81.866841][ T5528] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.876974][ T5528] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.655: corrupted in-inode xattr: e_value size too large [ 81.891576][ T5528] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.892153][ T5528] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.655: couldn't read orphan inode 15 (err -117) [ 81.902116][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 81.902143][ C0] EXT4-fs (loop4): initial error at time 1778665759: ext4_iget_extra_inode:5128: inode 15 [ 81.902172][ C0] EXT4-fs (loop4): last error at time 1778665759: ext4_iget_extra_inode:5128: inode 15 [ 81.929668][ T5532] loop3: detected capacity change from 0 to 512 [ 81.930495][ T5528] loop4: lost filesystem error report for type 5 error -117 [ 81.946903][ T5528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.968552][ T5532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.976936][ T5532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.012119][ T5532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.024946][ T28] audit: type=1400 audit(1778665759.880:703): avc: denied { write } for pid=5527 comm="syz.4.655" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.058093][ T5532] ext4 filesystem being mounted at /135/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.072440][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.072455][ T5532] EXT4-fs (loop3): shut down requested (0) [ 82.087740][ T28] audit: type=1400 audit(1778665759.880:704): avc: denied { write } for pid=5527 comm="syz.4.655" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.109421][ T28] audit: type=1400 audit(1778665759.880:705): avc: denied { create } for pid=5527 comm="syz.4.655" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.161674][ T28] audit: type=1400 audit(1778665759.880:706): avc: denied { write } for pid=5527 comm="syz.4.655" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.232284][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.658'. [ 82.309470][ T5532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 82.320087][ T5532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 82.359861][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.547156][ T5552] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 82.578373][ T5552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.602152][ T5552] bond1: entered promiscuous mode [ 82.620113][ T5552] bond1: (slave dummy0): making interface the new active one [ 82.645514][ T5552] dummy0: entered promiscuous mode [ 82.665376][ T5552] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 82.683028][ T5551] bond1: left promiscuous mode [ 82.687894][ T5551] dummy0: left promiscuous mode [ 82.803679][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.667'. [ 82.812925][ T5565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.820210][ T5565] IPv6: NLM_F_CREATE should be set when creating new route [ 82.836185][ T5565] loop5: detected capacity change from 0 to 1764 [ 83.193951][ T5573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.421152][ T28] kauditd_printk_skb: 491 callbacks suppressed [ 83.421166][ T28] audit: type=1400 audit(1778665761.290:1198): avc: denied { associate } for pid=5582 comm="syz.1.674" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.508823][ T28] audit: type=1400 audit(1778665761.340:1199): avc: denied { read } for pid=5585 comm="syz.1.675" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 83.533150][ T5587] dns_resolver: Unsupported content type (254) [ 83.604628][ T28] audit: type=1400 audit(1778665761.340:1200): avc: denied { open } for pid=5585 comm="syz.1.675" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 83.629357][ T28] audit: type=1400 audit(1778665761.400:1201): avc: denied { write } for pid=5585 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.829847][ T5595] loop2: detected capacity change from 0 to 8192 [ 83.864281][ T28] audit: type=1400 audit(1778665761.730:1202): avc: denied { watch watch_reads } for pid=5594 comm="syz.2.678" path="/156/file2" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 84.028195][ T5604] ref_ctr increment failed for inode: 0x26c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103e0c380 [ 84.062658][ T5603] uprobe: syz.1.681:5603 failed to unregister, leaking uprobe [ 84.071090][ T28] audit: type=1400 audit(1778665761.940:1203): avc: denied { name_bind } for pid=5606 comm="syz.3.682" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 84.194310][ T5614] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.685'. [ 84.285192][ T5618] loop3: detected capacity change from 0 to 512 [ 84.298899][ T5618] EXT4-fs: Ignoring removed orlov option [ 84.310925][ T5618] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.335851][ T5618] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.687: corrupted in-inode xattr: e_value size too large [ 84.362947][ T5618] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.363271][ T5618] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.687: couldn't read orphan inode 15 (err -117) [ 84.372469][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 84.372482][ C1] EXT4-fs (loop3): initial error at time 1778665762: ext4_iget_extra_inode:5128: inode 15 [ 84.372509][ C1] EXT4-fs (loop3): last error at time 1778665762: ext4_iget_extra_inode:5128: inode 15 [ 84.410457][ T5618] loop3: lost filesystem error report for