last executing test programs: 1m7.457592984s ago: executing program 0 (id=1012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000d00)=ANY=[@ANYBLOB="0000f9aa"]) 1m4.67177271s ago: executing program 0 (id=1012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000d00)=ANY=[@ANYBLOB="0000f9aa"]) 1m4.36099657s ago: executing program 0 (id=1073): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x200000000000006, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000300060c10000000010000000000", 0x58}], 0x1) 1m4.252056173s ago: executing program 0 (id=1074): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000640)='./file0/file0\x00', 0x272) 1m4.205077594s ago: executing program 0 (id=1075): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) 1m3.3779381s ago: executing program 0 (id=1091): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0xd19df90c895ec8d4}, 0x7731c40f536f6b72) 1m3.36898758s ago: executing program 32 (id=1091): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0xd19df90c895ec8d4}, 0x7731c40f536f6b72) 18.131945326s ago: executing program 4 (id=1878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 17.992792601s ago: executing program 1 (id=1885): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 17.937966063s ago: executing program 1 (id=1886): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) close_range(r0, 0xffffffffffffffff, 0x0) 17.523500815s ago: executing program 1 (id=1892): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) listen(r0, 0xb) 17.429454358s ago: executing program 1 (id=1894): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 17.349718781s ago: executing program 1 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xd8}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 17.167539356s ago: executing program 1 (id=1901): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.145528827s ago: executing program 33 (id=1901): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.077337749s ago: executing program 4 (id=1902): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c"], 0x0, 0x56}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 16.954043243s ago: executing program 4 (id=1903): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 16.852920416s ago: executing program 4 (id=1905): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x889, 0x8, 0x2) 16.682886101s ago: executing program 4 (id=1906): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 15.933955894s ago: executing program 4 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001840)={@local, @random="efdd0ec57a04", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x2, 0x1c, 0x64, 0x0, 0x93, 0x2, 0x0, @local, @remote}, {0x12, 0x1, 0x0, @multicast2}}}}}, 0x0) 15.901030176s ago: executing program 34 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001840)={@local, @random="efdd0ec57a04", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x2, 0x1c, 0x64, 0x0, 0x93, 0x2, 0x0, @local, @remote}, {0x12, 0x1, 0x0, @multicast2}}}}}, 0x0) 2.200939701s ago: executing program 6 (id=2193): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000000, 0x0) close_range(r0, r1, 0x0) 1.506064413s ago: executing program 6 (id=2197): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000004c0)='mountinfo\x00') 1.328858148s ago: executing program 5 (id=2205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x3f0, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000000c080002400000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 1.232542471s ago: executing program 5 (id=2206): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 1.046850287s ago: executing program 7 (id=2212): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 1.046067327s ago: executing program 3 (id=2213): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x70) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='./file0\x00', 0x20009a2) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 976.94285ms ago: executing program 7 (id=2215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000500), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 954.46494ms ago: executing program 3 (id=2216): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 943.98739ms ago: executing program 5 (id=2217): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=""/75, 0x4b}, 0x6}], 0x1, 0x40010163, 0x0) 931.043431ms ago: executing program 7 (id=2218): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x6c190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x6, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r1, 0xd) 873.580382ms ago: executing program 5 (id=2219): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000000080)) 825.956464ms ago: executing program 7 (id=2220): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 824.810724ms ago: executing program 5 (id=2221): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r0, &(0x7f00000005c0)="ff539f09d1", 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 792.997775ms ago: executing program 2 (id=2223): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xdfffffffffffffff]}, &(0x7f0000000040), 0x0, 0x8) 765.607656ms ago: executing program 6 (id=2224): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd6, &(0x7f0000000240)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x9c, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "21bed94dba2ace839212dfe1cb3406fbcca6ecc0e7215e61acbd39fad1fc92bf", "9b91873ab093b1a4f5306d577fa197998c846136c8884c480b2baa4a341708daa6606e93e70edf6cbcd87c3aabcd1580", "852497edacb31cffc8cf69062b4d8bd691f02eed213de0a2a78f4529", {"5207b576c980b65768366e7803ca1cce", "6888b1eca40c1538af91184042ff9a1c"}}}}}}}}, 0x0) 753.319486ms ago: executing program 5 (id=2225): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 711.951987ms ago: executing program 7 (id=2226): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000f00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)='i', 0x1}], 0x1}, 0x8010) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 645.992839ms ago: executing program 6 (id=2227): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x818) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 521.959564ms ago: executing program 3 (id=2228): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b7}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 436.476496ms ago: executing program 3 (id=2229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x20, 0x8, 0x9, r1, 0x0}]) 434.708986ms ago: executing program 2 (id=2239): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x401, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 367.424378ms ago: executing program 6 (id=2230): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f00000001c0), 0x0, 0x176, 0x402) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149014006040800", 0x58}], 0x1) 366.823188ms ago: executing program 2 (id=2231): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 254.013992ms ago: executing program 3 (id=2232): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008011}, 0x4008004) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="020000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 126.499516ms ago: executing program 7 (id=2233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 82.014187ms ago: executing program 6 (id=2234): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, 0x0, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000080)="01", 0x1) 81.879917ms ago: executing program 2 (id=2235): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 37.258098ms ago: executing program 3 (id=2236): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/248, 0xf8}, {0x0}, {&(0x7f0000000580)=""/33, 0x21}, {&(0x7f00000005c0)=""/216, 0xd8}, {&(0x7f00000006c0)=""/245, 0xf5}], 0x5, &(0x7f0000000840)=""/100, 0x64}, 0x91c}], 0x1, 0x22, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 36.677688ms ago: executing program 2 (id=2237): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=2238): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f0000000700)) kernel console output (not intermixed with test programs): ] veth0_macvtap: left promiscuous mode [ 94.922588][ T6294] veth1_vlan: left promiscuous mode [ 94.934430][ T6294] veth0_vlan: left promiscuous mode [ 95.105645][ T6294] team0 (unregistering): Port device team_slave_1 removed [ 95.123595][ T6294] team0 (unregistering): Port device team_slave_0 removed [ 95.173942][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 95.183509][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 95.226424][ T6305] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.234946][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 95.244322][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1159'. [ 95.255353][ T6305] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.264420][ T6305] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.277879][ T6305] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.347188][ T28] audit: type=1326 audit(1780710756.511:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6655 comm="syz.4.1160" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d9b0dce59 code=0x0 [ 95.389440][ T28] audit: type=1400 audit(1780710756.521:682): avc: denied { sqpoll } for pid=6659 comm="syz.2.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 95.392567][ T6664] netlink: 'syz.5.1163': attribute type 4 has an invalid length. [ 95.450574][ T6664] netlink: 'syz.5.1163': attribute type 4 has an invalid length. [ 95.516547][ T28] audit: type=1400 audit(1780710756.681:683): avc: denied { write } for pid=6654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.576755][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1168'. [ 95.586618][ T28] audit: type=1400 audit(1780710756.751:684): avc: denied { write } for pid=6685 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.669392][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 95.773800][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.781042][ T6708] bridge0: port 2(bridge_slave_1) entered listening state [ 95.788451][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.795631][ T6708] bridge0: port 1(bridge_slave_0) entered listening state [ 95.936012][ T6708] macvlan2: left promiscuous mode [ 95.998045][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 96.008170][ T6737] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1184'. [ 96.146512][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1188'. [ 96.218397][ T6767] gtp0: entered allmulticast mode [ 96.276818][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 96.841915][ T6806] ip6gre1: entered promiscuous mode [ 96.847589][ T6806] ip6gre1: entered allmulticast mode [ 96.867387][ T6806] syz.2.1207 (6806) used greatest stack depth: 9216 bytes left [ 97.180458][ T6827] veth0: entered promiscuous mode [ 97.187435][ T6827] veth0: left promiscuous mode [ 97.204812][ T6825] loop4: detected capacity change from 0 to 512 [ 97.223479][ T6825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 97.236256][ T6825] System zones: 1-12 [ 97.244418][ T6825] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1215: corrupted in-inode xattr: e_value size too large [ 97.259744][ T6825] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.260419][ T6825] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1215: couldn't read orphan inode 15 (err -117) [ 97.269709][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 97.269774][ C1] EXT4-fs (loop4): initial error at time 1780710758: ext4_iget_extra_inode:5128: inode 15 [ 97.269888][ C1] EXT4-fs (loop4): last error at time 1780710758: ext4_iget_extra_inode:5128: inode 15 [ 97.309531][ T6825] loop4: lost filesystem error report for type 5 error -117 [ 97.312076][ T6825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.445189][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.155241][ T6906] batadv_slave_1: entered promiscuous mode [ 98.161863][ T6905] batadv_slave_1: left promiscuous mode [ 98.385091][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 98.385110][ T28] audit: type=1326 audit(1780710759.551:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6925 comm="syz.3.1260" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa39117ce59 code=0x0 [ 98.471321][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1261'. [ 98.480497][ T6931] netlink: 'syz.5.1261': attribute type 4 has an invalid length. [ 98.747448][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1268'. [ 98.774957][ T6950] netlink: 'syz.5.1269': attribute type 12 has an invalid length. [ 98.783158][ T6950] netlink: 'syz.5.1269': attribute type 29 has an invalid length. [ 98.792232][ T6950] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1269'. [ 98.801522][ T6950] netlink: 'syz.5.1269': attribute type 3 has an invalid length. [ 98.809569][ T6950] netlink: 'syz.5.1269': attribute type 2 has an invalid length. [ 98.817613][ T6950] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1269'. [ 98.832659][ T6950] netlink: 'syz.5.1269': attribute type 12 has an invalid length. [ 98.841718][ T6950] netlink: 'syz.5.1269': attribute type 29 has an invalid length. [ 98.851088][ T6950] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1269'. [ 98.860572][ T6950] netlink: 'syz.5.1269': attribute type 3 has an invalid length. [ 98.868508][ T6950] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1269'. [ 99.072015][ T3386] IPVS: starting estimator thread 0... [ 99.148642][ T6972] loop5: detected capacity change from 0 to 1024 [ 99.166699][ T6966] IPVS: using max 2256 ests per chain, 112800 per kthread [ 99.176971][ T6972] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 99.191074][ T6972] System zones: 0-1, 3-8 [ 99.203598][ T6972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.242931][ T6972] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.266491][ T28] audit: type=1400 audit(1780710760.431:720): avc: denied { write } for pid=6971 comm="syz.5.1279" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.268645][ T6972] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1279: bg 0: block 112: padding at end of block bitmap is not set [ 99.313093][ T28] audit: type=1400 audit(1780710760.441:721): avc: denied { write } for pid=6971 comm="syz.5.1279" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.346514][ T6971] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 4: comm syz.5.1279: lblock 4 mapped to illegal pblock 4 (length 1) [ 99.413794][ T3804] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.419997][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.501746][ T6991] sg_write: data in/out 512/136 bytes for SCSI command 0x0-- guessing data in; [ 99.501746][ T6991] program syz.4.1286 not setting count and/or reply_len properly [ 99.636847][ T6999] loop4: detected capacity change from 0 to 128 [ 99.692717][ T6999] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.705194][ T6999] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.720902][ T28] audit: type=1400 audit(1780710760.891:722): avc: denied { write } for pid=6998 comm="syz.4.1290" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.756544][ T28] audit: type=1400 audit(1780710760.891:723): avc: denied { map } for pid=6998 comm="syz.4.1290" path="/216/file1/cpu.stat" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.799648][ T28] audit: type=1400 audit(1780710760.891:724): avc: denied { execute } for pid=6998 comm="syz.4.1290" path="/216/file1/cpu.stat" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 100.352561][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.481107][ T7016] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1297'. [ 100.553784][ T28] audit: type=1400 audit(1780710761.721:725): avc: denied { getopt } for pid=7019 comm="syz.3.1299" lport=55022 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 100.668587][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1307'. [ 100.711215][ T7038] loop2: detected capacity change from 0 to 1024 [ 100.758206][ T7038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.809011][ T7038] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.1308: casefold flag without casefold feature [ 100.898065][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.979712][ T3407] IPVS: starting estimator thread 0... [ 101.077376][ T7052] IPVS: using max 1824 ests per chain, 91200 per kthread [ 101.347398][ T7076] loop2: detected capacity change from 0 to 512 [ 101.386914][ T7076] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 101.615099][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 101.662436][ T7085] loop2: detected capacity change from 0 to 512 [ 101.668939][ T28] audit: type=1326 audit(1780710762.831:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7084 comm="syz.4.1326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9b0dce59 code=0x0 [ 101.737433][ T7085] EXT4-fs (loop2): 1 truncate cleaned up [ 101.746994][ T7085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.770835][ T28] audit: type=1400 audit(1780710762.941:727): avc: denied { write } for pid=7075 comm="syz.2.1323" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.772274][ T7076] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1323: bg 0: block 465: padding at end of block bitmap is not set [ 101.808610][ T7076] EXT4-fs (loop2): Remounting filesystem read-only [ 101.815328][ T7076] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 101.827133][ T28] audit: type=1400 audit(1780710762.941:728): avc: denied { write } for pid=7075 comm="syz.2.1323" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.913254][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.551013][ T7186] sg_write: data in/out 3171656/14 bytes for SCSI command 0x0-- guessing data in; [ 102.551013][ T7186] program syz.4.1332 not setting count and/or reply_len properly [ 102.687389][ T7210] validate_nla: 1 callbacks suppressed [ 102.687410][ T7210] netlink: 'syz.5.1333': attribute type 1 has an invalid length. [ 102.753550][ T7210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.781628][ T7210] bond1: (slave geneve2): making interface the new active one [ 102.791921][ T7210] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 102.925456][ T7228] IPVS: Scheduler module ip_vs_ not found [ 102.972935][ T7235] loop2: detected capacity change from 0 to 512 [ 103.011536][ T7235] EXT4-fs: Ignoring removed bh option [ 103.026196][ T7235] EXT4-fs: inline encryption not supported [ 103.080076][ T7235] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.164788][ T7235] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 103.212259][ T7235] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1339: bg 0: block 248: padding at end of block bitmap is not set [ 103.229790][ T7235] loop2: lost filesystem error report for type 5 error -117 [ 103.236469][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 103.250312][ C0] EXT4-fs (loop2): last error at time 1780710764: ext4_validate_block_bitmap:441 [ 103.250574][ T7235] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1339: Failed to acquire dquot type 1 [ 103.289507][ T7235] loop2: lost filesystem error report for type 5 error -28 [ 103.290100][ T7235] EXT4-fs (loop2): 1 truncate cleaned up [ 103.315791][ T7235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 103.804719][ T7252] loop4: detected capacity change from 0 to 512 [ 103.822294][ T7252] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.850825][ T7252] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 103.901322][ T7252] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 103.919765][ T7252] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 103.937976][ T7252] System zones: 0-2, 18-18, 34-35 [ 103.959182][ T7252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.986726][ T7223] syz.2.1339 (7223) used greatest stack depth: 8592 bytes left [ 104.041300][ T6296] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.053434][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 104.053449][ T28] audit: type=1400 audit(1780710765.221:733): avc: denied { write } for pid=7251 comm="syz.4.1347" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.093299][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 104.136342][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.258879][ T7264] vlan2: entered allmulticast mode [ 104.276935][ T7264] bond_slave_1: entered allmulticast mode [ 104.321973][ T7266] vlan2: entered allmulticast mode [ 104.390120][ T7268] ipip1: entered promiscuous mode [ 104.396350][ T7268] ipip1: entered allmulticast mode [ 104.443009][ T28] audit: type=1400 audit(1780710765.611:734): avc: denied { bind } for pid=7270 comm="syz.4.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.503646][ T7353] loop4: detected capacity change from 0 to 8192 [ 105.526341][ T7353] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.746045][ T28] audit: type=1400 audit(1780710766.911:735): avc: denied { accept } for pid=7381 comm="syz.5.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.060579][ T4815] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.066947][ T3804] Bluetooth: hci0: command 0x1003 tx timeout [ 106.359948][ T7446] loop5: detected capacity change from 0 to 512 [ 106.417318][ T7446] EXT4-fs: Ignoring removed bh option [ 106.438214][ T7446] EXT4-fs: inline encryption not supported [ 106.459587][ T7446] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.512486][ T7446] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 106.547911][ T7446] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1394: bg 0: block 248: padding at end of block bitmap is not set [ 106.586806][ T7446] loop5: lost filesystem error report for type 5 error -117 [ 106.587156][ T7446] Quota error (device loop5): write_blk: dquota write failed [ 106.601961][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 106.601979][ C0] EXT4-fs (loop5): last error at time 1780710767: ext4_validate_block_bitmap:441 [ 106.628391][ T7446] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 106.638455][ T7446] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1394: Failed to acquire dquot type 1 [ 106.649736][ T7446] loop5: lost filesystem error report for type 5 error -28 [ 106.650341][ T7446] EXT4-fs (loop5): 1 truncate cleaned up [ 106.663792][ T7446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 106.759963][ T7443] syz.5.1394 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 106.773373][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.5.1394 Not tainted syzkaller #0 PREEMPT(lazy) [ 106.773404][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.773416][ T7443] Call Trace: [ 106.773429][ T7443] [ 106.773492][ T7443] __dump_stack+0x1d/0x30 [ 106.773518][ T7443] dump_stack_lvl+0x95/0xd0 [ 106.773539][ T7443] dump_stack+0x15/0x1b [ 106.773576][ T7443] dump_header+0x80/0x240 [ 106.773649][ T7443] oom_kill_process+0x295/0x350 [ 106.773686][ T7443] out_of_memory+0x97d/0xb80 [ 106.773718][ T7443] try_charge_memcg+0x62f/0xa10 [ 106.773767][ T7443] charge_memcg+0x6d/0x120 [ 106.773793][ T7443] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 106.773836][ T7443] __swap_cache_prepare_and_add+0x69/0x4a0 [ 106.773867][ T7443] ? alloc_pages_mpol+0x217/0x260 [ 106.773966][ T7443] swap_cache_alloc_folio+0xa2/0x120 [ 106.774042][ T7443] swap_cluster_readahead+0x25f/0x3c0 [ 106.774079][ T7443] swapin_readahead+0xde/0x840 [ 106.774170][ T7443] ? _raw_spin_unlock+0x9/0x30 [ 106.774189][ T7443] ? swap_put_entries_cluster+0x46c/0x490 [ 106.774262][ T7443] ? __rcu_read_unlock+0x4e/0x70 [ 106.774293][ T7443] ? swap_cache_get_folio+0x1e0/0x1f0 [ 106.774317][ T7443] do_swap_page+0x31e/0x2180 [ 106.774388][ T7443] ? __css_rstat_updated+0xbb/0x280 [ 106.774417][ T7443] ? __rcu_read_lock+0x36/0x50 [ 106.774493][ T7443] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 106.774526][ T7443] handle_mm_fault+0xb30/0x2e70 [ 106.774562][ T7443] ? vma_start_read+0x1c7/0x2c0 [ 106.774714][ T7443] do_user_addr_fault+0x62f/0x1050 [ 106.774749][ T7443] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 106.774780][ T7443] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 106.774811][ T7443] ? trace_page_fault_user+0x1f/0xa0 [ 106.774869][ T7443] exc_page_fault+0x62/0xa0 [ 106.774902][ T7443] asm_exc_page_fault+0x26/0x30 [ 106.774930][ T7443] RIP: 0033:0x7ff63ba0ecb9 [ 106.774950][ T7443] Code: ff 48 8b 7b 40 01 6b 30 4c 89 f2 31 f6 4c 29 f7 48 89 7b 40 e8 e8 c4 fd ff 44 89 e0 44 29 e8 3d ff ff 00 00 0f 87 3d 02 00 00 <48> 8b 6b 40 48 85 ed 0f 84 2b 02 00 00 66 89 45 02 48 8b 73 48 0f [ 106.775053][ T7443] RSP: 002b:00007ffe68059630 EFLAGS: 00010297 [ 106.775073][ T7443] RAX: 0000000000000010 RBX: 00007ff63c8e5720 RCX: 000000000000000a [ 106.775090][ T7443] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000001b30c10d70 [ 106.775106][ T7443] RBP: 000000000000000c R08: 0000000000000008 R09: 00007ff63bdb6128 [ 106.775123][ T7443] R10: 0000000000000003 R11: 0000000000000004 R12: 0000000000013284 [ 106.775139][ T7443] R13: 0000000000013274 R14: 000000000000000c R15: 0000000000000000 [ 106.775162][ T7443] [ 106.775438][ T7443] memory: usage 307200kB, limit 307200kB, failcnt 251 [ 107.037118][ T7443] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 107.066935][ T7443] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 107.077578][ T7443] Memory cgroup stats for /syz5: [ 107.077865][ T7443] cache 32768 [ 107.086220][ T7443] rss 0 [ 107.089237][ T7443] shmem 0 [ 107.092219][ T7443] mapped_file 4370432 [ 107.096218][ T7443] dirty 0 [ 107.111960][ T7443] writeback 0 [ 107.120780][ T7443] workingset_refault_anon 21 [ 107.132941][ T7443] workingset_refault_file 0 [ 107.144929][ T7443] swap 458752 [ 107.153494][ T7443] swapcached 552960 [ 107.164239][ T7443] pgpgin 6353 [ 107.171841][ T28] audit: type=1400 audit(1780710768.341:736): avc: denied { write } for pid=7450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.197807][ T7443] pgpgout 6344 [ 107.205319][ T7443] pgfault 15563 [ 107.213610][ T7443] pgmajfault 18 [ 107.218948][ T7443] inactive_anon 0 [ 107.227064][ T7443] active_anon 4096 [ 107.238573][ T7443] inactive_file 0 [ 107.249459][ T7443] active_file 32768 [ 107.256302][ T28] audit: type=1400 audit(1780710768.421:737): avc: denied { write } for pid=7474 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.285461][ T7443] unevictable 0 [ 107.291941][ T7443] hierarchical_memory_limit 314572800 [ 107.300370][ T7443] hierarchical_memsw_limit 9223372036854771712 [ 107.315928][ T7443] total_cache 32768 [ 107.328296][ T7443] total_rss 0 [ 107.335485][ T7443] total_shmem 0 [ 107.358096][ T7443] total_mapped_file 4370432 [ 107.367284][ T7443] total_dirty 0 [ 107.373784][ T7443] total_writeback 0 [ 107.383859][ T7443] total_workingset_refault_anon 21 [ 107.395222][ T7443] total_workingset_refault_file 0 [ 107.406430][ T7443] total_swap 458752 [ 107.413506][ T7443] total_swapcached 552960 [ 107.423543][ T7443] total_pgpgin 6353 [ 107.432058][ T7443] total_pgpgout 6344 [ 107.440704][ T7443] total_pgfault 15563 [ 107.449466][ T7443] total_pgmajfault 18 [ 107.456719][ T7443] total_inactive_anon 0 [ 107.465495][ T7443] total_active_anon 4096 [ 107.474446][ T7443] total_inactive_file 0 [ 107.483343][ T7443] total_active_file 32768 [ 107.492636][ T7443] total_unevictable 0 [ 107.501517][ T7443] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1394,pid=7443,uid=0 [ 107.526488][ T28] audit: type=1400 audit(1780710768.691:738): avc: denied { write } for pid=7479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.566651][ T7443] Memory cgroup out of memory: Killed process 7443 (syz.5.1394) total-vm:96348kB, anon-rss:1232kB, file-rss:26440kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 107.583955][ T28] audit: type=1400 audit(1780710768.721:739): avc: denied { write } for pid=7491 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.728092][ T28] audit: type=1400 audit(1780710768.901:740): avc: denied { write } for pid=7494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.497656][ T6334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 109.721928][ T7543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1413'. [ 109.751697][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.758932][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.771187][ T7543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1413'. [ 109.903391][ T7558] loop2: detected capacity change from 0 to 1024 [ 109.911491][ T7558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.916375][ T6301] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.932569][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.943101][ T7558] EXT4-fs: inline encryption not supported [ 109.968484][ T7558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.001130][ T7558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.014311][ T7558] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.025921][ T6301] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.036404][ T7558] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1417: Freeing blocks not in datazone - block = 0, count = 16 [ 110.037183][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 110.037225][ T28] audit: type=1400 audit(1780710771.201:744): avc: denied { write } for pid=7557 comm="syz.2.1417" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.055880][ T7558] EXT4-fs (loop2): Remounting filesystem read-only [ 110.095137][ T28] audit: type=1400 audit(1780710771.201:745): avc: denied { append } for pid=7557 comm="syz.2.1417" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.119661][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.160317][ T6301] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.234966][ T6301] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.283798][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.300620][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.308360][ T7544] bridge_slave_0: entered allmulticast mode [ 110.315789][ T7544] bridge_slave_0: entered promiscuous mode [ 110.333257][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.341607][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.348927][ T7544] bridge_slave_1: entered allmulticast mode [ 110.355734][ T7544] bridge_slave_1: entered promiscuous mode [ 110.429607][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.448560][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.460343][ T6301] bridge_slave_1: left allmulticast mode [ 110.468986][ T6301] bridge_slave_1: left promiscuous mode [ 110.474826][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.482960][ T6301] bridge_slave_0: left allmulticast mode [ 110.488931][ T6301] bridge_slave_0: left promiscuous mode [ 110.494695][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.553197][ T6301] bond1 (unregistering): (slave geneve2): Releasing active interface [ 110.589086][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.600538][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.610807][ T6301] bond0 (unregistering): Released all slaves [ 110.619262][ T6301] bond1 (unregistering): Released all slaves [ 110.668323][ T7544] team0: Port device team_slave_0 added [ 110.681808][ T6301] hsr_slave_0: left promiscuous mode [ 110.699559][ T6301] hsr_slave_1: left promiscuous mode [ 110.705709][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.713855][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.721821][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.729658][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.748871][ T6301] batadv0: left promiscuous mode [ 110.756642][ T6301] veth1_macvtap: left promiscuous mode [ 110.769117][ T6301] veth0_macvtap: left promiscuous mode [ 110.778953][ T6301] veth1_vlan: left promiscuous mode [ 110.784289][ T6301] veth0_vlan: left promiscuous mode [ 110.854135][ T28] audit: type=1400 audit(1780710772.021:746): avc: denied { write } for pid=7628 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.904012][ T28] audit: type=1400 audit(1780710772.071:747): avc: denied { write } for pid=7651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.964958][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 110.975773][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 111.018477][ T7544] team0: Port device team_slave_1 added [ 111.121015][ T7689] netlink: 'syz.2.1423': attribute type 10 has an invalid length. [ 111.136275][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 111.160982][ T7689] team0: Port device dummy0 added [ 111.170455][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.177827][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.204208][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.215887][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.223025][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.249299][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.336611][ T7544] hsr_slave_0: entered promiscuous mode [ 111.351433][ T7544] hsr_slave_1: entered promiscuous mode [ 111.357653][ T7544] debugfs: 'hsr0' already exists in 'hsr' [ 111.363434][ T7544] Cannot create hsr debugfs directory [ 111.429435][ T28] audit: type=1400 audit(1780710772.601:748): avc: denied { mounton } for pid=7704 comm="syz.3.1428" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.506528][ T7563] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.513725][ T7563] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.521252][ T7563] bridge_slave_0: entered allmulticast mode [ 111.528129][ T7563] bridge_slave_0: entered promiscuous mode [ 111.569517][ T7563] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.580380][ T28] audit: type=1400 audit(1780710772.751:749): avc: denied { write } for pid=7697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.606780][ T7563] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.614359][ T7563] bridge_slave_1: entered allmulticast mode [ 111.621378][ T7563] bridge_slave_1: entered promiscuous mode [ 111.647036][ T28] audit: type=1400 audit(1780710772.811:750): avc: denied { write } for pid=7727 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.658695][ T6301] IPVS: stop unused estimator thread 0... [ 111.686062][ T7544] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.711729][ T7544] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.751843][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 111.772486][ T28] audit: type=1326 audit(1780710772.941:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ea00ce59 code=0x7ffc0000 [ 111.798619][ T28] audit: type=1326 audit(1780710772.941:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ea00ce59 code=0x7ffc0000 [ 111.801959][ T7563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.827993][ T28] audit: type=1326 audit(1780710772.941:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7737 comm="syz.2.1433" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f36ea00ce59 code=0x7ffc0000 [ 111.837184][ T7563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.875295][ T7544] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.885734][ T7544] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.906187][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1434'. [ 111.910038][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.922442][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.929952][ T7589] bridge_slave_0: entered allmulticast mode [ 111.936734][ T7589] bridge_slave_0: entered promiscuous mode [ 111.954073][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.961637][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.969187][ T7589] bridge_slave_1: entered allmulticast mode [ 111.984828][ T7589] bridge_slave_1: entered promiscuous mode [ 111.997014][ T7544] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.007189][ T7544] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.021880][ T6301] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.037373][ T7563] team0: Port device team_slave_0 added [ 112.062998][ T7563] team0: Port device team_slave_1 added [ 112.072047][ T7544] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.089603][ T7544] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.120683][ T7589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.133596][ T7589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.188117][ T6301] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.219274][ T7563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.226396][ T7563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.253067][ T7563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.265902][ T7589] team0: Port device team_slave_0 added [ 112.275438][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 112.283224][ T7563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.292365][ T7563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.318865][ T7563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.333628][ T7589] team0: Port device team_slave_1 added [ 112.355882][ T6301] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.376591][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.384259][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.411319][ T7589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.441452][ T6301] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.462874][ T7563] hsr_slave_0: entered promiscuous mode [ 112.469792][ T7563] hsr_slave_1: entered promiscuous mode [ 112.475864][ T7563] debugfs: 'hsr0' already exists in 'hsr' [ 112.482155][ T7563] Cannot create hsr debugfs directory [ 112.488309][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.495589][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.522723][ T7589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.576957][ T7544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.585992][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.609901][ T7589] hsr_slave_0: entered promiscuous mode [ 112.616274][ T7589] hsr_slave_1: entered promiscuous mode [ 112.622570][ T7589] debugfs: 'hsr0' already exists in 'hsr' [ 112.628761][ T7589] Cannot create hsr debugfs directory [ 112.650688][ T7544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.659454][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.667461][ T7544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.676950][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.706797][ T7544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.715899][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.758283][ T6301] bridge_slave_1: left allmulticast mode [ 112.764054][ T6301] bridge_slave_1: left promiscuous mode [ 112.770013][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.786007][ T6301] bridge_slave_0: left allmulticast mode [ 112.792030][ T6301] bridge_slave_0: left promiscuous mode [ 112.802817][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.040080][ T6301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.050214][ T6301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.060265][ T6301] bond0 (unregistering): Released all slaves [ 113.083171][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 113.134548][ T6301] hsr_slave_0: left promiscuous mode [ 113.140610][ T6301] hsr_slave_1: left promiscuous mode [ 113.146347][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.154049][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.161796][ T6301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.169477][ T6301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.179463][ T6301] veth1_macvtap: left promiscuous mode [ 113.184942][ T6301] veth0_macvtap: left promiscuous mode [ 113.190525][ T6301] veth1_vlan: left promiscuous mode [ 113.195779][ T6301] veth0_vlan: left promiscuous mode [ 113.268372][ T6301] team0 (unregistering): Port device team_slave_1 removed [ 113.278846][ T6301] team0 (unregistering): Port device team_slave_0 removed [ 113.390672][ T7804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.400529][ T7804] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.410216][ T7804] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 113.420175][ T7804] vxlan0: left promiscuous mode [ 113.427428][ T7804] 8021q: adding VLAN 0 to HW filter on device eth0 [ 113.436196][ T7804] 8021q: adding VLAN 0 to HW filter on device eth1 [ 113.445623][ T7804] 8021q: adding VLAN 0 to HW filter on device eth2 [ 113.455127][ T7804] 8021q: adding VLAN 0 to HW filter on device eth3 [ 113.466087][ T7804] macvlan4: left promiscuous mode [ 113.473599][ T7804] macvlan5: left promiscuous mode [ 113.480385][ T7804] ipip1: left promiscuous mode [ 113.485593][ T3520] team_slave_0: entered promiscuous mode [ 113.491474][ T3520] team_slave_1: entered promiscuous mode [ 113.549554][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 113.593521][ T7544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.617599][ T7544] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.627380][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.634487][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.655876][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.663008][ T6304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.852458][ T7563] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.867971][ T7563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.877384][ T7563] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.894297][ T7563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.912401][ T7563] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.927212][ T7563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.941574][ T7563] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.952476][ T7563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.968760][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 114.038092][ T7544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.058618][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.065928][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.073401][ T7809] bridge_slave_0: entered allmulticast mode [ 114.081016][ T7809] bridge_slave_0: entered promiscuous mode [ 114.103422][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.111060][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.118918][ T7809] bridge_slave_1: entered allmulticast mode [ 114.125727][ T7809] bridge_slave_1: entered promiscuous mode [ 114.176751][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.187812][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.227985][ T7563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.237075][ T7809] team0: Port device team_slave_0 added [ 114.244003][ T7809] team0: Port device team_slave_1 added [ 114.260154][ T7589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.269755][ T7589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.279164][ T7589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.288572][ T7589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.315275][ T7589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.325031][ T7589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.345774][ T7589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.359761][ T7589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.370580][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.377859][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.404159][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.417339][ T7563] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.445266][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.453942][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.482941][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.504970][ T7933] netlink: 'syz.3.1454': attribute type 4 has an invalid length. [ 114.519747][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.526940][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.562420][ T7928] netlink: 'syz.3.1454': attribute type 4 has an invalid length. [ 114.570962][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.578117][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.637784][ T7809] hsr_slave_0: entered promiscuous mode [ 114.647560][ T7809] hsr_slave_1: entered promiscuous mode [ 114.653609][ T7809] debugfs: 'hsr0' already exists in 'hsr' [ 114.659800][ T7809] Cannot create hsr debugfs directory [ 114.685560][ T7544] veth0_vlan: entered promiscuous mode [ 114.758407][ T7544] veth1_vlan: entered promiscuous mode [ 114.795101][ T7589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.840909][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 114.843233][ T7544] veth0_macvtap: entered promiscuous mode [ 114.890351][ T7544] veth1_macvtap: entered promiscuous mode [ 114.901913][ T7809] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.912466][ T7809] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.938643][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.951479][ T7589] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.962678][ T7809] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.973479][ T7809] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.986926][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.999429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.006559][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.031147][ T6294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.053052][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.060286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.078137][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 115.078156][ T28] audit: type=1400 audit(1780710776.241:776): avc: denied { write } for pid=7991 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.110831][ T6294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.120024][ T6294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.135404][ T6294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.161486][ T7809] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.172432][ T7809] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.200127][ T7563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.260797][ T7809] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.276246][ T7809] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.315404][ T28] audit: type=1400 audit(1780710776.481:777): avc: denied { write } for pid=7995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.409494][ T28] audit: type=1400 audit(1780710776.571:778): avc: denied { write } for pid=8024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.437879][ T7809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.474126][ T7809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.503875][ T7809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.525663][ T7809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.543781][ T7809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.561956][ T7809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.588776][ T7809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.615968][ T7809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.664311][ T28] audit: type=1400 audit(1780710776.831:779): avc: denied { write } for pid=8030 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.728410][ T7589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.779098][ T28] audit: type=1400 audit(1780710776.951:780): avc: denied { write } for pid=8058 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.808421][ T7563] veth0_vlan: entered promiscuous mode [ 115.817454][ T7563] veth1_vlan: entered promiscuous mode [ 115.874836][ T7563] veth0_macvtap: entered promiscuous mode [ 115.908752][ T7563] veth1_macvtap: entered promiscuous mode [ 115.922607][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.953275][ T7563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.990928][ T7563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.021066][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.045317][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.060211][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.062624][ T28] audit: type=1400 audit(1780710777.231:781): avc: denied { write } for pid=8064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.086824][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.110851][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1466'. [ 116.131023][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.145493][ T28] audit: type=1400 audit(1780710777.311:782): avc: denied { write } for pid=8087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.211328][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.218474][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.254625][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.261787][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.295582][ T7589] veth0_vlan: entered promiscuous mode [ 116.339615][ T7589] veth1_vlan: entered promiscuous mode [ 116.380534][ T28] audit: type=1400 audit(1780710777.551:783): avc: denied { write } for pid=8090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.403396][ T7589] veth0_macvtap: entered promiscuous mode [ 116.441956][ T7589] veth1_macvtap: entered promiscuous mode [ 116.465613][ T28] audit: type=1400 audit(1780710777.631:784): avc: denied { write } for pid=8113 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.491100][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.509586][ T7589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.560624][ T6294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.572180][ T6294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.588683][ T28] audit: type=1326 audit(1780710777.761:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8119 comm="syz.5.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05b677ce59 code=0x0 [ 116.629052][ T6294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.638055][ T6294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.746743][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.849493][ T7809] veth0_vlan: entered promiscuous mode [ 116.859420][ T7809] veth1_vlan: entered promiscuous mode [ 116.889971][ T7809] veth0_macvtap: entered promiscuous mode [ 116.904658][ T7809] veth1_macvtap: entered promiscuous mode [ 116.922186][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.953398][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.970197][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.985026][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.994277][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.006065][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.852792][ T8202] loop1: detected capacity change from 0 to 4096 [ 117.867352][ T8202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.920274][ T7589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.012870][ T8216] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1502'. [ 118.416986][ T8239] loop2: detected capacity change from 0 to 2048 [ 118.431702][ T8239] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.465485][ T8239] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.503223][ T8239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.628939][ T8251] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1511: bg 0: block 234: padding at end of block bitmap is not set [ 118.647429][ T8251] EXT4-fs (loop2): Remounting filesystem read-only [ 118.713599][ T7809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.833579][ T8261] loop1: detected capacity change from 0 to 256 [ 118.855391][ T8261] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.926528][ T8261] FAT-fs (loop1): Directory bread(block 64) failed [ 118.933475][ T8261] FAT-fs (loop1): Directory bread(block 65) failed [ 118.942319][ T8261] FAT-fs (loop1): Directory bread(block 66) failed [ 118.958533][ T8261] FAT-fs (loop1): Directory bread(block 67) failed [ 118.965179][ T8261] FAT-fs (loop1): Directory bread(block 68) failed [ 118.979380][ T8261] FAT-fs (loop1): Directory bread(block 69) failed [ 118.995865][ T8261] FAT-fs (loop1): Directory bread(block 70) failed [ 119.002694][ T8261] FAT-fs (loop1): Directory bread(block 71) failed [ 119.015357][ T8261] FAT-fs (loop1): Directory bread(block 72) failed [ 119.028074][ T8261] FAT-fs (loop1): Directory bread(block 73) failed [ 119.058945][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 119.125828][ T8269] loop1: detected capacity change from 0 to 1024 [ 119.136048][ T8269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.176541][ T8269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.236819][ T7589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.462838][ T8293] loop2: detected capacity change from 0 to 256 [ 119.481397][ T8293] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.571606][ T8293] FAT-fs (loop2): Directory bread(block 64) failed [ 119.582677][ T8293] FAT-fs (loop2): Directory bread(block 65) failed [ 119.589716][ T8293] FAT-fs (loop2): Directory bread(block 66) failed [ 119.596396][ T8293] FAT-fs (loop2): Directory bread(block 67) failed [ 119.603417][ T8293] FAT-fs (loop2): Directory bread(block 68) failed [ 119.610746][ T8293] FAT-fs (loop2): Directory bread(block 69) failed [ 119.617624][ T8293] FAT-fs (loop2): Directory bread(block 70) failed [ 119.631398][ T8293] FAT-fs (loop2): Directory bread(block 71) failed [ 119.640212][ T8293] FAT-fs (loop2): Directory bread(block 72) failed [ 119.647654][ T8293] FAT-fs (loop2): Directory bread(block 73) failed [ 119.747247][ C1] vcan0: j1939_tp_rxtimer: 0xffff888126ff0400: rx timeout, send abort [ 119.808474][ T4815] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.874863][ T8309] loop4: detected capacity change from 0 to 512 [ 119.942327][ T8309] EXT4-fs: Ignoring removed bh option [ 120.001394][ T8309] EXT4-fs: inline encryption not supported [ 120.044243][ T8309] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.124367][ T8332] loop5: detected capacity change from 0 to 256 [ 120.160225][ T8332] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.176908][ T8309] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 120.206336][ T8332] FAT-fs (loop5): Directory bread(block 64) failed [ 120.215301][ T8332] FAT-fs (loop5): Directory bread(block 65) failed [ 120.228846][ T8332] FAT-fs (loop5): Directory bread(block 66) failed [ 120.245520][ T8332] FAT-fs (loop5): Directory bread(block 67) failed [ 120.252132][ C1] vcan0: j1939_tp_rxtimer: 0xffff888133bcae00: rx timeout, send abort [ 120.260493][ C1] vcan0: j1939_tp_rxtimer: 0xffff888126ff0400: abort rx timeout. Force session deactivation [ 120.275800][ T8332] FAT-fs (loop5): Directory bread(block 68) failed [ 120.282417][ T8309] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1535: bg 0: block 248: padding at end of block bitmap is not set [ 120.312219][ T8309] loop4: lost filesystem error report for type 5 error -117 [ 120.316483][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 120.330461][ C1] EXT4-fs (loop4): last error at time 1780710781: ext4_validate_block_bitmap:441 [ 120.345915][ T8332] FAT-fs (loop5): Directory bread(block 69) failed [ 120.353450][ T8309] __quota_error: 25 callbacks suppressed [ 120.353472][ T8309] Quota error (device loop4): write_blk: dquota write failed [ 120.367615][ T8332] FAT-fs (loop5): Directory bread(block 70) failed [ 120.374661][ T8332] FAT-fs (loop5): Directory bread(block 71) failed [ 120.387637][ T8332] FAT-fs (loop5): Directory bread(block 72) failed [ 120.407073][ T8309] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 120.409138][ T8332] FAT-fs (loop5): Directory bread(block 73) failed [ 120.425673][ T8309] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1535: Failed to acquire dquot type 1 [ 120.458469][ T8309] loop4: lost filesystem error report for type 5 error -28 [ 120.463998][ T8309] EXT4-fs (loop4): 1 truncate cleaned up [ 120.478426][ T8309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 120.593716][ T8346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1552'. [ 120.752199][ C1] vcan0: j1939_tp_rxtimer: 0xffff888133bcae00: abort rx timeout. Force session deactivation [ 120.763902][ T28] audit: type=1326 audit(1780710781.921:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8354 comm="syz.5.1559" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05b677ce59 