last executing test programs: 1m7.323099101s ago: executing program 2 (id=345): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0xe22, 0x8000}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x3ec5, 0x5cf}}}}}}}, 0x0) 1m7.101286638s ago: executing program 2 (id=349): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m6.775893229s ago: executing program 2 (id=357): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x0, 0x0, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) syz_genetlink_get_family_id$mptcp(0x0, r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000280)={'gre0\x00', r3, 0x40, 0x1, 0xd9, 0xa, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x6e, 0x0, 0x7, 0x2f, 0x0, @local, @local}}}}) 1m6.551305436s ago: executing program 2 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 1m6.42728728s ago: executing program 2 (id=363): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m5.662564794s ago: executing program 2 (id=383): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x200, 0xffffffffffffffff, 0x2, 0x2}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m5.617743666s ago: executing program 32 (id=383): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x200, 0xffffffffffffffff, 0x2, 0x2}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 30.927657074s ago: executing program 1 (id=969): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c616c6c6fe08a775f7574696d653d30313737373737373737373737373737373737373737372c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370b499d0cb476cc07157313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d30"], 0x6, 0x2e6, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) accept$phonet_pipe(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 30.041253032s ago: executing program 1 (id=974): ioperm(0xb, 0x6, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) accept(r0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 28.86897124s ago: executing program 1 (id=991): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x14, 0xfffffffd, 0x4}) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) 28.679104876s ago: executing program 1 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0xa53059, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) unshare(0x22020600) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 28.571494719s ago: executing program 1 (id=997): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xa8, 0x0, &(0x7f00000001c0)="bcd96e5d1b72c538f50f2831451adee0fa3899d6a1c9b98b4217605be0f00e5b7d2ce81631cec43ba6c54ab6e660675038782749da34d0ca4f16084d45182b54e404e85d5a4866624fd2fcb7bf3722912bb960546892b60512fe983ccf7da912c169fc1e92212a181d12b5a0b117f284811486f52d77a22c944e1651320e964a7bd58f023961f4e67f418e1c1b79272a1344c6e0bc096253976507253236798ab4f9be8014b32dd3", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8402, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 28.401046855s ago: executing program 1 (id=1012): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4040880) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r1) getpriority(0x1, 0xe6) 28.364717606s ago: executing program 33 (id=1012): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4040880) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(0x0, r1) getpriority(0x1, 0xe6) 4.870130153s ago: executing program 5 (id=1424): iopl(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x2, 0x6) 1.932030777s ago: executing program 3 (id=1498): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c) 1.85977763s ago: executing program 3 (id=1499): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$9p(r0, &(0x7f0000001100)="0f6e6e", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.85942095s ago: executing program 3 (id=1500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20044000, &(0x7f0000000b00)="00000000000071b05c39d87e895893", 0xf, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 1.85803695s ago: executing program 3 (id=1509): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x3, &(0x7f0000001c00)=@framed, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) unshare(0x20040600) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c3, 0x8, 0x4, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 1.83871324s ago: executing program 5 (id=1501): r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f}) 1.749992654s ago: executing program 5 (id=1503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "eead00000000000000f46d7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1add0a80939a8ebf07cb417308a3d40aa1c788df600"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.712134275s ago: executing program 4 (id=1504): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffb}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1.667926366s ago: executing program 4 (id=1515): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6e, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0xf, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x2000, 0x0, 0x0, 0x9, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.5485633s ago: executing program 4 (id=1506): ioperm(0x7, 0x81, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x578410eb) sendfile(r2, r0, 0x0, 0x100000000) 1.526261931s ago: executing program 6 (id=1507): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x60000, 0x100) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 1.002899848s ago: executing program 3 (id=1513): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.001673638s ago: executing program 0 (id=1524): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) timer_delete(r1) 965.098088ms ago: executing program 0 (id=1514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) 964.131429ms ago: executing program 0 (id=1516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 899.961351ms ago: executing program 0 (id=1517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 892.802371ms ago: executing program 5 (id=1518): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x4, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x106200, 0x10004, 0x20da, 0x5, 0x4000a, 0x79, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioprio_set$pid(0x1, 0x0, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 875.127011ms ago: executing program 5 (id=1519): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(r1, r0, 0x0, 0xf03a0005) 812.620454ms ago: executing program 3 (id=1520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)='.U', 0x2, 0x8012, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 748.024006ms ago: executing program 5 (id=1521): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 694.107547ms ago: executing program 4 (id=1522): r0 = syz_io_uring_setup(0x12e, &(0x7f0000000180)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000100), &(0x7f0000000280), 0x0) io_uring_enter(r0, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000002c0), 0x12) sendfile(r2, r2, 0x0, 0x10001) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000800)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24) 671.260078ms ago: executing program 6 (id=1523): perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x5, 0x90, 0x7, 0x7f, 0x0, 0xfffffffffffffff6, 0x28010, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xff, 0x5}, 0x508, 0x6, 0x3d, 0x9, 0xffffffff, 0x1, 0x1, 0x0, 0x3d2af391, 0x0, 0xf}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e032800008c71ef288563"], 0xffdd) 615.90847ms ago: executing program 4 (id=1525): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@nobarrier}, {@grpid}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x1000) mremap(&(0x7f0000376000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f000004e000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x148) fallocate(r0, 0x20, 0x4000, 0x8000) 612.87286ms ago: executing program 4 (id=1526): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x20}, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x2, @loopback={0xff00}, 0x4000000c}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x5c39d53d76e37746) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 438.343266ms ago: executing program 6 (id=1527): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) socket(0x80000000000000a, 0x2, 0x0) semctl$GETPID(0x0, 0x3, 0xb, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 339.902829ms ago: executing program 6 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) 280.715611ms ago: executing program 6 (id=1529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "4adb125cf7939455", "e9e0d9b972a2024b334a90d4e2d3c425", "ad0f0530", "fd627c1d4704bc8e"}, 0x28) sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, r0, 0x5ac1a000) syz_emit_ethernet(0x7e, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)='0', 0x12, 0x0, 0x0, 0x0) 240.581382ms ago: executing program 6 (id=1530): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000480), 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="4017cb5ebb2482aeafa8e4e9433e66a1e1f3a8210dd328b4e6318f580f0368c795fbaea213029696dfe61f58f2db485c5c0c1dc647cda0209e78f92e51a29960d9e381ae8ec01870728fea22d83f9932707434cdb812f818933de6cc87f057ea0f849df688f7e2d7c3cc86875126b5ea3398d23a559c5e132b8335d082f0115e142c4c77688a41e343a1881f44b95ef0aff88b3c19bcf9cd864a9b", 0xfffffc8c) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0) 82.522947ms ago: executing program 0 (id=1531): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 0s ago: executing program 0 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): HW filter on device bond1 [ 49.813219][ T4061] __nla_validate_parse: 12 callbacks suppressed [ 49.813239][ T4061] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.219'. [ 49.828935][ T4061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.219'. [ 50.407280][ T4079] SELinux: Context ›Y7»ôj [ 50.407280][ T4079] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 50.407280][ T4079] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 50.462156][ T4079] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 50.478279][ T4079] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ, priority 10 [ 56.510880][ T4264] loop0: detected capacity change from 0 to 512 [ 56.535920][ T4264] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.556959][ T4266] loop4: detected capacity change from 0 to 512 [ 56.582891][ T4264] EXT4-fs (loop0): 1 truncate cleaned up [ 56.593738][ T4266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.609818][ T4264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.625784][ T4266] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.298: iget: bad i_size value: 38620345925642 [ 56.645703][ T4266] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.646168][ T4266] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.298: couldn't read orphan inode 15 (err -117) [ 56.655472][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.655488][ C0] EXT4-fs (loop4): initial error at time 1780938779: ext4_orphan_get:1397: inode 15 [ 56.655512][ C0] EXT4-fs (loop4): last error at time 1780938779: ext4_orphan_get:1397: inode 15 [ 56.692554][ T4266] loop4: lost filesystem error report for type 5 error -117 [ 56.694656][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.735825][ T4270] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 56.836163][ T4271] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 56.864195][ T3352] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 56.879767][ T3352] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.907595][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.981901][ T4266] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.298: bg 0: block 5: invalid block bitmap [ 57.014492][ T4266] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 788 with error 28 [ 57.040498][ T4266] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.040498][ T4266] [ 57.063537][ T4266] EXT4-fs (loop4): Total free blocks count 0 [ 57.087090][ T4266] EXT4-fs (loop4): Free/Dirty block details [ 57.108998][ T4266] EXT4-fs (loop4): free_blocks=0 [ 57.120283][ T4266] EXT4-fs (loop4): dirty_blocks=788 [ 57.127814][ T4266] EXT4-fs (loop4): Block reservation details [ 57.134275][ T4266] EXT4-fs (loop4): i_reserved_data_blocks=788 [ 57.174824][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.246689][ T4294] validate_nla: 50 callbacks suppressed [ 57.246708][ T4294] netlink: 'syz.3.307': attribute type 3 has an invalid length. [ 57.275320][ T4291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 57.419952][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.427363][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.450552][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.457690][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.465089][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.472332][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.479990][ T4310] bridge0: entered promiscuous mode [ 57.485308][ T4310] bridge0: entered allmulticast mode [ 57.499795][ T3352] tipc: Node number set to 2886997007 [ 57.992359][ T4342] netlink: 'syz.2.324': attribute type 8 has an invalid length. [ 58.041380][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 58.083947][ T4342] veth1_to_team: entered promiscuous mode [ 58.111185][ T4342] gretap0: entered promiscuous mode [ 58.125621][ T4342] veth1_to_team: left promiscuous mode [ 58.146289][ T4352] loop0: detected capacity change from 0 to 512 [ 58.158478][ T4342] gretap0: left promiscuous mode [ 58.172552][ T4356] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.331'. [ 58.184608][ T4352] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 58.193322][ T4356] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.331'. [ 58.202583][ T4352] EXT4-fs (loop0): orphan cleanup on readonly fs [ 58.202758][ T4352] EXT4-fs error (device loop0): __ext4_iget:5481: inode #11: block 1: comm syz.0.329: invalid block [ 58.202846][ T4352] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.203031][ T4352] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.329: couldn't read orphan inode 11 (err -117) [ 58.203062][ T4352] loop0: lost filesystem error report for type 5 error -117 [ 58.204171][ T4352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.388564][ T4366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 58.408608][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.418792][ T4362] loop4: detected capacity change from 0 to 4096 [ 58.452604][ T4362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.490062][ T4366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 58.590198][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.663755][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 58.720375][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 58.720390][ T28] audit: type=1400 audit(1780938781.430:360): avc: denied { read } for pid=4387 comm="syz.0.343" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.752153][ T28] audit: type=1400 audit(1780938781.440:361): avc: denied { open } for pid=4387 comm="syz.0.343" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 59.095617][ T28] audit: type=1400 audit(1780938781.810:362): avc: denied { map } for pid=4403 comm="syz.3.350" path="socket:[8370]" dev="sockfs" ino=8370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.179295][ T4411] loop4: detected capacity change from 0 to 512 [ 59.179436][ T28] audit: type=1400 audit(1780938781.810:363): avc: denied { read } for pid=4403 comm="syz.3.350" path="socket:[8370]" dev="sockfs" ino=8370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.255254][ T4411] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 59.274250][ T28] audit: type=1400 audit(1780938781.990:364): avc: denied { setopt } for pid=4415 comm="syz.1.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.275297][ T4411] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.353: invalid block [ 59.354256][ T28] audit: type=1326 audit(1780938782.070:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.3.358" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f143b7f6bd7 code=0x0 [ 59.354662][ T4411] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 59.379647][ T28] audit: type=1326 audit(1780938782.070:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4415 comm="syz.1.356" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84839ace59 code=0x0 [ 59.424569][ T4411] EXT4-fs (loop4): 1 truncate cleaned up [ 59.430426][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 59.430453][ C1] EXT4-fs (loop4): initial error at time 1780938782: ext4_get_branch:178: inode 13: block 1024 [ 59.430503][ C1] EXT4-fs (loop4): last error at time 1780938782: ext4_get_branch:178: inode 13: block 1024 [ 59.459964][ T4411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.499998][ T28] audit: type=1326 audit(1780938782.210:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc772a5ce59 code=0x7ffc0000 [ 59.576400][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.599885][ T28] audit: type=1326 audit(1780938782.240:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc772a5ce59 code=0x7ffc0000 [ 59.647748][ T28] audit: type=1326 audit(1780938782.240:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.0.359" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc772a5ce59 code=0x7ffc0000 [ 59.803887][ T4439] netlink: 4116 bytes leftover after parsing attributes in process `syz.0.367'. [ 59.994255][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.022717][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.157296][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.179427][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.222191][ T2512] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 60.233065][ T2512] bond1: (slave veth3): making interface the new active one [ 60.253128][ T2512] bond1: active interface up! [ 60.295367][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.317601][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.398491][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 60.411370][ T4472] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 60.431269][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.578584][ T4483] loop3: detected capacity change from 0 to 512 [ 60.612096][ T68] bridge_slave_1: left allmulticast mode [ 60.650182][ T68] bridge_slave_1: left promiscuous mode [ 60.655971][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.668293][ T4483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.701474][ T4483] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.716649][ T68] bridge_slave_0: left allmulticast mode [ 60.726288][ T68] bridge_slave_0: left promiscuous mode [ 60.746768][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.793640][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.002829][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.013445][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.024610][ T68] bond0 (unregistering): Released all slaves [ 61.036771][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 61.118982][ T68] hsr_slave_0: left promiscuous mode [ 61.142486][ T68] hsr_slave_1: left promiscuous mode [ 61.158915][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.182824][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.204496][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.221163][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.253938][ T68] veth1_macvtap: left promiscuous mode [ 61.259568][ T68] veth0_macvtap: left promiscuous mode [ 61.265496][ T68] veth1_vlan: left promiscuous mode [ 61.271504][ T68] veth0_vlan: left promiscuous mode [ 61.360656][ T68] team0 (unregistering): Port device team_slave_1 removed [ 61.370610][ T68] team0 (unregistering): Port device team_slave_0 removed [ 61.412320][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 61.479285][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 61.497283][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 61.692479][ T4588] loop1: detected capacity change from 0 to 128 [ 61.694205][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 61.716444][ T4588] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.744941][ T4588] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.796992][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.820056][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.825474][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.850595][ T4485] bridge_slave_0: entered allmulticast mode [ 61.861533][ T4485] bridge_slave_0: entered promiscuous mode [ 61.868672][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.892830][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.901763][ T4485] bridge_slave_1: entered allmulticast mode [ 61.911192][ T4485] bridge_slave_1: entered promiscuous mode [ 61.923813][ T4599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13588 sclass=netlink_route_socket pid=4599 comm=syz.1.407 [ 61.958788][ T4485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.980321][ T4485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.025235][ T4485] team0: Port device team_slave_0 added [ 62.035963][ T4485] team0: Port device team_slave_1 added [ 62.072066][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.089708][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.119515][ T4485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.132309][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.140459][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.155805][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.183269][ T4485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.316581][ T4485] hsr_slave_0: entered promiscuous mode [ 62.324383][ T4485] hsr_slave_1: entered promiscuous mode [ 62.331338][ T4485] debugfs: 'hsr0' already exists in 'hsr' [ 62.337139][ T4485] Cannot create hsr debugfs directory [ 62.434086][ T4627] loop4: detected capacity change from 0 to 512 [ 62.464901][ T4485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 62.477004][ T4485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.484633][ T4627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.497365][ T4627] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.519017][ T4485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 62.529133][ T4485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.530601][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.543379][ T4485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 62.562033][ T4485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.577552][ T4485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 62.593643][ T4485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.645891][ T4485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.654852][ T4640] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 62.668202][ T4485] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.678401][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.685550][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.698790][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.705956][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.731538][ T4643] netlink: 'syz.3.417': attribute type 10 has an invalid length. [ 62.745826][ T4485] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.756861][ T4485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.780005][ T4643] team0: Failed to send options change via netlink (err -105) [ 62.787556][ T4643] team0: Port device dummy0 added [ 62.797405][ T4643] netlink: 'syz.3.417': attribute type 10 has an invalid length. [ 62.810858][ T4643] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.823652][ T4643] team0: Failed to send options change via netlink (err -105) [ 62.831451][ T4643] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.841119][ T4643] team0: Port device dummy0 removed [ 62.849185][ T4643] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.965484][ T4485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.152966][ T4485] veth0_vlan: entered promiscuous mode [ 63.196284][ T4485] veth1_vlan: entered promiscuous mode [ 63.203465][ T4676] __nla_validate_parse: 3 callbacks suppressed [ 63.203483][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.421'. [ 63.244559][ T4674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 63.246622][ T4678] SELinux: security policydb version 16 (MLS) not backwards compatible [ 63.262488][ T4678] SELinux: failed to load policy [ 63.269033][ T4485] veth0_macvtap: entered promiscuous mode [ 63.282077][ T4485] veth1_macvtap: entered promiscuous mode [ 63.294874][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.306878][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.347024][ T346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.367399][ T346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.391144][ T346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.391744][ T4682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.425'. [ 63.407661][ T346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.547087][ T4693] netlink: 24 bytes leftover after parsing attributes in process `syz.1.429'. [ 63.658043][ T4698] loop5: detected capacity change from 0 to 1024 [ 63.680154][ T4700] sock: sock_set_timeout: `syz.1.431' (pid 4700) tries to set negative timeout [ 63.692174][ T4698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.745325][ T4698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.774043][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 63.774058][ T28] audit: type=1400 audit(1780938786.490:428): avc: denied { write } for pid=4697 comm="syz.5.430" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.849142][ T4706] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 63.958833][ T4706] bond1: (slave veth11): Enslaving as an active interface with a down link [ 64.003192][ T4485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.037812][ T4706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.065009][ T4715] netlink: 'syz.5.433': attribute type 4 has an invalid length. [ 64.125664][ T4713] syzkaller0: entered promiscuous mode [ 64.132733][ T4713] syzkaller0: entered allmulticast mode [ 64.167269][ T4721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.436'. [ 64.288477][ T28] audit: type=1400 audit(1780938787.000:429): avc: denied { create } for pid=4728 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 64.409294][ T28] audit: type=1400 audit(1780938787.120:430): avc: denied { create } for pid=4735 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.469833][ T28] audit: type=1400 audit(1780938787.130:431): avc: denied { setopt } for pid=4735 comm="syz.5.443" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.491076][ T28] audit: type=1400 audit(1780938787.140:432): avc: denied { connect } for pid=4735 comm="syz.5.443" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.531897][ T28] audit: type=1400 audit(1780938787.140:433): avc: denied { write } for pid=4735 comm="syz.5.443" laddr=fe80::807d:15ff:feda:7118 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.601105][ T28] audit: type=1400 audit(1780938787.210:434): avc: denied { getopt } for pid=4741 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 64.668143][ T28] audit: type=1400 audit(1780938787.380:435): avc: denied { create } for pid=4754 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.736523][ T28] audit: type=1400 audit(1780938787.380:436): avc: denied { mount } for pid=4754 comm="syz.4.450" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.789481][ T28] audit: type=1400 audit(1780938787.450:437): avc: denied { allowed } for pid=4760 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.888786][ T4766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 65.070162][ T4778] loop5: detected capacity change from 0 to 512 [ 65.086383][ T4778] EXT4-fs: dax option not supported [ 65.251047][ T4757] loop0: detected capacity change from 0 to 512 [ 65.331488][ T4757] EXT4-fs: Mount option(s) incompatible with ext3 [ 66.033928][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 66.517383][ T4832] loop1: detected capacity change from 0 to 128 [ 66.560126][ T4832] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 66.670202][ T4832] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 66.689716][ T4832] FAT-fs (loop1): Filesystem has been set read-only [ 66.738664][ T4846] loop4: detected capacity change from 0 to 512 [ 66.747193][ T3306] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 66.765462][ T4846] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.781365][ T4846] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 66.817848][ T4846] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.482: Corrupt directory, running e2fsck is recommended [ 66.830937][ T4850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.483'. [ 66.842360][ T4846] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 66.850842][ T4846] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.482: corrupted in-inode xattr: e_name out of bounds [ 66.865391][ T4846] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.866829][ T4846] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.482: couldn't read orphan inode 15 (err -117) [ 66.876089][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 66.876131][ C0] EXT4-fs (loop4): initial error at time 1780938789: ext4_iget_extra_inode:5128: inode 15 [ 66.876172][ C0] EXT4-fs (loop4): last error at time 1780938789: ext4_iget_extra_inode:5128: inode 15 [ 66.914461][ T4846] loop4: lost filesystem error report for type 5 error -117 [ 66.916163][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.957344][ T4846] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.985206][ T4846] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 67.009696][ T4846] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.482: Corrupt directory, running e2fsck is recommended [ 67.056373][ T4846] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.482: path /106/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 67.087621][ T4846] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 8: comm syz.4.482: path /106/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 67.244048][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.529904][ T4885] netlink: 'syz.1.494': attribute type 1 has an invalid length. [ 67.553520][ T4885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.584985][ T4885] bond2: (slave veth19): Enslaving as an active interface with a down link [ 67.664919][ T4885] bond3: entered allmulticast mode [ 67.681864][ T4885] 8021q: adding VLAN 0 to HW filter on device bond3 [ 67.691024][ T4885] bond2: (slave bond3): Enslaving as an active interface with a down link [ 68.612735][ T4912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 68.626208][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.636266][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.760079][ T4922] loop3: detected capacity change from 0 to 1024 [ 68.811831][ T4922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.877085][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 68.877180][ T28] audit: type=1400 audit(1780938791.590:445): avc: denied { write } for pid=4921 comm="syz.3.507" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.918683][ T4922] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.3.507: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 68.977421][ T28] audit: type=1400 audit(1780938791.630:446): avc: denied { write } for pid=4921 comm="syz.3.507" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.002131][ T4938] netlink: 'syz.1.512': attribute type 1 has an invalid length. [ 69.016321][ T4922] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 69.021236][ T4938] netlink: 'syz.1.512': attribute type 4 has an invalid length. [ 69.046580][ T28] audit: type=1400 audit(1780938791.630:447): avc: denied { remove_name } for pid=4921 comm="syz.3.507" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.069042][ T4938] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.512'. [ 69.101678][ T28] audit: type=1400 audit(1780938791.660:448): avc: denied { setopt } for pid=4934 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.143469][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.165852][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 69.182889][ T4940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.514'. [ 69.507818][ T4958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.520'. [ 69.679983][ T4969] loop3: detected capacity change from 0 to 512 [ 69.693384][ T4969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.710184][ T4949] loop0: detected capacity change from 0 to 65536 [ 69.759113][ T28] audit: type=1400 audit(1780938792.460:449): avc: denied { write } for pid=4968 comm="syz.3.524" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.846586][ T28] audit: type=1400 audit(1780938792.500:450): avc: denied { write } for pid=4968 comm="syz.3.524" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.858896][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.901918][ T28] audit: type=1400 audit(1780938792.500:451): avc: denied { add_name } for pid=4968 comm="syz.3.524" name="blkio.bfq.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.934543][ T4980] loop1: detected capacity change from 0 to 128 [ 69.956780][ T4980] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 69.964932][ T28] audit: type=1400 audit(1780938792.510:452): avc: denied { write } for pid=4968 comm="syz.3.524" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 69.987218][ T4980] FAT-fs (loop1): Filesystem has been set read-only [ 69.994865][ T4982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 70.023202][ T4944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 70.061289][ T3306] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 54) [ 70.105603][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 70.146075][ T4991] capability: warning: `syz.3.534' uses deprecated v2 capabilities in a way that may be insecure [ 70.159137][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'. [ 70.229443][ T4991] GUP no longer grows the stack in syz.3.534 (4991): 200000004000-20000000a000 (200000002000) [ 70.240707][ T4991] CPU: 1 UID: 0 PID: 4991 Comm: syz.3.534 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.240782][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 70.240799][ T4991] Call Trace: [ 70.240843][ T4991] [ 70.240853][ T4991] __dump_stack+0x1d/0x30 [ 70.240884][ T4991] dump_stack_lvl+0x95/0xd0 [ 70.240906][ T4991] dump_stack+0x15/0x1b [ 70.240924][ T4991] __get_user_pages+0x1b26/0x1f10 [ 70.241037][ T4991] ? __rcu_read_unlock+0x4e/0x70 [ 70.241067][ T4991] get_user_pages_remote+0x1d5/0x6b0 [ 70.241104][ T4991] __access_remote_vm+0x154/0x4c0 [ 70.241192][ T4991] access_remote_vm+0x32/0x40 [ 70.241228][ T4991] proc_pid_cmdline_read+0x32b/0x6b0 [ 70.241264][ T4991] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 70.241294][ T4991] vfs_readv+0x432/0x6e0 [ 70.241331][ T4991] __x64_sys_preadv+0xfd/0x1c0 [ 70.241426][ T4991] x64_sys_call+0x2915/0x3020 [ 70.241449][ T4991] do_syscall_64+0x12c/0x3b0 [ 70.241492][ T4991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.241523][ T4991] RIP: 0033:0x7f143b7fce59 [ 70.241608][ T4991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.241632][ T4991] RSP: 002b:00007f143a24f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 70.241655][ T4991] RAX: ffffffffffffffda RBX: 00007f143ba75fa0 RCX: 00007f143b7fce59 [ 70.241729][ T4991] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 70.241747][ T4991] RBP: 00007f143b892d6f R08: 00000000fffffff9 R09: 0000000000000000 [ 70.241760][ T4991] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 70.241772][ T4991] R13: 00007f143ba76038 R14: 00007f143ba75fa0 R15: 00007ffc2c27f198 [ 70.241830][ T4991] [ 70.254717][ T28] audit: type=1400 audit(1780938792.970:453): avc: denied { audit_write } for pid=4993 comm="syz.0.535" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.485721][ T28] audit: type=1107 audit(1780938792.970:454): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢' [ 70.543859][ T5008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5008 comm=syz.4.540 [ 70.558743][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.540'. [ 70.663238][ T5020] loop4: detected capacity change from 0 to 512 [ 70.670625][ T5020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.678462][ T5020] EXT4-fs: journaled quota format not specified [ 71.023060][ T5025] loop5: detected capacity change from 0 to 128 [ 71.032478][ T5025] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 71.046886][ T5025] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.108696][ T4485] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.219873][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.227161][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.265775][ T5034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.276177][ T5034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.318705][ T68] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.327851][ T68] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.343865][ T68] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.360322][ T68] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.413631][ T5041] ipip0: entered promiscuous mode [ 71.572584][ T5052] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.579820][ T5052] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.593521][ T5052] bridge0: left promiscuous mode [ 71.598735][ T5052] bridge0: left allmulticast mode [ 71.638875][ T5052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.649140][ T5052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.694369][ T5052] ipip0: left promiscuous mode [ 71.711687][ T68] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.726858][ T68] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.757659][ T68] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.786952][ T68] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.004508][ T5072] loop5: detected capacity change from 0 to 256 [ 72.029033][ T5072] FAT-fs (loop5): codepage cp857 not found [ 72.212207][ T5081] loop5: detected capacity change from 0 to 4096 [ 72.223700][ T5081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.327451][ T5090] netlink: 'syz.3.573': attribute type 83 has an invalid length. [ 72.367934][ T5092] loop2: detected capacity change from 0 to 7 [ 72.374738][ T4485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.516925][ T5105] netlink: 'syz.5.572': attribute type 11 has an invalid length. [ 72.620529][ T5118] loop3: detected capacity change from 0 to 764 [ 73.643476][ T5189] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 73.685309][ T5189] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 73.706141][ T5199] __nla_validate_parse: 8 callbacks suppressed [ 73.706239][ T5199] netlink: 6 bytes leftover after parsing attributes in process `syz.5.602'. [ 73.737322][ T5189] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 73.739579][ T5199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.766672][ T5189] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 73.925659][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 73.925734][ T28] audit: type=1400 audit(1780938796.640:482): avc: denied { write } for pid=5221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.311197][ T5240] set_capacity_and_notify: 1 callbacks suppressed [ 74.311215][ T5240] loop1: detected capacity change from 0 to 512 [ 74.340188][ T5240] EXT4-fs: Ignoring removed bh option [ 74.381731][ T5240] EXT4-fs: Mount option(s) incompatible with ext3 [ 74.402096][ T5240] loop1: detected capacity change from 0 to 512 [ 74.417052][ T5240] EXT4-fs: Ignoring removed nobh option [ 74.459964][ T5240] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.612: corrupted inode contents [ 74.485604][ T5240] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 74.485864][ T5240] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #3: comm syz.1.612: mark_inode_dirty error [ 74.494997][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 74.495019][ C0] EXT4-fs (loop1): initial error at time 1780938797: ext4_do_update_inode:5690: inode 3 [ 74.495053][ C0] EXT4-fs (loop1): last error at time 1780938797: ext4_do_update_inode:5690: inode 3 [ 74.563271][ T5240] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 74.566924][ T5240] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #3: comm syz.1.612: corrupted inode contents [ 74.588621][ T5240] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 74.592983][ T5240] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.612: mark_inode_dirty error [ 74.632214][ T5240] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 74.634017][ T5240] Quota error (device loop1): write_blk: dquota write failed [ 74.651938][ T5240] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 74.669788][ T5240] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.612: Failed to acquire dquot type 0 [ 74.682758][ T5240] loop1: lost filesystem error report for type 5 error -117 [ 74.683423][ T5240] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.612: corrupted inode contents [ 74.707843][ T5240] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.708554][ T5240] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.612: mark_inode_dirty error [ 74.744923][ T5240] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.745174][ T5240] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.612: corrupted inode contents [ 74.805332][ T5240] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.805531][ T5240] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.612: mark_inode_dirty error [ 74.843601][ T5240] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.844667][ T5240] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.612: corrupted inode contents [ 74.865944][ T5240] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.866120][ T5240] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 74.886249][ T5240] loop1: lost filesystem error report for type 5 error -117 [ 74.886462][ T5240] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.612: corrupted inode contents [ 74.906014][ T5240] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.906178][ T5240] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.612: mark_inode_dirty error [ 74.927463][ T5240] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 74.936585][ T5240] loop1: lost filesystem error report for type 5 error -117 [ 74.937221][ T5240] EXT4-fs (loop1): 1 truncate cleaned up [ 74.951319][ T5240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.964642][ T5240] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.976676][ T5240] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.162844][ T28] audit: type=1400 audit(1780938797.880:483): avc: denied { write } for pid=5249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.279770][ T28] audit: type=1400 audit(1780938797.990:484): avc: denied { write } for pid=5276 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.389186][ T5282] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.621'. [ 75.425306][ T5260] veth0_to_team: entered promiscuous mode [ 75.540934][ T30] bond1: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 75.563580][ T30] bond1: (slave veth11): making interface the new active one [ 75.588260][ T30] bond1: active interface up! [ 75.600697][ T12] bond2: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 75.609679][ T12] bond2: (slave veth19): making interface the new active one [ 75.621023][ T12] bond2: active interface up! [ 76.264235][ T28] audit: type=1400 audit(1780938798.980:485): avc: denied { execute } for pid=5316 comm="syz.1.635" path="/142/blkio.bfq.io_queued_recursive" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.315378][ T28] audit: type=1400 audit(1780938799.030:486): avc: denied { watch } for pid=5317 comm="syz.3.636" path="/120/file0" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.146378][ T28] audit: type=1400 audit(1780938799.860:487): avc: denied { write } for pid=5351 comm="syz.3.648" lport=51158 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 77.246714][ T28] audit: type=1400 audit(1780938799.960:488): avc: denied { bind } for pid=5355 comm="syz.1.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.148376][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 79.386378][ T5432] netlink: 'syz.0.693': attribute type 10 has an invalid length. [ 79.395130][ T5432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.693'. [ 79.404296][ T5432] bond0: entered promiscuous mode [ 79.409863][ T5432] bridge0: port 2(bond0) entered blocking state [ 79.416462][ T5432] bridge0: port 2(bond0) entered disabled state [ 79.432490][ T28] audit: type=1400 audit(1780938802.140:489): avc: denied { read } for pid=5430 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.452818][ T5432] bond0: entered allmulticast mode [ 79.460925][ T5432] vlan2: entered promiscuous mode [ 79.471715][ T5432] geneve0: entered promiscuous mode [ 79.477576][ T28] audit: type=1400 audit(1780938802.190:490): avc: denied { shutdown } for pid=5430 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.569286][ T5447] loop5: detected capacity change from 0 to 128 [ 79.575830][ T5448] loop1: detected capacity change from 0 to 512 [ 79.589244][ T5447] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 79.610242][ T5448] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 79.645378][ T5440] ALSA: seq fatal error: cannot create timer (-19) [ 79.658620][ T5448] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 79.683609][ T5447] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 79.691005][ T5448] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.700: Corrupt directory, running e2fsck is recommended [ 79.704374][ T5447] FAT-fs (loop5): Filesystem has been set read-only [ 79.735045][ T5448] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 79.765317][ T4485] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 79.774930][ T5448] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.700: corrupted in-inode xattr: e_name out of bounds [ 79.817264][ T5448] fserror_report: 1 callbacks suppressed [ 79.817281][ T5448] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.839170][ T5448] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.700: couldn't read orphan inode 15 (err -117) [ 79.848406][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 79.848433][ C0] EXT4-fs (loop1): initial error at time 1780938802: ext4_iget_extra_inode:5128: inode 15 [ 79.848471][ C0] EXT4-fs (loop1): last error at time 1780938802: ext4_iget_extra_inode:5128: inode 15 [ 79.914035][ T5448] loop1: lost filesystem error report for type 5 error -117 [ 79.916501][ T5448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.975251][ T5448] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 80.005975][ T5448] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 80.030684][ T5448] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.700: Corrupt directory, running e2fsck is recommended [ 80.062005][ T5448] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.700: path /158/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 80.110396][ T5448] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.700: path /158/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 80.196017][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.506066][ T5468] loop5: detected capacity change from 0 to 512 [ 80.632152][ T5468] EXT4-fs: Mount option(s) incompatible with ext3 [ 80.810231][ T5484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.706'. [ 80.985201][ T28] audit: type=1400 audit(1780938803.700:491): avc: denied { getopt } for pid=5477 comm="syz.0.703" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.058497][ T5491] SELinux: failed to load policy [ 81.102773][ T5493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 81.251737][ T5500] sctp: [Deprecated]: syz.5.712 (pid 5500) Use of int in max_burst socket option. [ 81.251737][ T5500] Use struct sctp_assoc_value instead [ 81.307331][ T5503] loop5: detected capacity change from 0 to 128 [ 81.353839][ T5503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 81.387590][ T5503] System zones: 1-3, 19-19, 35-36 [ 81.424699][ T5503] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.507433][ T5503] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.519527][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.566381][ T5502] bridge0: port 1(vlan2) entered blocking state [ 81.572740][ T5502] bridge0: port 1(vlan2) entered forwarding state [ 81.585214][ T5500] EXT4-fs warning (device loop5): ext4_group_extend:1861: can't shrink FS - resize aborted [ 81.628224][ T28] audit: type=1400 audit(1780938804.340:492): avc: denied { mounton } for pid=5512 comm="syz.3.716" path="/file0" dev="ramfs" ino=11744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 81.707252][ T4485] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.828388][ T5520] loop5: detected capacity change from 0 to 512 [ 81.880472][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 81.924230][ T5520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.952748][ T5508] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.960198][ T5508] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.064576][ T5520] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.117125][ T28] audit: type=1400 audit(1780938804.830:493): avc: denied { write } for pid=5518 comm="syz.5.718" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.203893][ T5508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.229828][ T5508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.345784][ T4485] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.419141][ T5508] bond3: left allmulticast mode [ 82.457624][ T30] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.467014][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.484087][ T30] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.504372][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.550619][ T30] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.573590][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.599277][ T30] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.618436][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.630489][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 82.716315][ T5548] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 82.721522][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 82.754149][ T28] audit: type=1400 audit(1780938805.470:494): avc: denied { relabelto } for pid=5547 comm="syz.5.728" name="/" dev="ramfs" ino=11781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 82.789008][ T5546] loop3: detected capacity change from 0 to 2048 [ 82.824824][ T28] audit: type=1400 audit(1780938805.470:495): avc: denied { associate } for pid=5547 comm="syz.5.728" name="/" dev="ramfs" ino=11781 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 82.825784][ T5538] loop1: detected capacity change from 0 to 512 [ 82.900832][ T5546] loop3: p1 p4 [ 82.907601][ T5546] loop3: p4 size 589824 extends beyond EOD, truncated [ 83.002351][ T5538] EXT4-fs: Mount option(s) incompatible with ext3 [ 83.066527][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 83.078553][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 83.140811][ T5561] netlink: 276 bytes leftover after parsing attributes in process `syz.0.734'. [ 83.317226][ T5571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.739'. [ 83.335499][ T28] audit: type=1400 audit(1780938805.990:496): avc: denied { create } for pid=5563 comm="syz.3.