last executing test programs: 3m58.644910899s ago: executing program 32 (id=869): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@nodelalloc}]}, 0x1, 0xb92, &(0x7f0000000c00)="$eJzs3cFvFGUbAPBnpttSCt/X5ct3EGNCjQdIDNsWUJB4AI/Gg4kk6AnXdts0LGBoTSwhsdxMvCjBkydPaqJHr4YY9eTB6In/wJAQU/gDamZ2tiztbkthy5Dy+yWz+77zsLzPNHn2nenMdAJ4Zo1lL2nE/oj4PIkYLdanETGUt4Yjllr/7t7y1alsSWJl5Z1/kkgi4u7y1an2/5UU73uyl0r+yfjz54j/Dawfd37xyvl6s9m4XPTHFy58OD6/eOXw3IX6bGO2cfHIqxNHJ187duKVY/c/NPx427p4PP3sjzff+PbGua9+/+HEC58mcSr2FrHO7eiXsRhb/Zl0qkTEe/0erCQDxfZ0204AAJ4+acc+3P4YjYG81TIatblSkwMAAAD64pOIWAEAAAB2uMTxPwAAAOxw7esA7i5fnWov5V6RADwpd05HRLVV/+37+1uRSizl78MxGBEj95KOO4Na93tX+zD+WER8/+XxA9kS23QfPtDd0rWIeK7b/J/k9V8t/ujG2vpPI2KiD+OPremrf3hyutV/67hg8/o/1Yfx1T8AAAAAAAD0z83TrRP568//p6vX/0SX838DXc7dPYrNz/+lt/swDNDFndMRr3c82+deR/0XqgNF7z/59QCDycxcszEREf+NiEMxuCvrT24wxjc/nvyrV6zz+r9sycZvXwtY5HG7suvBz0zXF+qPs81Ay51rEc9XutV/sjr/Jz2u/337Icf49exPM71im9c/sF1Wvo442HX+v/9Et2Tj5/ON5/sD4+29gvXOvvjLd73GV/9Qnmz+H9m4/qtJ5/M657c+xsTI4dlesUfd/x9KzuRPFR0q1n1cX1i4PBkxlLy1fv2RrecMO1G7Htr1ktX/oZe6H/9vtP+fFdn7xbdEGhH14j3rf7BmzF3nfvuiVz7mfyhPVv/TW5r/t964/u7ymV7jP9z8fyyf0w8Va/z+Dzb2sAVadp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwNEkjYm8kaW21naa1WsSeiPh/jKTNS/MLL89c+ujidBaLqMZgOjPXbExExGirn2T9ybx9v39kTf9oROyLiBuju/N+bepSc7rsjQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDVnojYG0lai4g0b6dprdaK/T1adnYAAABA31TLTgAAAADYdo7/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhM+w7cvJVExNLJ3fmSGSpig6VmBmy3tOwEgNIMlJ0AUJpK2QkApXGMDySbxId7RuxBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxLDu6/eSuJiKWTu/MlM1TEBkvNDNhuadkJAKUZKDsBoDSVshMASvPAMf5weXkA5Uk2iff+arAHAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAsmV+8cr7ebDYuazQbs9cjeoQq0TOkobEDG2V/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCT/RsAAP//PWn9KA==") bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xffff) r0 = open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) fallocate(r0, 0x10, 0x0, 0xfeffff) 3m51.947133866s ago: executing program 33 (id=949): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x14501, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 3m12.06388021s ago: executing program 34 (id=1745): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) 1m44.469670315s ago: executing program 6 (id=3967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1m44.393747127s ago: executing program 6 (id=3968): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, &(0x7f0000000140), &(0x7f00000007c0)=""/235}, 0x20) 1m44.393539177s ago: executing program 6 (id=3970): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r1, &(0x7f0000000180)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xd5, 0x800, 0x6, 0x4, 0x4, 0x4}}}, 0x19) copy_file_range(r1, &(0x7f00000008c0)=0x4, r0, &(0x7f0000000100), 0x8, 0x0) 1m44.376821907s ago: executing program 6 (id=3971): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2a85046, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x1008084, 0x0) 1m44.359177697s ago: executing program 6 (id=3972): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1m44.26960332s ago: executing program 6 (id=3974): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x9500, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x8001, 0x38}, 0xac37184e017a00e3, 0x9, 0x2, 0x2, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) 1m44.26954075s ago: executing program 35 (id=3974): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x9500, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x8001, 0x38}, 0xac37184e017a00e3, 0x9, 0x2, 0x2, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x40014) 1m43.827669461s ago: executing program 7 (id=3989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) 1m43.776392142s ago: executing program 7 (id=3990): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f00000001c0), 0x3, 0x45e, &(0x7f0000000980)="$eJzs3M2PE2UYAPBnpttFBNwV8YMPdRWNGz92WUDl4EGNJh4wMdGDHje7hSCFVXZNhBAFY/BkjIl349F/wZNejPFk4lXvhoQYLoCnmmln2La0he12LdLfLxl43vngfZ/OvO0787YEMLKmsj+SiK0R8UdETDSKrTtMNf66evnswrXLZxeSqNXe/jup73fl8tmFYtfiuC15YTqNSD9PYneHepdPnzk+X61WTuXl2ZUTH8wunz7z3LET80crRysn9x86dPDA3Isv7H9+IHlmbbqy65OlPTvfeO/rNw9/2ZJ/Wx4DMtVr45O12oCrG65tTXEyNsSGsCaliMhOV7ne/yeiFKsnbyJe/2yojQM2VK1Wq23pvvlcDbiDJdFa1uVhVBQf9Nn9b7G0DwJe3rjhx9BdeqVxA5TlfTVfGlvGIs33Kbfd3w7SVES8e+6fb7MlNuY5BABAix+z8c+zncZ/aTzQtN89+dzQZETcGxHbI+K+iNgREfdH1Pd9MCIeWmP97ZMkN45/0ot9JXaLsvHfS/ncVuv4rxj9xWQpL22r519OjhyrVvblr8l0lDdl5bkedfz02u9fddvWPP7Llqz+YiyYt+Pi2KbWYxbnV+bXk3OzS+cjdo11yj+5PhOQRMTOiNjVZx3Hnv5+T7dtN8+/hwHMM9W+i3iqcf7PRVv+haT3/OTsXVGt7Jstroob/frbhbe61b+u/AcgO/93d7z+r+c/mTTP1y6vvY4Lf37R9Z6m3+t/PHmnHo/n6z6eX1k5NRcxnhxuNLp5/f7VY4tysX+W//Tezv1/e6y+ErsjIruIH46IRyLi0bztj0XE4xGxtz2x0mr4y6tPvN9//hsry39xTed/NRiP9jWdg9Lxn39oqXTyhvyv9T7/B+vRdL7mVt7/bqVd/V3NAAAA8P+TRsTWSNKZ63Gazsw0vi+/IyKtLi2vPHNk6aOTi43tk1FOiyddE03PQ+fy2/pG+XxENL5aUGw/8GHjW4bflDbXyzMLS9XFIecOo25Ll/6f+as07NYBG87vtWB06f8wuvR/GF36P4yuDv1/c8cQuON0+vz/dAjtAP57bf3ftB+MEPf/MLq69v87+X/+Aep8/sNIWt4cN/+RfM+g+Jf6PDwPimcOfTfjtguifFs0Y/1BLel4ciMddsMqp9J1XnWC7sHw3pMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6d8AAAD//3Wy3Gc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xa) 1m43.677906974s ago: executing program 7 (id=3996): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x4008054) 1m43.544956408s ago: executing program 7 (id=3998): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2a85046, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0, 0x1008084, 0x0) 1m43.544500128s ago: executing program 7 (id=3999): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x2, 0x28, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1m43.191648517s ago: executing program 7 (id=4007): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6449b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m43.185608466s ago: executing program 36 (id=4007): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6449b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m25.681894983s ago: executing program 5 (id=4511): unshare(0x40400) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r1, &(0x7f0000000040), r0, 0x0, 0x6, 0x0) 1m25.481669248s ago: executing program 5 (id=4515): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) 1m25.436188459s ago: executing program 5 (id=4516): io_uring_setup(0x3c40, &(0x7f0000000000)={0x0, 0x3087, 0x40000, 0x0, 0x3b}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) close(0x3) 1m25.304741203s ago: executing program 5 (id=4522): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000280)=0x2, &(0x7f0000000200)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m25.253416184s ago: executing program 5 (id=4525): mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) 1m25.253255544s ago: executing program 5 (id=4526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x3, @mcast1}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xf5b439e5fa041319, 0xc3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "2b0a4c532395fc7786ead8d57a2231c4"}]}}}}}}}, 0x0) 1m9.921561656s ago: executing program 37 (id=4526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x3, @mcast1}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x3c, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xf5b439e5fa041319, 0xc3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "2b0a4c532395fc7786ead8d57a2231c4"}]}}}}}}}, 0x0) 41.112955085s ago: executing program 9 (id=5354): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000dd40)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 40.941983439s ago: executing program 9 (id=5356): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000240)=r1, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 40.88022152s ago: executing program 9 (id=5360): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) set_mempolicy(0x6, &(0x7f00000003c0)=0x8002000000000001, 0xe0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x80000000, 0x104, 0x0, 0xe}) 40.863046371s ago: executing program 9 (id=5361): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x201008e, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 40.841147332s ago: executing program 9 (id=5362): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 40.647981946s ago: executing program 9 (id=5372): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0xc}, 0x1080, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') 40.615532657s ago: executing program 38 (id=5372): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0xc}, 0x1080, 0x0, 0x0, 0x8, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') 35.617051511s ago: executing program 2 (id=5471): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x2, 0x2bc, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x80, 0x2, 0x4}}, 0x14) 35.26331932s ago: executing program 2 (id=5481): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3801000010000100feffffff0000000000000000000000000000ffffe0000002ac1414aa0000000000000000000000000001071c000000000a00004d32000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c000000ac14143f00000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c2500000000000003000000000000000600000000000000fcffffffffffffffffffffffffffffff000000000000000021000000000000000000000000000000ffffffff000000000000000080000000ff340000020001000000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x2000c002}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) 35.013914977s ago: executing program 2 (id=5486): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="de19f496ca4908ffcc0049bc7dae9c6a39a13cb6", 0x14}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) 34.765489083s ago: executing program 2 (id=5494): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 34.709951484s ago: executing program 2 (id=5497): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/44, 0x2c) getdents64(r0, 0xfffffffffffffffe, 0x29) 34.434098891s ago: executing program 2 (id=5504): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0xf]}}, 0x5c) 34.403163572s ago: executing program 39 (id=5504): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0xf]}}, 0x5c) 4.539065887s ago: executing program 0 (id=6396): perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0x9, 0x472}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 4.452996809s ago: executing program 0 (id=6410): r0 = syz_io_uring_setup(0x141c, &(0x7f00000003c0)={0x0, 0x62b7, 0x800, 0x101, 0x1ed}, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000040)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x44ec, 0xcac9, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) 3.937016902s ago: executing program 0 (id=6409): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.81090175s ago: executing program 0 (id=6419): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 2.556393086s ago: executing program 3 (id=6435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x20040001) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="91400300000000002000128008000100736974001400028008000300ac1e010106000d0009000000140003006e"], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.434141069s ago: executing program 4 (id=6430): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 2.410515959s ago: executing program 8 (id=6434): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000a5f68f548cf05a33e6df8ebb177cf085", @ANYRES16, @ANYBLOB="000129"], 0x1c}, 0x1, 0x0, 0x0, 0x34000010}, 0x40000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 2.38606194s ago: executing program 8 (id=6436): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) syz_clone3(&(0x7f0000000080)={0x105824100, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.308853442s ago: executing program 0 (id=6437): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000)=r2, 0x4) 2.307368512s ago: executing program 3 (id=6447): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQES(0x0, 0x3000, 0x100000a, 0x30, 0xffffffffffffffff, 0x10000000) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000eef000/0x2000)=nil) 2.246545644s ago: executing program 3 (id=6438): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x37ee8}], 0x11) shutdown(r0, 0x1) 2.186902965s ago: executing program 3 (id=6439): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44010) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x6, 0x8, 0x4}, &(0x7f0000000080)=0x14) 1.947692151s ago: executing program 4 (id=6440): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000666000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000826000/0x2000)=nil, &(0x7f0000a68000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2235, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0xb}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x4d12, 0x4) io_uring_enter(r0, 0x4c08, 0x57b7, 0x14, 0x0, 0x0) 1.945906351s ago: executing program 0 (id=6452): socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.945508331s ago: executing program 8 (id=6441): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x105140, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 989.709325ms ago: executing program 8 (id=6442): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f00000001c0)={0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 989.492345ms ago: executing program 4 (id=6443): perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0x9, 0x472}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d02409819180179714ed0a6e1f0f755d8583da60f27c162dbba0706002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cece48c38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5ff01000000000000b69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b4073f300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b87234a30900000000000068133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf11211"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 973.620446ms ago: executing program 3 (id=6455): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 942.490967ms ago: executing program 4 (id=6444): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4a, 0x40, 0x5, 0x6e, 0x7c, 0xff, 0x9, 0xc4, 0x3, 0x8, 0x4, 0x0, 0x9b, 0x5}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={r1, @in={{0x2, 0x4e20, @multicast2}}, [0x8000000000000001, 0x2, 0x6, 0xc, 0x4, 0x80000001, 0x3, 0xef, 0x7f, 0x9, 0x9, 0xfff, 0xfffffffffffffffb, 0x146e, 0x8]}, &(0x7f0000000540)=0x100) 890.179228ms ago: executing program 4 (id=6445): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r1}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 862.944908ms ago: executing program 1 (id=6446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000070601080000000000000000050000020500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x4800) 861.395818ms ago: executing program 4 (id=6449): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r1, 0x0, 0x0, 0x40012102, 0x0, 0x0) 829.121909ms ago: executing program 8 (id=6450): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 471.591118ms ago: executing program 1 (id=6451): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f0000000a00)=""/143, 0x8f, 0x5e) 449.590928ms ago: executing program 1 (id=6453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000580)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d28b31c32a790343c48040000db", 0x2a}, {&(0x7f00000005c0)="0046053cb304538a9927911e0000", 0xe}, {&(0x7f0000000540)='W4', 0x2}], 0x3) 213.632375ms ago: executing program 8 (id=6454): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0xe0, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x6, 0x3, 0x4}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x270) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "8a437b311c8b19a916d6a044bc6b2f5873d17537033d705cdf46dff831266045", "aa86f4973e4f7299cbd782821f4086f4", {"b469cee35c8f7d366753d2cb00dbb9bf", "5a2d673c62ab4e2483ee1f1fde686048"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 203.869445ms ago: executing program 1 (id=6466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0xf7}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100, @val=0x80}}}}}}}}, 0x3e) 35.965789ms ago: executing program 3 (id=6456): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x105140, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 35.656499ms ago: executing program 1 (id=6458): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1cc, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x616, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xffffffec, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0xa, 0x7, 0xc2, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x8, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x2, 0x2, 0x9f85, 0x65, 0x85, 0x4, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x7, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x9, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) ppoll(&(0x7f0000000240), 0x20000000000000dc, 0x0, 0x0, 0x30) 0s ago: executing program 1 (id=6459): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000666000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000826000/0x2000)=nil, &(0x7f0000a68000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2235, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0xb}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x4d12, 0x4) io_uring_enter(r0, 0x4c08, 0x57b7, 0x14, 0x0, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.4.4833'. [ 239.802482][T15777] bond0: Unable to set down delay as MII monitoring is disabled [ 239.952664][ T28] audit: type=1326 audit(1785553508.252:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.8.4841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 239.992803][ T28] audit: type=1326 audit(1785553508.282:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.8.4841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 240.025568][ T28] audit: type=1326 audit(1785553508.282:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.8.4841" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 240.306973][T15816] netlink: 'syz.8.4852': attribute type 1 has an invalid length. [ 240.333335][T15816] netlink: 112860 bytes leftover after parsing attributes in process `syz.8.4852'. [ 240.355188][T15816] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4852'. [ 240.493933][T15831] rdma_op ffff88811bdbad80 conn xmit_rdma 0000000000000000 [ 241.071528][T15854] loop8: detected capacity change from 0 to 256 [ 241.130334][T15865] loop2: detected capacity change from 0 to 256 [ 241.137083][T15865] msdos: Bad value for 'time_offset' [ 241.205359][T15872] loop4: detected capacity change from 0 to 128 [ 241.223512][T15872] syz.4.4877: attempt to access beyond end of device [ 241.223512][T15872] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 241.228782][T15872] syz.4.4877: attempt to access beyond end of device [ 241.228782][T15872] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 242.119024][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'. [ 242.133707][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'. [ 242.916342][T15919] loop8: detected capacity change from 0 to 512 [ 242.923334][T15919] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.947853][T15919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.977737][T15919] ext4 filesystem being mounted at /188/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.019013][T15928] loop2: detected capacity change from 0 to 512 [ 243.047518][T15919] EXT4-fs error (device loop8): ext4_get_first_dir_block:3537: inode #12: comm syz.8.4897: Attempting to read directory block (0) that is past i_size (3) [ 243.075933][T15928] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 243.131279][T15928] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 243.181818][T15928] System zones: 1-12 [ 243.181946][T15928] EXT4-fs (loop2): orphan cleanup on readonly fs [ 243.182205][T15928] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4900: bg 0: block 361: padding at end of block bitmap is not set [ 243.182269][T15928] loop2: lost filesystem error report for type 5 error -117 [ 243.182407][T15928] EXT4-fs (loop2): Remounting filesystem read-only [ 243.182548][T15928] EXT4-fs (loop2): 1 truncate cleaned up [ 243.182999][T15928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 243.184274][T15928] EXT4-fs (loop2): shut down requested (0) [ 243.184445][T15928] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.4900: error -EUCLEAN reading directory block [ 243.797702][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.807397][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 243.844187][T15969] bridge_slave_1: left allmulticast mode [ 243.852466][T15970] loop4: detected capacity change from 0 to 512 [ 243.863796][T15969] bridge_slave_1: left promiscuous mode [ 243.879995][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.892163][T15970] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4907: corrupted in-inode xattr: invalid ea_ino [ 243.906126][T15970] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 243.906433][T15969] bridge_slave_0: left allmulticast mode [ 243.915586][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 243.915605][ C0] EXT4-fs (loop4): initial error at time 1785553512: ext4_iget_extra_inode:5180: inode 15 [ 243.915649][ C0] EXT4-fs (loop4): last error at time 1785553512: ext4_iget_extra_inode:5180: inode 15 [ 243.943663][T15970] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4907: couldn't read orphan inode 15 (err -117) [ 243.947672][T15969] bridge_slave_0: left promiscuous mode [ 243.961855][T15970] loop4: lost filesystem error report for type 5 error -117 [ 243.965369][T15969] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.979762][T15970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.014428][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 244.014454][ T28] audit: type=1400 audit(1785553512.312:1946): avc: denied { write } for pid=15965 comm="syz.4.4907" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.043698][T15971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4905'. [ 244.067777][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.291120][T16015] bridge_slave_1: left allmulticast mode [ 244.299657][T16015] bridge_slave_1: left promiscuous mode [ 244.305408][T16015] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.329167][T16015] bridge_slave_0: left allmulticast mode [ 244.335798][T16015] bridge_slave_0: left promiscuous mode [ 244.341971][T16015] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.376646][T16021] syzkaller1: entered promiscuous mode [ 244.382769][T16021] syzkaller1: entered allmulticast mode [ 244.502305][ T28] audit: type=1326 audit(1785553512.802:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.4.4936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b449e019 code=0x7ffc0000 [ 244.528755][ T28] audit: type=1326 audit(1785553512.802:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.4.4936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b449e019 code=0x7ffc0000 [ 244.560439][ T28] audit: type=1326 audit(1785553512.802:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.4.4936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f03b449e019 code=0x7ffc0000 [ 244.594101][ T28] audit: type=1326 audit(1785553512.802:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.4.4936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b449e019 code=0x7ffc0000 [ 244.623106][T16049] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 244.623106][T16049] program syz.8.4939 not setting count and/or reply_len properly [ 244.646034][ T28] audit: type=1326 audit(1785553512.802:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.4.4936" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b449e019 code=0x7ffc0000 [ 244.684792][ T28] audit: type=1326 audit(1785553512.982:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.8.4940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 244.721389][ T28] audit: type=1326 audit(1785553512.982:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.8.4940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 244.747363][ T28] audit: type=1326 audit(1785553513.012:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.8.4940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 244.774728][ T28] audit: type=1326 audit(1785553513.012:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16051 comm="syz.8.4940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 244.864309][T16068] loop9: detected capacity change from 0 to 256 [ 244.980717][T16082] bridge_slave_1: left allmulticast mode [ 244.986544][T16082] bridge_slave_1: left promiscuous mode [ 245.066823][T16082] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.082044][T16082] bridge_slave_0: left allmulticast mode [ 245.087889][T16082] bridge_slave_0: left promiscuous mode [ 245.093609][T16082] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.213907][T16132] all (unregistering): Released all slaves [ 246.311311][T16143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4964'. [ 246.378912][T16154] loop8: detected capacity change from 0 to 256 [ 246.467018][T16163] loop2: detected capacity change from 0 to 256 [ 246.655914][T16185] loop9: detected capacity change from 0 to 256 [ 246.728879][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4990'. [ 246.813378][T16197] loop8: detected capacity change from 0 to 512 [ 246.827542][T16197] EXT4-fs: Ignoring removed oldalloc option [ 246.840399][T16197] EXT4-fs (loop8): 1 truncate cleaned up [ 246.849988][T16197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.897647][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.061741][T16218] loop4: detected capacity change from 0 to 256 [ 247.074464][T16218] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.100325][T16218] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.498422][T16244] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 247.504898][T16244] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 247.568538][T16242] loop4: detected capacity change from 0 to 512 [ 247.587332][T16242] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.647142][T16242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.662633][T16242] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.692639][T16265] netlink: 'syz.8.5023': attribute type 1 has an invalid length. [ 247.712936][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.719123][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5023'. [ 248.032527][T16286] loop2: detected capacity change from 0 to 164 [ 248.057700][T16286] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 248.216816][T16301] loop4: detected capacity change from 0 to 2048 [ 248.270542][T16301] GPT:first_usable_lbas don't match. [ 248.275899][T16301] GPT:34 != 290 [ 248.282579][T16301] GPT: Use GNU Parted to correct GPT errors. [ 248.291902][T16301] loop4: p1 p2 p3 [ 248.373676][T16319] loop9: detected capacity change from 0 to 256 [ 248.380656][T16319] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.418685][T16323] EXT4-fs: Ignoring removed nobh option [ 248.424783][T16323] EXT4-fs: Ignoring removed bh option [ 248.432322][T16323] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 248.471371][T16323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 248.479760][T16323] System zones: 0-1, 3-12 [ 248.486281][T16323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.524926][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.628176][T16336] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.641188][T16336] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.703946][T16354] EXT4-fs: Ignoring removed nobh option [ 248.712444][T16354] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 248.728857][T16354] EXT4-fs (loop2): 1 truncate cleaned up [ 248.735078][T16354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.766188][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.777154][T13426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.915988][T16379] pimreg: tun_chr_ioctl cmd 1074025675 [ 248.921926][T16379] pimreg: persist disabled [ 249.079440][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 249.079467][ T28] audit: type=1326 audit(1785553517.372:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16389 comm="syz.2.5080" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f20f14ae019 code=0x7ffc0000 [ 249.298533][T16416] xt_hashlimit: size too large, truncated to 1048576 [ 249.355917][ T28] audit: type=1400 audit(1785553517.652:2003): avc: denied { listen } for pid=16420 comm="syz.2.5093" laddr=::ffff:172.20.20.48 lport=44173 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 249.432103][T16428] EXT4-fs: Ignoring removed nobh option [ 249.457121][T16428] EXT4-fs: Ignoring removed bh option [ 249.462958][T16428] EXT4-fs: Ignoring removed nobh option [ 249.469286][T16428] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 249.518205][T16428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.540485][ T28] audit: type=1400 audit(1785553517.842:2004): avc: denied { write } for pid=16427 comm="syz.2.5097" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.607676][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.649684][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.659305][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 249.676076][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.685684][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 249.693686][T16451] loop5: unable to read partition table [ 