code=0x0 [ 121.121723][ T7544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 121.258386][ T8366] syz.3.1561 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 121.296533][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.3.1561 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.296604][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 121.296617][ T8366] Call Trace: [ 121.296623][ T8366] [ 121.296631][ T8366] __dump_stack+0x1d/0x30 [ 121.296687][ T8366] dump_stack_lvl+0x95/0xd0 [ 121.296715][ T8366] dump_stack+0x15/0x1b [ 121.296737][ T8366] dump_header+0x80/0x240 [ 121.296761][ T8366] oom_kill_process+0x295/0x350 [ 121.296818][ T8366] out_of_memory+0x97d/0xb80 [ 121.296856][ T8366] try_charge_memcg+0x62f/0xa10 [ 121.296914][ T8366] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 121.296947][ T8366] __alloc_frozen_pages_noprof+0x18a/0x350 [ 121.296973][ T8366] alloc_pages_mpol+0xb3/0x260 [ 121.297000][ T8366] alloc_pages_noprof+0x8f/0x140 [ 121.297069][ T8366] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 121.297178][ T8366] __kvmalloc_node_noprof+0x3d4/0x640 [ 121.297202][ T8366] ? futex_hash_allocate+0x190/0x9a0 [ 121.297234][ T8366] ? futex_hash_allocate+0x190/0x9a0 [ 121.297269][ T8366] futex_hash_allocate+0x190/0x9a0 [ 121.297357][ T8366] ? cap_task_prctl+0x13f/0x6b0 [ 121.297438][ T8366] futex_hash_prctl+0xd8/0xf0 [ 121.297479][ T8366] __se_sys_prctl+0x4f4/0x1400 [ 121.297507][ T8366] __x64_sys_prctl+0x67/0x80 [ 121.297572][ T8366] x64_sys_call+0x2533/0x3020 [ 121.297744][ T8366] do_syscall_64+0x12c/0x3b0 [ 121.297778][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.297802][ T8366] RIP: 0033:0x7fa39117ce59 [ 121.297818][ T8366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.297837][ T8366] RSP: 002b:00007fa38fbd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 121.297909][ T8366] RAX: ffffffffffffffda RBX: 00007fa3913f5fa0 RCX: 00007fa39117ce59 [ 121.297939][ T8366] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 121.297956][ T8366] RBP: 00007fa391212d6f R08: 0000000000000000 R09: 0000000000000000 [ 121.297972][ T8366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.297988][ T8366] R13: 00007fa3913f6038 R14: 00007fa3913f5fa0 R15: 00007ffd323afe28 [ 121.298014][ T8366] [ 121.533314][ T8366] memory: usage 307200kB, limit 307200kB, failcnt 767 [ 121.540233][ T8366] memory+swap: usage 307628kB, limit 9007199254740988kB, failcnt 0 [ 121.548333][ T8366] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 121.556046][ T8366] Memory cgroup stats for /syz3: [ 121.556317][ T8366] cache 0 [ 121.564559][ T8366] rss 0 [ 121.570909][ T8366] shmem 0 [ 121.573977][ T8366] mapped_file 0 [ 121.577884][ T8366] dirty 0 [ 121.580852][ T8366] writeback 0 [ 121.584156][ T8366] workingset_refault_anon 1660 [ 121.589447][ T8366] workingset_refault_file 955 [ 121.597031][ T8366] swap 438272 [ 121.600465][ T8366] swapcached 20971520 [ 121.604476][ T8366] pgpgin 87361 [ 121.608263][ T8366] pgpgout 87361 [ 121.611769][ T8366] pgfault 97589 [ 121.615332][ T8366] pgmajfault 268 [ 121.619241][ T8366] inactive_anon 0 [ 121.622926][ T8366] active_anon 0 [ 121.626756][ T8366] inactive_file 0 [ 121.630436][ T8366] active_file 0 [ 121.633962][ T8366] unevictable 0 [ 121.637817][ T8366] hierarchical_memory_limit 314572800 [ 121.643300][ T8366] hierarchical_memsw_limit 9223372036854771712 [ 121.650267][ T8366] total_cache 0 [ 121.653815][ T8366] total_rss 0 [ 121.657534][ T8366] total_shmem 0 [ 121.661045][ T8366] total_mapped_file 0 [ 121.665156][ T8366] total_dirty 0 [ 121.668968][ T8366] total_writeback 0 [ 121.672811][ T8366] total_workingset_refault_anon 1660 [ 121.678444][ T8366] total_workingset_refault_file 955 [ 121.683711][ T8366] total_swap 438272 [ 121.687825][ T8366] total_swapcached 20971520 [ 121.692364][ T8366] total_pgpgin 87361 [ 121.696273][ T8366] total_pgpgout 87361 [ 121.700569][ T8366] total_pgfault 97589 [ 121.704644][ T8366] total_pgmajfault 268 [ 121.708890][ T8366] total_inactive_anon 0 [ 121.713082][ T8366] total_active_anon 0 [ 121.717367][ T8366] total_inactive_file 0 [ 121.721643][ T8366] total_active_file 0 [ 121.725711][ T8366] total_unevictable 0 [ 121.730815][ T8366] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1561,pid=8363,uid=0 [ 121.745729][ T8366] Memory cgroup out of memory: Killed process 8363 (syz.3.1561) total-vm:96216kB, anon-rss:1232kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 122.078023][ T8384] loop2: detected capacity change from 0 to 128 [ 122.088581][ T28] audit: type=1400 audit(1780710783.261:812): avc: denied { attach_queue } for pid=8375 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 122.109026][ T8385] loop4: detected capacity change from 0 to 256 [ 122.116484][ T8385] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.118798][ T8384] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 122.142201][ T8384] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.158062][ T28] audit: type=1400 audit(1780710783.321:813): avc: denied { write } for pid=8382 comm="syz.2.1569" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.226898][ T8385] FAT-fs (loop4): Directory bread(block 64) failed [ 122.238570][ T8385] FAT-fs (loop4): Directory bread(block 65) failed [ 122.243470][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1572'. [ 122.254273][ T8392] netlink: 'syz.5.1572': attribute type 5 has an invalid length. [ 122.262354][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1572'. [ 122.272471][ T8385] FAT-fs (loop4): Directory bread(block 66) failed [ 122.279717][ T8392] geneve2: entered promiscuous mode [ 122.285172][ T8392] geneve2: entered allmulticast mode [ 122.292732][ T8385] FAT-fs (loop4): Directory bread(block 67) failed [ 122.294366][ T6294] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 122.299453][ T8385] FAT-fs (loop4): Directory bread(block 68) failed [ 122.299477][ T8385] FAT-fs (loop4): Directory bread(block 69) failed [ 122.299507][ T8385] FAT-fs (loop4): Directory bread(block 70) failed [ 122.299530][ T8385] FAT-fs (loop4): Directory bread(block 71) failed [ 122.351494][ T6294] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 122.352374][ T8385] FAT-fs (loop4): Directory bread(block 72) failed [ 122.369050][ T8385] FAT-fs (loop4): Directory bread(block 73) failed [ 122.379811][ T6294] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 122.389255][ T6294] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 122.455774][ T7809] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.533185][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1582'. [ 122.534929][ T8411] loop2: detected capacity change from 0 to 1024 [ 122.564640][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1582'. [ 122.583954][ T8411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 122.596676][ T8411] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.631109][ T8411] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1578: lblock 3 mapped to illegal pblock 3 (length 3) [ 122.646353][ T8411] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 122.664367][ T8411] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.664367][ T8411] [ 122.676984][ T8411] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1578: lblock 0 mapped to illegal pblock 0 (length 1) [ 122.694183][ T8411] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 122.711706][ T8411] EXT4-fs (loop2): This should not happen!! Data will be lost [ 122.711706][ T8411] [ 122.760798][ T28] audit: type=1400 audit(1780710783.931:814): avc: denied { read } for pid=8428 comm="syz.4.1584" path="socket:[20890]" dev="sockfs" ino=20890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.405691][ T7420] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 123.552976][ T7420] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 123.572898][ T7420] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.572898][ T7420] [ 123.583992][ T8534] loop4: detected capacity change from 0 to 512 [ 123.588393][ T7809] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 123.591678][ T8534] EXT4-fs: Ignoring removed oldalloc option [ 123.631354][ T8534] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1588: corrupted in-inode xattr: invalid ea_ino [ 123.644226][ T7809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 123.659696][ T8537] loop1: detected capacity change from 0 to 256 [ 123.669653][ T8534] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.671404][ T8534] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1588: couldn't read orphan inode 15 (err -117) [ 123.680609][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 123.680626][ C1] EXT4-fs (loop4): initial error at time 1780710784: ext4_iget_extra_inode:5128: inode 15 [ 123.680673][ C1] EXT4-fs (loop4): last error at time 1780710784: ext4_iget_extra_inode:5128: inode 15 [ 123.702172][ T8537] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.709382][ T8534] loop4: lost filesystem error report for type 5 error -117 [ 123.732110][ T8534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.782284][ T8537] FAT-fs (loop1): Directory bread(block 64) failed [ 123.789895][ T8537] FAT-fs (loop1): Directory bread(block 65) failed [ 123.805457][ T28] audit: type=1400 audit(1780710784.971:815): avc: denied { write } for pid=8533 comm="syz.4.1588" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.828473][ T8537] FAT-fs (loop1): Directory bread(block 66) failed [ 123.846113][ T8537] FAT-fs (loop1): Directory bread(block 67) failed [ 123.857753][ T8537] FAT-fs (loop1): Directory bread(block 68) failed [ 123.868574][ T8537] FAT-fs (loop1): Directory bread(block 69) failed [ 123.875162][ T28] audit: type=1400 audit(1780710784.971:816): avc: denied { write } for pid=8533 comm="syz.4.1588" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.878307][ T8537] FAT-fs (loop1): Directory bread(block 70) failed [ 123.933744][ T8537] FAT-fs (loop1): Directory bread(block 71) failed [ 123.959491][ T8537] FAT-fs (loop1): Directory bread(block 72) failed [ 123.974762][ T8537] FAT-fs (loop1): Directory bread(block 73) failed [ 123.992131][ T7544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.115809][ T28] audit: type=1400 audit(1780710785.281:817): avc: denied { name_bind } for pid=8562 comm="syz.4.1600" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 124.160695][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1602'. [ 124.272312][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 124.310151][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 124.326584][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 124.350541][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 124.359672][ T6301] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.381586][ T6301] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.410275][ T6301] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.434949][ T6301] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.442966][ T8593] loop4: detected capacity change from 0 to 256 [ 124.901481][ T28] audit: type=1326 audit(1780710786.071:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8621 comm="syz.1.1622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f702944ce59 code=0x7ffc0000 [ 124.995091][ T8628] ref_ctr_offset mismatch. inode: 0xa2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 125.187706][ T8640] sg_write: data in/out 479232/136 bytes for SCSI command 0x0-- guessing data in; [ 125.187706][ T8640] program syz.2.1630 not setting count and/or reply_len properly [ 125.490550][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 125.490629][ T28] audit: type=1400 audit(1780710786.661:850): avc: denied { write } for pid=8662 comm="syz.1.1640" path="socket:[21512]" dev="sockfs" ino=21512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 125.544751][ T8671] loop4: detected capacity change from 0 to 256 [ 125.587626][ T8671] msdos: Bad value for 'uid' [ 125.614295][ T8671] msdos: Bad value for 'uid' [ 125.713210][ T8678] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 125.818461][ T8688] netlink: 'syz.4.1649': attribute type 3 has an invalid length. [ 126.266879][ T8703] __nla_validate_parse: 2 callbacks suppressed [ 126.266899][ T8703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1654'. [ 126.342033][ T28] audit: type=1400 audit(1780710787.511:851): avc: denied { append } for pid=8708 comm="syz.5.1657" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 126.468387][ T8718] loop1: detected capacity change from 0 to 512 [ 126.499631][ T8718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.526305][ T8718] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.528263][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.577284][ T28] audit: type=1400 audit(1780710787.751:852): avc: denied { write } for pid=8717 comm="syz.1.1660" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.220518][ T8750] loop4: detected capacity change from 0 to 128 [ 127.241978][ T8750] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.315669][ T8750] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.403193][ T28] audit: type=1400 audit(1780710788.571:853): avc: denied { write } for pid=8749 comm="syz.4.1671" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.611095][ T7589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.776373][ T7544] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.851670][ T8783] veth1_to_bond: entered allmulticast mode [ 127.859099][ T8782] veth1_to_bond: left allmulticast mode [ 127.868057][ T28] audit: type=1326 audit(1780710789.041:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.2.1685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecb81ce59 code=0x7ffc0000 [ 127.925624][ T28] audit: type=1326 audit(1780710789.041:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.2.1685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecb81ce59 code=0x7ffc0000 [ 127.985099][ T28] audit: type=1326 audit(1780710789.041:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.2.1685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecb81ce59 