type 5 error -117 [ 84.412277][ T5618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.443818][ T28] audit: type=1400 audit(1778665762.310:1204): avc: denied { write } for pid=5617 comm="syz.3.687" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.471707][ T28] audit: type=1400 audit(1778665762.330:1205): avc: denied { write } for pid=5617 comm="syz.3.687" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.498599][ T28] audit: type=1400 audit(1778665762.330:1206): avc: denied { write } for pid=5617 comm="syz.3.687" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.520629][ T28] audit: type=1400 audit(1778665762.330:1207): avc: denied { write } for pid=5617 comm="syz.3.687" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.523848][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.621396][ T5629] loop2: detected capacity change from 0 to 1024 [ 85.662509][ T5629] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.713483][ T5629] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.692: Invalid block bitmap block 0 in block_group 0 [ 85.742675][ T5629] loop2: lost filesystem error report for type 5 error -117 [ 85.745524][ T5629] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.692: Failed to acquire dquot type 0 [ 85.753249][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 85.753289][ C1] EXT4-fs (loop2): initial error at time 1778665763: ext4_read_block_bitmap_nowait:483 [ 85.753430][ C1] EXT4-fs (loop2): last error at time 1778665763: ext4_read_block_bitmap_nowait:483 [ 85.791894][ T5629] loop2: lost filesystem error report for type 5 error -117 [ 85.792799][ T5629] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.692: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.817936][ T5629] loop2: lost filesystem error report for type 5 error -117 [ 85.890136][ T5629] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.692: Invalid inode bitmap blk 0 in block_group 0 [ 85.910663][ T5085] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:45: Failed to release dquot type 0 [ 85.929498][ T5085] loop2: lost filesystem error report for type 5 error -117 [ 85.940427][ T5629] loop2: lost filesystem error report for type 5 error -117 [ 85.949915][ T5629] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 85.987237][ T5629] loop2: lost filesystem error report for type 5 error -117 [ 85.988821][ T5629] EXT4-fs (loop2): 1 orphan inode deleted [ 86.022386][ T5629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.093696][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.106103][ T5644] ref_ctr increment failed for inode: 0x30f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811113af40 [ 86.129471][ T5644] uprobe: syz.3.698:5644 failed to unregister, leaking uprobe [ 86.845561][ T5662] syzkaller0: entered promiscuous mode [ 86.851327][ T5662] syzkaller0: entered allmulticast mode [ 86.864425][ T5669] netlink: 666 bytes leftover after parsing attributes in process `syz.1.704'. [ 86.900195][ T5663] wg1 speed is unknown, defaulting to 1000 [ 86.966918][ T5674] syzkaller1: entered promiscuous mode [ 86.974592][ T5674] syzkaller1: entered allmulticast mode [ 87.216525][ T5684] can: request_module (can-proto-0) failed. [ 87.733890][ T5694] loop4: detected capacity change from 0 to 512 [ 87.769034][ T5694] EXT4-fs: Ignoring removed orlov option [ 87.784988][ T5691] loop1: detected capacity change from 0 to 1764 [ 87.801641][ T5694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.834549][ T5694] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.853239][ T5694] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.715: corrupted xattr block 33: invalid ea_ino [ 87.891599][ T5694] EXT4-fs (loop4): Remounting filesystem read-only [ 87.898156][ T5694] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 87.907429][ T5694] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 87.916809][ T5694] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 87.936531][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.178802][ T5678] kexec: Could not allocate control_code_buffer [ 88.725831][ T5730] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 88.850821][ T5730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.000926][ T5733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.045933][ T5733] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 89.111855][ T5733] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 89.357424][ T5739] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.731'. [ 89.400236][ T5739] netlink: 20 bytes leftover after parsing attributes in process `syz.5.731'. [ 89.501011][ T5745] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.733'. [ 89.525656][ T5745] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 89.656922][ T5747] loop2: detected capacity change from 0 to 256 [ 89.714058][ T5747] loop2: detected capacity change from 0 to 1024 [ 89.737094][ T5747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 89.755241][ T5747] System zones: 0-1, 3-36 [ 89.770151][ T5747] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.734: bad orphan inode 134217728 [ 89.788695][ T5747] loop2: lost filesystem error report for type 5 error -117 [ 89.789161][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 89.802899][ C1] EXT4-fs (loop2): initial error at time 1778665767: ext4_orphan_get:1423 [ 89.811431][ C1] EXT4-fs (loop2): last error at time 1778665767: ext4_orphan_get:1423 [ 89.823426][ T5747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.897818][ T5751] netlink: 'syz.1.735': attribute type 4 has an invalid length. [ 89.905662][ T5751] netlink: 152 bytes leftover after parsing attributes in process `syz.1.735'. [ 89.928162][ T5751] .