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.387798][ T5571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.739'. [ 83.641592][ T5586] netlink: 'syz.4.744': attribute type 12 has an invalid length. [ 84.051431][ T5601] netlink: 'syz.0.751': attribute type 1 has an invalid length. [ 84.078347][ T5601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.112158][ T5601] macvlan0: entered promiscuous mode [ 84.121267][ T5601] macvlan0: entered allmulticast mode [ 84.136416][ T5601] bond2: entered promiscuous mode [ 84.169980][ T5601] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 84.227710][ T5601] bond2: left promiscuous mode [ 84.363398][ T5608] loop1: detected capacity change from 0 to 256 [ 84.370808][ T5608] msdos: Bad value for 'uid' [ 84.374999][ T5595] loop3: detected capacity change from 0 to 512 [ 84.397417][ T5608] msdos: Bad value for 'uid' [ 84.454913][ T5595] EXT4-fs: Mount option(s) incompatible with ext3 [ 84.603069][ T5612] netlink: 'syz.3.756': attribute type 5 has an invalid length. [ 84.646226][ T28] audit: type=1326 audit(1780938807.360:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5614 comm="syz.5.758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36d341ce59 code=0x0 [ 84.850661][ T28] audit: type=1400 audit(1780938807.570:498): avc: denied { map } for pid=5607 comm="syz.1.754" path="socket:[12027]" dev="sockfs" ino=12027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.924705][ T28] audit: type=1400 audit(1780938807.570:499): avc: denied { read accept } for pid=5607 comm="syz.1.754" path="socket:[12027]" dev="sockfs" ino=12027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.992105][ T28] audit: type=1400 audit(1780938807.710:500): avc: denied { getopt } for pid=5629 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.301276][ T5652] loop4: detected capacity change from 0 to 128 [ 85.381430][ T5652] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 85.425673][ T5652] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.532310][ T28] audit: type=1400 audit(1780938808.240:501): avc: denied { write } for pid=5650 comm="syz.4.769" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.622239][ T28] audit: type=1400 audit(1780938808.310:502): avc: denied { map } for pid=5658 comm="syz.0.772" path="socket:[13084]" dev="sockfs" ino=13084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.622304][ T28] audit: type=1400 audit(1780938808.310:503): avc: denied { accept } for pid=5658 comm="syz.0.772" path="socket:[13084]" dev="sockfs" ino=13084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 85.643775][ T5668] loop5: detected capacity change from 0 to 8192 [ 85.762150][ T28] audit: type=1400 audit(1780938808.480:504): avc: denied { connect } for pid=5674 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.762873][ T28] audit: type=1400 audit(1780938808.480:505): avc: denied { write } for pid=5674 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.765281][ T28] audit: type=1400 audit(1780938808.480:506): avc: denied { setopt } for pid=5674 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.861647][ T3387] IPVS: starting estimator thread 0... [ 85.944846][ T5688] loop3: detected capacity change from 0 to 512 [ 85.945219][ T5688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.947073][ T5688] EXT4-fs: journaled quota format not specified [ 85.964363][ T5684] IPVS: using max 2016 ests per chain, 100800 per kthread [ 85.987818][ T5689] ref_ctr increment failed for inode: 0x355 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810542b600 [ 85.992017][ T5687] uprobe: syz.0.781:5687 failed to unregister, leaking uprobe [ 86.204388][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.256955][ T3387] IPVS: starting estimator thread 0... [ 86.349716][ T5706] IPVS: using max 2208 ests per chain, 110400 per kthread [ 86.360944][ T5715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.793'. [ 86.713267][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.811'. [ 87.026327][ T5755] netlink: 168 bytes leftover after parsing attributes in process `syz.5.808'. [ 87.146523][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b59b400: rx timeout, send abort [ 87.654852][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b59b400: abort rx timeout. Force session deactivation [ 87.886480][ T5780] loop1: detected capacity change from 0 to 512 [ 87.911071][ T5780] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.819: iget: bad i_size value: 38620345925642 [ 87.932912][ T5780] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.939661][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 87.954932][ T5780] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.819: couldn't read orphan inode 15 (err -117) [ 87.955320][ C1] EXT4-fs (loop1): initial error at time 1780938810: ext4_orphan_get:1397: inode 15 [ 87.976479][ C1] EXT4-fs (loop1): last error at time 1780938810: ext4_orphan_get:1397: inode 15 [ 87.984751][ T5780] loop1: lost filesystem error report for type 5 error -117 [ 87.988480][ T5780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.036255][ T5778] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.819: bg 0: block 5: invalid block bitmap [ 88.054973][ T5780] EXT4-fs (loop1): shut down requested (0) [ 88.078561][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.162506][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz.1.823'. [ 88.388328][ T5807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.829'. [ 88.409177][ T5807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.829'. [ 88.582499][ T5818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.835'. [ 88.791225][ T5853] netlink: 168 bytes leftover after parsing attributes in process `syz.3.850'. [ 88.832985][ T5855] xt_hashlimit: max too large, truncated to 1048576 [ 89.743736][ T5884] netlink: 'syz.5.862': attribute type 1 has an invalid length. [ 89.759731][ T5884] netlink: 'syz.5.862': attribute type 4 has an invalid length. [ 89.771968][ T5886] netlink: 'syz.0.863': attribute type 13 has an invalid length. [ 89.779936][ T5884] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.862'. [ 89.884509][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.865'. [ 89.910080][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 89.965327][ T5894] loop4: detected capacity change from 0 to 256 [ 90.084896][ T3402] IPVS: starting estimator thread 0... [ 90.179638][ T5901] IPVS: using max 2016 ests per chain, 100800 per kthread [ 90.183588][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 90.183636][ T28] audit: type=1400 audit(1780938812.900:539): avc: denied { write } for pid=5906 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.240757][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 90.315168][ T5918] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 90.375012][ T5927] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 90.413651][ T5930] loop1: detected capacity change from 0 to 256 [ 90.749311][ T28] audit: type=1400 audit(1780938813.460:540): avc: denied { lock } for pid=5941 comm="syz.1.883" path="socket:[15579]" dev="sockfs" ino=15579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 90.939223][ T28] audit: type=1400 audit(1780938813.650:541): avc: denied { setopt } for pid=5947 comm="syz.5.887" lport=39103 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 91.172981][ T28] audit: type=1400 audit(1780938813.890:542): avc: denied { watch watch_reads } for pid=5967 comm="syz.5.904" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 91.271993][ T3402] IPVS: starting estimator thread 0... [ 91.370333][ T5974] IPVS: using max 2352 ests per chain, 117600 per kthread [ 91.796955][ T28] audit: type=1400 audit(1780938814.510:543): avc: denied { create } for pid=6007 comm="syz.4.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.003602][ T28] audit: type=1400 audit(1780938814.720:544): avc: denied { append } for pid=6019 comm="syz.1.912" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.032838][ T6015] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 92.074471][ T6015] bond2 (unregistering): Released all slaves [ 92.137997][ T5988] loop3: detected capacity change from 0 to 512 [ 92.221808][ T5988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.279988][ T5988] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.414612][ T6028] netlink: 24 bytes leftover after parsing attributes in process `syz.5.915'. [ 92.469535][ T6028] netlink: 16 bytes leftover after parsing attributes in process `syz.5.915'. [ 92.469625][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.391263][ T28] audit: type=1400 audit(1780938816.110:545): avc: denied { nlmsg_read } for pid=6066 comm="syz.3.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 93.432281][ T6057] loop4: detected capacity change from 0 to 512 [ 93.467017][ T6057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.492405][ T6057] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.555869][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.645154][ T6085] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 93.879115][ T6111] netlink: 'syz.1.948': attribute type 2 has an invalid length. [ 93.941637][ T6118] netlink: 'syz.1.948': attribute type 2 has an invalid length. [ 94.150893][ T6128] macsec0: entered allmulticast mode [ 94.156904][ T6128] veth1_macvtap: entered allmulticast mode [ 94.163243][ T6128] macsec0: left allmulticast mode [ 94.168456][ T6128] veth1_macvtap: left allmulticast mode [ 95.032590][ T6156] 9p: Bad value for 'rfdno' [ 95.063996][ T6158] veth1_macvtap: left promiscuous mode [ 95.069879][ T6158] macsec0: entered allmulticast mode [ 95.084670][ T6158] veth1_macvtap: entered promiscuous mode [ 95.091806][ T6158] veth1_macvtap: entered allmulticast mode [ 95.098029][ T6158] macsec0: left allmulticast mode [ 95.104221][ T6158] veth1_macvtap: left allmulticast mode [ 95.180424][ T6160] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 95.193461][ T28] audit: type=1400 audit(1780938817.910:546): avc: denied { relabelto } for pid=6159 comm="syz.0.968" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 95.245009][ T28] audit: type=1400 audit(1780938817.910:547): avc: denied { associate } for pid=6159 comm="syz.0.968" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1058 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 95.309368][ T28] audit: type=1400 audit(1780938817.960:548): avc: denied { read } for pid=6159 comm="syz.0.968" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 95.363689][ T28] audit: type=1400 audit(1780938817.960:549): avc: denied { open } for pid=6159 comm="syz.0.968" path="/202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 95.412718][ T28] audit: type=1400 audit(1780938818.020:550): avc: denied { unlink } for pid=3298 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 95.422281][ T6162] loop1: detected capacity change from 0 to 256 [ 95.588093][ T6172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.984'. [ 95.605342][ T6172] netlink: 'syz.0.984': attribute type 7 has an invalid length. [ 95.625461][ T6172] netlink: 'syz.0.984': attribute type 8 has an invalid length. [ 95.633115][ T6162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.640741][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 95.648415][ T6162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.673761][ T6162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.690323][ T6161] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.700848][ T6161] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.736692][ T6161] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.747458][ T6162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.778302][ T6162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.864737][ T6162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 95.877186][ T6162] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 96.070286][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 96.070837][ T6179] netlink: 'syz.4.977': attribute type 1 has an invalid length. [ 96.081762][ T6178] netlink: 'syz.0.986': attribute type 30 has an invalid length. [ 96.121819][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 96.141660][ T346] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.144618][ T6182] netlink: 'syz.0.986': attribute type 30 has an invalid length. [ 96.151000][ T346] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.184655][ T346] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.193658][ T346] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.223940][ T6187] bond2: (slave gretap1): making interface the new active one [ 96.266366][ T6187] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 96.528350][ T28] audit: type=1400 audit(1780938819.240:551): avc: denied { name_connect } for pid=6200 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 96.598504][ T6206] netlink: 'syz.0.988': attribute type 10 has an invalid length. [ 96.609272][ T6206] syz_tun: entered promiscuous mode [ 96.622313][ T6206] syz_tun: entered allmulticast mode [ 96.631525][ T6206] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 96.640725][ T28] audit: type=1400 audit(1780938819.350:552): avc: denied { listen } for pid=6200 comm="syz.4.985" lport=53519 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.664736][ T28] audit: type=1400 audit(1780938819.350:553): avc: denied { accept } for pid=6200 comm="syz.4.985" lport=53519 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.665746][ T346] bridge0: port 2(bond0) entered blocking state [ 96.693883][ T346] bridge0: port 2(bond0) entered forwarding state [ 97.286569][ T6214] capability: warning: `syz.1.991' uses 32-bit capabilities (legacy support in use) [ 97.335399][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 97.724706][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.735022][ T6243] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.757946][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 97.771323][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.798994][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1005'. [ 97.841135][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.851308][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.863094][ T6243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.873944][ T6243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.887779][ T6243] veth1_vlan: left promiscuous mode [ 97.894073][ T6243] veth0_vlan: left promiscuous mode [ 97.900486][ T6243] veth0_vlan: entered promiscuous mode [ 97.909003][ T6243] veth1_vlan: entered promiscuous mode [ 97.919775][ T6243] veth1_macvtap: left promiscuous mode [ 97.927486][ T6243] veth0_macvtap: left promiscuous mode [ 97.934060][ T6243] veth0_macvtap: entered promiscuous mode [ 97.942021][ T6243] veth1_macvtap: entered promiscuous mode [ 97.954859][ T6243] 8021q: adding VLAN 0 to HW filter on device eth0 [ 97.963551][ T6243] 8021q: adding VLAN 0 to HW filter on device eth1 [ 97.973715][ T6243] 8021q: adding VLAN 0 to HW filter on device eth2 [ 97.982586][ T6243] 8021q: adding VLAN 0 to HW filter on device eth3 [ 98.006685][ T6263] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 98.061233][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 98.073314][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'. [ 98.116616][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.123815][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.134246][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.141442][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.178778][ T346] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.193840][ T147] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.223751][ T6263] bond3: entered promiscuous mode [ 98.229923][ T6263] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.238325][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.246172][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.260722][ T3352] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.270537][ T6265] bond3: (slave bridge2): making interface the new active one [ 98.278060][ T6265] bridge2: entered promiscuous mode [ 98.285170][ T6265] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 98.293959][ T147] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.302965][ T346] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.399730][ T3352] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 98.431043][ T6284] netlink: 'syz.4.1014': attribute type 10 has an invalid length. [ 98.458278][ T6284] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.467881][ T6284] team0: Failed to send port change of device netdevsim2 via netlink (err -105) [ 98.494017][ T28] audit: type=1326 audit(1780938821.200:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.1016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b7fce59 code=0x7ffc0000 [ 98.522718][ T6284] team0: Failed to send options change via netlink (err -105) [ 98.530882][ T6284] team0: Port device netdevsim2 added [ 98.536328][ T28] audit: type=1326 audit(1780938821.200:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.3.1016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b7fce59 code=0x7ffc0000 [ 98.836961][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.850414][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.857985][ T6255] bridge_slave_0: entered allmulticast mode [ 98.864777][ T6255] bridge_slave_0: entered promiscuous mode [ 98.872039][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.879252][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.887324][ T6255] bridge_slave_1: entered allmulticast mode [ 98.894023][ T6255] bridge_slave_1: entered promiscuous mode [ 98.927285][ T6255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.938093][ T6255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.960291][ T6255] team0: Port device team_slave_0 added [ 98.966958][ T6255] team0: Port device team_slave_1 added [ 98.985467][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.992521][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.036691][ T6255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.069178][ T6255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.087566][ T6255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.114668][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 99.124045][ T6255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.175953][ T6255] hsr_slave_0: entered promiscuous mode [ 99.184725][ T6255] hsr_slave_1: entered promiscuous mode [ 99.195290][ T6255] debugfs: 'hsr0' already exists in 'hsr' [ 99.201962][ T6255] Cannot create hsr debugfs directory [ 99.203004][ T6333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.240123][ T6333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.321044][ T6255] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.349063][ T6255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.365728][ T6255] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.393967][ T6255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.402854][ T6255] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.425342][ T6255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.434675][ T6255] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.444753][ T6255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.471574][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.478744][ T6255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.486131][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.493359][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.526115][ T6255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.542064][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.550611][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.574259][ T6255] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.584573][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.591777][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.611255][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.618370][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.726651][ T6348] loop4: detected capacity change from 0 to 128 [ 99.769401][ T6348] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.821833][ T6348] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.855070][ T3299] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.892337][ T6255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.185338][ T6255] veth0_vlan: entered promiscuous mode [ 100.208529][ T6255] veth1_vlan: entered promiscuous mode [ 100.255660][ T6255] veth0_macvtap: entered promiscuous mode [ 100.277144][ T6255] veth1_macvtap: entered promiscuous mode [ 100.312806][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.347578][ T6255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.381181][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.390477][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.415289][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.432312][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.488606][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 100.488621][ T28] audit: type=1400 audit(1780938823.200:588): avc: denied { mounton } for pid=6255 comm="syz-executor" path="/root/syzkaller.pWsIGL/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 100.580568][ T28] audit: type=1400 audit(1780938823.250:589): avc: denied { mount } for pid=6255 comm="syz-executor" name="/" dev="gadgetfs" ino=4675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 100.863655][ T6388] loop6: detected capacity change from 0 to 256 [ 101.199395][ T6388] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.231185][ T6388] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.258676][ T6388] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.286618][ T6387] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.301907][ T6387] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.313047][ T28] audit: type=1400 audit(1780938824.030:590): avc: denied { write } for pid=6403 comm="syz.3.1044" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.321821][ T6387] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.351973][ T6388] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.391383][ T6388] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.415662][ T6388] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.454007][ T6388] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 101.486055][ T6404] program syz.3.1044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.573963][ T6413] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1048'. [ 101.606242][ T6413] netlink: zone id is out of range [ 101.618865][ T6413] netlink: zone id is out of range [ 101.632088][ T6413] netlink: zone id is out of range [ 101.656884][ T6413] netlink: set zone limit has 8 unknown bytes [ 101.714975][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 102.363345][ T28] audit: type=1400 audit(1780938825.080:591): avc: denied { ioctl } for pid=6442 comm="syz.0.1059" path="net:[4026532389]" dev="nsfs" ino=4026532389 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 102.389643][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.691753][ T6467] netlink: 'syz.6.1070': attribute type 4 has an invalid length. [ 102.738148][ T6467] netlink: 'syz.6.1070': attribute type 4 has an invalid length. [ 102.883699][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.890926][ T6467] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.952795][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.963710][ T6467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.997580][ T68] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.014055][ T68] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.032075][ T68] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.049991][ T68] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.622991][ T6499] loop3: detected capacity change from 0 to 512 [ 103.664305][ T6499] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.1082: inode #1792: comm syz.3.1082: iget: illegal inode # [ 103.682279][ T6499] loop3: lost filesystem error report for type 5 error -117 [ 103.684009][ T6499] EXT4-fs (loop3): Remounting filesystem read-only [ 103.691386][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 103.691411][ C1] EXT4-fs (loop3): initial error at time 1780938826: ext4_get_journal_inode:5896 [ 103.691443][ C1] EXT4-fs (loop3): last error at time 1780938826: ext4_get_journal_inode:5896 [ 103.727098][ T6499] EXT4-fs (loop3): no journal found [ 103.732525][ T6499] EXT4-fs (loop3): can't get journal size [ 103.738523][ T6499] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 103.760336][ T6499] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 103.772201][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.872625][ T28] audit: type=1400 audit(1780938826.540:592): avc: denied { bind } for pid=6492 comm="syz.3.