249.699983][T16451] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 249.702132][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.719874][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 249.728523][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.738141][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 249.752972][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.762591][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 249.770924][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.780827][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.790464][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 249.798858][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 249.808469][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 249.853287][T16465] sctp: [Deprecated]: syz.9.5111 (pid 16465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.853287][T16465] Use struct sctp_sack_info instead [ 250.074192][T16499] set_capacity_and_notify: 6 callbacks suppressed [ 250.074205][T16499] loop2: detected capacity change from 0 to 512 [ 250.104788][ T28] audit: type=1400 audit(1785553518.402:2005): avc: denied { remount } for pid=16500 comm="syz.4.5123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 250.105909][T16499] EXT4-fs (loop2): 1 truncate cleaned up [ 250.132242][T16499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.151194][T16505] loop4: detected capacity change from 0 to 128 [ 250.163783][ T28] audit: type=1400 audit(1785553518.462:2006): avc: denied { write } for pid=16497 comm="syz.2.5122" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.174262][T16499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5122: bg 0: block 465: padding at end of block bitmap is not set [ 250.204304][T16505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 250.212476][T16505] System zones: 1-3, 19-19, 35-36 [ 250.217676][T16499] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 250.218528][T16505] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 250.238917][T16505] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 250.271952][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.275581][T16505] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 3 (only 1 groups) [ 250.303106][T15193] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.351597][T16516] loop4: detected capacity change from 0 to 512 [ 250.363599][T16516] EXT4-fs: Ignoring removed nobh option [ 250.379433][T16513] loop2: detected capacity change from 0 to 1024 [ 250.386532][T16513] EXT4-fs: dax option not supported [ 250.397212][T16516] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 250.423776][T16516] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 250.435636][T16522] loop2: detected capacity change from 0 to 2048 [ 250.452775][T16516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec119, mo2=0002] [ 250.482639][T16516] System zones: 1-12 [ 250.487079][T16516] EXT4-fs (loop4): orphan cleanup on readonly fs [ 250.494423][T16516] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5127: Block bitmap for bg 0 marked uninitialized [ 250.508338][T16516] loop4: lost filesystem error report for type 5 error -117 [ 250.509439][T16522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none. [ 250.529397][T16522] ext4 filesystem being mounted at /990/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.530742][T16516] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5127: Block bitmap for bg 0 marked uninitialized [ 250.539994][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 250.540014][ C1] EXT4-fs (loop4): initial error at time 1785553518: ext4_read_block_bitmap_nowait:517 [ 250.540034][ C1] EXT4-fs (loop4): last error at time 1785553518: ext4_read_block_bitmap_nowait:517 [ 250.553637][T16533] loop9: detected capacity change from 0 to 512 [ 250.577623][ T28] audit: type=1400 audit(1785553518.862:2007): avc: denied { write } for pid=16521 comm="syz.2.5131" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.606984][T16516] loop4: lost filesystem error report for type 5 error -117 [ 250.607974][T16516] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5127: Block bitmap for bg 0 marked uninitialized [ 250.622896][T16534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5131: bg 0: block 345: padding at end of block bitmap is not set [ 250.645029][T16534] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 426 with error 117 [ 250.646398][T16516] loop4: lost filesystem error report for type 5 error -117 [ 250.658881][T16534] EXT4-fs (loop2): This should not happen!! Data will be lost [ 250.658881][T16534] [ 250.675915][T16516] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5127: Block bitmap for bg 0 marked uninitialized [ 250.689374][T16516] loop4: lost filesystem error report for type 5 error -117 [ 250.691266][T16516] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5127: Block bitmap for bg 0 marked uninitialized [ 250.712099][T16516] loop4: lost filesystem error report for type 5 error -117 [ 250.712337][T16516] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.5127: Block bitmap for bg 0 marked uninitialized [ 250.740687][T16516] loop4: lost filesystem error report for type 5 error -117 [ 250.742097][T16516] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 250.774978][T16516] EXT4-fs (loop4): 1 truncate cleaned up [ 250.781490][T16516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 250.787975][ T6564] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 250.815219][ T6564] EXT4-fs (loop2): This should not happen!! Data will be lost [ 250.815219][ T6564] [ 250.826413][ T28] audit: type=1400 audit(1785553519.122:2008): avc: denied { mounton } for pid=16515 comm="syz.4.5127" path="/142/file2/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.850794][ T6564] EXT4-fs (loop2): Total free blocks count 0 [ 250.857012][ T6564] EXT4-fs (loop2): Free/Dirty block details [ 250.863299][ T6564] EXT4-fs (loop2): free_blocks=0 [ 250.869266][ T6564] EXT4-fs (loop2): dirty_blocks=32 [ 250.874450][ T6564] EXT4-fs (loop2): Block reservation details [ 250.881318][ T3302] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 250.923822][T16540] ip6_vti0: entered allmulticast mode [ 250.929832][T16540] ip6_vti0: left allmulticast mode [ 250.960558][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.103677][T16571] loop9: detected capacity change from 0 to 512 [ 251.113171][T16571] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 251.124552][T16571] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.5153: invalid indirect mapped block 9 (level 0) [ 251.137926][T16571] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 251.139003][T16571] EXT4-fs (loop9): 1 truncate cleaned up [ 251.148192][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 251.148211][ C1] EXT4-fs (loop9): initial error at time 1785553519: ext4_free_branches:1023: inode 11 [ 251.148241][ C1] EXT4-fs (loop9): last error at time 1785553519: ext4_free_branches:1023: inode 11 [ 251.180415][T16571] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.194193][ T28] audit: type=1400 audit(1785553519.492:2009): avc: denied { write } for pid=16570 comm="syz.9.5153" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.295521][ T6564] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.360592][T13426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.600689][T16606] netlink: 'syz.4.5168': attribute type 4 has an invalid length. [ 251.608775][T16606] netlink: 'syz.4.5168': attribute type 7 has an invalid length. [ 251.616553][T16606] netlink: 'syz.4.5168': attribute type 8 has an invalid length. [ 251.624572][T16606] netlink: 'syz.4.5168': attribute type 7 has an invalid length. [ 251.635458][T16606] netlink: 125384 bytes leftover after parsing attributes in process `syz.4.5168'. [ 251.793157][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5174'. [ 252.304890][ T28] audit: type=1400 audit(1785553520.602:2010): avc: denied { write } for pid=3376 comm="kworker/0:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49357 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.527028][T16666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16666 comm=syz.1.5194 [ 252.583818][T16672] loop9: detected capacity change from 0 to 164 [ 252.595900][T16672] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 252.904207][T16699] netlink: 7 bytes leftover after parsing attributes in process `syz.9.5207'. [ 253.000514][ T28] audit: type=1326 audit(1785553521.301:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16649 comm="syz.2.5187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f14ae019 code=0x7fc00000 [ 253.307471][ T5331] Bluetooth: hci0: command 0x1003 tx timeout [ 253.313499][ T3793] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 253.361299][T16705] €: entered promiscuous mode [ 253.367527][T16705] ip6gretap0: entered promiscuous mode [ 253.431994][T16710] loop8: detected capacity change from 0 to 164 [ 253.461826][T16710] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 253.743318][T16732] loop4: detected capacity change from 0 to 2048 [ 253.764406][T16732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.782466][T16732] EXT4-fs (loop4): shut down requested (1) [ 253.806500][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.903435][T16723] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.957467][T16741] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 254.161383][T16755] EXT4-fs (loop8): 1 orphan inode deleted [ 254.168390][T16755] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.184392][ T6564] __quota_error: 2 callbacks suppressed [ 254.184406][ T6564] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 254.201864][ T6564] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 1 [ 254.214212][T16755] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.248852][T16759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5233'. [ 254.847041][T16723] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.918946][T16723] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.935986][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.984561][ T28] audit: type=1400 audit(1785553523.272:2014): avc: denied { write } for pid=16708 comm="syz.9.5222" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 255.047728][T13426] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.121093][T16775] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 255.311998][T16813] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 255.453922][T16826] smpboot: CPU 1 is now offline [ 255.491758][T16826] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 255.872593][T16833] set_capacity_and_notify: 3 callbacks suppressed [ 255.872607][T16833] loop2: detected capacity change from 0 to 512 [ 255.886908][T16833] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 255.902609][T16833] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 255.913032][T16833] FAT-fs (loop2): Filesystem has been set read-only [ 256.364894][T16865] loop4: detected capacity change from 0 to 128 [ 256.387601][T16865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 256.406191][T16865] System zones: 1-3, 19-19, 35-36 [ 256.413191][T16865] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 256.447078][T16865] ext4 filesystem being mounted at /183/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 256.488185][ T28] audit: type=1400 audit(1785553524.782:2015): avc: denied { write } for pid=16864 comm="syz.4.5277" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.554302][T15193] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.619451][T16885] loop4: detected capacity change from 0 to 164 [ 256.651486][ T28] audit: type=1400 audit(1785553524.952:2016): avc: denied { mounton } for pid=16884 comm="syz.4.5287" path="/185/file0" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 257.517139][T16919] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 257.524551][T16919] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 257.812479][T16941] loop8: detected capacity change from 0 to 512 [ 257.861294][T16941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.897557][T16941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.916502][T16941] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.954184][ T28] audit: type=1400 audit(1785553526.253:2017): avc: denied { write } for pid=16939 comm="syz.8.5303" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.989882][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.069609][T16968] loop8: detected capacity change from 0 to 2048 [ 258.102681][T16968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.124239][T16968] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.141102][ T28] audit: type=1400 audit(1785553526.443:2018): avc: denied { write } for pid=16967 comm="syz.8.5318" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.195498][T16974] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5318: bg 0: block 345: padding at end of block bitmap is not set [ 258.212021][T16974] EXT4-fs (loop8): Remounting filesystem read-only [ 258.293942][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.328196][T16984] pim6reg: entered allmulticast mode [ 258.336002][T16984] pim6reg: left allmulticast mode [ 259.451475][T16994] smc: net device vlan1 applied user defined pnetid SYZ2 [ 259.459054][T16994] smc: net device vlan1 erased user defined pnetid SYZ2 [ 259.543533][ T28] audit: type=1400 audit(1785553527.844:2019): avc: denied { mounton } for pid=17005 comm="syz.8.5333" path="/proc/571/task" dev="proc" ino=49937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 259.569469][T16998] loop2: detected capacity change from 0 to 512 [ 259.611195][T16998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.659436][T16998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.672849][T16998] ext4 filesystem being mounted at /1011/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.690887][ T28] audit: type=1400 audit(1785553527.994:2020): avc: denied { write } for pid=16997 comm="syz.2.5326" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.779753][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.826138][ T28] audit: type=1326 audit(1785553528.134:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.1.5343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 259.909675][ T28] audit: type=1326 audit(1785553528.134:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.1.5343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 259.942050][T17040] loop8: detected capacity change from 0 to 512 [ 259.948877][ T28] audit: type=1326 audit(1785553528.134:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.1.5343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 