code=0x7ffc0000 [ 128.026500][ T28] audit: type=1326 audit(1780710789.041:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.2.1685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecb81ce59 code=0x7ffc0000 [ 128.067552][ T28] audit: type=1326 audit(1780710789.041:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.2.1685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fbecb81ce59 code=0x7ffc0000 [ 128.122998][ T28] audit: type=1326 audit(1780710789.041:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.2.1685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecb81ce59 code=0x7ffc0000 [ 128.222529][ T8800] loop1: detected capacity change from 0 to 128 [ 128.241918][ T8800] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 128.276090][ T8800] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.408969][ T8805] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 128.468577][ T7589] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.526072][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 128.540650][ T8822] netlink: 'syz.2.1705': attribute type 19 has an invalid length. [ 128.551515][ T8825] hsr_slave_0: left promiscuous mode [ 128.558985][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 128.568311][ T8825] hsr_slave_1: left promiscuous mode [ 128.587649][ T8822] netlink: 'syz.2.1705': attribute type 19 has an invalid length. [ 128.598562][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 128.693989][ T8836] Invalid argument reading file caps for ./file0 [ 129.011971][ T8850] loop4: detected capacity change from 0 to 512 [ 129.034811][ T8850] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.065819][ T8850] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 129.085285][ T8852] netlink: 'syz.3.1718': attribute type 4 has an invalid length. [ 129.089450][ T8850] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 129.106617][ T8850] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 129.114799][ T8850] System zones: 0-2, 18-18, 34-35 [ 129.122729][ T8850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.151389][ T8854] loop1: detected capacity change from 0 to 512 [ 129.171529][ T8854] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 129.187804][ T8854] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1719: invalid indirect mapped block 1 (level 1) [ 129.188720][ T8850] xt_hashlimit: size too large, truncated to 1048576 [ 129.230035][ T8854] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 129.232325][ T8854] EXT4-fs (loop1): Remounting filesystem read-only [ 129.241684][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 129.241727][ C1] EXT4-fs (loop1): initial error at time 1780710790: ext4_free_branches:1023: inode 11 [ 129.241806][ C1] EXT4-fs (loop1): last error at time 1780710790: ext4_free_branches:1023: inode 11 [ 129.276951][ T8854] EXT4-fs (loop1): 1 truncate cleaned up [ 129.284098][ T8866] dummy0: entered promiscuous mode [ 129.290600][ T8854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.303402][ T8866] dummy0: entered allmulticast mode [ 129.341309][ T8869] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1723'. [ 129.374336][ T7589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.413359][ T8873] loop1: detected capacity change from 0 to 256 [ 129.423366][ T8873] msdos: Bad value for 'uid' [ 129.428774][ T8873] msdos: Bad value for 'uid' [ 129.430835][ T7544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.073038][ T8916] tipc: Enabling of bearer rejected, failed to enable media [ 130.485370][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 130.529756][ T8953] team1: entered promiscuous mode [ 130.540854][ T8953] team1: entered allmulticast mode [ 130.553101][ T8953] 8021q: adding VLAN 0 to HW filter on device team1 [ 130.702672][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1768'. [ 130.876656][ T8979] netlink: 'syz.3.1773': attribute type 15 has an invalid length. [ 130.899628][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 130.951606][ T8979] netlink: 'syz.3.1773': attribute type 15 has an invalid length. [ 130.960136][ T6291] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 130.975989][ T6291] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 130.991362][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 131.002781][ T6291] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 131.015411][ T8989] loop5: detected capacity change from 0 to 1024 [ 131.024336][ T6291] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 131.035232][ T8989] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 131.087542][ T8989] System zones: 0-1, 3-36 [ 131.095100][ T8989] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1778: bad orphan inode 134217728 [ 131.105938][ T8989] loop5: lost filesystem error report for type 5 error -117 [ 131.106456][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 131.120353][ C1] EXT4-fs (loop5): initial error at time 1780710792: ext4_orphan_get:1423 [ 131.128934][ C1] EXT4-fs (loop5): last error at time 1780710792: ext4_orphan_get:1423 [ 131.131335][ T8989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.165972][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 131.165989][ T28] audit: type=1400 audit(1780710792.331:882): avc: denied { write } for pid=8988 comm="syz.5.1778" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.226865][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.241470][ T8999] loop4: detected capacity change from 0 to 512 [ 131.270390][ T8999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.288492][ T8999] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.318019][ T28] audit: type=1400 audit(1780710792.481:883): avc: denied { write } for pid=8998 comm="syz.4.1782" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.286970][ T7544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.959027][ T9076] loop1: detected capacity change from 0 to 1024 [ 132.967393][ T9076] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.022151][ T9076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.159863][ T7589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.170841][ T9054] loop5: detected capacity change from 0 to 2048 [ 133.202282][ T9088] loop2: detected capacity change from 0 to 1024 [ 133.221965][ T9054] loop5: p1 < > p3 [ 133.245003][ T9088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.263918][ T9054] loop5: p3 start 458752 is beyond EOD, truncated [ 133.297697][ T28] audit: type=1400 audit(1780710794.471:884): avc: denied { write } for pid=9087 comm="syz.2.1817" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.323615][ T2981] loop5: p1 < > p3 [ 133.333814][ T28] audit: type=1400 audit(1780710794.491:885): avc: denied { setattr } for pid=9087 comm="syz.2.1817" path="/71/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.350000][ T2981] loop5: p3 start 458752 is beyond EOD, [ 133.356481][ T28] audit: type=1400 audit(1780710794.491:886): avc: denied { write } for pid=9087 comm="syz.2.1817" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.369237][ T7809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.384213][ T28] audit: type=1400 audit(1780710794.491:887): avc: denied { add_name } for pid=9087 comm="syz.2.1817" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.412264][ T2981] truncated [ 133.414574][ T28] audit: type=1400 audit(1780710794.491:888): avc: denied { write } for pid=9087 comm="syz.2.1817" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.461023][ T28] audit: type=1400 audit(1780710794.491:889): avc: denied { write } for pid=9087 comm="syz.2.1817" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.503850][ T28] audit: type=1400 audit(1780710794.491:890): avc: denied { write } for pid=9087 comm="syz.2.1817" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.546187][ T28] audit: type=1400 audit(1780710794.491:891): avc: denied { remove_name } for pid=9087 comm="syz.2.1817" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 133.681245][ T9112] tun0: tun_chr_ioctl cmd 1074025672 [ 133.704441][ T9112] tun0: ignored: set checksum enabled [ 133.911321][ T9125] loop1: detected capacity change from 0 to 512 [ 133.943139][ T9125] EXT4-fs: Ignoring removed bh option [ 133.988295][ T9125] EXT4-fs: inline encryption not supported [ 134.021026][ T9125] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.069865][ T9125] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 134.084641][ T9125] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1831: bg 0: block 248: padding at end of block bitmap is not set [ 134.099423][ T9125] loop1: lost filesystem error report for type 5 error -117 [ 134.099679][ T9125] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.1831: Failed to acquire dquot type 1 [ 134.107058][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 134.107077][ C0] EXT4-fs (loop1): last error at time 1780710795: ext4_validate_block_bitmap:441 [ 134.134106][ T9125] loop1: lost filesystem error report for type 5 error -28 [ 134.143903][ T9125] EXT4-fs (loop1): 1 truncate cleaned up [ 134.189524][ T9125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 134.602523][ T9159] loop4: detected capacity change from 0 to 128 [ 134.841781][ T9170] loop5: detected capacity change from 0 to 1024 [ 134.902869][ T9170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.044268][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.117931][ T7589] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 135.481603][ T9211] loop5: detected capacity change from 0 to 512 [ 135.492160][ T9211] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.536626][ T9211] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 135.576073][ T9211] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 135.609265][ T9211] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 135.626593][ T9211] System zones: 0-2, 18-18, 34-35 [ 135.639103][ T9211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.681704][ T9209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.699840][ T9211] xt_hashlimit: size too large, truncated to 1048576 [ 135.726343][ T9209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.135383][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.368052][ T9309] loop1: detected capacity change from 0 to 128 [ 136.862069][ T9332] loop2: detected capacity change from 0 to 512 [ 136.884751][ T9332] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 136.913883][ T9332] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1884: invalid indirect mapped block 1 (level 1) [ 136.972500][ T9332] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.972860][ T9332] EXT4-fs (loop2): Remounting filesystem read-only [ 136.982140][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 136.982188][ C0] EXT4-fs (loop2): initial error at time 1780710798: ext4_free_branches:1023: inode 11 [ 136.982243][ C0] EXT4-fs (loop2): last error at time 1780710798: ext4_free_branches:1023: inode 11 [ 137.057974][ T9332] EXT4-fs (loop2): 1 truncate cleaned up [ 137.074028][ T9332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.153579][ T7809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.778872][ T6289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.802387][ T9380] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1902'. [ 137.859295][ T6289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.929036][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 137.929055][ T28] audit: type=1400 audit(1780710799.101:900): avc: denied { setopt } for pid=9385 comm="syz.4.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 137.960804][ T9389] loop2: detected capacity change from 0 to 256 [ 137.976841][ T6289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.987912][ T9389] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.001237][ T9392] loop4: detected capacity change from 0 to 128 [ 138.019687][ T9392] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 138.073030][ T9392] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 138.086823][ T6289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.099980][ T9392] FAT-fs (loop4): Filesystem has been set read-only [ 138.107423][ T9392] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 138.253371][ T9374] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.290224][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.303013][ T9406] xt_hashlimit: size too large, truncated to 1048576 [ 138.321694][ T9374] bridge_slave_0: entered allmulticast mode [ 138.344385][ T9374] bridge_slave_0: entered promiscuous mode [ 138.370942][ T28] audit: type=1400 audit(1780710799.541:901): avc: denied { write } for pid=9405 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.407980][ T6289] bridge_slave_1: left allmulticast mode [ 138.413735][ T6289] bridge_slave_1: left promiscuous mode [ 138.424174][ T28] audit: type=1400 audit(1780710799.591:902): avc: denied { write } for pid=9418 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.432029][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.504086][ T6289] bridge_slave_0: left allmulticast mode [ 138.523031][ T6289] bridge_slave_0: left promiscuous mode [ 138.541423][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.724135][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.735208][ T28] audit: type=1400 audit(1780710799.901:903): avc: denied { read } for pid=9421 comm="syz.2.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.736891][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.764586][ T6289] bond0 (unregistering): Released all slaves [ 138.773921][ T9374] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.787982][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.796722][ T9374] bridge_slave_1: entered allmulticast mode [ 138.808976][ T9374] bridge_slave_1: entered promiscuous mode [ 138.809403][ T28] audit: type=1400 audit(1780710799.981:904): avc: denied { getopt } for pid=9421 comm="syz.2.