last executing test programs: 3m8.982012908s ago: executing program 32 (id=167): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") 3m4.855547867s ago: executing program 33 (id=234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@minixdf}, {@barrier}, {@nogrpid}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@noquota}]}, 0x1, 0x440, &(0x7f0000000780)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16], 0x21, 0x286, &(0x7f0000000640)="$eJzs2s9rHGUYB/BnYkw3LelG/EUL4ose1MvQ5OyhRSKIAUWNUAXp1GzsmnE3ZJbAipic9Oqf4Fk8ehOkRy+5+Bd48JZLjj2IK7O7iZsSaqxtUsrnc0geZua7M/O+sy/PwO69/t0X62tVvlb0YirLYupq7MSdLOZjKg7sxGuvXP/1hfevf/T2teXlxnjrYkrp4ou/fPzVjy/d7l348KeLP5+L3flP9vYX/9h9bvfS3l8f3GpXqV2lTrdXf1a32ytulq202q7W85TeLVtF1UrtTtXa7KUi3TzYv1Z2Nzb6qeiszp3f2GxVVSo6/bTe6qdeN/U2+6n4rGh3Up7nae58MHTr/mIrP9wZDGJ/8OSNGAwGs9/Hhdsx93s0I3sqZU9fzZ69kT2/k13aHwyad0dnH8BVc+buNf/nxsccO/88FsaL+tJ7KTUiym+3VrZWRv/rvY24thbtKKMVV2I2/oz6MRkb1W++tbx0JQ3Nxzfl9ji/vbXyREQMn6BRfiGaMX98fmGUTwf5OlX/rVf3w/MvRjOeOT6/eDQ/Mzp/I159eSKfRzN++zS6UcZq1NnYHg/B0tcLKb3xznI6ev2Xh8cBADxu8nSo7t/qpm2if4vI8yP7J/qjUX6iP2xO9Iczx/SHd/VX03F5+mzvnYiq/+V6UZatzfoFb1gcbjlBcfCG+N9SD7+Y+T/x2clhuWcRkU2O5cO7r6kjc3bKgzl9wtFQjIrskfs63FcR8flpLkSciX8m/V8PbZzKBQEAAAAAAAAAAHAip/FzwrO+RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NH2dwAAAP//NLm0Nw==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000600)={0x1, 0x2e9, 0x5, 0xe}) 2m59.515504835s ago: executing program 34 (id=322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) lseek(r0, 0x1, 0x3) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) write$tun(r1, 0x0, 0x0) 1m57.341575689s ago: executing program 35 (id=1702): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m42.652293599s ago: executing program 36 (id=1993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1m42.069721217s ago: executing program 7 (id=2010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1m41.98473838s ago: executing program 7 (id=2012): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x103, 0x1, 0xaf88}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18}, 0x40e0) 1m41.916536512s ago: executing program 7 (id=2013): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6d}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe0000000}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1m41.573793563s ago: executing program 7 (id=2018): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 1m41.503244475s ago: executing program 7 (id=2020): pselect6(0x40, &(0x7f0000000100)={0x523, 0x3, 0x675, 0x8000000000000000, 0x0, 0x0, 0x8, 0x7}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m41.078164148s ago: executing program 7 (id=2028): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000840)={0x2, 0xa3d0, @status={[0x81, 0x7, 0xffffffff, 0x8, 0x6, 0x2]}, [0x1, 0x400, 0x6, 0x5c35, 0x5, 0x6, 0x2, 0x4bd8, 0x1ff, 0x6, 0x0, 0x0, 0xc, 0x5, 0x4, 0x3e02e308, 0x101, 0x5, 0x3, 0x2, 0x0, 0x9bc, 0x4, 0x1000, 0x6, 0x6, 0x4, 0x9ee, 0x8, 0x7, 0x29ed, 0x8f, 0x2, 0x80000000, 0x5, 0xff, 0x58b0, 0x4, 0x5, 0x8, 0x6, 0x8, 0x3, 0x10001, 0x4, 0x5, 0x8000000000000001, 0x0, 0x2c00000000, 0x20000000000, 0xd7, 0x0, 0x46b, 0xa25, 0x8, 0xff, 0x1a3, 0x6, 0x3, 0x4, 0x9, 0x0, 0x3ff, 0x401]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000541000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000064e000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m40.936470802s ago: executing program 37 (id=2028): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000840)={0x2, 0xa3d0, @status={[0x81, 0x7, 0xffffffff, 0x8, 0x6, 0x2]}, [0x1, 0x400, 0x6, 0x5c35, 0x5, 0x6, 0x2, 0x4bd8, 0x1ff, 0x6, 0x0, 0x0, 0xc, 0x5, 0x4, 0x3e02e308, 0x101, 0x5, 0x3, 0x2, 0x0, 0x9bc, 0x4, 0x1000, 0x6, 0x6, 0x4, 0x9ee, 0x8, 0x7, 0x29ed, 0x8f, 0x2, 0x80000000, 0x5, 0xff, 0x58b0, 0x4, 0x5, 0x8, 0x6, 0x8, 0x3, 0x10001, 0x4, 0x5, 0x8000000000000001, 0x0, 0x2c00000000, 0x20000000000, 0xd7, 0x0, 0x46b, 0xa25, 0x8, 0xff, 0x1a3, 0x6, 0x3, 0x4, 0x9, 0x0, 0x3ff, 0x401]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000541000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000064e000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0xc61, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}}, 0x8004) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.360596547s ago: executing program 1 (id=2098): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0x1, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0xcf2c, 0x0, 0x9, 0x5, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x100) 1m35.27357359s ago: executing program 1 (id=2099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xf, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1m35.077659916s ago: executing program 1 (id=2104): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x51) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x10000006, 0x2, 0x87, 0xffffffff, 0x40}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 1m35.022789938s ago: executing program 1 (id=2107): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x9407ea83f649e305, 0x123) 1m34.774441386s ago: executing program 1 (id=2116): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m34.476494535s ago: executing program 1 (id=2124): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1m34.461893845s ago: executing program 38 (id=2124): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1m2.740508258s ago: executing program 9 (id=2746): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r2, 0x1, 0x74bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x26000080) 1m2.730525608s ago: executing program 9 (id=2748): r0 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m2.599659392s ago: executing program 9 (id=2760): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) 1m2.548737083s ago: executing program 9 (id=2752): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 1m2.492664525s ago: executing program 9 (id=2754): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) 1m2.229575464s ago: executing program 9 (id=2758): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) tee(r1, r0, 0x3, 0x0) 1m2.172526665s ago: executing program 39 (id=2758): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) tee(r1, r0, 0x3, 0x0) 34.616932728s ago: executing program 0 (id=3278): perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0xfc, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x100, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34.55466783s ago: executing program 0 (id=3282): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc}, 0x14}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="c287", 0x2}], 0x1}}], 0x1, 0x4000800) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 34.423650654s ago: executing program 0 (id=3287): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x48f, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr") chdir(&(0x7f0000000240)='./file0\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000003c0)={0x1, 0x1fffffffc00, 0x7, 0x8e1, 0x492492492492499}) 34.361167715s ago: executing program 0 (id=3289): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 34.318523177s ago: executing program 0 (id=3290): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4, @private=0xa010102}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="cb57afecd191305850fa4686c0d56d353c6f80af983858e1db9a4c300e7d5e669214971cdcda09f61e0f21f715ed711d551b05581b78709d28e63d79c3d3f8c56407c47e137ba6", 0x47}, {&(0x7f0000000680)="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", 0x53e}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 34.143299662s ago: executing program 0 (id=3291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x48}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) 34.115112773s ago: executing program 40 (id=3291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x48}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) 17.625638579s ago: executing program 3 (id=3562): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 17.552398231s ago: executing program 3 (id=3564): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000080)=[{r0, 0x10000}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x8000, &(0x7f0000000140)={0x6, 0x8a, 0x0, {r0}}, 0x20) 17.481140684s ago: executing program 3 (id=3566): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000400)=""/40, 0x28}], 0x2}, 0x801}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) 17.399690466s ago: executing program 3 (id=3568): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 17.292458359s ago: executing program 3 (id=3570): syz_clone(0x20016000, &(0x7f00000001c0), 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0xc0}}, 0x40000) 17.116150835s ago: executing program 3 (id=3575): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) 17.098434025s ago: executing program 41 (id=3575): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) 16.245078352s ago: executing program 4 (id=3589): syz_read_part_table(0x40a9, &(0x7f00000002c0)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40000000, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 15.577888303s ago: executing program 4 (id=3593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001280), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, '\x00\x00\x00\x00\x00\x00\x00@', "0bf70000000000000000061000000001", "00000004", "ba0200"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, 0x0, 0x0) 14.0755539s ago: executing program 4 (id=3604): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000280), &(0x7f0000000380)=@tcp6=r0}, 0x20) 13.998667992s ago: executing program 4 (id=3609): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x0) 13.893706396s ago: executing program 4 (id=3599): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1000, 0x2, 0xfff7ff81, 0x5, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, &(0x7f0000000bc0)) 13.088514321s ago: executing program 4 (id=3614): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ee1}}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2.290418919s ago: executing program 6 (id=3773): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x9, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) 2.188185612s ago: executing program 6 (id=3776): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18, 0x5}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.814362354s ago: executing program 6 (id=3777): unshare(0x400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000000)) 1.758736355s ago: executing program 6 (id=3778): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.466034024s ago: executing program 8 (id=3781): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0x1, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) 1.464846605s ago: executing program 6 (id=3791): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000100)=r0, 0x4) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 1.125035965s ago: executing program 8 (id=3784): socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) 1.028639708s ago: executing program 8 (id=3787): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20) 905.421452ms ago: executing program 8 (id=3789): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 702.014658ms ago: executing program 2 (id=3790): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 621.861911ms ago: executing program 2 (id=3793): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4cdc, &(0x7f0000000040)={0x0, 0x8002ce0, 0xc000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x3, 0x4) io_uring_enter(r0, 0x6dd7, 0x7721, 0x16, 0x0, 0x0) 621.623691ms ago: executing program 2 (id=3794): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x408, 0x408, 0xffffffff, 0x190, 0x408, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xff000000, 'vcan0\x00', 'rose0\x00', {}, {0xff}, 0xc, 0x2, 0xc}, 0x0, 0x70, 0xa8, 0x48}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x18, @remote, @rand_addr=0x64010102, @gre_key=0x4, @port=0x4e21}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0xe4, 0x0}, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x11, 0x0, 0x42}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="5bdef0470748", 0x1, 0xb, [0x23, 0x3c, 0x2f, 0x7, 0x1a, 0xb, 0x33, 0x3e, 0xf, 0x10, 0x7, 0x25, 0x39, 0x3a, 0x1e, 0x2e], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 599.154412ms ago: executing program 6 (id=3795): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9, 0x9c6}, 0x40, 0x0, 0x0, 0x8}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x2) accept4(r0, 0x0, 0x0, 0x0) 565.480463ms ago: executing program 2 (id=3796): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0x1, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) 329.87564ms ago: executing program 5 (id=3797): write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000840)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e22, 0x272b, @mcast2}}}, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 255.477843ms ago: executing program 5 (id=3798): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) 254.756403ms ago: executing program 2 (id=3799): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$key(0xf, 0x3, 0x2) write$cgroup_subtree(r1, &(0x7f0000001140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 156.511185ms ago: executing program 5 (id=3800): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="a6bbe78ecaab", 0x6}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x40880) 156.360765ms ago: executing program 2 (id=3801): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x436, &(0x7f0000001680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40042, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000080)="c7", 0x5f) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x8000008) 66.625288ms ago: executing program 5 (id=3802): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}, {0xc}}, [@TCA_CHAIN={0x8, 0xb, 0xec86}]}, 0x2c}}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c0002"], 0x2c}}, 