259.974716][ T28] audit: type=1326 audit(1785553528.134:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.1.5343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 259.999576][T17040] EXT4-fs: Ignoring removed i_version option [ 260.000427][ T28] audit: type=1326 audit(1785553528.134:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.1.5343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 260.032116][ T28] audit: type=1326 audit(1785553528.134:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.1.5343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 260.064125][ T28] audit: type=1326 audit(1785553528.134:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.1.5343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 260.097597][ T28] audit: type=1326 audit(1785553528.134:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz.1.5343" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 260.139425][T17040] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.173905][T17040] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.236071][T17054] loop9: detected capacity change from 0 to 164 [ 260.242835][T17054] iso9660: Unknown parameter 'cess' [ 260.293439][T17051] loop2: detected capacity change from 0 to 512 [ 260.337623][T17051] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 260.373987][T17051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.374502][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.388690][T17051] ext4 filesystem being mounted at /1016/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.446029][T17061] netlink: 656 bytes leftover after parsing attributes in process `syz.8.5355'. [ 260.461075][T17061] netlink: 656 bytes leftover after parsing attributes in process `syz.8.5355'. [ 260.491543][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.512015][T17066] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5358'. [ 260.573205][T17076] Invalid argument reading file caps for ./file0 [ 260.583570][T17078] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 260.594557][T17078] SELinux: failed to load policy [ 260.739006][ T6966] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.787680][T17093] loop8: detected capacity change from 0 to 512 [ 260.826100][ T6966] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.837579][T17093] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 260.880086][ T6966] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.893326][T17093] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.920639][T17093] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.985037][ T6966] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.995027][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.187639][T17125] loop2: detected capacity change from 0 to 128 [ 261.221314][T17125] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 261.256233][ T6966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.280367][ T6966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.302691][ T6966] bond0 (unregistering): Released all slaves [ 261.309037][T17125] ext4 filesystem being mounted at /1020/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 261.428616][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.441024][ T6966] hsr_slave_0: left promiscuous mode [ 261.461444][ T6966] hsr_slave_1: left promiscuous mode [ 261.481106][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.499190][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.520271][ T6966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.539194][ T6966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.567991][ T6966] veth1_macvtap: left promiscuous mode [ 261.574121][ T6966] veth0_macvtap: left promiscuous mode [ 261.585662][ T6966] veth1_vlan: left promiscuous mode [ 261.595310][ T6966] veth0_vlan: left promiscuous mode [ 261.767362][ T6966] team0 (unregistering): Port device team_slave_1 removed [ 261.791401][ T6966] team0 (unregistering): Port device team_slave_0 removed [ 261.856408][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 262.068338][T17175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5388'. [ 262.069611][T17178] netlink: 'syz.8.5390': attribute type 2 has an invalid length. [ 262.081601][T17099] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.093888][T17099] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.105115][T17178] netlink: 'syz.8.5390': attribute type 2 has an invalid length. [ 262.112941][T17178] netlink: 67 bytes leftover after parsing attributes in process `syz.8.5390'. [ 262.131078][T17099] bridge_slave_0: entered allmulticast mode [ 262.141239][T17099] bridge_slave_0: entered promiscuous mode [ 262.147551][T17183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5388'. [ 262.161962][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 262.171191][T17099] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.180470][T17099] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.187901][T17099] bridge_slave_1: entered allmulticast mode [ 262.194687][T17099] bridge_slave_1: entered promiscuous mode [ 262.212315][T17099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.222498][T17099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.242252][T17099] team0: Port device team_slave_0 added [ 262.249390][T17099] team0: Port device team_slave_1 added [ 262.268005][T17099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.275055][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.301035][T17099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.312370][T17099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.319517][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.345686][T17099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.375625][T17099] hsr_slave_0: entered promiscuous mode [ 262.381772][T17099] hsr_slave_1: entered promiscuous mode [ 262.387798][T17099] debugfs: 'hsr0' already exists in 'hsr' [ 262.393759][T17099] Cannot create hsr debugfs directory [ 262.534407][T17200] loop2: detected capacity change from 0 to 4096 [ 262.563136][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 262.565715][T17200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.767550][T17099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 262.785133][T17099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.801133][T17099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.828979][T17099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.845133][T17099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.859207][T17099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.869229][T17099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.883056][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.893313][T17099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.902851][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 262.941989][T17249] loop2: detected capacity change from 0 to 512 [ 262.962530][T17249] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.972088][T17099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.980565][T17249] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 262.996431][T17249] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.5402: inode #15: comm syz.2.5402: iget: illegal inode # [ 262.997080][T17099] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.019280][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.021403][T17249] loop2: lost filesystem error report for type 5 error -117 [ 263.026374][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.045161][ T6550] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.052250][ T6550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.052757][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 263.065882][ C0] EXT4-fs (loop2): initial error at time 1785553531: ext4_orphan_get:1399 [ 263.069086][T17249] EXT4-fs (loop2): Remounting filesystem read-only [ 263.074437][ C0] EXT4-fs (loop2): last error at time 1785553531: ext4_orphan_get:1399 [ 263.098916][T17099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.109311][T17099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.349623][T17293] loop8: detected capacity change from 0 to 4096 [ 263.364890][T17099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.653350][T17099] veth0_vlan: entered promiscuous mode [ 263.676741][T17099] veth1_vlan: entered promiscuous mode [ 263.740840][T17099] veth0_macvtap: entered promiscuous mode [ 263.765926][T17346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17346 comm=syz.4.5423 [ 263.792317][T17099] veth1_macvtap: entered promiscuous mode [ 263.842775][T17099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.883717][T17099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.973556][ T6966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.983330][T17367] sctp: [Deprecated]: syz.1.5429 (pid 17367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.983330][T17367] Use struct sctp_sack_info instead [ 264.032559][ T6968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.056935][ T6968] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.069203][T17382] netlink: 'syz.4.5433': attribute type 10 has an invalid length. [ 264.168849][T17394] netlink: 'syz.1.5434': attribute type 16 has an invalid length. [ 264.179639][T17397] loop8: detected capacity change from 0 to 128 [ 264.211874][T17394] netlink: 'syz.1.5434': attribute type 17 has an invalid length. [ 264.296514][T17411] loop2: detected capacity change from 0 to 1024 [ 264.330200][T17394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.339592][T17411] EXT4-fs mount: 4 callbacks suppressed [ 264.339665][T17411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.358892][T17394] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.377220][T17411] ext4 filesystem being mounted at /1031/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.421411][T17411] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.5442: lblock 0 mapped to illegal pblock 0 (length 1) [ 264.439507][T17394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.454638][T17411] EXT4-fs (loop2): Remounting filesystem read-only [ 264.479788][T17394] veth0_to_team: left promiscuous mode [ 264.539360][T17394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.548597][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 264.554637][T17394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.604227][T17394] veth1_macvtap: left promiscuous mode [ 264.611076][T17394] veth0_macvtap: left promiscuous mode [ 264.617632][T17394] veth0_macvtap: entered promiscuous mode [ 264.625319][T17394] veth1_macvtap: entered promiscuous mode [ 264.644882][T17394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.656335][T17394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.665639][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 264.665691][ T28] audit: type=1400 audit(1785553532.976:2111): avc: denied { write } for pid=17433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.668150][T17394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.716208][ T28] audit: type=1400 audit(1785553533.026:2112): avc: denied { write } for pid=17447 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.755656][T17394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.776536][T17394] veth0_to_team: entered promiscuous mode [ 264.820657][T17394] gretap0: entered promiscuous mode [ 264.827715][T17394] batman_adv: batadv0: Interface activated: macvtap1 [ 264.869081][T17457] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.870901][T17394] geneve2: left promiscuous mode [ 264.883260][T17394] €: left promiscuous mode [ 264.891977][T17457] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 264.913998][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.921105][ T6564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.937923][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.945055][ T6564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.069827][T17465] loop4: detected capacity change from 0 to 128 [ 265.091964][ T6550] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.138580][ T6550] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.177593][ T6968] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 265.196550][ T6968] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 265.204406][ T912] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 265.224229][ T6968] ip6_tunnel:  xmit: Local address not yet configured! [ 265.252577][ T6968] ip6_tunnel:  xmit: Local address not yet configured! [ 265.261089][ T912] ip6_tunnel:  xmit: Local address not yet configured! [ 265.291824][ T6550] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.344797][ T6550] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 265.365313][ T28] audit: type=1400 audit(1785553533.667:2113): avc: denied { write } for pid=17466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.373112][ T912] ip6_tunnel:  xmit: Local address not yet configured! [ 265.396595][ T6968] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.415340][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5458'. [ 265.442757][ T912] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 265.466262][ T28] audit: type=1400 audit(1785553533.757:2114): avc: denied { write } for pid=17493 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.480588][ T912] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 265.518966][T17502] loop2: detected capacity change from 0 to 128 [ 265.579959][T17509] netlink: 'syz.1.5464': attribute type 10 has an invalid length. [ 265.611418][T17509] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.5464'. [ 265.714771][ T28] audit: type=1400 audit(1785553534.017:2115): avc: denied { write } for pid=17501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.775637][ T28] audit: type=1400 audit(1785553534.077:2116): avc: denied { write } for pid=17534 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.799409][T17536] loop2: detected capacity change from 0 to 256 [ 265.802693][ T3384] ip6_tunnel:  xmit: Local address not yet configured! [ 265.827042][T17536] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.863054][T17536] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 265.871184][T17536] FAT-fs (loop2): Filesystem has been set read-only [ 265.915620][T17547] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5474'. [ 265.938222][ T28] audit: type=1400 audit(1785553534.237:2117): avc: denied { write } for pid=17539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.968884][T17551] loop3: detected capacity change from 0 to 4096 [ 266.012248][T17551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.060978][ T28] audit: type=1400 audit(1785553534.357:2118): avc: denied { write } for pid=17567 