`: renamed from bond0 (while UP) [ 90.020704][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 90.020717][ T28] audit: type=1400 audit(1778665767.890:1217): avc: denied { name_bind 0x1000000 } for pid=5756 comm="syz.1.737" path="socket:[13272]" dev="sockfs" ino=13272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.458845][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 90.478338][ T28] audit: type=1400 audit(1778665768.340:1218): avc: denied { ioctl } for pid=5780 comm="syz.3.747" path="socket:[14364]" dev="sockfs" ino=14364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.526910][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.547523][ T28] audit: type=1400 audit(1778665768.380:1219): avc: denied { getopt } for pid=5780 comm="syz.3.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.567092][ T28] audit: type=1400 audit(1778665768.390:1220): avc: denied { ioctl } for pid=5785 comm="syz.4.749" path="socket:[13610]" dev="sockfs" ino=13610 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 90.653377][ T5794] wg1 speed is unknown, defaulting to 1000 [ 90.715877][ T5788] netlink: 'syz.1.750': attribute type 13 has an invalid length. [ 90.740354][ T5788] netlink: 152 bytes leftover after parsing attributes in process `syz.1.750'. [ 90.757923][ T5788] syz_tun: refused to change device tx_queue_len [ 90.769297][ T5788] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 90.798743][ T5808] xt_hashlimit: size too large, truncated to 1048576 [ 90.900601][ T28] audit: type=1326 audit(1778665768.770:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5813 comm="syz.1.758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x0 [ 90.986306][ T28] audit: type=1326 audit(1778665768.850:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.4.769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c62ce59 code=0x7ffc0000 [ 91.055174][ T28] audit: type=1326 audit(1778665768.880:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.4.769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c62ce59 code=0x7ffc0000 [ 91.082472][ T28] audit: type=1326 audit(1778665768.880:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.4.769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c62ce59 code=0x7ffc0000 [ 91.116355][ T28] audit: type=1326 audit(1778665768.880:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.4.769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef1c62ce59 code=0x7ffc0000 [ 91.142380][ T28] audit: type=1326 audit(1778665768.880:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.4.769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef1c62ce59 code=0x7ffc0000 [ 91.379028][ T5836] netlink: 28 bytes leftover after parsing attributes in process `syz.5.764'. [ 91.388072][ T5836] netlink: 28 bytes leftover after parsing attributes in process `syz.5.764'. [ 91.643544][ T5850] loop2: detected capacity change from 0 to 128 [ 94.040732][ T5857] mmap: syz.2.773 (5857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.252501][ T5872] netlink: 'syz.2.778': attribute type 10 has an invalid length. [ 94.269245][ T5872] syz_tun: entered promiscuous mode [ 94.284328][ T5872] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 95.286221][ T28] kauditd_printk_skb: 574 callbacks suppressed [ 95.286236][ T28] audit: type=1400 audit(1778665773.150:1801): avc: denied { setattr } for pid=5906 comm="syz.4.795" name="PACKET" dev="sockfs" ino=14555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.865247][ T5919] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 95.955154][ T5919] bond3: (slave veth3): Enslaving as an active interface with a down link [ 95.992621][ T5919] bond1: (slave dummy0): Releasing active interface [ 96.021341][ T5919] bond3: (slave dummy0): making interface the new active one [ 96.044134][ T5926] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 96.061906][ T5919] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 96.071223][ T5926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.801'. [ 96.090216][ T5931] tipc: Enabling of bearer rejected, failed to enable media [ 96.108354][ T5929] wg1 speed is unknown, defaulting to 1000 [ 96.117365][ T5926] dummy0: entered promiscuous mode [ 96.124180][ T5926] bond3: (slave dummy0): Releasing active interface [ 96.164468][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 96.201223][ T5942] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 97.324893][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 97.422487][ T5982] loop1: detected capacity change from 0 to 128 [ 97.456269][ T28] audit: type=1326 audit(1778665775.320:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 97.515222][ T28] audit: type=1326 audit(1778665775.360:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 97.566828][ T28] audit: type=1326 audit(1778665775.360:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 97.619245][ T28] audit: type=1326 audit(1778665775.360:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f44277cbcc7 code=0x7ffc0000 [ 97.666298][ T28] audit: type=1326 audit(1778665775.360:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 97.719253][ T28] audit: type=1326 