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 138.840830][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 138.864620][ T9374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.901790][ T9374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.941119][ T9374] team0: Port device team_slave_0 added [ 138.960782][ T9374] team0: Port device team_slave_1 added [ 138.989573][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.013847][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.025551][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.039555][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.065964][ T6289] veth1_macvtap: left promiscuous mode [ 139.080649][ T6289] veth0_macvtap: left promiscuous mode [ 139.086324][ T6289] veth1_vlan: left promiscuous mode [ 139.099122][ T6289] veth0_vlan: left promiscuous mode [ 139.263875][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 139.287254][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 139.385887][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.395110][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.445679][ T9374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.468751][ T9374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.479462][ T9374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.517843][ T9441] loop2: detected capacity change from 0 to 32768 [ 139.524812][ T9374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.561352][ T9441] loop2: p1 [ 139.570941][ T9374] hsr_slave_0: entered promiscuous mode [ 139.600347][ T9374] hsr_slave_1: entered promiscuous mode [ 139.617069][ T9374] debugfs: 'hsr0' already exists in 'hsr' [ 139.633211][ T9374] Cannot create hsr debugfs directory [ 139.789502][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 139.793594][ T28] audit: type=1400 audit(1780710800.961:905): avc: denied { write } for pid=9450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.835225][ T9470] loop2: detected capacity change from 0 to 512 [ 139.842169][ T9470] EXT4-fs: Ignoring removed oldalloc option [ 139.882801][ T28] audit: type=1400 audit(1780710801.051:906): avc: denied { write } for pid=9472 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.931374][ T9470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.944147][ T9470] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.958196][ T28] audit: type=1400 audit(1780710801.131:907): avc: denied { write } for pid=9469 comm="syz.2.1922" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.960303][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 139.994141][ T9470] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #18: comm syz.2.1922: corrupted inode contents [ 140.017037][ T9470] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 140.018636][ T9470] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #18: comm syz.2.1922: mark_inode_dirty error [ 140.049641][ T6289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.064589][ T9470] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 140.064898][ T9470] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #18: comm syz.2.1922: corrupted inode contents [ 140.111263][ T9470] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 140.111478][ T9470] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #18: comm syz.2.1922: mark_inode_dirty error [ 140.142557][ T9374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 140.153059][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 140.163077][ T9470] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 140.163317][ T9470] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #18: comm syz.2.1922: mark inode dirty (error -117) [ 140.186966][ T6289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.221604][ T9374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 140.240894][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 140.269369][ T9470] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 140.269579][ T9470] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 140.291309][ T9374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 140.306305][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 140.324489][ T9374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 140.339174][ T7809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.360495][ T28] audit: type=1400 audit(1780710801.531:908): avc: denied { write } for pid=9482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.387431][ T9374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 140.413312][ T28] audit: type=1400 audit(1780710801.581:909): avc: denied { write } for pid=9498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.460495][ T6289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.484925][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 140.492254][ T9427] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.499749][ T9427] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.507977][ T9427] bridge_slave_0: entered allmulticast mode [ 140.514656][ T9427] bridge_slave_0: entered promiscuous mode [ 140.528398][ T9427] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.535664][ T9427] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.544148][ T9427] bridge_slave_1: entered allmulticast mode [ 140.550945][ T9427] bridge_slave_1: entered promiscuous mode [ 140.565874][ T6289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.598864][ T9427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.622514][ T9427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.680660][ T6289] bridge_slave_1: left allmulticast mode [ 140.686496][ T6289] bridge_slave_1: left promiscuous mode [ 140.692708][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.703646][ T6289] bridge_slave_0: left allmulticast mode [ 140.709944][ T6289] bridge_slave_0: left promiscuous mode [ 140.717158][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.868912][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.880390][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.890418][ T6289] bond0 (unregistering): Released all slaves [ 140.900346][ T9427] team0: Port device team_slave_0 added [ 140.907122][ T9427] team0: Port device team_slave_1 added [ 140.913241][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 140.961907][ T6289] hsr_slave_0: left promiscuous mode [ 140.968066][ T6289] hsr_slave_1: left promiscuous mode [ 140.973863][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.981935][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.991138][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.998791][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.011003][ T6289] veth1_macvtap: left promiscuous mode [ 141.016702][ T6289] veth0_macvtap: left promiscuous mode [ 141.022361][ T6289] veth1_vlan: left promiscuous mode [ 141.028153][ T6289] veth0_vlan: left promiscuous mode [ 141.134181][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 141.156884][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 141.239095][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.246299][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.277147][ T9427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.291554][ T9427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.336329][ T9427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.394337][ T9427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.435493][ T9374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.488563][ T9427] hsr_slave_0: entered promiscuous mode [ 141.506316][ T9427] hsr_slave_1: entered promiscuous mode [ 141.529051][ T9427] debugfs: 'hsr0' already exists in 'hsr' [ 141.543796][ T9427] Cannot create hsr debugfs directory [ 141.620430][ T9374] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.655818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.662984][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.704139][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.711299][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.811115][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 141.899926][ T9427] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 141.913280][ T9427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.921335][ T9427] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 141.932282][ T9427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.942736][ T9427] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 141.968891][ T9427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.977569][ T9427] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 141.996181][ T9579] loop5: detected capacity change from 0 to 512 [ 142.000523][ T9427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.022369][ T9579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.094307][ T9579] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.096754][ T9427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.125823][ T9427] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.139352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.146498][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.163773][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.170945][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.225939][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.386862][ T9374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.407914][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1946'. [ 142.461156][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 142.560437][ T9427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.578520][ T9634] SELinux: failed to load policy [ 142.812450][ T9374] veth0_vlan: entered promiscuous mode [ 142.849430][ T9374] veth1_vlan: entered promiscuous mode [ 142.874776][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 142.942157][ T9374] veth0_macvtap: entered promiscuous mode [ 142.951493][ T9374] veth1_macvtap: entered promiscuous mode [ 142.968678][ T9688] loop2: detected capacity change from 0 to 1024 [ 142.975729][ T9688] EXT4-fs: Ignoring removed bh option [ 143.006620][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.033501][ T9688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.049844][ T9427] veth0_vlan: entered promiscuous mode [ 143.060401][ T9374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.068944][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 143.068971][ T28] audit: type=1400 audit(1780710804.241:920): avc: denied { write } for pid=9687 comm="syz.2.1956" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.103361][ T9427] veth1_vlan: entered promiscuous mode [ 143.136140][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.180010][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.222850][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.251444][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.264984][ T28] audit: type=1400 audit(1780710804.431:921): avc: denied { write } for pid=9697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.313379][ T9427] veth0_macvtap: entered promiscuous mode [ 143.337421][ T28] audit: type=1400 audit(1780710804.501:922): avc: denied { write } for pid=9711 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.373587][ T9427] veth1_macvtap: entered promiscuous mode [ 143.397172][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 143.418863][ T9427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.441048][ T9427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.479138][ T6304] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.502072][ T6304] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.531939][ T6304] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.565853][ T6304] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.683039][ T7809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.975403][ T28] audit: type=1400 audit(1780710805.141:923): avc: denied { write } for pid=9761 comm="syz.7.1974" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 144.033326][ T9768] loop2: detected capacity change from 0 to 128 [ 144.060192][ T9768] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.077215][ T9768] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.112906][ T28] audit: type=1400 audit(1780710805.281:924): avc: denied { write } for pid=9767 comm="syz.2.1976" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.221934][ T7809] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.481370][ T28] audit: type=1400 audit(1780710805.651:925): avc: denied { setattr } for pid=9794 comm="syz.3.1988" name="/" dev="configfs" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 144.583463][ T28] audit: type=1400 audit(1780710805.751:926): avc: denied { getopt } for pid=9807 comm="syz.5.