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.112816][ T28] audit: type=1400 audit(1785553534.357:2119): avc: denied { write } for pid=17550 comm="syz.3.5473" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.170002][T17571] Invalid argument reading file caps for ./file0 [ 266.235499][T17580] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 266.241905][T17580] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 266.283876][T17582] netlink: 452 bytes leftover after parsing attributes in process `syz.2.5481'. [ 266.392323][ T28] audit: type=1400 audit(1785553534.677:2120): avc: denied { write } for pid=17573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.452127][T17594] netlink: 463 bytes leftover after parsing attributes in process `syz.2.5486'. [ 266.513504][T17099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.877635][T17648] geneve0: entered promiscuous mode [ 266.931345][T17648] geneve0: left promiscuous mode [ 266.963252][T17660] loop4: detected capacity change from 0 to 256 [ 267.002773][T17660] FAT-fs (loop4): codepage cp862 not found [ 267.150740][ T6968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 53477 - 0 [ 267.304380][ T6968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 53477 - 0 [ 267.404960][ T6968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 53477 - 0 [ 267.525379][ T6968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 53477 - 0 [ 267.583927][T17663] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.591851][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.607681][T17663] bridge_slave_0: entered allmulticast mode [ 267.618213][T17663] bridge_slave_0: entered promiscuous mode [ 267.627206][T17663] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.634381][T17663] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.641822][T17663] bridge_slave_1: entered allmulticast mode [ 267.653179][T17663] bridge_slave_1: entered promiscuous mode [ 267.664643][T17710] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 267.730635][T17663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.751462][T17720] netlink: 'syz.4.5533': attribute type 9 has an invalid length. [ 267.775415][T17663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.841625][ T6968] dvmrp1: left allmulticast mode [ 267.879703][ T6968] batman_adv: batadv0: Removing interface: macvtap1 [ 267.902944][ T6968] bond0 (unregistering): Released all slaves [ 267.976412][T17663] team0: Port device team_slave_0 added [ 267.982818][ T6968] tipc: Disabling bearer [ 267.992359][ T6968] tipc: Left network mode [ 268.003313][T17663] team0: Port device team_slave_1 added [ 268.009794][T17742] loop4: detected capacity change from 0 to 128 [ 268.047841][T17663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.055117][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.087533][T17663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.106229][ T6968] hsr_slave_0: left promiscuous mode [ 268.114652][ T6968] hsr_slave_1: left promiscuous mode [ 268.204931][T17663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.212033][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.244461][T17663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.275006][T17663] hsr_slave_0: entered promiscuous mode [ 268.281908][T17663] hsr_slave_1: entered promiscuous mode [ 268.288104][T17663] debugfs: 'hsr0' already exists in 'hsr' [ 268.295180][T17663] Cannot create hsr debugfs directory [ 268.428181][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 268.508129][ T6968] IPVS: stop unused estimator thread 0... [ 268.532116][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 268.621286][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 268.712918][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 268.968526][T17663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.977312][T17663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.985844][T17663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.996351][T17663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.005657][T17663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.014804][T17663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.022794][T17663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.032258][T17663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.073827][T17663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.086587][T17663] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.097148][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.104270][ T6968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.116549][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.123673][ T6966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.251243][T17663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.323976][T17663] veth0_vlan: entered promiscuous mode [ 269.332797][T17663] veth1_vlan: entered promiscuous mode [ 269.351502][T17663] veth0_macvtap: entered promiscuous mode [ 269.358917][T17663] veth1_macvtap: entered promiscuous mode [ 269.371024][T17663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.382939][T17663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.410632][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.419440][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.429347][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.503317][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.639870][T17967] loop0: detected capacity change from 0 to 1024 [ 269.652786][T17967] EXT4-fs: Ignoring removed oldalloc option [ 269.672985][T17967] EXT4-fs: Ignoring removed bh option [ 269.708336][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 269.708351][ T28] audit: type=1400 audit(1785553538.009:2178): avc: denied { write } for pid=17971 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.748446][T17967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 269.789184][T17967] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.810018][ T28] audit: type=1400 audit(1785553538.109:2179): avc: denied { getopt } for pid=17980 comm="syz.4.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 269.840138][ T28] audit: type=1400 audit(1785553538.149:2180): avc: denied { write } for pid=17966 comm="syz.0.5542" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.870066][T17967] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.5542: Freeing blocks not in datazone - block = 0, count = 16 [ 269.931492][ T28] audit: type=1326 audit(1785553538.239:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.3.5558" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f715321e019 code=0x0 [ 269.960114][ T6968] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:19: bg 0: block 112: padding at end of block bitmap is not set [ 269.992474][ T6968] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 270.020239][ T6968] EXT4-fs (loop0): This should not happen!! Data will be lost [ 270.020239][ T6968] [ 270.049721][T17663] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 270.068463][ T28] audit: type=1400 audit(1785553538.369:2182): avc: denied { write } for pid=17982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.107708][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 270.132590][ T28] audit: type=1400 audit(1785553538.429:2183): avc: denied { write } for pid=18019 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.272631][ T28] audit: type=1400 audit(1785553538.579:2184): avc: denied { write } for pid=18022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.318094][ T28] audit: type=1400 audit(1785553538.619:2185): avc: denied { write } for pid=18048 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.387023][T18059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5576'. [ 270.481427][ T28] audit: type=1400 audit(1785553538.789:2186): avc: denied { write } for pid=18055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.565853][ T28] audit: type=1400 audit(1785553538.869:2187): avc: denied { write } for pid=18080 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.673518][T18100] loop0: detected capacity change from 0 to 1024 [ 270.682633][T18100] EXT4-fs: Ignoring removed orlov option [ 270.739220][T18100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.797316][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.827225][T18113] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 270.878005][T18120] syzkaller1: entered promiscuous mode [ 270.892053][T18120] syzkaller1: entered allmulticast mode [ 270.950203][T18126] netlink: 67 bytes leftover after parsing attributes in process `syz.8.5596'. [ 271.342088][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5598'. [ 271.742964][T18144] loop4: detected capacity change from 0 to 8192 [ 271.751312][T18144] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 271.886161][T18156] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.912035][T18159] netlink: 'syz.8.5609': attribute type 2 has an invalid length. [ 271.949016][T18162] loop8: detected capacity change from 0 to 128 [ 271.961756][T18162] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.985668][T18162] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.077659][T13342] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 273.486231][T18243] loop4: detected capacity change from 0 to 1024 [ 273.521270][T18243] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 273.566808][T18243] JBD2: no valid journal superblock found [ 273.581355][T18243] EXT4-fs (loop4): Could not load journal inode [ 273.632282][T18249] GUP no longer grows the stack in syz.4.5648 (18249): 200000004000-200000007000 (200000002000) [ 273.655549][T18249] CPU: 0 UID: 0 PID: 18249 Comm: syz.4.5648 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 273.655582][T18249] Tainted: [W]=WARN [ 273.655639][T18249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.655650][T18249] Call Trace: [ 273.655656][T18249] [ 273.655663][T18249] __dump_stack+0x1d/0x30 [ 273.655683][T18249] dump_stack_lvl+0x95/0xd0 [ 273.655778][T18249] dump_stack+0x15/0x1b [ 273.655796][T18249] __get_user_pages+0x1b27/0x1f10 [ 273.655828][T18249] ? __rcu_read_unlock+0x4e/0x70 [ 273.655894][T18249] get_user_pages_remote+0x1d5/0x6b0 [ 273.655921][T18249] __access_remote_vm+0x156/0x4d0 [ 273.655953][T18249] access_remote_vm+0x32/0x40 [ 273.656007][T18249] proc_pid_cmdline_read+0x334/0x710 [ 273.656025][T18249] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 273.656114][T18249] vfs_readv+0x417/0x6d0 [ 273.656139][T18249] __x64_sys_preadv+0xfd/0x1c0 [ 273.656204][T18249] x64_sys_call+0x2915/0x3020 [ 273.656227][T18249] do_syscall_64+0x136/0x3c0 [ 273.656251][T18249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.656321][T18249] RIP: 0033:0x7f03b449e019 [ 273.656369][T18249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.656388][T18249] RSP: 002b:00007f03b2ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 273.656469][T18249] RAX: ffffffffffffffda RBX: 00007f03b4725fa0 RCX: 00007f03b449e019 [ 273.656483][T18249] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 273.656559][T18249] RBP: 00007f03b453500c R08: 00000000fffffff9 R09: 0000000000000000 [ 273.656572][T18249] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000000 [ 273.656586][T18249] R13: 00007f03b4726038 R14: 00007f03b4725fa0 R15: 00007fff7f6aa878 [ 273.656605][T18249] [ 274.118080][T18263] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 274.432656][T18241] Set syz1 is full, maxelem 65536 reached [ 274.470697][T18297] syzkaller1: entered promiscuous mode [ 274.476400][T18297] syzkaller1: entered allmulticast mode [ 274.521942][T18306] loop4: detected capacity change from 0 to 1024 [ 274.541318][T18306] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 274.583184][T18310] xt_hashlimit: size too large, truncated to 1048576 [ 274.591866][T18306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.670269][T18314] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 274.680213][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.733326][T18320] ip6erspan0: entered allmulticast mode [ 274.795819][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 274.795833][ T28] audit: type=1326 audit(1785553543.102:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18328 comm="syz.4.5680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03b449e019 code=0x0 [ 274.854531][T18331] syzkaller1: entered promiscuous mode [ 274.874613][T18331] syzkaller1: entered allmulticast mode [ 274.997251][T18341] loop0: detected capacity change from 0 to 1024 [ 275.032912][T18341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 275.041229][T18341] System zones: 0-1, 3-12 [ 275.057268][T18341] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.078304][T18341] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 275.091436][ T28] audit: type=1400 audit(1785553543.392:2219): avc: denied { write } for pid=18340 comm="syz.0.5685" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.140389][ T28] audit: type=1400 audit(1785553543.452:2220): avc: denied { write } for pid=18340 comm="syz.0.5685" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.192509][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 275.364193][T18359] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 275.423787][T18367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5695'. [ 275.487324][T18381] loop8: detected capacity change from 0 to 128 [ 275.494597][T18381] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.519396][T18381] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.554186][ T6968] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.806113][ T6550] tipc: Subscription rejected, illegal request [ 276.082018][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5719'. [ 276.094800][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5719'. [ 276.127340][ T28] audit: type=1326 audit(1785553544.442:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.5724" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 276.176221][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 276.176246][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 276.178319][ T28] audit: type=1326 audit(1785553544.442:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.5724" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 276.223860][ T28] audit: type=1326 audit(1785553544.442:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.5724" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 276.265704][ T28] audit: type=1326 audit(1785553544.442:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.5724" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 276.303437][ T28] audit: type=1326 audit(1785553544.462:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.5724" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 