audit(1778665775.360:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 97.764893][ T28] audit: type=1326 audit(1778665775.360:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 97.819695][ T28] audit: type=1326 audit(1778665775.360:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 97.865263][ T28] audit: type=1326 audit(1778665775.360:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5981 comm="syz.1.823" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44277cce59 code=0x7ffc0000 [ 98.122567][ T5970] kexec: Could not allocate control_code_buffer [ 98.147469][ T5991] bond2: entered promiscuous mode [ 98.157516][ T5991] ip6gre1: entered promiscuous mode [ 98.162893][ T5991] ip6gre1: entered allmulticast mode [ 98.168432][ T5991] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 98.179061][ T5991] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 98.381914][ T6002] loop4: detected capacity change from 0 to 256 [ 98.399125][ T6002] FAT-fs (loop4): IO charset cp1250 not found [ 98.408851][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.831'. [ 99.115284][ T5937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.154759][ T6025] netlink: 'syz.5.841': attribute type 1 has an invalid length. [ 99.183939][ T6025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.208410][ T6025] vlan2: entered allmulticast mode [ 99.213808][ T6025] bond3: entered allmulticast mode [ 99.239552][ T6025] bond3: (slave gretap1): making interface the new active one [ 99.249646][ T6025] gretap1: entered allmulticast mode [ 99.270584][ T6025] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 99.285223][ T6035] loop4: detected capacity change from 0 to 128 [ 99.386415][ T6037] bridge0: port 1(gretap0) entered blocking state [ 99.403930][ T6037] bridge0: port 1(gretap0) entered disabled state [ 99.419570][ T6037] gretap0: entered allmulticast mode [ 99.450309][ T6037] gretap0: entered promiscuous mode [ 100.180150][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.856'. [ 100.236698][ T6060] macvlan2: entered promiscuous mode [ 100.242082][ T6060] macvlan2: entered allmulticast mode [ 100.248080][ T6060] bond4: entered promiscuous mode [ 100.253660][ T6060] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.261627][ T6060] bond4: left promiscuous mode [ 100.323742][ T28] kauditd_printk_skb: 519 callbacks suppressed [ 100.323756][ T28] audit: type=1326 audit(1778665778.190:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.5.847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f1c10ce59 code=0x7ffc0000 [ 100.479793][ T28] audit: type=1326 audit(1778665778.340:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 100.486254][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.546672][ T28] audit: type=1326 audit(1778665778.380:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 100.557891][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.611180][ T28] audit: type=1326 audit(1778665778.380:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 100.685674][ T28] audit: type=1326 audit(1778665778.380:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 100.730424][ T28] audit: type=1326 audit(1778665778.380:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f9ea761bcc7 code=0x7ffc0000 [ 100.756196][ T28] audit: type=1326 audit(1778665778.380:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 100.783054][ T28] audit: type=1326 audit(1778665778.380:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 100.812073][ T28] audit: type=1326 audit(1778665778.380:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 100.846453][ T28] audit: type=1326 audit(1778665778.380:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.3.861" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 101.619869][ T6115] loop2: detected capacity change from 0 to 512 [ 101.649352][ T6115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.668031][ T6115] EXT4-fs (loop2): shut down requested (0) [ 101.693563][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.733946][ T6123] loop1: detected capacity change from 0 to 512 [ 101.747031][ T6123] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 101.766105][ T6123] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 101.789023][ T6123] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.882: corrupted inode contents [ 101.800830][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 101.800848][ C1] EXT4-fs (loop1): initial error at time 1778665779: mb_free_blocks:2049: inode 11: block 64 [ 101.800885][ C1] EXT4-fs (loop1): last error at time 1778665779: mb_free_blocks:2049: inode 11: block 64 [ 101.827697][ T6123] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.827960][ T6123] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #11: comm syz.1.882: mark_inode_dirty error [ 101.850016][ T6123] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.850252][ T6123] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.882: invalid indirect mapped block 1 (level 1) [ 101.888385][ T6123] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.889835][ T6123] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.882: corrupted inode contents [ 101.916159][ T6123] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.918243][ T6123] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 101.942533][ T6123] loop1: lost filesystem error report for type 5 error -117 [ 101.942677][ T6123] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #11: comm syz.1.882: corrupted inode contents [ 101.977149][ T6123] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 101.979938][ T6123] EXT4-fs error (device loop1): ext4_truncate:4690: inode #11: comm syz.1.882: mark_inode_dirty error [ 102.000164][ T6123] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 102.000377][ T6123] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 102.019025][ T6123] loop1: lost filesystem error report for type 5 error -117 [ 102.019300][ T6123] EXT4-fs (loop1): 1 truncate cleaned up [ 102.032938][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.137250][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.255735][ T6144] netlink: 156 bytes leftover after parsing attributes in process `syz.1.890'. [ 102.791567][ T6156] loop5: detected capacity change from 0 to 512 [ 102.815973][ T6156] EXT4-fs: Ignoring removed bh option [ 102.838830][ T6156] EXT4-fs: Mount option(s) incompatible with ext2 [ 102.880404][ T6156] loop5: detected capacity change from 0 to 512 [ 102.910918][ T6156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.946934][ T6156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.986138][ T6156] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.088012][ T6177] loop2: detected capacity change from 0 to 128 [ 103.128859][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.197595][ T6189] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 103.220981][ T6193] loop1: detected capacity change from 0 to 256 [ 103.232738][ T6193] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.248810][ T6189] bond2: (slave veth3): Enslaving as an active interface with a down link [ 103.267605][ T6189] bond2: (slave dummy0): making interface the new active one [ 103.275369][ T6189] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 103.286326][ T6189] netlink: 'syz.2.909': attribute type 10 has an invalid length. [ 103.294140][ T6189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.909'. [ 103.308759][ T6189] dummy0: entered promiscuous mode [ 103.314483][ T6189] bond2: (slave dummy0): Releasing active interface [ 103.379341][ T6198] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 103.387631][ T6198] FAT-fs (loop1): Filesystem has been set read-only [ 103.394600][ T6198] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 103.527956][ T6198] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 103.629937][ T6223] loop5: detected capacity change from 0 to 1024 [ 103.637425][ T6223] EXT4-fs: Ignoring removed bh option [ 103.651736][ T6223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.718059][ T6231] tipc: Started in network mode [ 103.723307][ T6231] tipc: Node identity a2abdd403f6a, cluster identity 4711 [ 103.730992][ T6231] tipc: Enabled bearer , priority 0 [ 103.775363][ T6231] syzkaller0: entered promiscuous mode [ 103.783899][ T6231] syzkaller0: entered allmulticast mode [ 103.793653][ T6231] tipc: Resetting bearer [ 103.847310][ T6230] tipc: Resetting bearer [ 103.890489][ T6230] tipc: Disabling bearer [ 103.980035][ T6246] ref_ctr increment failed for inode: 0x3a2 offset: 0x7 ref_ctr_offset: 0x6f6c of mm: 0xffff8881111386c0 [ 104.013654][ T6248] netlink: 'syz.3.932': attribute type 12 has an invalid length. [ 104.036631][ T6248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.932'. [ 104.342897][ T6271] lo: Caught tx_queue_len zero misconfig [ 104.361465][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 104.427203][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.485256][ T6286] loop5: detected capacity change from 0 to 1024 [ 104.504374][ T6286] EXT4-fs: Ignoring removed orlov option [ 104.544875][ T6286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.635829][ T6286] EXT4-fs error (device loop5): __ext4_new_inode:1285: comm syz.5.947: failed to insert inode 15: doubly allocated? [ 104.694175][ T6286] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 104.768356][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.793927][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 104.819300][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 105.115785][ T6320] netlink: 'syz.2.960': attribute type 29 has an invalid length. [ 105.143596][ T6322] loop5: detected capacity change from 0 to 128 [ 105.246893][ T6324] syz.2.962: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 105.295638][ T6324] CPU: 0 UID: 0 PID: 6324 Comm: syz.2.962 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.295746][ T6324] Tainted: [W]=WARN [ 105.295753][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.295767][ T6324] Call Trace: [ 105.295774][ T6324] [ 105.295781][ T6324] __dump_stack+0x1d/0x30 [ 105.295820][ T6324] dump_stack_lvl+0x95/0xd0 [ 105.295842][ T6324] dump_stack+0x15/0x1b [ 105.295861][ T6324] warn_alloc+0x145/0x1c0 [ 105.295885][ T6324] ? futex_unqueue+0xc5/0xf0 [ 105.295949][ T6324] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 105.296031][ T6324] ? __pfx_futex_wake_mark+0x10/0x10 [ 105.296055][ T6324] ? __rcu_read_unlock+0x4e/0x70 [ 105.296139][ T6324] ? avc_has_perm_noaudit+0xab/0x130 [ 105.296171][ T6324] vmalloc_user_noprof+0x7d/0xb0 [ 105.296262][ T6324] ? xskq_create+0x80/0xe0 [ 105.296289][ T6324] xskq_create+0x80/0xe0 [ 105.296427][ T6324] xsk_init_queue+0x70/0xb0 [ 105.296454][ T6324] xsk_setsockopt+0x477/0x640 [ 105.296480][ T6324] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.296584][ T6324] __sys_setsockopt+0x184/0x200 [ 105.296606][ T6324] __x64_sys_setsockopt+0x64/0x80 [ 105.296627][ T6324] x64_sys_call+0x2327/0x3020 [ 105.296696][ T6324] do_syscall_64+0x12c/0x3b0 [ 105.296729][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.296753][ T6324] RIP: 0033:0x7ff3226fce59 [ 105.296770][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.296789][ T6324] RSP: 002b:00007ff321157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.296852][ T6324] RAX: ffffffffffffffda RBX: 00007ff322975fa0 RCX: 00007ff3226fce59 [ 105.296899][ T6324] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 105.296912][ T6324] RBP: 00007ff322792d6f R08: 0000000000000004 R09: 0000000000000000 [ 105.296926][ T6324] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 105.296977][ T6324] R13: 00007ff322976038 R14: 00007ff322975fa0 R15: 00007ffe34c9a768 [ 105.296998][ T6324] [ 105.298758][ T6324] Mem-Info: [ 105.642691][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 105.642706][ T28] audit: type=1400 audit(1778665783.510:2430): avc: denied { listen } for pid=6334 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.693908][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.969'. [ 105.715345][ T6324] active_anon:39784 inactive_anon:4227 isolated_anon:0 [ 105.715345][ T6324] active_file:20193 inactive_file:2461 isolated_file:0 [ 105.715345][ T6324] unevictable:0 dirty:341 writeback:0 [ 105.715345][ T6324] slab_reclaimable:3360 slab_unreclaimable:18943 [ 105.715345][ T6324] mapped:39192 shmem:35812 pagetables:3345 [ 105.715345][ T6324] sec_pagetables:0 bounce:0 [ 105.715345][ T6324] kernel_misc_reclaimable:0 [ 105.715345][ T6324] free:1734340 free_pcp:44063 free_cma:0 [ 105.750206][ T6342] veth1_macvtap: left promiscuous mode [ 105.788002][ T6342] bond4: (slave macsec0): Error -34 calling dev_set_mtu [ 105.794858][ T6324] Node 0 active_anon:162848kB inactive_anon:14008kB active_file:80772kB inactive_file:9844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:156768kB dirty:1364kB writeback:1160kB shmem:141624kB kernel_stack:4672kB pagetables:13380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 105.959848][ T6324] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.050106][ T6324] lowmem_reserve[]: 0 2878 7857 7857 [ 106.065135][ T6324] Node 0 DMA32 free:2944520kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948044kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 106.129928][ T6324] lowmem_reserve[]: 0 0 4978 4978 [ 106.136930][ T6324] Node 0 Normal free:3972200kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:171432kB inactive_anon:8672kB active_file:80772kB inactive_file:9844kB unevictable:0kB writepending:1596kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:176032kB local_pcp:151604kB free_cma:0kB [ 106.177720][ T28] audit: type=1326 audit(1778665784.050:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.206548][ T6324] lowmem_reserve[]: 0 0 0 0 [ 106.211381][ T6324] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 106.224985][ T28] audit: type=1326 audit(1778665784.050:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.252432][ T6324] Node 0 DMA32: 6*4kB (M) 2*8kB (M) 4*16kB (M) 5*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944520kB [ 106.269776][ T6324] Node 0 Normal: 848*4kB (U) 365*8kB (UE) 348*16kB (UE) 369*32kB (UME) 507*64kB (UME) 373*128kB (UME) 262*256kB (UM) 180*512kB (UM) 142*1024kB (UM) 36*2048kB (UME) 851*4096kB (UM) = 3967944kB [ 106.287917][ T28] audit: type=1326 audit(1778665784.050:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.343185][ T28] audit: type=1326 audit(1778665784.050:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.344415][ T6324] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 106.393988][ T6324] 56702 total pagecache pages [ 106.399819][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.5.981'. [ 106.402893][ T28] audit: type=1326 audit(1778665784.050:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.409267][ T6324] 735 pages in swap cache [ 106.434163][ T28] audit: type=1326 audit(1778665784.050:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.460135][ T6324] Free swap = 57124kB [ 106.463995][ T6301] syz.1.951 (6301) used greatest stack depth: 7352 bytes left [ 106.475402][ T28] audit: type=1326 audit(1778665784.050:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.485572][ T6324] Total swap = 124996kB [ 106.505040][ T6324] 2097051 pages RAM [ 106.508855][ T6324] 0 pages HighMem/MovableOnly [ 106.514237][ T6324] 81641 pages reserved [ 106.527431][ T28] audit: type=1326 audit(1778665784.050:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.553110][ T28] audit: type=1326 audit(1778665784.050:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6365 comm="syz.3.978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 106.648602][ T6389] loop2: detected capacity change from 0 to 512 [ 106.663590][ T6389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.731091][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.843810][ T6401] loop2: detected capacity change from 0 to 512 [ 106.864334][ T6401] EXT4-fs: Ignoring removed bh option [ 106.887002][ T6401] EXT4-fs: Mount option(s) incompatible with ext2 [ 106.929966][ T6401] loop2: detected capacity change from 0 to 512 [ 106.938609][ T6401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.964629][ T6401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.977404][ T6401] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.113171][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.050100][ T6432] loop5: detected capacity change from 0 to 512 [ 108.069109][ T6432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.099334][ T6432] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.125802][ T3082] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 108.143633][ T3082] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.343892][ T3082] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.364241][ T3082] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 108.489833][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.234861][ T6457] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 109.397625][ T6375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.548300][ T6477] netlink: 'syz.5.1017': attribute type 2 has an invalid length. [ 109.556414][ T6477] netlink: 199676 bytes leftover after parsing attributes in process `syz.5.1017'. [ 109.615333][ T6485] netlink: 'syz.4.1021': attribute type 12 has an invalid length. [ 109.624276][ T6485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1021'. [ 109.676168][ T6485] loop4: detected capacity change from 0 to 1024 [ 109.692201][ T6492] loop5: detected capacity change from 0 to 512 [ 109.693731][ T6485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.728989][ T6492] EXT4-fs (loop5): 1 truncate cleaned up [ 109.746327][ T6492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.219412][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.240633][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 110.264397][ T6503] netlink: 'syz.4.1027': attribute type 21 has an invalid length. [ 110.279037][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1023'. [ 110.321988][ T5074] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.321996][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 110.322026][ T6492] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1023'. [ 110.352986][ T5074] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.383664][ T5074] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.397768][ T5074] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.436544][ T3656] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.498770][ T6521] loop5: detected capacity change from 0 to 1024 [ 110.522917][ T6521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.543837][ T6521] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 110.570455][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1034'. [ 111.374374][ T28] kauditd_printk_skb: 325 callbacks suppressed [ 111.374387][ T28] audit: type=1400 audit(1778665789.240:2765): avc: denied { read } for pid=6534 comm="syz.4.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.232178][ T6561] syz_tun: entered allmulticast mode [ 112.253199][ T6555] syz_tun: left allmulticast mode [ 112.550237][ T6579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'. [ 113.457268][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 113.466240][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 113.490324][ T28] audit: type=1400 audit(1778665791.360:2766): avc: denied { read } for pid=6602 comm="syz.1.1066" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 113.513687][ T28] audit: type=1400 audit(1778665791.360:2767): avc: denied { open } for pid=6602 comm="syz.1.1066" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 113.537853][ T28] audit: type=1400 audit(1778665791.360:2768): avc: denied { ioctl } for pid=6602 comm="syz.1.1066" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.144071][ T6635] wg1 speed is unknown, defaulting to 1000 [ 114.574685][ T28] audit: type=1326 audit(1778665793.444:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.3.1088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 114.621601][ T28] audit: type=1326 audit(1778665793.444:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.3.1088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 114.648427][ T28] audit: type=1326 audit(1778665793.444:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.3.1088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 114.674625][ T28] audit: type=1326 audit(1778665793.474:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.3.1088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 114.710473][ T28] audit: type=1326 audit(1778665793.474:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.3.1088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 114.802002][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 114.819188][ T28] audit: type=1326 audit(1778665793.474:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6653 comm="syz.3.1088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea761ce59 code=0x7ffc0000 [ 114.856580][ T6669] loop2: detected capacity change from 0 to 4096 [ 114.860627][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 114.883168][ T6669] ext4: Bad value for 'commit' [ 115.185566][ T6692] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1100'. [ 115.542438][ T6723] loop4: detected capacity change from 0 to 512 [ 115.565947][ T6723] EXT4-fs error (device loop4): ext4_quota_enable:7225: inode #4: comm syz.4.1106: iget: checksum invalid [ 115.625076][ T6723] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74 [ 115.628332][ T6723] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.1106: Bad quota inode: 4, type: 1 [ 115.637352][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 