0x4000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 50.888549ms ago: executing program 8 (id=3803): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0x5bc}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 24.37368ms ago: executing program 5 (id=3804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x8fd, 0x10}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 24.03617ms ago: executing program 5 (id=3805): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 8 (id=3806): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): t/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 151.918471][T10696] netlink: 'syz.8.2402': attribute type 21 has an invalid length. [ 151.926842][T10696] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.968234][T10699] loop8: detected capacity change from 0 to 256 [ 152.195449][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.280066][T10712] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2412'. [ 152.309145][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 152.346972][T10722] netlink: 'syz.9.2415': attribute type 21 has an invalid length. [ 152.355961][T10722] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.411806][T10731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2419'. [ 152.704015][T10746] macsec0: entered promiscuous mode [ 152.710541][T10745] macsec0: left promiscuous mode [ 152.764359][T10752] netlink: 'syz.0.2428': attribute type 21 has an invalid length. [ 152.772754][T10752] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.004174][T10770] loop2: detected capacity change from 0 to 512 [ 153.014563][T10770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.144543][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.245585][T10776] ip6gre1: entered promiscuous mode [ 153.250889][T10776] ip6gre1: entered allmulticast mode [ 153.281214][T10778] netlink: 'syz.6.2440': attribute type 21 has an invalid length. [ 153.301207][T10778] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.811142][T10772] syz.2.2438 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 153.822280][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.2.2438 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.822339][T10772] Tainted: [W]=WARN [ 153.822349][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.822370][T10772] Call Trace: [ 153.822384][T10772] [ 153.822394][T10772] __dump_stack+0x1d/0x30 [ 153.822420][T10772] dump_stack_lvl+0x95/0xd0 [ 153.822447][T10772] dump_stack+0x15/0x1b [ 153.822472][T10772] dump_header+0x80/0x240 [ 153.822562][T10772] oom_kill_process+0x295/0x350 [ 153.822647][T10772] out_of_memory+0x97d/0xb80 [ 153.822688][T10772] try_charge_memcg+0x62f/0xa10 [ 153.822743][T10772] charge_memcg+0x6d/0x120 [ 153.822770][T10772] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 153.822798][T10772] __swap_cache_prepare_and_add+0x69/0x4a0 [ 153.822838][T10772] ? alloc_pages_mpol+0x217/0x260 [ 153.822889][T10772] swap_cache_alloc_folio+0xa2/0x120 [ 153.823030][T10772] swap_cluster_readahead+0x25f/0x3c0 [ 153.823066][T10772] swapin_readahead+0xde/0x840 [ 153.823096][T10772] ? _raw_spin_unlock+0x9/0x30 [ 153.823212][T10772] ? swap_put_entries_cluster+0x46c/0x490 [ 153.823261][T10772] ? __entry_text_end+0x1d668/0x102179 [ 153.823291][T10772] ? __rcu_read_unlock+0x4e/0x70 [ 153.823360][T10772] ? swap_cache_get_folio+0x1e0/0x1f0 [ 153.823387][T10772] do_swap_page+0x31e/0x2180 [ 153.823481][T10772] ? css_rstat_updated+0xbb/0x280 [ 153.823505][T10772] ? __rcu_read_lock+0x36/0x50 [ 153.823530][T10772] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 153.823548][T10772] handle_mm_fault+0xb2e/0x2e70 [ 153.823578][T10772] ? vma_start_read+0x1c7/0x2c0 [ 153.823625][T10772] do_user_addr_fault+0x62f/0x1050 [ 153.823659][T10772] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 153.823685][T10772] ? trace_page_fault_user+0x1f/0xa0 [ 153.823723][T10772] exc_page_fault+0x62/0xa0 [ 153.823746][T10772] asm_exc_page_fault+0x26/0x30 [ 153.823842][T10772] RIP: 0033:0x7f3633eca7d0 [ 153.823859][T10772] Code: c4 4c 0f 42 e0 83 3d fa d5 3a 00 00 0f 8e d9 fd ff ff e8 23 80 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d be ae ed 00 e8 03 00 00 48 8d 1d bf b7 3a 00 e8 8a 31 13 00 [ 153.823944][T10772] RSP: 002b:00007ffe4b33cf80 EFLAGS: 00010206 [ 153.823961][T10772] RAX: 00000000000258b8 RBX: 00007f3634277da0 RCX: 00000000000255a8 [ 153.823975][T10772] RDX: 0000000000000310 RSI: 00007ffe4b33cf60 RDI: 0000000000000001 [ 153.823989][T10772] RBP: 00007f3634277da0 R08: 000000002ec1a360 R09: 3fffffffffffffff [ 153.824003][T10772] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000002597b [ 153.824017][T10772] R13: 00007f363427609c R14: 00000000000256a2 R15: 00007f3634276090 [ 153.824042][T10772] [ 153.824060][T10772] memory: usage 307200kB, limit 307200kB, failcnt 185 [ 154.087053][T10772] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 154.095173][T10772] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 154.104996][T10772] Memory cgroup stats for /syz2: [ 154.105181][T10772] cache 0 [ 154.113420][T10772] rss 0 [ 154.116392][T10772] shmem 0 [ 154.119887][T10772] mapped_file 0 [ 154.123373][T10772] dirty 0 [ 154.124454][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 154.124485][ T28] audit: type=1400 audit(1778665454.089:1562): avc: denied { write } for pid=10781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.128100][T10772] writeback 4096 [ 154.159240][T10772] workingset_refault_anon 50 [ 154.163945][T10772] workingset_refault_file 0 [ 154.168640][T10772] swap 286720 [ 154.172059][T10772] swapcached 495616 [ 154.175947][T10772] pgpgin 13513 [ 154.179491][T10772] pgpgout 13512 [ 154.183041][T10772] pgfault 19593 [ 154.184317][ T28] audit: type=1400 audit(1778665454.149:1563): avc: denied { write } for pid=10792 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.186609][T10772] pgmajfault 36 [ 154.186619][T10772] inactive_anon 4096 [ 154.186627][T10772] active_anon 0 [ 154.221311][T10772] inactive_file 0 [ 154.225041][T10772] active_file 0 [ 154.228550][T10772] unevictable 0 [ 154.232063][T10772] hierarchical_memory_limit 314572800 [ 154.238054][T10772] hierarchical_memsw_limit 9223372036854771712 [ 154.244232][T10772] total_cache 0 [ 154.247749][T10772] total_rss 0 [ 154.251041][T10772] total_shmem 0 [ 154.254506][T10772] total_mapped_file 0 [ 154.258534][T10772] total_dirty 0 [ 154.262037][T10772] total_writeback 4096 [ 154.266160][T10772] total_workingset_refault_anon 50 [ 154.271382][T10772] total_workingset_refault_file 0 [ 154.276691][T10772] total_swap 286720 [ 154.280532][T10772] total_swapcached 495616 [ 154.284871][T10772] total_pgpgin 13513 [ 154.290064][T10772] total_pgpgout 13512 [ 154.294080][T10772] total_pgfault 19593 [ 154.298272][T10772] total_pgmajfault 36 [ 154.302276][T10772] total_inactive_anon 4096 [ 154.306913][T10772] total_active_anon 0 [ 154.310932][T10772] total_inactive_file 0 [ 154.315119][T10772] total_active_file 0 [ 154.319432][T10772] total_unevictable 0 [ 154.323435][T10772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2438,pid=10772,uid=0 [ 154.340060][T10772] Memory cgroup out of memory: Killed process 10772 (syz.2.2438) total-vm:96216kB, anon-rss:1228kB, file-rss:22100kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 154.359444][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 154.365430][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 154.419776][ T28] audit: type=1400 audit(1778665454.389:1564): avc: denied { write } for pid=10795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.461253][ T28] audit: type=1400 audit(1778665454.429:1565): avc: denied { write } for pid=10806 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.509035][T10773] syz.2.2438 (10773) used greatest stack depth: 8352 bytes left [ 154.698810][ T28] audit: type=1400 audit(1778665454.669:1566): avc: denied { write } for pid=10812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.792041][ T28] audit: type=1400 audit(1778665454.759:1567): avc: denied { write } for pid=10833 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.933554][ T28] audit: type=1400 audit(1778665454.899:1568): avc: denied { ioctl } for pid=10838 comm="syz.9.2447" path="socket:[27221]" dev="sockfs" ino=27221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.974410][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2449'. [ 154.989401][ T28] audit: type=1400 audit(1778665454.929:1569): avc: denied { bind } for pid=10838 comm="syz.9.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.036381][ T28] audit: type=1400 audit(1778665454.929:1570): avc: denied { connect } for pid=10838 comm="syz.9.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.084582][ T28] audit: type=1400 audit(1778665454.929:1571): avc: denied { write } for pid=10838 comm="syz.9.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.150367][T10846] ip6gre1: entered promiscuous mode [ 155.167681][T10846] ip6gre1: entered allmulticast mode [ 155.181524][T10850] loop7: detected capacity change from 0 to 16384 [ 155.310075][T10869] loop2: detected capacity change from 0 to 128 [ 155.429991][T10869] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.457995][T10869] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.553891][T10869] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 63: comm syz.2.2461: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 155.578485][T10869] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem [ 155.612295][T10890] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 63: comm syz.2.2461: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 155.620647][T10888] netlink: 'syz.0.2476': attribute type 21 has an invalid length. [ 155.651807][T10890] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem [ 155.675699][ T9677] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.934424][T10921] netlink: 'syz.6.2483': attribute type 21 has an invalid length. [ 156.092890][T10938] netlink: 'syz.6.2489': attribute type 10 has an invalid length. [ 156.331922][T10938] dummy0: entered promiscuous mode [ 156.344460][T10938] team0: Failed to send options change via netlink (err -105) [ 156.361679][T10938] team0: Port device dummy0 added [ 156.373773][T10949] netlink: 'syz.8.2493': attribute type 2 has an invalid length. [ 156.386315][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2493'. [ 156.461603][T10957] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2494'. [ 156.490526][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 156.503736][T10959] netlink: 'syz.2.2497': attribute type 21 has an invalid length. [ 156.516374][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 156.531116][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 156.567538][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'. [ 156.576834][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'. [ 156.730464][T10956] infiniband syz0: set active [ 156.735519][ T9509] xfrm0 speed is unknown, defaulting to 1000 [ 156.741617][T10956] infiniband syz0: added xfrm0 [ 156.795020][T10956] RDS/IB: syz0: added [ 156.803165][T10956] smc: adding ib device syz0 with port count 1 [ 156.811895][T10956] smc: ib device syz0 port 1 has no pnetid [ 156.818550][ T3337] xfrm0 speed is unknown, defaulting to 1000 [ 156.825739][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 156.962723][T10987] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 156.978603][T10987] bond1: (slave lo): Enslaving as an active interface with an up link [ 156.990460][T10987] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 157.017575][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 157.091728][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 157.147921][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 157.204756][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 157.261008][T10956] xfrm0 speed is unknown, defaulting to 1000 [ 157.407448][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 157.417917][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'. [ 157.522087][T11007] netlink: 'syz.9.2528': attribute type 21 has an invalid length. [ 157.765671][T11028] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.2524'. [ 157.790928][T11028] netlink: zone id is out of range [ 157.806134][T11028] netlink: zone id is out of range [ 157.818568][T11031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11031 comm=syz.9.2526 [ 157.869074][T11028] netlink: set zone limit has 8 unknown bytes [ 158.140107][T11047] lo speed is unknown, defaulting to 1000 [ 158.147114][T11047] lo speed is unknown, defaulting to 1000 [ 158.153178][T11047] lo speed is unknown, defaulting to 1000 [ 158.193053][T11047] infiniband sz1: set active [ 158.198014][ T4870] lo speed is unknown, defaulting to 1000 [ 158.203942][T11047] infiniband sz1: added lo [ 158.219607][T11047] RDS/IB: sz1: added [ 158.224398][T11047] smc: adding ib device sz1 with port count 1 [ 158.231381][T11047] smc: ib device sz1 port 1 has no pnetid [ 158.237645][ T3337] lo speed is unknown, defaulting to 1000 [ 158.243716][T11047] lo speed is unknown, defaulting to 1000 [ 158.269606][T11052] xfrm0 speed is unknown, defaulting to 1000 [ 158.326598][T11052] lo speed is unknown, defaulting to 1000 [ 158.395105][T11047] lo speed is unknown, defaulting to 1000 [ 158.433093][T11047] lo speed is unknown, defaulting to 1000 [ 158.513737][T11055] netlink: 'syz.0.2538': attribute type 21 has an invalid length. [ 158.527297][T11047] lo speed is unknown, defaulting to 1000 [ 158.586497][T11059] loop2: detected capacity change from 0 to 256 [ 158.599131][T11047] lo speed is unknown, defaulting to 1000 [ 158.684589][T11047] lo speed is unknown, defaulting to 1000 [ 159.260707][ T5980] tipc: Subscription rejected, illegal request [ 159.390618][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 159.390656][ T28] audit: type=1326 audit(1778665459.359:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.447441][ T28] audit: type=1326 