276.344186][ T28] audit: type=1326 audit(1785553544.462:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.5724" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 276.375262][T18453] loop8: detected capacity change from 0 to 512 [ 276.383525][ T28] audit: type=1326 audit(1785553544.462:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18430 comm="syz.8.5724" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 276.468547][T18452] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.483486][T18457] loop8: detected capacity change from 0 to 128 [ 276.542358][T18457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 276.551600][T18457] System zones: 1-3, 19-19, 35-36 [ 276.560450][T18457] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.573655][T18452] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.584781][T18457] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 276.620929][T18457] EXT4-fs warning (device loop8): ext4_group_extend:1885: will only finish group (8193 blocks, 8129 new) [ 276.635367][T18457] EXT4-fs warning (device loop8): ext4_group_extend:1890: can't read last block, resize aborted [ 276.662750][T13342] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.703904][T18452] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.793027][T18452] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.883515][ T6564] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.897828][ T6564] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.929507][ T6564] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.959509][ T6966] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.039582][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5756'. [ 277.065296][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5756'. [ 277.634741][T18603] loop4: detected capacity change from 0 to 7 [ 277.862213][T18613] loop8: detected capacity change from 0 to 1024 [ 277.869513][T18613] EXT4-fs: Ignoring removed bh option [ 277.910693][T18613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.996361][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.027756][T18618] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5786'. [ 278.037983][T18618] openvswitch: netlink: Message has 6 unknown bytes. [ 278.051568][T18620] dummy0: entered allmulticast mode [ 278.058756][T18619] dummy0: left allmulticast mode [ 278.095502][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 278.308440][T18643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18643 comm=syz.3.5797 [ 278.429600][T18657] SELinux: policydb version 0 does not match my version range 15-35 [ 278.452449][T18657] SELinux: failed to load policy [ 278.566450][T18670] netlink: 996 bytes leftover after parsing attributes in process `syz.3.5806'. [ 278.587111][T18670] netlink: 996 bytes leftover after parsing attributes in process `syz.3.5806'. [ 278.686317][T18682] netlink: 'syz.4.5814': attribute type 3 has an invalid length. [ 278.717074][T18682] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.5814'. [ 278.960228][T18702] Cannot find set identified by id 0 to match [ 279.207627][T18741] netlink: 'syz.8.5837': attribute type 11 has an invalid length. [ 279.328276][T18699] Set syz1 is full, maxelem 65536 reached [ 279.753298][T18783] lo speed is unknown, defaulting to 1000 [ 279.762118][T18783] lo speed is unknown, defaulting to 1000 [ 279.768450][T18783] lo speed is unknown, defaulting to 1000 [ 279.806336][T18783] infiniband sz1: set active [ 279.811060][ T3391] lo speed is unknown, defaulting to 1000 [ 279.811085][T18783] infiniband sz1: added lo [ 279.828303][T18783] RDS/IB: sz1: added [ 279.835152][T18783] smc: adding ib device sz1 with port count 1 [ 279.845224][T18783] smc: ib device sz1 port 1 has no pnetid [ 279.855395][T18783] lo speed is unknown, defaulting to 1000 [ 279.868504][ T3383] lo speed is unknown, defaulting to 1000 [ 279.893079][T18783] lo speed is unknown, defaulting to 1000 [ 279.932071][T18783] lo speed is unknown, defaulting to 1000 [ 279.966008][T18783] lo speed is unknown, defaulting to 1000 [ 280.010486][T18783] lo speed is unknown, defaulting to 1000 [ 280.053487][T18799] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5858'. [ 280.066496][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 280.066508][ T28] audit: type=1400 audit(1785553548.384:2269): avc: denied { connect } for pid=18797 comm="syz.3.5859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 280.109647][T18783] lo speed is unknown, defaulting to 1000 [ 280.215589][T18812] loop0: detected capacity change from 0 to 512 [ 280.228277][T18812] EXT4-fs: Ignoring removed orlov option [ 280.261071][T18812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 280.315799][ T28] audit: type=1326 audit(1785553548.624:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18763 comm="syz.1.5844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7fc00000 [ 280.449807][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.477627][T18826] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.528075][ T28] audit: type=1326 audit(1785553548.844:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.1.5875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 280.561982][T18826] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.575703][ T28] audit: type=1326 audit(1785553548.874:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.1.5875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 280.602102][ T28] audit: type=1326 audit(1785553548.874:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.1.5875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 280.629320][ T28] audit: type=1326 audit(1785553548.874:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.1.5875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 280.656525][ T28] audit: type=1326 audit(1785553548.874:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.1.5875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 280.685710][ T28] audit: type=1326 audit(1785553548.874:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.1.5875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 280.714047][T18826] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.716351][ T28] audit: type=1326 audit(1785553548.874:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.1.5875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 280.737217][T18850] program syz.0.5881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.750597][ T28] audit: type=1326 audit(1785553548.874:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.1.5875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8de76e019 code=0x7ffc0000 [ 280.818179][T18856] loop0: detected capacity change from 0 to 512 [ 280.830557][T18826] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.857302][T18856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.870938][T18856] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.893158][ T68] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.901484][ T68] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.914747][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.923887][ T6966] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.932200][ T6966] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.210296][T18903] loop0: detected capacity change from 0 to 8192 [ 281.218645][T18903] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 281.356983][T18920] loop0: detected capacity change from 0 to 1024 [ 281.357957][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5904'. [ 281.402695][T18920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.448802][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.469863][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5913'. [ 281.588735][T18958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5921'. [ 281.598685][T18958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5921'. [ 281.681139][T18973] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5928'. [ 281.713266][T18977] loop0: detected capacity change from 0 to 1024 [ 281.737998][T18981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 38026 - 0 [ 281.743266][T18977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.750208][T18981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 281.793842][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.817930][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5933'. [ 281.832205][T18981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 38026 - 0 [ 281.844356][T18981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 281.856800][T18988] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.864067][T18988] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.897149][T18981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 38026 - 0 [ 281.909047][T18981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 281.956086][T19000] loop4: detected capacity change from 0 to 512 [ 281.971745][T19002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5941'. [ 281.979550][T19000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.994421][T19000] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.998390][T19002] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5941'. [ 282.021950][T18981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 38026 - 0 [ 282.032723][T18981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 282.067739][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5942'. [ 282.079729][T19010] gtp0: entered promiscuous mode [ 282.086477][T19010] gtp0: entered allmulticast mode [ 282.144630][ T6564] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.159326][ T6564] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 38026 - 0 [ 282.169652][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.211950][ T6564] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.231593][ T6564] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 38026 - 0 [ 282.250177][ T6564] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.258981][ T6564] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 38026 - 0 [ 282.303154][ T6569] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.330200][ T6569] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 38026 - 0 [ 282.378894][T19029] lo speed is unknown, defaulting to 1000 [ 282.605939][T19084] loop8: detected capacity change from 0 to 512 [ 282.629176][T19084] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.669256][T19084] EXT4-fs error (device loop8): __ext4_fill_super:5600: inode #2: comm syz.8.5963: iget: special inode unallocated [ 282.697214][T19084] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 282.701888][T19084] EXT4-fs (loop8): get root inode failed [ 282.711010][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 282.711026][ C0] EXT4-fs (loop8): initial error at time 1785553551: __ext4_fill_super:5600: inode 2 [ 282.711074][ C0] EXT4-fs (loop8): last error at time 1785553551: __ext4_fill_super:5600: inode 2 [ 282.746098][T19084] EXT4-fs (loop8): mount failed [ 282.885296][T19110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5968'. [ 283.184548][T19153] netlink: 'syz.1.5988': attribute type 10 has an invalid length. [ 283.199413][ T3383] kernel read not supported for file /input/event1 (pid: 3383 comm: kworker/0:4) [ 283.260729][T19163] netlink: 'syz.4.5992': attribute type 1 has an invalid length. [ 283.279105][T19167] loop3: detected capacity change from 0 to 128 [ 283.287598][T19167] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 283.297520][T19163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.308155][T19167] FAT-fs (loop3): data area starts beyond volume (36 > 6) [ 283.315555][T19167] FAT-fs (loop3): Can't find a valid FAT filesystem [ 283.326816][ T68] tipc: Subscription rejected, illegal request [ 283.553420][T13808] IPVS: starting estimator thread 0... [ 283.606273][T19215] raw_sendmsg: syz.4.6015 forgot to set AF_INET. Fix it! [ 283.663014][T19203] IPVS: using max 2496 ests per chain, 124800 per kthread [ 283.749191][T19232] loop0: detected capacity change from 0 to 1024 [ 283.763460][T19232] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 283.777790][T19234] loop8: detected capacity change from 0 to 256 [ 283.790579][T19232] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 283.906241][T19232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.932028][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.953617][T19249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.962144][T19249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.503956][T19262] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19262 comm=syz.0.6036 [ 284.518370][T19262] netlink: 'syz.0.6036': attribute type 1 has an invalid length. [ 284.526218][T19262] netlink: 'syz.0.6036': attribute type 2 has an invalid length. [ 284.616631][T13808] Process accounting resumed [ 284.631644][T19273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19273 comm=syz.1.6041 [ 284.875227][T19306] ip_tables: iptables: counters copy to user failed while replacing table [ 284.945031][T19311] nftables ruleset with unbound set [ 284.998606][T19315] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.6057: Unrecognised inode hash code 255 [ 285.027961][T19315] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6057: Corrupt directory, running e2fsck is recommended [ 285.050125][T19325] netlink: 'syz.8.6060': attribute type 39 has an invalid length. [ 285.063853][T19315] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 285.071998][T19315] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.6057: corrupted in-inode xattr: invalid ea_ino [ 285.085359][T19315] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 285.085581][T19315] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.6057: couldn't read orphan inode 15 (err -117) [ 285.094777][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 285.094799][ C1] EXT4-fs (loop4): initial error at time 1785553553: ext4_iget_extra_inode:5180: inode 15 [ 285.094822][ C1] EXT4-fs (loop4): last error at time 1785553553: ext4_iget_extra_inode:5180: inode 15 [ 285.134176][T19315] loop4: lost filesystem error report for type 5 error -117 [ 285.134870][T19315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.158307][T19315] EXT4-fs (loop4): shut down requested (2) [ 285.164584][T19315] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.6057: Unrecognised inode hash code 255 [ 285.176349][T19315] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6057: Corrupt directory, running e2fsck is recommended [ 285.413381][T19345] bond1: entered promiscuous mode [ 