115.637370][ C0] EXT4-fs (loop4): initial error at time 1778665794: ext4_quota_enable:7225: inode 4 [ 115.637393][ C0] EXT4-fs (loop4): last error at time 1778665794: ext4_quota_enable:7225: inode 4 [ 115.767767][ T6723] loop4: lost filesystem error report for type 5 error -117 [ 115.767996][ T6723] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 115.842854][ T6723] EXT4-fs (loop4): mount failed [ 116.292326][ T6801] syz_tun: entered allmulticast mode [ 116.328158][ T6800] syz_tun: left allmulticast mode [ 116.479770][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 116.479851][ T28] audit: type=1400 audit(1778665795.354:2805): avc: denied { map } for pid=6805 comm="syz.3.1121" path="socket:[16239]" dev="sockfs" ino=16239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.562490][ T28] audit: type=1400 audit(1778665795.354:2806): avc: denied { read accept } for pid=6805 comm="syz.3.1121" path="socket:[16239]" dev="sockfs" ino=16239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.191189][ T6834] syz_tun: entered allmulticast mode [ 117.216561][ T6833] syz_tun: left allmulticast mode [ 117.275011][ T6836] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1131'. [ 117.291145][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1131'. [ 117.331480][ T28] audit: type=1400 audit(1778665796.204:2807): avc: denied { setopt } for pid=6840 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.638121][ T6848] loop1: detected capacity change from 0 to 512 [ 117.645964][ T6848] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.658928][ T6848] EXT4-fs (loop1): 1 orphan inode deleted [ 117.664921][ T6848] EXT4-fs (loop1): 1 truncate cleaned up [ 117.671591][ T6848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.686713][ T28] audit: type=1400 audit(1778665796.554:2808): avc: denied { write } for pid=6847 comm="syz.1.1136" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.732475][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.188093][ T6875] loop2: detected capacity change from 0 to 512 [ 118.222564][ T6875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.251995][ T6875] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.351057][ T28] audit: type=1400 audit(1778665797.224:2809): avc: denied { shutdown } for pid=6880 comm="syz.4.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.381835][ T28] audit: type=1400 audit(1778665797.254:2810): avc: denied { write } for pid=6873 comm="syz.2.1147" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.405967][ T28] audit: type=1400 audit(1778665797.254:2811): avc: denied { write } for pid=6873 comm="syz.2.1147" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.430024][ T28] audit: type=1400 audit(1778665797.254:2812): avc: denied { open } for pid=6873 comm="syz.2.1147" path="/250/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.539823][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.781431][ T28] audit: type=1400 audit(1778665797.654:2813): avc: denied { bind } for pid=6911 comm="syz.4.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.840946][ T28] audit: type=1400 audit(1778665797.654:2814): avc: denied { listen } for pid=6911 comm="syz.4.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.125849][ T6919] ================================================================== [ 119.133941][ T6919] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 119.140951][ T6919] [ 119.143251][ T6919] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3995 on cpu 0: [ 119.151284][ T6919] wq_worker_running+0x9b/0x120 [ 119.156116][ T6919] synchronize_rcu_expedited+0x5f8/0x770 [ 119.161729][ T6919] synchronize_rcu+0x35/0x2e0 [ 119.166385][ T6919] xfrm_state_gc_task+0x98/0x590 [ 119.171295][ T6919] process_scheduled_works+0x4f0/0x9c0 [ 119.176730][ T6919] worker_thread+0x58a/0x780 [ 119.181299][ T6919] kthread+0x22a/0x280 [ 119.185343][ T6919] ret_from_fork+0x146/0x330 [ 119.189914][ T6919] ret_from_fork_asm+0x1a/0x30 [ 119.194654][ T6919] [ 119.196952][ T6919] read to 0xffff888237c2a8e4 of 4 bytes by task 6919 on cpu 1: [ 119.204473][ T6919] kick_pool+0x49/0x2d0 [ 119.208607][ T6919] __queue_work+0x899/0xaa0 [ 119.213090][ T6919] queue_work_on+0xa9/0x140 [ 119.217570][ T6919] xfrm_state_find+0x1cc4/0x3270 [ 119.222483][ T6919] xfrm_resolve_and_create_bundle+0x592/0x1f50 [ 119.228613][ T6919] xfrm_lookup_with_ifid+0x443/0x1590 [ 119.233960][ T6919] xfrm_lookup_route+0x3a/0x110 [ 119.238868][ T6919] ip_route_output_flow+0xdb/0x110 [ 119.243959][ T6919] udp_sendmsg+0x1308/0x1500 [ 119.248535][ T6919] inet_sendmsg+0xac/0xd0 [ 119.252852][ T6919] ____sys_sendmsg+0x519/0x5b0 [ 119.257600][ T6919] ___sys_sendmsg+0x195/0x1e0 [ 119.262257][ T6919] __sys_sendmmsg+0x185/0x320 [ 119.266917][ T6919] __x64_sys_sendmmsg+0x57/0x70 [ 119.271748][ T6919] x64_sys_call+0x27aa/0x3020 [ 119.276415][ T6919] do_syscall_64+0x12c/0x3b0 [ 119.280998][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.286894][ T6919] [ 119.289198][ T6919] value changed: 0x00000000 -> 0x00000001 [ 119.294891][ T6919] [ 119.297192][ T6919] Reported by Kernel Concurrency Sanitizer on: [ 119.303328][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.4.1161 Tainted: G W syzkaller #0 PREEMPT(full) [ 119.314150][ T6919] Tainted: [W]=WARN [ 119.317947][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.327977][ T6919] ==================================================================