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.936933][ T6517] netlink: 'syz.5.1090': attribute type 5 has an invalid length. [ 103.947445][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.981472][ T6522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1093'. [ 104.022856][ T28] audit: type=1326 audit(1780938826.740:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.1091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b7fce59 code=0x7ffc0000 [ 104.070838][ T28] audit: type=1326 audit(1780938826.740:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.1091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b7fce59 code=0x7ffc0000 [ 104.097468][ T28] audit: type=1326 audit(1780938826.740:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.1091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b7fce59 code=0x7ffc0000 [ 104.142289][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 104.147449][ T28] audit: type=1326 audit(1780938826.740:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.1091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b7fce59 code=0x7ffc0000 [ 104.166726][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1095'. [ 104.230779][ T6528] team0: Port device team_slave_0 removed [ 104.244940][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 104.246012][ T28] audit: type=1326 audit(1780938826.740:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6523 comm="syz.3.1091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143b7fce59 code=0x7ffc0000 [ 104.256932][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 104.314466][ T6534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 104.542875][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1107'. [ 104.887830][ T6575] bridge0: port 2(bond0) entered disabled state [ 104.894334][ T6575] bridge0: port 1(vlan2) entered disabled state [ 105.027598][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.037298][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.049517][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.059162][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.071027][ T30] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.080876][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.090298][ T30] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.099341][ T30] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.942779][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.950056][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.001730][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.013500][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.098347][ T30] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.108335][ T30] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.119714][ T30] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.128738][ T30] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.233926][ T6628] loop3: detected capacity change from 0 to 1024 [ 106.251208][ T6628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.281672][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.407793][ T6644] loop6: detected capacity change from 0 to 128 [ 106.416949][ T6644] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.429223][ T6644] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.453203][ T6255] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.686924][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 106.686941][ T28] audit: type=1400 audit(1780938829.400:616): avc: denied { listen } for pid=6654 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.713802][ T28] audit: type=1400 audit(1780938829.400:617): avc: denied { accept } for pid=6654 comm="syz.4.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.893211][ T6688] bond0: (slave vlan3): Opening slave failed [ 108.029105][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 108.243153][ T28] audit: type=1400 audit(1780938830.960:618): avc: denied { setopt } for pid=6701 comm="syz.3.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.255467][ T6702] loop4: detected capacity change from 0 to 512 [ 108.302107][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 108.314891][ T6702] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.356881][ T6702] xt_limit: Overflow, try lower: 7/0 [ 108.398306][ T28] audit: type=1400 audit(1780938831.090:619): avc: denied { watch_reads } for pid=6712 comm="syz.0.1164" path="/248" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.458174][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 108.459484][ T28] audit: type=1400 audit(1780938831.170:620): avc: denied { write } for pid=6720 comm="syz.5.1169" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 108.571205][ T28] audit: type=1400 audit(1780938831.280:621): avc: denied { setopt } for pid=6728 comm="syz.6.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.683396][ T6731] loop6: detected capacity change from 0 to 256 [ 108.764884][ T6731] netlink: 'syz.6.1173': attribute type 83 has an invalid length. [ 109.032385][ T6758] loop4: detected capacity change from 0 to 512 [ 109.053480][ T6758] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 109.064836][ T6758] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1185: inode #15: comm syz.4.1185: iget: illegal inode # [ 109.092892][ T6758] loop4: lost filesystem error report for type 5 error -117 [ 109.094640][ T6758] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1185: couldn't read orphan inode 15 (err -117) [ 109.102055][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 109.102079][ C1] EXT4-fs (loop4): initial error at time 1780938831: ext4_orphan_get:1397 [ 109.102111][ C1] EXT4-fs (loop4): last error at time 1780938831: ext4_orphan_get:1397 [ 109.138902][ T6758] loop4: lost filesystem error report for type 5 error -117 [ 109.141668][ T6758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.217799][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.238371][ T28] audit: type=1400 audit(1780938831.950:622): avc: denied { mount } for pid=6770 comm="syz.5.1190" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.241218][ T6767] loop3: detected capacity change from 0 to 256 [ 109.263800][ T28] audit: type=1400 audit(1780938831.980:623): avc: denied { watch } for pid=6770 comm="syz.5.1190" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 109.318972][ T28] audit: type=1400 audit(1780938832.030:624): avc: denied { create } for pid=6775 comm="syz.5.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.445290][ T28] audit: type=1400 audit(1780938832.060:625): avc: denied { listen } for pid=6775 comm="syz.5.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.509406][ T6781] netlink: 'syz.5.1194': attribute type 1 has an invalid length. [ 109.572445][ T6783] ipvlan0: entered promiscuous mode [ 109.578452][ T6783] team0: Device ipvlan0 failed to register rx_handler [ 109.705792][ T6781] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.720855][ T6784] bond1: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 110.087104][ T6767] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.118745][ T6767] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.141867][ T6767] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.168622][ T6767] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.231944][ T6767] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.266394][ T6766] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.313083][ T6766] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.332776][ T6766] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.345598][ T6767] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.391048][ T6767] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.636009][ T6831] loop3: detected capacity change from 0 to 1024 [ 110.654467][ T6831] EXT4-fs: Ignoring removed bh option [ 110.687167][ T6831] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 110.713040][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.794024][ T6831] Invalid argument reading file caps for ./file0 [ 110.833806][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.119839][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 112.122648][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1228'. [ 112.353550][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1231'. [ 112.385761][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1232'. [ 112.451148][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 112.451164][ T28] audit: type=1400 audit(1780938835.170:635): avc: denied { name_bind } for pid=6879 comm="syz.5.1234" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 112.508205][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1236'. [ 112.552299][ T6888] loop3: detected capacity change from 0 to 512 [ 112.573829][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 112.582916][ T6888] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.593442][ T6888] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 112.785299][ T6894] netlink: 'syz.3.1239': attribute type 298 has an invalid length. [ 113.028944][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 113.047634][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 113.064442][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 113.077785][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 113.094570][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1245'. [ 113.469629][ T28] audit: type=1400 audit(1780938836.180:636): avc: denied { accept } for pid=6926 comm="syz.5.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 113.810782][ T6933] loop4: detected capacity change from 0 to 256 [ 113.824240][ T6939] bond1: entered allmulticast mode [ 113.842633][ T6939] macvlan2: entered promiscuous mode [ 113.854406][ T6939] macvlan2: entered allmulticast mode [ 113.865210][ T6939] bond1: (slave macvlan2): Opening slave failed [ 114.005920][ T6933] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.018208][ T6933] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.032452][ T6933] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.052684][ T6932] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.069826][ T6932] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.084446][ T6932] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.095608][ T6933] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.115302][ T6933] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.138059][ T6933] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.154422][ T6933] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.212728][ T6953] bridge_slave_1: left allmulticast mode [ 114.223544][ T6953] bridge_slave_1: left promiscuous mode [ 114.239949][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.249234][ T6953] bridge_slave_0: left allmulticast mode [ 114.258215][ T6953] bridge_slave_0: left promiscuous mode [ 114.270637][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.652941][ T28] audit: type=1400 audit(1780938837.370:637): avc: denied { read } for pid=6961 comm="syz.3.1268" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.734477][ T28] audit: type=1400 audit(1780938837.370:638): avc: denied { open } for pid=6961 comm="syz.3.1268" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.964002][ T6974] loop3: detected capacity change from 0 to 512 [ 114.993589][ T6974] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.007310][ T6976] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 115.032973][ T6974] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 115.065777][ T6974] EXT4-fs (loop3): orphan cleanup on readonly fs [ 115.099121][ T6974] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.1272: Allocating blocks 41-42 which overlap fs metadata [ 115.165522][ T6974] loop3: lost filesystem error report for type 5 error -117 [ 115.165878][ T6974] EXT4-fs (loop3): Remounting filesystem read-only [ 115.173282][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 115.173305][ C0] EXT4-fs (loop3): initial error at time 1780938837: ext4_mb_mark_diskspace_used:4222 [ 115.173337][ C0] EXT4-fs (loop3): last error at time 1780938837: ext4_mb_mark_diskspace_used:4222 [ 115.229537][ T6974] Quota error (device loop3): write_blk: dquota write failed [ 115.238652][ T6974] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 115.260060][ T6974] EXT4-fs (loop3): 1 truncate cleaned up [ 115.282070][ T6974] EXT4-fs (loop3): pa ffff8881089f1a10: logic 1, phys. 41, len 23 [ 115.312566][ T6974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 115.367053][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.439773][ T28] audit: type=1400 audit(1780938838.150:639): avc: denied { ioctl } for pid=6990 comm="syz.4.1279" path="socket:[21849]" dev="sockfs" ino=21849 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.486454][ T28] audit: type=1400 audit(1780938838.150:640): avc: denied { bind } for pid=6990 comm="syz.4.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.578399][ T7003] x_tables: duplicate underflow at hook 1 [ 115.973055][ T7039] loop4: detected capacity change from 0 to 256 [ 116.008486][ T7039] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.122269][ T28] audit: type=1400 audit(1780938838.840:641): avc: denied { listen } for pid=7046 comm="syz.6.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.150561][ T28] audit: type=1400 audit(1780938838.860:642): avc: denied { accept } for pid=7046 comm="syz.6.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.199410][ T7051] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 116.285983][ T7059] loop6: detected capacity change from 0 to 1024 [ 116.296305][ T7059] EXT4-fs: Ignoring removed bh option [ 116.315201][ T7059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.465559][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.517682][ T7074] tipc: Started in network mode [ 116.522857][ T7074] tipc: Node identity 9e0a71f1b21f, cluster identity 4711 [ 116.530286][ T7074] tipc: Enabled bearer , priority 0 [ 116.563377][ T7074] tipc: Resetting bearer [ 116.575803][ T7073] tipc: Resetting bearer [ 116.588071][ T7073] tipc: Disabling bearer [ 116.656030][ T7085] loop6: detected capacity change from 0 to 164 [ 116.663254][ T7085] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 116.890290][ T7103] loop6: detected capacity change from 0 to 1024 [ 116.899291][ T7103] EXT4-fs: Ignoring removed orlov option [ 116.931553][ T7103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.029032][ T6255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.304863][ T7126] loop6: detected capacity change from 0 to 8192 [ 117.461187][ T28] kauditd_printk_skb: 217 callbacks suppressed [ 117.461279][ T28] audit: type=1326 audit(1780938840.180:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.525263][ T28] audit: type=1326 audit(1780938840.210:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.565084][ T7126] syz.6.1335: attempt to access beyond end of device [ 117.565084][ T7126] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 117.591303][ T28] audit: type=1326 audit(1780938840.210:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.640082][ T7126] Buffer I/O error on dev loop6, logical block 57847, async page read [ 117.650222][ T28] audit: type=1326 audit(1780938840.210:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.694669][ T7126] syz.6.1335: attempt to access beyond end of device [ 117.694669][ T7126] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 117.714776][ T28] audit: type=1326 audit(1780938840.210:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.763563][ T7126] Buffer I/O error on dev loop6, logical block 57847, async page read [ 117.771936][ T28] audit: type=1326 audit(1780938840.220:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.817785][ T7126] syz.6.1335: attempt to access beyond end of device [ 117.817785][ T7126] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 117.833525][ T28] audit: type=1326 audit(1780938840.220:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.884890][ T28] audit: type=1326 audit(1780938840.220:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.917900][ T7126] Buffer I/O error on dev loop6, logical block 57847, async page read [ 117.944301][ T28] audit: type=1326 audit(1780938840.220:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 117.996396][ T28] audit: type=1326 audit(1780938840.220:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7104 comm="syz.4.1328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5159fd68e code=0x7ffc0000 [ 118.213349][ T7139] __nla_validate_parse: 9 callbacks suppressed [ 118.213369][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 118.369492][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1342'. [ 118.549420][ T7155] loop4: detected capacity change from 0 to 1024 [ 118.568467][ T7155] ext4: Unknown parameter 'nojournal' [ 118.801531][ T7174] syz_tun: entered allmulticast mode [ 118.809962][ T7172] syz_tun: left allmulticast mode [ 118.946217][ T7185] syz_tun: entered allmulticast mode [ 119.352099][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1366'. [ 119.371757][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1366'. [ 119.414890][ T7203] loop3: detected capacity change from 0 to 512 [ 119.443285][ T7203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.520674][ T7203] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.578331][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.104017][ T7259] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1389'. [ 120.114217][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1389'. [ 120.322028][ T7276] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1399'. [ 120.384610][ T7277] netlink: 'syz.6.1399': attribute type 2 has an invalid length. [ 120.901469][ T7289] IPv6: sit2: Disabled Multicast RS [ 121.263468][ T7330] team0: Port device gtp0 added [ 121.331202][ T7337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1428'. [ 121.379732][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1429'. [ 121.410316][ T7340] hsr_slave_1 (unregistering): left promiscuous mode [ 121.504032][ T7349] bridge1: entered allmulticast mode [ 121.590337][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 121.969805][ T7381] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 122.009121][ T7381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.031840][ T7381] gretap2: entered promiscuous mode [ 122.040252][ T7381] bond3: (slave gretap2): making interface the new active one [ 122.049347][ T7381] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 122.443725][ T7404] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1456'. [ 122.470278][ T28] kauditd_printk_skb: 330 callbacks suppressed [ 122.470317][ T28] audit: type=1400 audit(1780939101.186:1200): avc: denied { create } for pid=7407 comm="syz.6.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 122.512189][ T28] audit: type=1400 audit(1780939101.186:1201): avc: denied { read write } for pid=6255 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.543345][ T28] audit: type=1400 audit(1780939101.216:1202): avc: denied { bpf } for pid=7405 comm="syz.3.1457" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 122.617834][ T28] audit: type=1400 audit(1780939101.326:1203): avc: denied { read write } for pid=6255 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.662682][ T7415] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 122.665050][ T28] audit: type=1400 audit(1780939101.326:1204): avc: denied { execmem } for pid=7412 comm="syz.6.1460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 122.688456][ T28] audit: type=1400 audit(1780939101.356:1205): avc: denied { read write } for pid=6255 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.713038][ T28] audit: type=1400 audit(1780939101.376:1206): avc: denied { open } for pid=7414 comm="syz.6.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 122.732730][ T28] audit: type=1400 audit(1780939101.376:1207): avc: denied { open } for pid=7414 comm="syz.6.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 122.752261][ T28] audit: type=1400 audit(1780939101.376:1208): avc: denied { prog_load } for pid=7414 comm="syz.6.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.771535][ T28] audit: type=1400 audit(1780939101.406:1209): avc: denied { prog_load } for pid=7405 comm="syz.3.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 124.738818][ T7525] __nla_validate_parse: 2 callbacks suppressed [ 124.738832][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 124.754537][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1508'. [ 124.810396][ T7529] netlink: 'syz.0.1511': attribute type 1 has an invalid length. [ 124.832978][ T7529] bond4: (slave gretap3): making interface the new active one [ 124.841013][ T7529] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 125.507073][ T7559] syzkaller0: entered promiscuous mode [ 125.513494][ T7559] syzkaller0: entered allmulticast mode [ 125.738006][ T7570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.769259][ T7570] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 125.839882][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 125.959619][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 126.111187][ T7552] ================================================================== [ 126.119343][ T7552] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 126.126352][ T7552] [ 126.128717][ T7552] read-write to 0xffff88810e1c6064 of 4 bytes by task 7554 on cpu 1: [ 126.136812][ T7552] fifo_open+0x86/0x5d0 [ 126.141030][ T7552] do_dentry_open+0x4be/0xa90 [ 126.145743][ T7552] vfs_open+0x37/0x1e0 [ 126.149844][ T7552] path_openat+0x1b70/0x2050 [ 126.154481][ T7552] do_file_open+0x16c/0x290 [ 126.159038][ T7552] do_sys_openat2+0x94/0x130 [ 126.163665][ T7552] __x64_sys_openat+0xf2/0x120 [ 126.168464][ T7552] x64_sys_call+0x1e39/0x3020 [ 126.173201][ T7552] do_syscall_64+0x12c/0x3b0 [ 126.177847][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.183769][ T7552] [ 126.186106][ T7552] read to 0xffff88810e1c6064 of 4 bytes by task 7552 on cpu 0: [ 126.193675][ T7552] wait_for_partner+0x117/0x1e0 [ 126.198574][ T7552] fifo_open+0x462/0x5d0 [ 126.202852][ T7552] do_dentry_open+0x4be/0xa90 [ 126.207568][ T7552] vfs_open+0x37/0x1e0 [ 126.211676][ T7552] path_openat+0x1b70/0x2050 [ 126.216304][ T7552] do_file_open+0x16c/0x290 [ 126.220854][ T7552] do_sys_openat2+0x94/0x130 [ 126.225483][ T7552] __se_sys_openat2+0x193/0x1f0 [ 126.230367][ T7552] __x64_sys_openat2+0x55/0x70 [ 126.235179][ T7552] x64_sys_call+0x2170/0x3020 [ 126.239891][ T7552] do_syscall_64+0x12c/0x3b0 [ 126.244515][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.250434][ T7552] [ 126.252782][ T7552] value changed: 0x00000001 -> 0x00000002 [ 126.258520][ T7552] [ 126.260867][ T7552] Reported by Kernel Concurrency Sanitizer on: [ 126.267053][ T7552] CPU: 0 UID: 0 PID: 7552 Comm: syz.5.1521 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.276370][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.286449][ T7552] ================================================================== [ 126.438721][ T7554] ================================================================== [ 126.446880][ T7554] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 126.453897][ T7554] [ 126.456247][ T7554] read-write to 0xffff88810ceeb2a4 of 4 bytes by task 7552 on cpu 0: [ 126.464338][ T7554] fifo_open+0x17f/0x5d0 [ 126.468636][ T7554] do_dentry_open+0x4be/0xa90 [ 126.473358][ T7554] vfs_open+0x37/0x1e0 [ 126.477472][ T7554] path_openat+0x1b70/0x2050 [ 126.483145][ T7554] do_file_open+0x16c/0x290 [ 126.487687][ T7554] do_sys_openat2+0x94/0x130 [ 126.492317][ T7554] __se_sys_openat2+0x193/0x1f0 [ 126.497202][ T7554] __x64_sys_openat2+0x55/0x70 [ 126.502004][ T7554] x64_sys_call+0x2170/0x3020 [ 126.506732][ T7554] do_syscall_64+0x12c/0x3b0 [ 126.511362][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.517288][ T7554] [ 126.519632][ T7554] read to 0xffff88810ceeb2a4 of 4 bytes by task 7554 on cpu 1: [ 126.527200][ T7554] wait_for_partner+0x117/0x1e0 [ 126.532100][ T7554] fifo_open+0x462/0x5d0 [ 126.536377][ T7554] do_dentry_open+0x4be/0xa90 [ 126.541097][ T7554] vfs_open+0x37/0x1e0 [ 126.545194][ T7554] path_openat+0x1b70/0x2050 [ 126.549825][ T7554] do_file_open+0x16c/0x290 [ 126.554377][ T7554] do_sys_openat2+0x94/0x130 [ 126.558997][ T7554] __x64_sys_openat+0xf2/0x120 [ 126.564829][ T7554] x64_sys_call+0x1e39/0x3020 [ 126.569540][ T7554] do_syscall_64+0x12c/0x3b0 [ 126.574169][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.580103][ T7554] [ 126.582454][ T7554] value changed: 0x00000002 -> 0x00000001 [ 126.588192][ T7554] [ 126.590533][ T7554] Reported by Kernel Concurrency Sanitizer on: [ 126.596705][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.5.1521 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.606019][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.616106][ T7554] ================================================================== [ 128.399697][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!