285.422776][T19345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.465823][T19351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.473512][T19351] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 285.485550][T19351] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 285.527254][T19355] netlink: 'syz.8.6073': attribute type 1 has an invalid length. [ 285.548538][T19355] bond1: entered promiscuous mode [ 285.553875][T19355] bond1: entered allmulticast mode [ 285.559191][T19355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.584999][T19360] syzkaller1: entered allmulticast mode [ 285.749971][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.803483][T19379] set_capacity_and_notify: 1 callbacks suppressed [ 285.803506][T19379] loop4: detected capacity change from 0 to 512 [ 285.849943][T19379] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 285.878109][T19379] EXT4-fs (loop4): 1 truncate cleaned up [ 285.885408][T19379] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.901199][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 285.901263][ T28] audit: type=1400 audit(1785553554.207:2329): avc: denied { write } for pid=19378 comm="syz.4.6084" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.955830][T19391] lo speed is unknown, defaulting to 1000 [ 285.994483][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.142274][ T28] audit: type=1400 audit(1785553554.447:2330): avc: denied { read write } for pid=19408 comm="syz.8.6097" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 286.166440][T19409] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 286.208947][ T28] audit: type=1400 audit(1785553554.447:2331): avc: denied { open } for pid=19408 comm="syz.8.6097" path="/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 286.237334][ T28] audit: type=1400 audit(1785553554.477:2332): avc: denied { ioctl } for pid=19408 comm="syz.8.6097" path="/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xfd12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 287.078230][T19430] loop0: detected capacity change from 0 to 256 [ 287.090893][T19430] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.102729][T19430] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 287.119180][T19430] FAT-fs (loop0): Filesystem has been set read-only [ 287.132379][T19436] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 287.143066][T19437] __nla_validate_parse: 6 callbacks suppressed [ 287.143078][T19437] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6107'. [ 287.185535][T19434] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6107'. [ 287.352364][T19440] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 287.368216][T19440] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 287.368538][T19455] loop8: detected capacity change from 0 to 256 [ 287.395728][T19439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.405379][T19439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.414018][T19455] FAT-fs (loop8): bogus logical sector size 32768 [ 287.421110][T19455] FAT-fs (loop8): Can't find a valid FAT filesystem [ 287.428550][ T28] audit: type=1400 audit(1785553555.738:2333): avc: denied { getopt } for pid=19456 comm="syz.1.6117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 287.489688][T19462] loop4: detected capacity change from 0 to 4096 [ 287.507160][T19462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.528852][ T28] audit: type=1400 audit(1785553555.838:2334): avc: denied { write } for pid=19460 comm="syz.4.6120" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.629732][T19471] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 287.736658][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.745972][T19484] loop0: detected capacity change from 0 to 512 [ 287.768696][T19484] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.6131: inode has both inline data and extents flags [ 287.793677][ T28] audit: type=1326 audit(1785553556.108:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19489 comm="syz.1.6132" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8de76e019 code=0x0 [ 287.814869][T19484] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.819170][T19484] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.6131: couldn't read orphan inode 15 (err -117) [ 287.824481][ T28] audit: type=1326 audit(1785553556.108:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19491 comm="syz.4.6133" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03b449e019 code=0x0 [ 287.828495][T19484] loop0: lost filesystem error report for type 5 error -117 [ 287.850363][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 287.865549][T19484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.872474][ C1] EXT4-fs (loop0): initial error at time 1785553556: ext4_orphan_get:1399 [ 287.889072][ T28] audit: type=1400 audit(1785553556.168:2337): avc: denied { write } for pid=19482 comm="syz.0.6131" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.891278][ C1] : inode 15 [ 287.891292][ C1] EXT4-fs (loop0): last error at time 1785553556: ext4_orphan_get:1404 [ 288.001737][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.040813][T19497] netlink: 'syz.0.6135': attribute type 4 has an invalid length. [ 288.049233][T19499] loop3: detected capacity change from 0 to 512 [ 288.052737][T19497] netlink: 'syz.0.6135': attribute type 4 has an invalid length. [ 288.063700][T19499] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 288.125352][ T28] audit: type=1400 audit(1785553556.438:2338): avc: denied { write } for pid=19505 comm="syz.3.6139" name="functions" dev="configfs" ino=9938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 288.179507][T19508] loop0: detected capacity change from 0 to 1024 [ 288.191683][T19508] EXT4-fs: Ignoring removed bh option [ 288.208129][T19517] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=19517 comm=syz.3.6143 [ 288.209964][T19508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.221606][T19517] netlink: 'syz.3.6143': attribute type 12 has an invalid length. [ 288.241775][T19517] netlink: 'syz.3.6143': attribute type 4 has an invalid length. [ 288.278239][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.383644][ T912] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 288.392488][T19534] loop3: detected capacity change from 0 to 512 [ 288.393308][ T912] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 288.411927][T19534] EXT4-fs: Ignoring removed nobh option [ 288.430376][T19534] EXT4-fs: Ignoring removed bh option [ 288.447563][T19534] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.463683][T19534] EXT4-fs (loop3): 1 truncate cleaned up [ 288.469877][T19534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.503840][T17099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.582103][T19541] loop3: detected capacity change from 0 to 1024 [ 288.589108][T19541] EXT4-fs: Ignoring removed orlov option [ 288.621319][T19541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.653567][T13808] IPVS: starting estimator thread 0... [ 288.694767][T19554] netlink: 9275 bytes leftover after parsing attributes in process `syz.8.6157'. [ 288.705259][T19556] loop4: detected capacity change from 0 to 128 [ 288.715527][T19556] FAT-fs (loop4): data area starts beyond volume (33 > 0) [ 288.730795][T19556] FAT-fs (loop4): Can't find a valid FAT filesystem [ 288.760658][T19550] IPVS: using max 2400 ests per chain, 120000 per kthread [ 288.808985][T17099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.963892][T19583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.017877][T19583] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 289.056269][T19583] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz.3.6167: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 289.079151][T19583] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 12: comm syz.3.6167: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 289.101897][T19583] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz.3.6167: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 289.125235][T19598] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 18: comm syz.3.6167: lblock 23 mapped to illegal pblock 18 (length 1) [ 289.127652][T19594] tipc: Cannot configure node identity twice [ 289.212200][T17099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.224955][T19594] lo speed is unknown, defaulting to 1000 [ 289.418408][T19629] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 289.436643][T19629] System zones: 0-1, 3-36 [ 289.445808][T19629] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.6187: bad orphan inode 134217728 [ 289.459842][T19629] loop8: lost filesystem error report for type 5 error -117 [ 289.460956][T19629] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.557133][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6191'. [ 289.574111][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.578560][T19637] netlink: 'syz.4.6191': attribute type 30 has an invalid length. [ 289.602379][T19637] vxlan0: entered promiscuous mode [ 289.611076][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6191'. [ 289.622098][T19641] netlink: 'syz.4.6191': attribute type 30 has an invalid length. [ 289.633109][T19637] vxlan0: entered allmulticast mode [ 289.655197][T19641] vxlan1: entered promiscuous mode [ 289.667523][T19641] vxlan1: entered allmulticast mode [ 289.681156][ T6564] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.723638][ T6564] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.747336][ T6564] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.820101][ T6968] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.987990][T19680] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 290.005278][T19680] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 290.040683][T19680] EXT4-fs (loop4): orphan cleanup on readonly fs [ 290.052771][T19680] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.6211: Block bitmap for bg 0 marked uninitialized [ 290.066427][T19680] loop4: lost filesystem error report for type 5 error -117 [ 290.067665][T19680] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 290.075009][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 290.075028][ C0] EXT4-fs (loop4): initial error at time 1785553558: ext4_read_block_bitmap_nowait:517 [ 290.075048][ C0] EXT4-fs (loop4): last error at time 1785553558: ext4_read_block_bitmap_nowait:517 [ 290.109854][T19680] loop4: lost filesystem error report for type 5 error -117 [ 290.110113][T19680] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.6211: Block bitmap for bg 0 marked uninitialized [ 290.138262][T19680] loop4: lost filesystem error report for type 5 error -117 [ 290.140864][T19680] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 290.151572][T19691] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 290.174614][T19680] loop4: lost filesystem error report for type 5 error -117 [ 290.174823][T19680] EXT4-fs (loop4): 1 orphan inode deleted [ 290.201054][T19680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 290.258613][T15193] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.288630][T19698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.299347][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 290.303501][T19698] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.334331][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.076696][T19757] set_capacity_and_notify: 5 callbacks suppressed [ 291.076710][T19757] loop3: detected capacity change from 0 to 512 [ 291.099516][T19755] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.177645][T19755] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.232803][T19755] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.334209][T19755] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.414575][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6249'. [ 291.426736][T19778] hsr_slave_0: left promiscuous mode [ 291.433243][T19778] hsr_slave_1: left promiscuous mode [ 291.453174][ T49] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.465276][ T49] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.474978][ T49] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.486995][ T49] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.624058][T19791] loop8: detected capacity change from 0 to 1024 [ 291.642531][T19791] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 291.659185][T19791] System zones: 0-1, 3-12 [ 291.669132][T19791] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.698433][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 291.698480][ T28] audit: type=1400 audit(1785553560.010:2389): avc: denied { write } for pid=19790 comm="syz.8.6256" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.728984][ T28] audit: type=1400 audit(1785553560.050:2390): avc: denied { write } for pid=19790 comm="syz.8.6256" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.763314][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 292.289009][T19858] loop4: detected capacity change from 0 to 7 [ 292.453654][ T6968] tipc: Subscription rejected, illegal request [ 292.484654][T19885] loop0: detected capacity change from 0 to 1024 [ 292.497487][T19885] EXT4-fs: Ignoring removed bh option [ 292.519078][T19885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.534513][ T28] audit: type=1400 audit(1785553560.850:2391): avc: denied { write } for pid=19884 comm="syz.0.6298" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.577815][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.653773][T19902] netlink: 'syz.8.6305': attribute type 3 has an invalid length. [ 292.663332][T19902] netlink: 13435 bytes leftover after parsing attributes in process `syz.8.6305'. [ 293.045031][T19918] netlink: 996 bytes leftover after parsing attributes in process `syz.8.6312'. [ 293.055709][T19918] netlink: 996 bytes leftover after parsing attributes in process `syz.8.6312'. [ 293.300781][T19922] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6313'. [ 293.313696][T19924] loop3: detected capacity change from 0 to 128 [ 293.326657][T19924] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 293.341652][T19922] openvswitch: netlink: Message has 6 unknown bytes. [ 293.357609][T19924] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.384378][T19915] xt_NFQUEUE: number of total queues is 0 [ 293.432805][T19906] Set syz1 is full, maxelem 65536 reached [ 293.461074][ T6550] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.479493][ T8455] Process accounting resumed [ 293.505040][T19932] loop3: detected capacity change from 0 to 256 [ 293.535113][T19932] msdos: Bad value for 'uid' [ 293.540041][T19932] msdos: Bad value for 'uid' [ 293.642853][T19944] SELinux: policydb version 0 does not match my version range 15-35 [ 293.660411][T19944] SELinux: failed to load policy [ 