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.644589][ T28] audit: type=1400 audit(1780710805.811:927): avc: denied { append } for pid=9811 comm="syz.5.1996" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 144.687731][ T28] audit: type=1326 audit(1780710805.841:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9815 comm="syz.2.1997" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbecb81ce59 code=0x0 [ 144.808449][ T9830] loop5: detected capacity change from 0 to 512 [ 144.836147][ T9830] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 144.869098][ T9830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 144.885677][ T9830] System zones: 1-12 [ 144.902165][ T9830] EXT4-fs (loop5): 1 truncate cleaned up [ 144.911099][ T9830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.949253][ T9844] loop6: detected capacity change from 0 to 512 [ 144.958166][ T9844] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 144.983242][ T9844] EXT4-fs (loop6): 1 truncate cleaned up [ 144.989525][ T9844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.023410][ T9374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.084624][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.095627][ T9852] loop7: detected capacity change from 0 to 1024 [ 145.118672][ T9852] EXT4-fs: Ignoring removed bh option [ 145.155236][ T9852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.191973][ T28] audit: type=1400 audit(1780710806.361:929): avc: denied { write } for pid=9851 comm="syz.7.2022" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.489901][ T9427] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.967259][ T9906] loop2: detected capacity change from 0 to 512 [ 145.992302][ T9906] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 146.023062][ T9906] EXT4-fs (loop2): 1 truncate cleaned up [ 146.052267][ T9906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.109413][ T9906] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2034: invalid indirect mapped block 4294967295 (level 1) [ 146.169186][ T9916] loop7: detected capacity change from 0 to 8192 [ 146.185199][ T7809] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.199435][ T9924] loop5: detected capacity change from 0 to 256 [ 146.204590][ T9916] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.253865][ T9924] FAT-fs (loop5): Directory bread(block 64) failed [ 146.265316][ T9924] FAT-fs (loop5): Directory bread(block 65) failed [ 146.289439][ T9924] FAT-fs (loop5): Directory bread(block 66) failed [ 146.303853][ T9924] FAT-fs (loop5): Directory bread(block 67) failed [ 146.319925][ T9924] FAT-fs (loop5): Directory bread(block 68) failed [ 146.326377][ T9932] loop6: detected capacity change from 0 to 128 [ 146.333230][ T9924] FAT-fs (loop5): Directory bread(block 69) failed [ 146.347798][ T9924] FAT-fs (loop5): Directory bread(block 70) failed [ 146.354659][ T9924] FAT-fs (loop5): Directory bread(block 71) failed [ 146.362400][ T9924] FAT-fs (loop5): Directory bread(block 72) failed [ 146.373761][ T9932] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 146.395511][ T9932] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.431802][ T9924] FAT-fs (loop5): Directory bread(block 73) failed [ 146.443854][ T9932] ext2 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.543424][ T9374] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.083226][ T9956] loop2: detected capacity change from 0 to 2048 [ 147.188637][ T9956] loop2: p1 < > p3 [ 147.191318][ T9987] loop5: detected capacity change from 0 to 512 [ 147.210040][ T9956] loop2: p3 start 458752 is beyond EOD, truncated [ 147.246890][ T9987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.264669][ T9987] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.345316][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.216023][T10047] netlink: 83 bytes leftover after parsing attributes in process `syz.7.2092'. [ 148.243658][T10050] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 148.263175][T10050] bond1: (slave lo): Enslaving as an active interface with an up link [ 148.281117][T10050] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 148.385926][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 148.429272][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 148.429294][ T28] audit: type=1400 audit(1780710809.601:952): avc: denied { map } for pid=10067 comm="syz.2.2100" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 148.430114][T10068] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 148.467786][T10068] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 148.563772][T10076] raw_sendmsg: syz.3.2112 forgot to set AF_INET. Fix it! [ 148.729547][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'. [ 148.763223][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2107'. [ 148.796870][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2107'. [ 148.805846][ T311] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.819756][ T311] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.826851][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2107'. [ 148.839220][ T311] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.851295][ T311] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.120314][T10113] netlink: 'syz.5.2119': attribute type 21 has an invalid length. [ 149.129695][T10113] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2119'. [ 149.143610][T10113] netlink: 'syz.5.2119': attribute type 4 has an invalid length. [ 149.650908][ T28] audit: type=1400 audit(1780710810.821:953): avc: denied { firmware_load } for pid=10132 comm="syz.5.2128" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 149.758247][T10145] pimreg: entered allmulticast mode [ 149.784595][T10145] syz_tun: entered allmulticast mode [ 149.802567][T10145] syz_tun: left allmulticast mode [ 149.810220][T10144] pimreg: left allmulticast mode [ 149.861184][ T28] audit: type=1400 audit(1780710811.031:954): avc: denied { setopt } for pid=10152 comm="syz.2.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.978645][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 150.050432][ T3386] IPVS: starting estimator thread 0... [ 150.092648][T10173] loop6: detected capacity change from 0 to 128 [ 150.118153][T10173] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 150.141592][T10173] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.169486][T10170] IPVS: using max 2256 ests per chain, 112800 per kthread [ 150.177198][T10179] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 150.188017][ T28] audit: type=1400 audit(1780710811.361:955): avc: denied { write } for pid=10172 comm="syz.6.2146" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.313369][ T28] audit: type=1400 audit(1780710811.481:956): avc: denied { ioctl } for pid=10172 comm="syz.6.2146" path="/30/file1/file1" dev="loop6" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 150.759067][T10179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.797383][T10180] bond1: (slave gretap1): making interface the new active one [ 150.805808][T10180] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 150.836514][ T9374] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.871582][T10195] netlink: 'syz.5.2161': attribute type 20 has an invalid length. [ 150.887328][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2161'. [ 150.940913][ T28] audit: type=1400 audit(1780710812.101:957): avc: denied { nlmsg_write } for pid=10198 comm="syz.6.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 150.985431][ T28] audit: type=1400 audit(1780710812.111:958): avc: denied { audit_write } for pid=10198 comm="syz.6.2162" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 151.017001][T10195] netlink: 'syz.5.2161': attribute type 20 has an invalid length. [ 151.025961][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2161'. [ 151.044486][ T28] audit: type=1107 audit(1780710812.111:959): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 151.226582][ T28] audit: type=1400 audit(1780710812.391:960): avc: denied { associate } for pid=10213 comm="syz.5.2159" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 151.538529][T10206] loop7: detected capacity change from 0 to 2048 [ 151.589433][T10206] loop7: p1 < > p3 [ 151.595389][T10206] loop7: p3 start 458752 is beyond EOD, truncated [ 151.674045][T10231] netlink: 'syz.2.2169': attribute type 11 has an invalid length. [ 151.682518][T10231] netlink: 'syz.2.2169': attribute type 11 has an invalid length. [ 152.060805][T10255] loop6: detected capacity change from 0 to 512 [ 152.070676][T10255] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 152.098881][T10255] EXT4-fs (loop6): 1 truncate cleaned up [ 152.102422][ T28] audit: type=1326 audit(1780710813.271:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.2.2180" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbecb81ce59 code=0x0 [ 152.113450][T10255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.159562][ T9374] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.336741][T10274] loop6: detected capacity change from 0 to 128 [ 152.361901][T10274] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.374528][T10274] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.475136][ T9374] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.571878][T10280] all: renamed from lo (while UP) [ 152.645601][T10286] pimreg: entered allmulticast mode [ 152.656469][T10286] syz_tun: entered allmulticast mode [ 152.667489][T10286] syz_tun: left allmulticast mode [ 152.678834][T10285] pimreg: left allmulticast mode [ 153.422533][T10310] gretap2: entered allmulticast mode [ 153.438109][T10310] team0: Port device gretap2 added [ 153.469773][T10310] bridge0: port 3(team0) entered blocking state [ 153.477250][T10310] bridge0: port 3(team0) entered disabled state [ 153.483914][T10310] team0: entered allmulticast mode [ 153.490637][T10310] team_slave_0: entered allmulticast mode [ 153.496601][T10310] team_slave_1: entered allmulticast mode [ 153.529582][T10310] team0: entered promiscuous mode [ 153.534822][T10310] team_slave_0: entered promiscuous mode [ 153.542258][T10310] team_slave_1: entered promiscuous mode [ 153.548868][T10310] gretap2: entered promiscuous mode [ 153.554779][T10310] bridge0: port 3(team0) entered blocking state [ 153.561113][T10310] bridge0: port 3(team0) entered forwarding state [ 153.808666][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 153.808684][ T28] audit: type=1400 audit(1780710814.981:965): avc: denied { write } for pid=10329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.922314][ T28] audit: type=1400 audit(1780710815.091:966): avc: denied { write } for pid=10352 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.107049][T10381] loop5: detected capacity change from 0 to 512 [ 154.127417][T10381] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.155506][ T28] audit: type=1400 audit(1780710815.321:967): avc: denied { write } for pid=10365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.193042][T10381] EXT4-fs (loop5): 1 truncate cleaned up [ 154.199487][T10381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.245786][ T28] audit: type=1400 audit(1780710815.381:968): avc: denied { write } for pid=10379 comm="syz.5.2225" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.268395][ T28] audit: type=1400 audit(1780710815.411:969): avc: denied { write } for pid=10389 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.546717][ T28] audit: type=1400 audit(1780710815.711:970): avc: denied { write } for pid=10398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.679238][ T28] audit: type=1400 audit(1780710815.851:971): avc: denied { write } for pid=10423 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.844822][T10381] ================================================================== [ 154.853072][T10381] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 154.860265][T10381] [ 154.862619][T10381] write to 0xffff88811ba1bc14 of 4 bytes by task 10393 on cpu 0: [ 154.870359][T10381] xas_set_mark+0x12b/0x140 [ 154.874911][T10381] __folio_start_writeback+0x17b/0x370 [ 154.880425][T10381] ext4_bio_write_folio+0x5a6/0xa20 [ 154.885711][T10381] mpage_process_page_bufs+0x4a1/0x620 [ 154.891201][T10381] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 154.897068][T10381] ext4_do_writepages+0x9f6/0x2770 [ 154.902239][T10381] ext4_writepages+0x18f/0x320 [ 154.907051][T10381] do_writepages+0x1c6/0x310 [ 154.911690][T10381] file_write_and_wait_range+0x178/0x2f0 [ 154.917375][T10381] mmb_fsync_noflush+0x48/0x140 [ 154.922265][T10381] ext4_sync_file+0x1f1/0x6b0 [ 154.926991][T10381] vfs_fsync_range+0xc5/0xe0 [ 154.931624][T10381] ext4_buffered_write_iter+0x447/0x4c0 [ 154.937254][T10381] ext4_file_write_iter+0x380/0xfa0 [ 154.942515][T10381] iter_file_splice_write+0x6c4/0xa80 [ 154.948032][T10381] direct_splice_actor+0x156/0x2a0 [ 154.953200][T10381] splice_direct_to_actor+0x311/0x670 [ 154.958634][T10381] do_splice_direct+0x119/0x1a0 [ 154.963977][T10381] do_sendfile+0x382/0x650 [ 154.968432][T10381] __x64_sys_sendfile64+0x105/0x150 [ 154.973832][T10381] x64_sys_call+0x2dc4/0x3020 [ 154.978549][T10381] do_syscall_64+0x12c/0x3b0 [ 154.983180][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.989123][T10381] [ 154.991473][T10381] read to 0xffff88811ba1bc14 of 4 bytes by task 10381 on cpu 1: [ 154.999125][T10381] xas_find_marked+0x5d7/0x620 [ 155.003932][T10381] filemap_get_folios_tag+0xfa/0x430 [ 155.009283][T10381] mpage_prepare_extent_to_map+0x328/0xc50 [ 155.015138][T10381] ext4_do_writepages+0x9f6/0x2770 [ 155.020312][T10381] ext4_writepages+0x18f/0x320 [ 155.025118][T10381] do_writepages+0x1c6/0x310 [ 155.029753][T10381] file_write_and_wait_range+0x178/0x2f0 [ 155.035456][T10381] mmb_fsync_noflush+0x48/0x140 [ 155.040355][T10381] ext4_sync_file+0x1f1/0x6b0 [ 155.045068][T10381] vfs_fsync_range+0xc5/0xe0 [ 155.049719][T10381] ext4_buffered_write_iter+0x447/0x4c0 [ 155.055308][T10381] ext4_file_write_iter+0x380/0xfa0 [ 155.060558][T10381] iter_file_splice_write+0x6c4/0xa80 [ 155.065984][T10381] direct_splice_actor+0x156/0x2a0 [ 155.071146][T10381] splice_direct_to_actor+0x311/0x670 [ 155.076576][T10381] do_splice_direct+0x119/0x1a0 [ 155.081490][T10381] do_sendfile+0x382/0x650 [ 155.085948][T10381] __x64_sys_sendfile64+0x105/0x150 [ 155.091179][T10381] x64_sys_call+0x2dc4/0x3020 [ 155.095897][T10381] do_syscall_64+0x12c/0x3b0 [ 155.100548][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.106519][T10381] [ 155.108882][T10381] value changed: 0x0a000021 -> 0x04000021 [ 155.114632][T10381] [ 155.116981][T10381] Reported by Kernel Concurrency Sanitizer on: [ 155.123173][T10381] CPU: 1 UID: 0 PID: 10381 Comm: syz.5.2225 Not tainted syzkaller #0 PREEMPT(lazy) [ 155.132585][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.142709][T10381] ================================================================== [ 155.198819][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.255086][ T28] audit: type=1400 audit(1780710816.421:972): avc: denied { write } for pid=10439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.289755][ T28] audit: type=1400 audit(1780710816.461:973): avc: denied { write } for pid=10453 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.382031][ T28] audit: type=1400 audit(1780710816.551:974): avc: denied { write } for pid=10456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.166527][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!