audit(1778665459.399:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.498351][ T28] audit: type=1326 audit(1778665459.399:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.534458][ T28] audit: type=1326 audit(1778665459.399:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.563985][ T28] audit: type=1326 audit(1778665459.399:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.590972][ T28] audit: type=1326 audit(1778665459.399:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.616875][ T28] audit: type=1326 audit(1778665459.419:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.685361][ T28] audit: type=1326 audit(1778665459.419:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.718353][T11093] IPVS: Error connecting to the multicast addr [ 159.735328][ T28] audit: type=1326 audit(1778665459.419:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.785542][ T28] audit: type=1326 audit(1778665459.419:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11078 comm="syz.9.2549" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8731a0ce59 code=0x7ffc0000 [ 159.821195][T11090] loop2: detected capacity change from 0 to 512 [ 159.885141][T11090] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 159.894784][T11090] System zones: 0-2, 18-18, 34-34 [ 159.934088][T11090] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2553: bg 0: block 248: padding at end of block bitmap is not set [ 159.949414][T11090] loop2: lost filesystem error report for type 5 error -117 [ 159.951906][T11090] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2553: Failed to acquire dquot type 1 [ 159.961650][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 159.961858][ C1] EXT4-fs (loop2): last error at time 1778665459: ext4_validate_block_bitmap:441 [ 160.016873][T11090] loop2: lost filesystem error report for type 5 error -117 [ 160.045724][T11090] EXT4-fs (loop2): 1 truncate cleaned up [ 160.060221][T11090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.077053][T11090] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.123629][T11090] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.2553: path /97/file0: bad entry in directory: directory entry overrun - offset=92, inode=2164260880, rec_len=196836, size=4096 fake=0 [ 160.161928][T11090] syz.2.2553 (11090) used greatest stack depth: 7744 bytes left [ 160.445509][T11125] SELinux: failed to load policy [ 160.665028][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.075659][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.587498][T11199] netlink: 'syz.0.2595': attribute type 3 has an invalid length. [ 161.615117][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'. [ 161.631364][T11137] Set syz1 is full, maxelem 65536 reached [ 161.934104][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'. [ 162.586933][T11334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2614'. [ 162.685111][T11343] xfrm0 speed is unknown, defaulting to 1000 [ 162.861036][T11335] loop9: detected capacity change from 0 to 512 [ 162.890255][T11343] lo speed is unknown, defaulting to 1000 [ 162.914378][T11335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 162.936845][T11335] System zones: 0-2, 18-18, 34-34 [ 162.994604][T11335] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2613: bg 0: block 248: padding at end of block bitmap is not set [ 163.034794][T11335] loop9: lost filesystem error report for type 5 error -117 [ 163.035365][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 163.050074][ C0] EXT4-fs (loop9): last error at time 1778665462: ext4_validate_block_bitmap:441 [ 163.063474][T11335] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.2613: Failed to acquire dquot type 1 [ 163.077793][T11335] loop9: lost filesystem error report for type 5 error -117 [ 163.100850][T11335] EXT4-fs (loop9): 1 truncate cleaned up [ 163.111804][T11370] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 163.117566][T11335] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.161294][T11335] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.260946][T11335] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.2613: path /95/file0: bad entry in directory: directory entry overrun - offset=92, inode=2164260880, rec_len=196836, size=4096 fake=0 [ 163.367851][ T9073] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.425114][T11388] veth0: entered promiscuous mode [ 163.445500][T11388] bond0: entered promiscuous mode [ 163.450728][T11388] bond_slave_0: entered promiscuous mode [ 163.457134][T11388] bond_slave_1: entered promiscuous mode [ 163.463427][T11387] bond0: left promiscuous mode [ 163.480982][T11387] bond_slave_0: left promiscuous mode [ 163.501043][T11387] bond_slave_1: left promiscuous mode [ 163.515587][T11387] veth0: left promiscuous mode [ 163.608273][T11351] loop8: detected capacity change from 0 to 65536 [ 163.646800][T11417] 9p: Bad value for 'wfdno' [ 163.727992][T11343] netlink: 'syz.8.2615': attribute type 16 has an invalid length. [ 163.752708][T11405] raw_sendmsg: syz.9.2631 forgot to set AF_INET. Fix it! [ 163.760034][T11343] netlink: 'syz.8.2615': attribute type 17 has an invalid length. [ 163.791237][T11343] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 163.957389][T11448] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2642'. [ 164.178860][T11479] batman_adv: batadv0: Adding interface: dummy0 [ 164.201260][T11479] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.242287][T11479] batman_adv: batadv0: Interface activated: dummy0 [ 164.352347][T11492] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 164.543827][ T28] kauditd_printk_skb: 254 callbacks suppressed [ 164.543841][ T28] audit: type=1400 audit(1778665464.509:1846): avc: denied { create } for pid=11511 comm="syz.8.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.591830][ T28] audit: type=1400 audit(1778665464.539:1847): avc: denied { bind } for pid=11511 comm="syz.8.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.638805][ T28] audit: type=1400 audit(1778665464.599:1848): avc: denied { write } for pid=11511 comm="syz.8.2658" path="socket:[29164]" dev="sockfs" ino=29164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.687156][ T28] audit: type=1400 audit(1778665464.649:1849): avc: denied { read } for pid=11511 comm="syz.8.2658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.864404][T11520] xfrm0 speed is unknown, defaulting to 1000 [ 165.001940][T11520] lo speed is unknown, defaulting to 1000 [ 165.560406][T11533] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 165.766587][T11553] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 165.802013][T11553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.845581][T11553] bond1: (slave geneve2): making interface the new active one [ 165.854723][T11553] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 165.956982][T11570] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 166.033870][T11574] loop8: detected capacity change from 0 to 512 [ 166.075930][T11574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.127329][T11574] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.216064][T11574] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.267480][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2693'. [ 166.593079][T11621] netlink: 'syz.8.2704': attribute type 1 has an invalid length. [ 166.628694][T11625] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2706'. [ 166.645407][T11621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.674592][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 166.740087][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2707'. [ 166.970510][T11648] SELinux: ebitmap start bit (4294967232) is beyond the end of the bitmap (704) [ 166.981505][T11648] SELinux: failed to load policy [ 167.655379][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2721'. [ 167.719723][T11665] xfrm0 speed is unknown, defaulting to 1000 [ 167.760348][T11665] lo speed is unknown, defaulting to 1000 [ 167.981803][T11686] loop8: detected capacity change from 0 to 4096 [ 168.003047][T11686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.110722][ T28] audit: type=1400 audit(1778665468.079:1850): avc: denied { map } for pid=11683 comm="syz.9.2740" path="socket:[30216]" dev="sockfs" ino=30216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.156670][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.159969][ T28] audit: type=1400 audit(1778665468.079:1851): avc: denied { read } for pid=11683 comm="syz.9.2740" path="socket:[30216]" dev="sockfs" ino=30216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.401335][T11704] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 168.409822][ T28] audit: type=1400 audit(1778665468.379:1852): avc: denied { create } for pid=11705 comm="syz.8.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.430129][ T5996] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.447141][ T28] audit: type=1400 audit(1778665468.389:1853): avc: denied { bind } for pid=11705 comm="syz.8.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.467957][ T28] audit: type=1400 audit(1778665468.389:1854): avc: denied { setopt } for pid=11705 comm="syz.8.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.511632][T11708] xfrm0 speed is unknown, defaulting to 1000 [ 168.696440][T11708] lo speed is unknown, defaulting to 1000 [ 168.737308][ T28] audit: type=1326 audit(1778665468.709:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.9.2738" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8731a06bd7 code=0x0 [ 169.614396][T11708] netlink: 'syz.0.2737': attribute type 16 has an invalid length. [ 169.634542][T11708] netlink: 'syz.0.2737': attribute type 17 has an invalid length. [ 169.648637][ T28] audit: type=1400 audit(1778665469.619:1856): avc: denied { mount } for pid=11727 comm="syz.9.2748" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 169.662357][T11708] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.749442][T11732] loop2: detected capacity change from 0 to 128 [ 169.851755][ T28] audit: type=1400 audit(1778665469.819:1857): avc: denied { unmount } for pid=9073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 170.016955][ T49] bio_check_eod: 101 callbacks suppressed [ 170.017053][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.017053][ T49] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 170.040180][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.040180][ T49] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 170.054086][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.054086][ T49] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 170.068945][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.068945][ T49] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 170.082545][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.082545][ T49] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 170.097138][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.097138][ T49] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 170.116736][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.116736][ T49] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 170.134800][ T5996] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.145297][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.145297][ T49] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 170.169792][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.169792][ T49] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 170.195612][ T49] kworker/u8:3: attempt to access beyond end of device [ 170.195612][ T49] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 170.229337][ T5996] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.280244][ T28] audit: type=1400 audit(1778665470.249:1858): avc: denied { firmware_load } for pid=11752 comm="syz.0.2762" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 170.352386][ T5996] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.388995][ T5996] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.429933][T11748] xfrm0 speed is unknown, defaulting to 1000 [ 170.436135][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 170.442254][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.529409][ T5996] bridge_slave_1: left allmulticast mode [ 170.545663][ T5996] bridge_slave_1: left promiscuous mode [ 170.552754][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.565897][ T5996] bridge_slave_0: left allmulticast mode [ 170.576776][ T5996] bridge_slave_0: left promiscuous mode [ 170.586995][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.693505][ T28] audit: type=1400 audit(1778665470.659:1859): avc: denied { write } for pid=11764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.766826][ T28] audit: type=1400 audit(1778665470.709:1860): avc: denied { write } for pid=11775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.817368][ T5996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.836757][ T5996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.848085][ T5996] bond0 (unregistering): Released all slaves [ 170.867665][T11748] lo speed is unknown, defaulting to 1000 [ 170.873902][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 170.918131][ T5996] tipc: Disabling bearer [ 170.930736][ T5996] tipc: Left network mode [ 171.088072][ T5996] hsr_slave_0: left promiscuous mode [ 171.101006][ T5996] hsr_slave_1: left promiscuous mode [ 171.118707][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.123935][ T28] audit: type=1400 audit(1778665471.089:1861): avc: denied { write } for pid=11778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.139922][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.182905][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.191379][ T28] audit: type=1400 audit(1778665471.159:1862): avc: denied { write } for pid=11789 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.212964][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.237347][ T5996] veth1_macvtap: left promiscuous mode [ 171.252076][ T5996] veth0_macvtap: left promiscuous mode [ 171.266898][ T5996] veth1_vlan: left promiscuous mode [ 171.277057][ T5996] veth0_vlan: left promiscuous mode [ 171.416559][ T5996] team0 (unregistering): Port device team_slave_1 removed [ 171.436813][ T5996] team0 (unregistering): Port device team_slave_0 removed [ 171.508837][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 171.646353][T11748] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.669206][T11748] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.687134][T11748] bridge_slave_0: entered allmulticast mode [ 171.703720][T11748] bridge_slave_0: entered promiscuous mode [ 171.725553][T11748] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.744394][T11748] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.757127][T11748] bridge_slave_1: entered allmulticast mode [ 171.768087][ T28] audit: type=1400 audit(1778665471.729:1863): avc: denied { write } for pid=11795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.797421][T11748] bridge_slave_1: entered promiscuous mode [ 171.828289][ T28] audit: type=1400 audit(1778665471.789:1864): avc: denied { write } for pid=11809 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.854499][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 171.863818][T11748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.874698][T11748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.898528][T11748] team0: Port device team_slave_0 added [ 171.905400][T11748] team0: Port device team_slave_1 added [ 171.922229][T11748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.930469][T11748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.960002][T11748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.973652][T11748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.981908][T11748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.008694][T11748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.046327][T11748] hsr_slave_0: entered promiscuous mode [ 172.052514][T11748] hsr_slave_1: entered promiscuous mode [ 172.058724][T11748] debugfs: 'hsr0' already exists in 'hsr' [ 172.064519][T11748] Cannot create hsr debugfs directory [ 172.117224][ T28] audit: type=1400 audit(1778665472.089:1865): avc: denied { write } for pid=11812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.192996][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 172.374860][T11748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.394396][T11748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.412566][T11748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.427717][T11748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.446975][T11748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.466267][T11748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.485621][T11748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.498273][T11748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.570155][T11748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.591464][T11748] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.606520][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.613714][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.634495][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.641695][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.663638][T11748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.674336][T11748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.852275][T11748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.045818][T11748] veth0_vlan: entered promiscuous mode [ 173.060400][T11748] veth1_vlan: entered promiscuous mode [ 173.091496][T11748] veth0_macvtap: entered promiscuous mode [ 173.107761][T11748] veth1_macvtap: entered promiscuous mode [ 173.134801][T11748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.160744][T11748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.175153][ T5996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.186315][ T5996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.197344][ T5996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.209550][ T5996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.344142][T11950] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.383283][T11952] xfrm0 speed is unknown, defaulting to 1000 [ 173.457597][T11952] lo speed is unknown, defaulting to 1000 [ 173.898877][T11961] loop4: detected capacity change from 0 to 65536 [ 173.987818][T11952] netlink: 'syz.4.2763': attribute type 16 has an invalid length. [ 173.996010][T11952] netlink: 'syz.4.2763': attribute type 17 has an invalid length. [ 174.008562][T11952] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.475855][T12055] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 174.555231][T12063] netlink: 'syz.6.2779': attribute type 29 has an invalid length. [ 174.592238][T12063] netlink: 'syz.6.2779': attribute type 29 has an invalid length. [ 174.761182][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2789'. [ 174.831796][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2792'. [ 174.849585][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2792'. [ 174.860233][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2792'. [ 174.869440][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2792'. [ 175.016410][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 175.016445][ T28] audit: type=1326 audit(1778665474.989:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.066261][ T28] audit: type=1326 audit(1778665475.019:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.095926][ T28] audit: type=1326 audit(1778665475.019:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.131905][ T28] audit: type=1326 audit(1778665475.019:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.158343][ T28] audit: type=1326 audit(1778665475.019:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.185140][ T28] audit: type=1326 audit(1778665475.019:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.219982][ T28] audit: type=1326 audit(1778665475.019:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.274472][ T28] audit: type=1326 audit(1778665475.019:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.316031][ T28] audit: type=1326 audit(1778665475.019:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.342624][ T28] audit: type=1326 audit(1778665475.019:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12104 comm="syz.2.2798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3633ffce59 code=0x7ffc0000 [ 175.624021][T12140] loop4: detected capacity change from 0 to 1024 [ 175.635837][T12140] EXT4-fs: Ignoring removed bh option [ 175.663908][T12140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 175.730956][T12149] loop2: detected capacity change from 0 to 512 [ 175.748860][T12149] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 175.766969][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 175.794252][T12149] EXT4-fs (loop2): 1 truncate cleaned up [ 175.815657][T12149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.010726][T12167] loop4: detected capacity change from 0 to 128 [ 176.032183][T12167] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 176.054684][T12167] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.089366][T12167] Invalid argument reading file caps for ./file0 [ 176.112044][T11748] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.339002][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.887281][T12180] SELinux: Context system_u: is not valid (left unmapped). [ 176.921908][T12170] Set syz1 is full, maxelem 65536 reached [ 177.057879][T12019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.111755][T12197] netlink: 'syz.0.2837': attribute type 9 has an invalid length. [ 177.215523][T12208] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2842'. [ 177.254831][T12208] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2842'. [ 177.292599][T12208] netlink: 'syz.6.2842': attribute type 5 has an invalid length. [ 177.323053][T12208] netlink: 'syz.6.2842': attribute type 6 has an invalid length. [ 177.347128][T12208] netlink: 35 bytes leftover after parsing attributes in process `syz.6.2842'. [ 177.423585][T12219] loop4: detected capacity change from 0 to 512 [ 177.458070][T12228] netlink: 'syz.8.2851': attribute type 9 has an invalid length. [ 177.485673][T12219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.513550][T12219] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.574958][T12233] loop8: detected capacity change from 0 to 256 [ 177.618882][T12233] FAT-fs (loop8): IO charset macgaelic not found [ 177.719275][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.953724][T12219] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.420680][T12304] xfrm0 speed is unknown, defaulting to 1000 [ 179.521840][T12304] lo speed is unknown, defaulting to 1000 [ 179.702286][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'. [ 180.011546][T12335] xfrm0 speed is unknown, defaulting to 1000 [ 180.133811][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 180.133826][ T28] audit: type=1326 audit(1778665480.099:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12345 comm="syz.4.2898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b5ca5ce59 code=0x0 [ 180.172310][T12335] lo speed is unknown, defaulting to 1000 [ 180.429948][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2903'. [ 180.455162][T12360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2903'. [ 180.487581][T12362] netlink: 'syz.0.2904': attribute type 11 has an invalid length. [ 180.495609][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 180.510453][T12362] netlink: 'syz.0.2904': attribute type 11 has an invalid length. [ 180.519195][ T5984] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.528073][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 180.537128][ T5984] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.546460][ T5984] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.557670][ T5984] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.736033][T12376] xt_hashlimit: size too large, truncated to 1048576 [ 180.980507][T12383] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 181.108651][T12257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.250119][T12409] loop2: detected capacity change from 0 to 512 [ 181.299883][T12409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.328561][T12409] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.478874][T12409] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.554943][T12422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.674318][T12442] loop2: detected capacity change from 0 to 4096 [ 181.706529][T12445] loop4: detected capacity change from 0 to 128 [ 181.714709][T12442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.752209][T12445] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.765151][T12445] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.799862][T11748] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.890475][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.997112][ T28] audit: type=1400 audit(1778665481.969:1931): avc: denied { nlmsg_tty_audit } for pid=12466 comm="syz.4.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 182.178126][ T28] audit: type=1400 audit(1778665482.149:1932): avc: denied { ioctl } for pid=12478 comm="syz.6.2950" path="socket:[32529]" dev="sockfs" ino=32529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.278639][T12485] loop2: detected capacity change from 0 to 1024 [ 182.308364][T12485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.346482][T12485] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.394914][T12489] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 182.408970][ T5980] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:12: lblock 0 mapped to illegal pblock 0 (length 1) [ 182.423723][ T28] audit: type=1326 audit(1778665482.379:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12490 comm="syz.6.2955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x0 [ 182.449759][ T5980] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 182.483343][ T5980] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.483343][ T5980] [ 182.498278][ T9677] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 182.523464][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 182.548230][ T28] audit: type=1400 audit(1778665482.519:1934): avc: denied { mounton } for pid=12495 comm="syz.2.2956" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 182.600410][ T28] audit: type=1400 audit(1778665482.539:1935): avc: denied { unmount } for pid=9677 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 182.747802][ T28] audit: type=1400 audit(1778665482.719:1936): avc: denied { setattr } for pid=12508 comm="syz.8.2962" name="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 182.853427][T12518] loop8: detected capacity change from 0 to 256 [ 182.865990][T12518] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.896041][T12516] syzkaller0: entered promiscuous mode [ 182.901671][T12516] syzkaller0: entered allmulticast mode [ 182.935466][ T28] audit: type=1400 audit(1778665482.899:1937): avc: denied { write } for pid=12522 comm="syz.2.2969" path="socket:[31733]" dev="sockfs" ino=31733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.990837][ T28] audit: type=1400 audit(1778665482.959:1938): avc: denied { listen } for pid=12526 comm="syz.2.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.152221][ T28] audit: type=1400 audit(1778665483.119:1939): avc: denied { mount } for pid=12540 comm="syz.0.2977" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 183.211785][T12546] Set syz1 is full, maxelem 65536 reached [ 184.122343][T12641] x_tables: ip_tables: osf match: only valid for protocol 6 [ 184.349042][T12653] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3018'. [ 184.411901][T12658] loop2: detected capacity change from 0 to 512 [ 184.431932][T12658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.463772][T12658] EXT4-fs (loop2): 1 truncate cleaned up [ 184.475823][T12658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.623629][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.876148][T12686] loop4: detected capacity change from 0 to 512 [ 184.919039][T12686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.056131][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.213143][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 185.213232][ T28] audit: type=1400 audit(1778665485.179:1945): avc: denied { write } for pid=12707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.316804][T12730] netlink: 'syz.6.3036': attribute type 4 has an invalid length. [ 185.339722][ T28] audit: type=1400 audit(1778665485.309:1946): avc: denied { write } for pid=12727 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.367924][T12732] netlink: 'syz.6.3036': attribute type 4 has an invalid length. [ 185.754025][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3037'. [ 185.783658][T12736] hsr_slave_0: left promiscuous mode [ 185.793529][T12736] hsr_slave_1: left promiscuous mode [ 185.837980][T12738] xt_hashlimit: size too large, truncated to 1048576 [ 185.907102][T12744] loop4: detected capacity change from 0 to 1024 [ 185.953259][T12744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.034380][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.112460][T12765] loop8: detected capacity change from 0 to 1024 [ 186.129838][T12765] EXT4-fs: Ignoring removed nobh option [ 186.154562][T12765] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 186.154562][T12765] [ 186.213890][T12772] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 186.247898][ T28] audit: type=1400 audit(1778665486.219:1947): avc: denied { write } for pid=12761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.275503][T12772] SELinux: failed to load policy [ 186.321535][ T28] audit: type=1400 audit(1778665486.279:1948): avc: denied { write } for pid=12783 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.417389][T12791] loop8: detected capacity change from 0 to 128 [ 186.434557][T12793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3055'. [ 186.454477][T12791] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.460338][T12793] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.473864][T12793] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.484519][T12793] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3055'. [ 186.511833][T12791] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.560816][T12791] EXT4-fs error (device loop8): ext4_check_dx_root:2201: inode #2: comm syz.8.3054: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 186.576898][ T28] audit: type=1400 audit(1778665486.529:1949): avc: denied { link } for pid=12790 comm="syz.8.3054" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 186.663595][ T8186] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.681962][T12803] netlink: 'syz.2.3059': attribute type 13 has an invalid length. [ 186.771259][T12811] loop4: detected capacity change from 0 to 512 [ 186.781042][T12811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.799207][T12811] EXT4-fs (loop4): 1 truncate cleaned up [ 186.810875][T12811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.848297][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.955276][ T28] audit: type=1400 audit(1778665486.919:1950): avc: denied { create } for pid=12821 comm="syz.2.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 186.995014][ T28] audit: type=1400 audit(1778665486.919:1951): avc: denied { ioctl } for pid=12821 comm="syz.2.3068" path="socket:[33985]" dev="sockfs" ino=33985 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 187.077388][T12833] loop4: detected capacity change from 0 to 1024 [ 187.109991][T12833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.127378][T12833] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.177129][T12833] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.3071: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.201227][T12833] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 187.213779][T12833] EXT4-fs (loop4): This should not happen!! Data will be lost [ 187.213779][T12833] [ 187.231534][T12833] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3071: bg 0: block 112: padding at end of block bitmap is not set [ 187.249128][T12833] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 187.266759][T12833] EXT4-fs (loop4): This should not happen!! Data will be lost [ 187.266759][T12833] [ 187.276518][T12833] EXT4-fs (loop4): Total free blocks count 0 [ 187.282824][T12833] EXT4-fs (loop4): Free/Dirty block details [ 187.288838][T12833] EXT4-fs (loop4): free_blocks=0 [ 187.293980][T12833] EXT4-fs (loop4): dirty_blocks=64 [ 187.297510][T12844] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.3071: lblock 0 mapped to illegal pblock 0 (length 3) [ 187.299447][T12833] EXT4-fs (loop4): Block reservation details [ 187.321870][T12844] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 0: len 3: ext4_ext_map_blocks returned -117 [ 187.367990][T11748] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 187.413297][ T28] audit: type=1326 audit(1778665487.379:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.6.3081" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 187.472898][ T28] audit: type=1326 audit(1778665487.409:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.6.3081" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 187.527310][ T28] audit: type=1326 audit(1778665487.409:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12853 comm="syz.6.3081" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 187.700752][T12878] loop4: detected capacity change from 0 to 512 [ 187.712551][T12878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.740266][T12878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.764360][T12878] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.378989][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.411339][T12887] loop4: detected capacity change from 0 to 512 [ 188.430086][T12887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.450508][T12887] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.475613][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.526614][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 188.549227][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3096'. [ 188.732543][T12918] tls_set_device_offload_rx: netdev not found [ 188.902461][T12936] loop8: detected capacity change from 0 to 4096 [ 188.918176][T12936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.967818][T12948] netlink: 'syz.6.3118': attribute type 1 has an invalid length. [ 189.013833][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.109297][T12961] netlink: 'syz.6.3124': attribute type 1 has an invalid length. [ 189.131991][T12961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.167127][T12961] bond3: (slave geneve2): making interface the new active one [ 189.183681][T12961] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 189.328806][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3129'. [ 189.338379][T12972] hsr_slave_0: left promiscuous mode [ 189.344145][T12972] hsr_slave_1: left promiscuous mode [ 189.464708][T12988] loop2: detected capacity change from 0 to 128 [ 189.534934][T12994] bio_check_eod: 101 callbacks suppressed [ 189.534995][T12994] syz.2.3136: attempt to access beyond end of device [ 189.534995][T12994] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 189.595243][T12994] syz.2.3136: attempt to access beyond end of device [ 189.595243][T12994] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 189.635196][T12994] syz.2.3136: attempt to access beyond end of device [ 189.635196][T12994] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 189.651802][T12994] syz.2.3136: attempt to access beyond end of device [ 189.651802][T12994] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 189.673549][T12994] syz.2.3136: attempt to access beyond end of device [ 189.673549][T12994] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 189.697047][T12994] syz.2.3136: attempt to access beyond end of device [ 189.697047][T12994] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 189.728079][T12994] syz.2.3136: attempt to access beyond end of device [ 189.728079][T12994] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 189.763725][T12994] syz.2.3136: attempt to access beyond end of device [ 189.763725][T12994] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 189.778297][T12994] syz.2.3136: attempt to access beyond end of device [ 189.778297][T12994] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 189.792499][T12994] syz.2.3136: attempt to access beyond end of device [ 189.792499][T12994] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 189.944873][T13009] loop4: detected capacity change from 0 to 512 [ 189.967186][T13009] EXT4-fs: Ignoring removed bh option [ 189.995976][T13009] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 190.016299][T13009] EXT4-fs (loop4): 1 truncate cleaned up [ 190.036939][T13009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.096448][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.193004][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3146'. [ 190.239516][T13024] hsr_slave_0: left promiscuous mode [ 190.254172][T13024] hsr_slave_1: left promiscuous mode [ 190.263052][T13032] loop2: detected capacity change from 0 to 512 [ 190.273518][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 190.273533][ T28] audit: type=1400 audit(1778665490.239:1968): avc: denied { read } for pid=13031 comm="syz.0.3155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 190.283603][T13032] EXT4-fs: Ignoring removed nobh option [ 190.340991][T13032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.378884][T13032] EXT4-fs (loop2): 1 truncate cleaned up [ 190.385833][T13032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.523169][T13040] loop4: detected capacity change from 0 to 512 [ 190.574335][T13040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.589937][T13040] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.606280][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.683012][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.728314][T13050] netlink: 436 bytes leftover after parsing attributes in process `syz.4.3161'. [ 190.761340][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3161'. [ 191.645899][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 191.657283][T13096] loop8: detected capacity change from 0 to 128 [ 191.667250][T13096] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.692386][T13096] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.774957][ T5986] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.852765][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3181'. [ 191.870671][T13107] xfrm0 speed is unknown, defaulting to 1000 [ 191.885432][T13108] hsr_slave_0: left promiscuous mode [ 191.899965][T13108] hsr_slave_1: left promiscuous mode [ 191.975666][T13107] lo speed is unknown, defaulting to 1000 [ 192.023702][T13119] netlink: 'syz.2.3188': attribute type 2 has an invalid length. [ 192.209331][T13130] program syz.2.3194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.299192][T13134] loop8: detected capacity change from 0 to 128 [ 192.332911][T13134] FAT-fs (loop8): bogus number of reserved sectors [ 192.389946][T13134] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 192.470734][T13134] FAT-fs (loop8): Can't find a valid FAT filesystem [ 192.508428][T13148] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 192.538492][T13153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13153 comm=syz.4.3204 [ 192.560763][T13134] loop8: detected capacity change from 0 to 128 [ 192.591473][T13153] netlink: 95 bytes leftover after parsing attributes in process `syz.4.3204'. [ 192.634146][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'. [ 192.666899][T13162] netlink: 'syz.2.3208': attribute type 25 has an invalid length. [ 192.685627][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3205'. [ 192.705534][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3208'. [ 192.771847][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.781399][T13162] netlink: 'syz.2.3208': attribute type 25 has an invalid length. [ 192.796432][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.805767][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3208'. [ 192.823173][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.886560][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.331016][T13205] bridge0: port 3(batadv1) entered blocking state [ 193.338481][T13205] bridge0: port 3(batadv1) entered disabled state [ 193.345181][T13205] batadv1: entered allmulticast mode [ 193.353078][T13205] batadv1: entered promiscuous mode [ 193.426227][T13209] loop2: detected capacity change from 0 to 128 [ 193.452081][T13209] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 193.488147][T13209] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.667231][ T28] audit: type=1400 audit(1778665493.629:1969): avc: denied { unlink } for pid=9677 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 193.721319][ T9677] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.779538][ T28] audit: type=1400 audit(1778665493.689:1970): avc: denied { rmdir } for pid=9677 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 193.836360][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 193.845788][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 196.502958][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 196.537451][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 196.867155][ T28] audit: type=1326 audit(1778665496.829:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 196.948880][ T28] audit: type=1326 audit(1778665496.869:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 197.000126][ T28] audit: type=1326 audit(1778665496.869:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 197.038199][ T28] audit: type=1326 audit(1778665496.869:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 197.070805][ T28] audit: type=1326 audit(1778665496.869:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 197.102700][ T28] audit: type=1326 audit(1778665496.869:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 197.132078][ T28] audit: type=1326 audit(1778665496.869:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 197.164301][ T28] audit: type=1326 audit(1778665496.869:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7b5ca1d68e code=0x7ffc0000 [ 197.191856][ T28] audit: type=1326 audit(1778665496.879:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 197.218194][ T28] audit: type=1326 audit(1778665496.879:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.4.3266" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b5ca5ce59 code=0x7ffc0000 [ 197.806754][T13339] IPVS: Unknown mcast interface: vlan1 [ 198.158021][ T5984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.186195][ T5984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.252708][ T5984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.281493][ T5984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.311264][T13359] xt_hashlimit: size too large, truncated to 1048576 [ 198.340434][ T5984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.358546][ T5984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.421980][ T5984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.443823][ T5984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.572470][ T5984] batadv1: left allmulticast mode [ 198.579862][ T5984] batadv1: left promiscuous mode [ 198.590118][ T5984] bridge0: port 3(batadv1) entered disabled state [ 198.603616][ T5984] bridge_slave_1: left allmulticast mode [ 198.614725][ T5984] bridge_slave_1: left promiscuous mode [ 198.626561][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.642018][ T5984] bridge_slave_0: left allmulticast mode [ 198.653641][ T5984] bridge_slave_0: left promiscuous mode [ 198.664731][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.168610][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.195160][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.223517][ T5984] bond0 (unregistering): Released all slaves [ 199.249626][ T5984] bond1 (unregistering): (slave lo): Releasing backup interface [ 199.271559][ T5984] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 199.284963][T13381] vxcan1: tx drop: invalid da for name 0x00000000000000c8 [ 199.296394][ T5984] bond1 (unregistering): Released all slaves [ 199.339389][T13360] xfrm0 speed is unknown, defaulting to 1000 [ 199.456802][T13360] lo speed is unknown, defaulting to 1000 [ 199.688097][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 199.759282][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.767473][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.775818][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.792386][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.805130][ T5984] batman_adv: batadv0: Interface deactivated: dummy0 [ 199.812247][ T5984] batman_adv: batadv0: Removing interface: dummy0 [ 199.823509][ T5984] veth1_macvtap: left promiscuous mode [ 199.835916][ T5984] veth0_macvtap: left promiscuous mode [ 199.936473][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 199.956390][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 200.215981][T13444] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3311'. [ 200.228692][T13360] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.250820][T13360] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.270956][T13360] bridge_slave_0: entered allmulticast mode [ 200.304088][T13360] bridge_slave_0: entered promiscuous mode [ 200.335596][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 200.354851][T13360] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.385835][T13360] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.401239][T13360] bridge_slave_1: entered allmulticast mode [ 200.413659][T13360] bridge_slave_1: entered promiscuous mode [ 200.442574][T13442] xfrm0 speed is unknown, defaulting to 1000 [ 200.467290][T13360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.507291][T13360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.560481][T13360] team0: Port device team_slave_0 added [ 200.579937][T13360] team0: Port device team_slave_1 added [ 200.591006][T13442] lo speed is unknown, defaulting to 1000 [ 200.618216][T13463] xt_hashlimit: size too large, truncated to 1048576 [ 200.723807][T13360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.738574][T13360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.788433][T13360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.822234][T13360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.836006][T13360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.867798][T13360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.949244][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 200.967325][T13360] hsr_slave_0: entered promiscuous mode [ 200.973747][T13360] hsr_slave_1: entered promiscuous mode [ 201.308708][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 201.509910][T12370] IPVS: starting estimator thread 0... [ 201.615345][T13523] IPVS: using max 2544 ests per chain, 127200 per kthread [ 202.049933][T13556] loop2: detected capacity change from 0 to 128 [ 202.068890][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 202.068909][ T28] audit: type=1400 audit(1778665502.039:2009): avc: denied { write } for pid=13537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.105110][T13556] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 202.159810][ T28] audit: type=1400 audit(1778665502.129:2010): avc: denied { write } for pid=13563 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.254669][ T5984] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 202.459888][ T28] audit: type=1400 audit(1778665502.429:2011): avc: denied { write } for pid=13570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.513732][ T28] audit: type=1400 audit(1778665502.469:2012): avc: denied { write } for pid=13585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.695998][ T28] audit: type=1400 audit(1778665502.659:2013): avc: denied { write } for pid=13587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.741785][ T28] audit: type=1400 audit(1778665502.709:2014): avc: denied { write } for pid=13598 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.835108][T13360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.865414][ T28] audit: type=1400 audit(1778665502.829:2015): avc: denied { read } for pid=13602 comm="syz.2.3345" path="socket:[36412]" dev="sockfs" ino=36412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.901412][T13360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.927991][T13360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.970485][T13360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.000842][T13360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.022780][T13360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 203.032718][ T28] audit: type=1400 audit(1778665502.999:2016): avc: denied { write } for pid=13601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.045893][T13360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.100619][T13620] xt_hashlimit: size too large, truncated to 1048576 [ 203.115419][T13360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 203.131314][ T28] audit: type=1400 audit(1778665503.099:2017): avc: denied { write } for pid=13629 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.280680][T13642] loop2: detected capacity change from 0 to 512 [ 203.317073][T13642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.360871][T13360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.372557][T13642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.390079][T13360] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.405855][T13642] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.429338][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.436462][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.501686][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.508824][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.552777][ T28] audit: type=1400 audit(1778665503.519:2018): avc: denied { write } for pid=13641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.577224][T13360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.657455][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.901499][T13360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.180730][T13360] veth0_vlan: entered promiscuous mode [ 204.212282][T13360] veth1_vlan: entered promiscuous mode [ 204.259003][T13360] veth0_macvtap: entered promiscuous mode [ 204.284598][T13360] veth1_macvtap: entered promiscuous mode [ 204.328660][T13360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.341678][T13360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.353821][ T5986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.376759][ T5986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.399716][ T5986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.434175][ T5986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.990260][T13783] loop8: detected capacity change from 0 to 512 [ 205.002881][T13783] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 205.167761][T13800] netlink: 1508 bytes leftover after parsing attributes in process `syz.8.3370'. [ 205.182640][T13800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.219066][T13800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.423267][T13823] loop4: detected capacity change from 0 to 1024 [ 205.480616][T13823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.597934][T13844] loop8: detected capacity change from 0 to 512 [ 205.645515][T13844] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 205.683032][T13844] EXT4-fs (loop8): 1 orphan inode deleted [ 205.690096][T13844] EXT4-fs (loop8): 1 truncate cleaned up [ 205.696423][T13844] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.748934][T13860] loop2: detected capacity change from 0 to 512 [ 205.757652][T13860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.803891][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.837287][T13860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.852598][T13860] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.932348][T13871] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3384'. [ 205.951924][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3385'. [ 205.968333][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.218317][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.397096][T13902] xfrm0 speed is unknown, defaulting to 1000 [ 206.496990][T13902] lo speed is unknown, defaulting to 1000 [ 206.650015][T13918] loop9: detected capacity change from 0 to 7 [ 206.674433][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.683634][ C1] buffer_io_error: 727 callbacks suppressed [ 206.683655][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.697748][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.706937][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.717723][T13918] loop9: unable to read partition table [ 206.736115][T13918] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 206.769402][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 206.780508][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.789685][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.799014][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.808239][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.816689][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.825885][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.834006][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.843186][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.852682][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.861886][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 206.950805][T13933] loop4: detected capacity change from 0 to 4096 [ 206.979055][T13933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.075544][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.324108][T13954] loop4: detected capacity change from 0 to 8192 [ 207.362671][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 207.362745][ T28] audit: type=1400 audit(1778665507.329:2037): avc: denied { unmount } for pid=11748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 207.516380][ T28] audit: type=1400 audit(1778665507.489:2038): avc: denied { module_load } for pid=13965 comm="syz.4.3426" path="/156/bus" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 207.680998][T13980] xfrm0 speed is unknown, defaulting to 1000 [ 207.725899][T13980] lo speed is unknown, defaulting to 1000 [ 207.727743][T13981] loop4: detected capacity change from 0 to 512 [ 207.780232][T13981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.816976][T13981] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.896650][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.941377][T13978] xt_hashlimit: size too large, truncated to 1048576 [ 208.367352][ T28] audit: type=1326 audit(1778665508.329:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.6.3436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 208.411902][ T28] audit: type=1326 audit(1778665508.339:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.6.3436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 208.438737][ T28] audit: type=1326 audit(1778665508.339:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.6.3436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 208.465537][ T28] audit: type=1326 audit(1778665508.339:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.6.3436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 208.530127][ T28] audit: type=1326 audit(1778665508.339:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.6.3436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 208.599087][ T28] audit: type=1326 audit(1778665508.339:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.6.3436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 208.678819][ T28] audit: type=1326 audit(1778665508.339:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.6.3436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 208.754192][ T28] audit: type=1326 audit(1778665508.339:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13997 comm="syz.6.3436" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 208.826516][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3452'. [ 209.283344][T14072] xt_hashlimit: size too large, truncated to 1048576 [ 209.389748][T14084] loop8: detected capacity change from 0 to 128 [ 209.525225][T14090] IPv4: Oversized IP packet from 127.202.26.0 [ 210.167158][T14112] loop8: detected capacity change from 0 to 512 [ 210.188314][T14112] EXT4-fs: Ignoring removed bh option [ 210.215461][T14112] EXT4-fs: inline encryption not supported [ 210.235256][T14112] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.278871][T14112] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 210.314440][T14112] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3483: bg 0: block 248: padding at end of block bitmap is not set [ 210.328972][T14112] loop8: lost filesystem error report for type 5 error -117 [ 210.330633][T14112] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3483: Failed to acquire dquot type 1 [ 210.337961][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 210.337974][ C1] EXT4-fs (loop8): last error at time 1778665510: ext4_validate_block_bitmap:441 [ 210.366063][T14112] loop8: lost filesystem error report for type 5 error -28 [ 210.367185][T14112] EXT4-fs (loop8): 1 truncate cleaned up [ 210.385880][T14112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 210.450581][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 210.760924][T14150] loop4: detected capacity change from 0 to 512 [ 210.775835][T14150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.807378][T14150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.833408][T14150] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.907973][T14156] random: crng reseeded on system resumption [ 210.966860][T14156] Restarting kernel threads ... [ 210.981828][T11748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.993190][T14156] Done restarting kernel threads. [ 211.061527][T14165] syz_tun: entered allmulticast mode [ 211.080746][T14165] syz_tun: left allmulticast mode [ 211.088887][T14165] loop4: detected capacity change from 0 to 512 [ 211.098059][T14165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 211.116132][T14165] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: block 1803188595: comm syz.4.3512: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 211.146122][T14165] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.146372][T14165] EXT4-fs (loop4): mount failed [ 211.155762][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 211.155780][ C1] EXT4-fs (loop4): initial error at time 1778665511: ext4_map_blocks:791: inode 15: block 1803188595 [ 211.155821][ C1] EXT4-fs (loop4): last error at time 1778665511: ext4_map_blocks:791: inode 15: block 1803188595 [ 211.299071][T14175] sctp: [Deprecated]: syz.8.3508 (pid 14175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.299071][T14175] Use struct sctp_sack_info instead [ 211.424213][T14185] loop8: detected capacity change from 0 to 512 [ 211.441891][T14185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.477499][T14185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.501910][T14185] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.664405][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.080485][T14203] loop8: detected capacity change from 0 to 1024 [ 212.096054][T14203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 212.111055][T14203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01d, mo2=0003] [ 212.125340][T14203] System zones: 0-1, 3-36 [ 212.137808][T14203] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.153345][T14203] EXT4-fs (loop8): shut down requested (2) [ 212.179755][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.275366][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.386468][T14227] SELinux: failed to load policy [ 212.409376][T14229] loop2: detected capacity change from 0 to 512 [ 212.424301][T14229] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.450276][T14229] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 212.460733][T14229] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3524: Corrupt directory, running e2fsck is recommended [ 212.475631][T14229] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 212.483915][T14229] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3524: corrupted in-inode xattr: e_name out of bounds [ 212.499056][T14229] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 212.499362][T14229] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3524: couldn't read orphan inode 15 (err -117) [ 212.508565][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 212.508585][ C1] EXT4-fs (loop2): initial error at time 1778665512: ext4_iget_extra_inode:5128: inode 15 [ 212.508615][ C1] EXT4-fs (loop2): last error at time 1778665512: ext4_iget_extra_inode:5128: inode 15 [ 212.547163][T14229] loop2: lost filesystem error report for type 5 error -117 [ 212.547796][T14229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.569081][T14229] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.580628][T14229] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 212.591146][T14229] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3524: Corrupt directory, running e2fsck is recommended [ 212.605830][T14229] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.617630][T14229] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 212.630440][T14229] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3524: Corrupt directory, running e2fsck is recommended [ 212.644925][T14229] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.657275][T14229] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 212.674589][T14229] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3524: Corrupt directory, running e2fsck is recommended [ 212.697119][T14236] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 212.735120][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.735515][T14235] xfrm0 speed is unknown, defaulting to 1000 [ 212.787756][T14241] netlink: 1508 bytes leftover after parsing attributes in process `syz.2.3527'. [ 212.813083][T14241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.860753][T14241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.887570][T14232] xfrm0 speed is unknown, defaulting to 1000 [ 212.893734][T14235] lo speed is unknown, defaulting to 1000 [ 212.900224][T14249] batadv_slave_0: entered promiscuous mode [ 212.913853][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3529'. [ 212.936881][T14249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.969308][T14249] batadv_slave_0 (unregistering): left promiscuous mode [ 212.978928][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 212.978942][ T28] audit: type=1400 audit(1778665512.949:2068): avc: denied { write } for pid=14243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.015248][T14249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.074832][ T28] audit: type=1400 audit(1778665513.039:2069): avc: denied { write } for pid=14257 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.189060][T14232] lo speed is unknown, defaulting to 1000 [ 213.427677][T14268] xfrm0 speed is unknown, defaulting to 1000 [ 213.600491][T14268] lo speed is unknown, defaulting to 1000 [ 213.821141][ T28] audit: type=1400 audit(1778665513.789:2070): avc: denied { write } for pid=14286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.904828][ T28] audit: type=1400 audit(1778665513.869:2071): avc: denied { write } for pid=14300 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.962572][ T28] audit: type=1400 audit(1778665513.929:2072): avc: denied { accept } for pid=14304 comm="syz.8.3542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 214.131984][ T28] audit: type=1400 audit(1778665514.099:2073): avc: denied { write } for pid=14308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.210277][T14326] loop8: detected capacity change from 0 to 512 [ 214.234967][ T28] audit: type=1400 audit(1778665514.199:2074): avc: denied { write } for pid=14328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.292670][T14326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.338603][T14326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.371328][T14326] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.455568][T14346] loop3: detected capacity change from 4096 to 0 [ 214.508716][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.601192][T14356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3558'. [ 214.662276][T14364] IPv4: Oversized IP packet from 127.202.26.0 [ 214.973841][T14314] xt_hashlimit: size too large, truncated to 1048576 [ 214.975141][T14391] netlink: 'syz.6.3569': attribute type 12 has an invalid length. [ 215.012500][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3569'. [ 215.035569][T14391] netlink: 'syz.6.3569': attribute type 12 has an invalid length. [ 215.048026][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3569'. [ 215.213977][ T5980] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.268756][ T5980] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.346539][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3579'. [ 215.392405][ T5980] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.424245][ T28] audit: type=1326 audit(1778665515.389:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.6.3580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 215.456130][ T28] audit: type=1326 audit(1778665515.419:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.6.3580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 215.484827][ T28] audit: type=1326 audit(1778665515.419:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.6.3580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e07eece59 code=0x7ffc0000 [ 215.533289][ T5980] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.569299][T14405] xfrm0 speed is unknown, defaulting to 1000 [ 215.698764][ T5980] bridge_slave_1: left allmulticast mode [ 215.704467][ T5980] bridge_slave_1: left promiscuous mode [ 215.721170][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.748368][ T5980] bridge_slave_0: left allmulticast mode [ 215.756515][ T5980] bridge_slave_0: left promiscuous mode [ 215.766912][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.867612][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.877955][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.896375][ T5980] bond0 (unregistering): Released all slaves [ 215.908482][T14405] lo speed is unknown, defaulting to 1000 [ 216.041546][T14421] xfrm0 speed is unknown, defaulting to 1000 [ 216.307554][T14455] loop4: detected capacity change from 0 to 32768 [ 216.392318][ T5980] hsr_slave_0: left promiscuous mode [ 216.429782][ T5980] hsr_slave_1: left promiscuous mode [ 216.447615][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.471943][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.498284][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.521740][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.538551][ T5980] veth1_macvtap: left promiscuous mode [ 216.550456][ T5980] veth0_macvtap: left promiscuous mode [ 216.562400][ T5980] veth1_vlan: left promiscuous mode [ 216.569413][ T5980] veth0_vlan: left promiscuous mode [ 216.707863][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 216.720746][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 216.805973][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 216.817698][T14421] lo speed is unknown, defaulting to 1000 [ 216.932107][T14405] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.939390][T14405] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.946720][T14405] bridge_slave_0: entered allmulticast mode [ 216.954630][T14405] bridge_slave_0: entered promiscuous mode [ 216.969893][T14405] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.977356][T14405] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.984507][T14405] bridge_slave_1: entered allmulticast mode [ 216.991230][T14405] bridge_slave_1: entered promiscuous mode [ 217.029812][T14405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.045635][T14405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.103965][T14405] team0: Port device team_slave_0 added [ 217.124803][T14405] team0: Port device team_slave_1 added [ 217.159625][T14405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.168932][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.195438][T14405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.220118][T14405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.227124][T14405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.253274][T14405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.269664][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 217.300776][T14405] hsr_slave_0: entered promiscuous mode [ 217.307615][T14405] hsr_slave_1: entered promiscuous mode [ 217.462685][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 217.578521][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 217.627961][T14405] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.637024][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.644832][T14405] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.654047][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.662435][T14405] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.671362][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.679333][T14405] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.688551][T14405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.704858][T14405] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.712095][T14405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.719474][T14405] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.726567][T14405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.755082][T14405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.766761][T14405] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.774833][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.783067][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.799209][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.806316][ T5980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.832598][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.839735][ T5980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.952410][T14405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.078652][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 218.078668][ T28] audit: type=1400 audit(1778665518.049:2102): avc: denied { write } for pid=14596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.081456][T14405] veth0_vlan: entered promiscuous mode [ 218.118816][T14405] veth1_vlan: entered promiscuous mode [ 218.125697][ T28] audit: type=1400 audit(1778665518.099:2103): avc: denied { write } for pid=14613 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.146817][T14405] veth0_macvtap: entered promiscuous mode [ 218.158866][T14405] veth1_macvtap: entered promiscuous mode [ 218.170292][T14405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.182365][T14405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.193501][ T5980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.202846][ T5980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.218099][ T5980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.227675][ T5980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.292827][ T28] audit: type=1400 audit(1778665518.259:2104): avc: denied { write } for pid=14615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.395229][ T28] audit: type=1400 audit(1778665518.359:2105): avc: denied { write } for pid=14644 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.433989][T14645] xt_hashlimit: size too large, truncated to 1048576 [ 218.464848][ T28] audit: type=1400 audit(1778665518.429:2106): avc: denied { remount } for pid=14651 comm="syz.4.3599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 218.685500][ T28] audit: type=1400 audit(1778665518.649:2107): avc: denied { write } for pid=14653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.782335][ T28] audit: type=1400 audit(1778665518.749:2108): avc: denied { write } for pid=14676 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.051530][ T28] audit: type=1400 audit(1778665519.019:2109): avc: denied { write } for pid=14682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.084573][T14671] loop2: detected capacity change from 0 to 32768 [ 219.149995][ T28] audit: type=1400 audit(1778665519.099:2110): avc: denied { write } for pid=14697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.253384][ T28] audit: type=1400 audit(1778665519.219:2111): avc: denied { unmount } for pid=11748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 221.005232][T14821] xfrm0 speed is unknown, defaulting to 1000 [ 221.154888][T14821] lo speed is unknown, defaulting to 1000 [ 221.775374][T14879] netlink: 'syz.2.3663': attribute type 19 has an invalid length. [ 221.796100][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'. [ 221.808355][T14879] netlink: 'syz.2.3663': attribute type 19 has an invalid length. [ 221.818263][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'. [ 221.909178][T14892] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 222.318416][T14910] loop2: detected capacity change from 0 to 512 [ 222.336148][T14910] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 222.344313][T14910] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 222.352624][T14910] System zones: 0-1, 15-15, 18-18, 34-34 [ 222.359407][T14910] EXT4-fs (loop2): orphan cleanup on readonly fs [ 222.366135][T14910] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 222.381107][T14910] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 222.390188][T14910] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3677: bg 0: block 40: padding at end of block bitmap is not set [ 222.404799][T14910] loop2: lost filesystem error report for type 5 error -117 [ 222.405341][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 222.419148][ C1] EXT4-fs (loop2): initial error at time 1778665522: ext4_validate_block_bitmap:441 [ 222.428565][ C1] EXT4-fs (loop2): last error at time 1778665522: ext4_validate_block_bitmap:441 [ 222.438342][T14910] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 222.450454][T14910] loop2: lost filesystem error report for type 5 error -117 [ 222.450624][T14910] EXT4-fs (loop2): 1 truncate cleaned up [ 222.464385][T14910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 222.485157][T14910] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 222.493785][T14910] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 222.517680][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.550395][T14920] netlink: 'syz.6.3682': attribute type 10 has an invalid length. [ 222.559235][T14920] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3682'. [ 222.611900][T14924] loop5: detected capacity change from 0 to 512 [ 222.649249][T14924] EXT4-fs (loop5): 1 truncate cleaned up [ 222.661219][T14924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.818412][T14405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.865332][T14990] Invalid argument reading file caps for ./file0 [ 224.929620][T15002] xt_hashlimit: size too large, truncated to 1048576 [ 224.986476][T15005] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 225.379220][T15009] xt_hashlimit: size too large, truncated to 1048576 [ 226.221691][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3718'. [ 226.254466][T15019] vxlan0: entered promiscuous mode [ 226.795891][T15023] loop5: detected capacity change from 0 to 512 [ 226.826667][T15023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.859685][T15023] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.939402][T15023] EXT4-fs error (device loop5): ext4_validate_block_bitmap:423: comm syz.5.3720: bg 0: bad block bitmap checksum [ 227.013815][T14405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.136520][T15043] netlink: 'syz.2.3728': attribute type 21 has an invalid length. [ 227.149471][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3728'. [ 227.390287][T15041] loop5: detected capacity change from 0 to 32768 [ 227.446858][T15041] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 227.462696][T15041] loop5: p1 start 460800 is beyond EOD, truncated [ 227.478259][T15041] loop5: p2 size 83886080 extends beyond EOD, truncated [ 227.493751][T15041] loop5: p5 start 460800 is beyond EOD, truncated [ 227.502916][T15041] loop5: p6 size 83886080 extends beyond EOD, truncated [ 228.541909][T15085] loop8: detected capacity change from 0 to 512 [ 228.571692][T15085] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.601529][T15085] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 228.663408][T15095] loop2: detected capacity change from 0 to 128 [ 228.701950][T15095] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 228.737929][T15095] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.756278][T15095] ext2 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.860393][ T9677] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.996324][T15108] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.003642][T15108] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.162949][T15108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.209170][T15108] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 229.250856][ T5976] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.298555][ T5976] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.307621][ T5976] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.326742][ T5976] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.346568][ T5976] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.375662][ T5976] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.403108][ T5976] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.426868][ T5976] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.549491][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 229.549506][ T28] audit: type=1400 audit(1778665529.519:2127): avc: denied { write } for pid=15127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.649374][ T28] audit: type=1400 audit(1778665529.619:2128): avc: denied { write } for pid=15147 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.812463][T15166] loop5: detected capacity change from 0 to 256 [ 229.820400][T15166] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.857309][T15166] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.919537][T15176] loop8: detected capacity change from 0 to 512 [ 229.927678][T15176] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 229.943290][T15176] EXT4-fs (loop8): 1 truncate cleaned up [ 229.949575][T15176] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.985651][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.181911][T15186] xfrm0 speed is unknown, defaulting to 1000 [ 230.307020][T15186] lo speed is unknown, defaulting to 1000 [ 230.323188][ T28] audit: type=1400 audit(1778665530.289:2129): avc: denied { write } for pid=15187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.377924][ T28] audit: type=1400 audit(1778665530.349:2130): avc: denied { write } for pid=15201 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.901114][T15218] loop8: detected capacity change from 0 to 512 [ 230.945202][T15218] EXT4-fs (loop8): 1 truncate cleaned up [ 230.957665][T15218] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.215801][ T8186] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.346970][ T28] audit: type=1326 audit(1778665531.319:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f1ffce59 code=0x7ffc0000 [ 231.374144][T15233] loop5: detected capacity change from 0 to 512 [ 231.396887][ T28] audit: type=1326 audit(1778665531.319:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f1ffce59 code=0x7ffc0000 [ 231.406051][T15233] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 231.458590][ T28] audit: type=1326 audit(1778665531.319:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f1ffce59 code=0x7ffc0000 [ 231.481358][T15233] EXT4-fs (loop5): 1 truncate cleaned up [ 231.500673][ T28] audit: type=1326 audit(1778665531.319:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f98f1ffce59 code=0x7ffc0000 [ 231.526374][ T28] audit: type=1326 audit(1778665531.319:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f1ffce59 code=0x7ffc0000 [ 231.535541][T15233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.552151][ T28] audit: type=1326 audit(1778665531.319:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.5.3788" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f1ffce59 code=0x7ffc0000 [ 231.641004][T14405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.802423][T15250] loop2: detected capacity change from 0 to 512 [ 231.827587][T15250] EXT4-fs (loop2): 1 truncate cleaned up [ 231.854908][T15250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.087653][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.166773][T15278] loop2: detected capacity change from 0 to 512 [ 232.182567][T15278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.194833][T15278] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.692337][T15282] ================================================================== [ 232.700509][T15282] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 232.708624][T15282] [ 232.710965][T15282] write to 0xffff888103bca0a0 of 8 bytes by task 15278 on cpu 0: [ 232.718719][T15282] filemap_splice_read+0x523/0x780 [ 232.723872][T15282] ext4_file_splice_read+0x8f/0xb0 [ 232.729036][T15282] splice_direct_to_actor+0x26e/0x670 [ 232.734439][T15282] do_splice_direct+0x119/0x1a0 [ 232.739330][T15282] do_sendfile+0x382/0x650 [ 232.743778][T15282] __x64_sys_sendfile64+0x105/0x150 [ 232.749012][T15282] x64_sys_call+0x2dc4/0x3020 [ 232.753712][T15282] do_syscall_64+0x12c/0x3b0 [ 232.758335][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.764275][T15282] [ 232.766616][T15282] write to 0xffff888103bca0a0 of 8 bytes by task 15282 on cpu 1: [ 232.774358][T15282] filemap_splice_read+0x523/0x780 [ 232.779501][T15282] ext4_file_splice_read+0x8f/0xb0 [ 232.784654][T15282] splice_direct_to_actor+0x26e/0x670 [ 232.790079][T15282] do_splice_direct+0x119/0x1a0 [ 232.794955][T15282] do_sendfile+0x382/0x650 [ 232.799394][T15282] __x64_sys_sendfile64+0x105/0x150 [ 232.804637][T15282] x64_sys_call+0x2dc4/0x3020 [ 232.809347][T15282] do_syscall_64+0x12c/0x3b0 [ 232.813969][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.819904][T15282] [ 232.822247][T15282] value changed: 0x0000000000015e5f -> 0x0000000000015ebe [ 232.829381][T15282] [ 232.831728][T15282] Reported by Kernel Concurrency Sanitizer on: [ 232.837911][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.2.3801 Tainted: G W syzkaller #0 PREEMPT(full) [ 232.848868][T15282] Tainted: [W]=WARN [ 232.852689][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.862775][T15282] ================================================================== [ 233.099872][ T9677] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.