293.964355][T19969] dummy0: entered allmulticast mode [ 293.983709][T19966] dummy0: left allmulticast mode [ 294.059555][T19973] lo speed is unknown, defaulting to 1000 [ 294.428173][T19999] xt_hashlimit: size too large, truncated to 1048576 [ 294.612725][T20007] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6345'. [ 294.643644][T20009] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20009 comm=syz.1.6347 [ 294.717266][T20015] rdma_rxe: rxe_newlink: failed to add lo [ 294.727407][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 294.768494][T20021] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.795230][T20021] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 38026 - 0 [ 294.839057][T20021] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.855773][T20021] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 38026 - 0 [ 294.875370][ T8455] Process accounting resumed [ 294.929417][T20021] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.939601][T20021] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 38026 - 0 [ 294.988802][T20021] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.005643][T20031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6356'. [ 295.015468][T20021] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 38026 - 0 [ 295.049315][T20031] bond2: entered promiscuous mode [ 295.057119][T20031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.063808][T20034] loop0: detected capacity change from 0 to 512 [ 295.077608][T20031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.089692][T20034] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.6358: Unrecognised inode hash code 255 [ 295.116159][T20031] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 295.149491][T20034] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.6358: Corrupt directory, running e2fsck is recommended [ 295.179179][T20038] loop3: detected capacity change from 0 to 512 [ 295.179744][T20031] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 295.197343][T20038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 295.215984][T20034] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 295.224852][T20034] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.6358: corrupted in-inode xattr: invalid ea_ino [ 295.240569][T20034] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 295.241133][T20034] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.6358: couldn't read orphan inode 15 (err -117) [ 295.250457][T20038] EXT4-fs (loop3): 1 truncate cleaned up [ 295.262146][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 295.262175][ C1] EXT4-fs (loop0): initial error at time 1785553563: ext4_iget_extra_inode:5180: inode 15 [ 295.262204][ C1] EXT4-fs (loop0): last error at time 1785553563: ext4_iget_extra_inode:5180: inode 15 [ 295.262332][T20034] loop0: lost filesystem error report for type 5 error -117 [ 295.271162][T20038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.275463][T20034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.339614][ T6968] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.358188][ T6968] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 38026 - 0 [ 295.379295][ T28] audit: type=1400 audit(1785553563.692:2392): avc: denied { write } for pid=20037 comm="syz.3.6359" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.392854][T20034] EXT4-fs (loop0): shut down requested (2) [ 295.413605][T17099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.425540][T20034] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.6358: Unrecognised inode hash code 255 [ 295.443545][T20034] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.6358: Corrupt directory, running e2fsck is recommended [ 295.456660][ T6569] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.470605][ T6569] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 38026 - 0 [ 295.493295][T20044] lo speed is unknown, defaulting to 1000 [ 295.508094][ T6968] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.535013][ T6968] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 38026 - 0 [ 295.548543][ T6968] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.570986][ T6968] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 38026 - 0 [ 295.654775][T20053] rdma_rxe: rxe_newlink: failed to add lo [ 296.014387][T20083] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6388'. [ 296.044456][T20083] bond2: entered promiscuous mode [ 296.060963][T20086] loop4: detected capacity change from 0 to 128 [ 296.061981][T20083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.099274][T17663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.111377][T20086] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 296.132132][T20087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.147584][T20086] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 296.154907][T20086] FAT-fs (loop4): Can't find a valid FAT filesystem [ 296.163041][T20087] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 296.174671][T20087] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 296.253535][ T6968] tipc: Subscription rejected, illegal request [ 296.283681][T20097] loop8: detected capacity change from 0 to 512 [ 296.336622][T20097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.384576][T20097] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.453642][ T28] audit: type=1400 audit(1785553564.772:2393): avc: denied { write } for pid=20096 comm="syz.8.6381" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.477864][T20116] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.564733][T20116] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.601853][T20125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6402'. [ 296.676961][T20116] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.688879][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.732293][T20116] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.796571][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.804894][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.813466][ T6550] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.823422][ T6550] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.860628][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6395'. [ 296.864216][T20134] lo speed is unknown, defaulting to 1000 [ 296.876852][T20135] bond1: entered promiscuous mode [ 296.883906][T20135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.924009][T20135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.939305][T20135] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 296.962650][T20135] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 297.064272][T20148] loop8: detected capacity change from 0 to 256 [ 297.086476][T20150] loop3: detected capacity change from 0 to 1024 [ 297.101528][T20150] EXT4-fs: Ignoring removed bh option [ 297.105782][T20148] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.130883][T20150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.148321][T20148] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 297.173289][T20148] FAT-fs (loop8): Filesystem has been set read-only [ 297.195827][ T28] audit: type=1400 audit(1785553565.513:2394): avc: denied { write } for pid=20147 comm="syz.3.6399" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.283945][T17099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.458953][T20169] netlink: 67 bytes leftover after parsing attributes in process `syz.0.6409'. [ 297.507218][T20155] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 297.515264][T20155] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 297.535778][T20169] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.543559][T20169] bridge0: port 2(bridge_slave_1) entered listening state [ 297.551987][T20169] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.559525][T20169] bridge0: port 1(bridge_slave_0) entered listening state [ 297.893122][T20169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.923895][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6413'. [ 297.931267][ T6550] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 297.988683][ T28] audit: type=1326 audit(1785553566.313:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.048679][ T28] audit: type=1326 audit(1785553566.313:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.081233][ T28] audit: type=1326 audit(1785553566.313:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.089459][T20188] loop3: detected capacity change from 0 to 512 [ 298.124738][ T28] audit: type=1326 audit(1785553566.313:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.152578][ T28] audit: type=1326 audit(1785553566.313:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.178533][ T28] audit: type=1326 audit(1785553566.313:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.205211][ T28] audit: type=1326 audit(1785553566.313:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.231821][ T28] audit: type=1326 audit(1785553566.313:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.258891][ T28] audit: type=1326 audit(1785553566.313:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20182 comm="syz.8.6414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0ca9e019 code=0x7ffc0000 [ 298.286691][T20188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.300606][T20188] ext4 filesystem being mounted at /187/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.369656][T17099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.574237][T20195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=20195 comm=syz.3.6431 [ 298.596734][T20198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.608865][T20195] netlink: 'syz.3.6431': attribute type 1 has an invalid length. [ 298.617137][T20195] netlink: 'syz.3.6431': attribute type 2 has an invalid length. [ 298.625386][T20195] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6431'. [ 298.654486][T20198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.722830][T20198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.788588][T20198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.900461][ T6550] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.931647][ T6550] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.991151][ T6550] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.009091][T20219] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.019745][T20219] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.045055][ T6550] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.070660][T20219] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.082917][T20219] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.137956][T20234] lo speed is unknown, defaulting to 1000 [ 299.144612][T20219] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.158282][T20219] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.237173][T20219] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.251641][T20219] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.306517][ T68] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.315511][ T68] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.323966][ T68] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.332611][ T68] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.348752][ T68] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.364681][ T68] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.384120][ T68] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.396261][ T68] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.447173][T20248] netlink: 'syz.0.6452': attribute type 39 has an invalid length. [ 300.420476][T20253] loop8: detected capacity change from 0 to 512 [ 300.445749][T20253] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 300.477895][T20253] EXT4-fs (loop8): 1 truncate cleaned up [ 300.492799][T20253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.543662][T13342] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.595808][T20269] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.676505][T20269] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.759127][T20269] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.859198][T20269] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.042585][ T6550] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.062497][ T6550] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.078895][ T6968] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.099082][ T6968] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.161562][T20279] ip_tables: iptables: counters copy to user failed while replacing table [ 301.319186][T20258] Set syz1 is full, maxelem 65536 reached [ 301.583786][T20290] ================================================================== [ 301.591915][T20290] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 301.599231][T20290] [ 301.601566][T20290] read to 0xffff88811be371e0 of 4 bytes by task 20287 on cpu 0: [ 301.609292][T20290] atime_needs_update+0x25f/0x3e0 [ 301.614352][T20290] touch_atime+0x4a/0x300 [ 301.618702][T20290] shmem_file_read_iter+0x3ed/0x4b0 [ 301.623922][T20290] copy_splice_read+0x47a/0x6b0 [ 301.628782][T20290] splice_direct_to_actor+0x27c/0x680 [ 301.634162][T20290] do_splice_direct+0x119/0x1a0 [ 301.639018][T20290] do_sendfile+0x37d/0x640 [ 301.643434][T20290] __x64_sys_sendfile64+0x105/0x150 [ 301.648681][T20290] x64_sys_call+0x2dc4/0x3020 [ 301.653363][T20290] do_syscall_64+0x136/0x3c0 [ 301.657950][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.663844][T20290] [ 301.666167][T20290] write to 0xffff88811be371e0 of 4 bytes by task 20290 on cpu 1: [ 301.673889][T20290] touch_atime+0x1cb/0x300 [ 301.678307][T20290] shmem_file_read_iter+0x3ed/0x4b0 [ 301.683503][T20290] copy_splice_read+0x47a/0x6b0 [ 301.688350][T20290] splice_direct_to_actor+0x27c/0x680 [ 301.693722][T20290] do_splice_direct+0x119/0x1a0 [ 301.698566][T20290] do_sendfile+0x37d/0x640 [ 301.702979][T20290] __x64_sys_sendfile64+0x105/0x150 [ 301.708169][T20290] x64_sys_call+0x2dc4/0x3020 [ 301.712839][T20290] do_syscall_64+0x136/0x3c0 [ 301.717460][T20290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.723349][T20290] [ 301.725664][T20290] value changed: 0x35f76f93 -> 0x3690199a [ 301.731383][T20290] [ 301.733696][T20290] Reported by Kernel Concurrency Sanitizer on: [ 301.739852][T20290] CPU: 1 UID: 0 PID: 20290 Comm: syz.3.6456 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 301.750871][T20290] Tainted: [W]=WARN [ 301.754663][T20290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.764739][T20290] ================================================================== [ 301.773469][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 309.440102][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured!