last executing test programs: 1.605745828s ago: executing program 1 (id=2280): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x1dd4, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1d9c, 0x2, [@TCA_CGROUP_ACT={0x1d98, 0x1, [@m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x7ffffffc, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xe50, 0xb, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x456, 0x4, 0x6, 0x1}, 0xb9, 0xf3}, [{0x8bc, 0x1, 0x6, 0x4, 0x100, 0xfffffffd}, {0x0, 0x68, 0xfffffff8, 0x6, 0x5, 0x4}, {0xbb05, 0x97af, 0x3, 0x2, 0x4, 0x6}, {0x6, 0x1, 0x3, 0x2c27f2d1, 0x0, 0x559a}, {0x0, 0x8, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x1000, 0x7f, 0x8, 0x3, 0x6}, {0x4, 0x2c4, 0x7ab, 0x4, 0x7}, {0xa92, 0x3, 0xb, 0x0, 0x1, 0x5}, {0x7fff, 0xe, 0xa524, 0x40, 0x5, 0x101}, {0xb, 0x8, 0xfffffff8, 0x1000, 0xd72, 0x4}, {0x9, 0x8000000, 0x0, 0x2, 0x2, 0x3ff}, {0x7, 0x3, 0x6, 0xcea, 0xff, 0x80000001}, {0x1800000, 0x9, 0x3, 0x7ff, 0x1, 0x4}, {0xfffffffd, 0xfffffffd, 0x9, 0x0, 0xd1, 0x61b}, {0xfffffff1, 0x80, 0x7, 0x1, 0x4, 0x1000}, {0xdab4, 0x3b6, 0x8000, 0x9, 0x1}, {0x2, 0x400, 0x0, 0x9, 0x7, 0x2}, {0xffffffff, 0x245, 0x63, 0x80000001, 0xc00000, 0xa}, {0xfffffffc, 0x10000, 0x80000001, 0x8, 0x8, 0x5}, {0x80000001, 0x1, 0x5e67, 0x0, 0xff, 0x9}, {0x6, 0x5, 0x1a, 0x618, 0x2, 0x1}, {0x9, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x1, 0x7, 0xf, 0x1, 0x2, 0x1}, {0x9, 0xa, 0x3, 0x2, 0x6, 0x9}, {0x495f, 0xfe, 0x9bb3, 0x2, 0xfffffffa, 0x7}, {0x9, 0x10001, 0xc, 0x76, 0x6, 0x4}, {0x8c, 0x4, 0x8f29, 0x0, 0xffff8001, 0x7}, {0xfff, 0xffff, 0xc, 0xe4, 0x6, 0x7}, {0x7, 0x8, 0xffff8001, 0x100, 0x7}, {0x4, 0xbe8b, 0x4, 0x6, 0x1, 0x3}, {0x5, 0xad4, 0x2, 0x9, 0xb1a8, 0x5}, {0x9, 0x3, 0xb6e, 0xfff, 0x200, 0x9}, {0x4, 0x8000, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3e, 0x6, 0x8, 0x7, 0x7}, {0x6, 0x401, 0x4, 0x9, 0x3}, {0xa, 0x40, 0x9, 0xf, 0x5, 0xf}, {0x12b8c98e, 0xfff, 0x7fffffff, 0x3, 0xe, 0x7fff}, {0x6, 0x8, 0x118, 0xe6c6, 0x6, 0x9738}, {0x3, 0x9, 0x7ff, 0x3, 0xffffffff, 0x9}, {0x8, 0x6, 0x7, 0x7, 0x2, 0x8}, {0x80000000, 0x5ce23415, 0x24, 0xfff, 0xff, 0x2}, {0x100, 0x1000, 0xca6, 0x0, 0xfffffff7, 0xa1}, {0x1, 0x8, 0x7, 0x5, 0xfffffff7, 0x3a}, {0x84c, 0x81, 0x7, 0x1, 0x1, 0x7f}, {0x9, 0x200, 0x700000, 0x1, 0x3, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xfffffffb, 0x7}, {0x0, 0x6, 0xf, 0x9, 0x5, 0xd5a}, {0xfffffff7, 0x7, 0xffffff7f, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x26, 0x3, 0x400}, {0x0, 0x6, 0x6, 0x7, 0x101, 0x222}, {0x1f, 0x800, 0x3, 0xe6b, 0x0, 0xfffffff7}, {0x8, 0x4, 0x6, 0x0, 0x2, 0x5}, {0x0, 0x2, 0x2, 0x7, 0x400, 0x7}, {0x200, 0x3, 0x8000, 0x65, 0x1000, 0x40}, {0x10, 0xa, 0x4, 0x10, 0x1, 0x5}, {0x9, 0x9, 0xe95, 0x4, 0xd}, {0xe0, 0x2, 0x80000001, 0x4, 0x1a49, 0x6}, {0x2, 0x4, 0x4, 0x10, 0xfffff0ac, 0x3}, {0xbb, 0x4, 0x4, 0x1, 0x7fffffff, 0x6}, {0xffffffff, 0xffff, 0x6, 0xe4, 0x0, 0x6}, {0xfffffff9, 0x2, 0x1, 0xc, 0x8, 0x800}, {0x6, 0x4, 0x5, 0x1, 0x1, 0x4}, {0xe, 0x6, 0x1, 0x8, 0x9, 0x9}, {0x7, 0xc6, 0x3ff, 0xe7e3, 0x5, 0x9}, {0xea48, 0xfffffffd, 0x10000, 0x6, 0x3, 0x5}, {0x4, 0xffff, 0x1ff, 0x8, 0x4, 0xfffffff0}, {0xb, 0x3b3, 0x1, 0x101, 0xe11, 0x5}, {0x3, 0x4, 0x6, 0xff, 0xff, 0x7}, {0x0, 0x2, 0x8, 0x4, 0x7, 0x4}, {0x7, 0xb, 0x44df, 0x9, 0x6, 0x5d5ab339}, {0x6, 0x6, 0x40, 0x2, 0x9, 0x1ff}, {0x7, 0xffffffff, 0x4, 0x10001, 0xffffffff, 0x7}, {0x81, 0xa, 0x3, 0x8, 0xd33, 0x6}, {0x2, 0x4, 0x9ab, 0xb4, 0x5, 0xb577}, {0x0, 0xffff, 0x6, 0x7fff, 0x0, 0x5}, {0xd, 0x6, 0xaa10, 0xfffff477, 0x0, 0xff}, {0x2, 0xfffffffa, 0x4, 0x90, 0x9, 0x3e}, {0x2, 0x80000000, 0x4, 0x4, 0x90, 0x2}, {0x4, 0x1, 0x6, 0x4, 0x4, 0x7}, {0x5, 0x6, 0x4, 0xb80c, 0x5, 0x4cf1}, {0x8001, 0x4, 0x8, 0x9, 0x0, 0x6}, {0x40, 0x9, 0x18c, 0x100, 0x2, 0x9}, {0x3, 0x4, 0x9, 0x7f, 0x7, 0x179}, {0x0, 0x7, 0x2, 0x80, 0x401, 0x8}, {0x7, 0x0, 0x10001, 0xf6, 0x64f57d4f, 0x10f00000}, {0x7, 0x200, 0x200, 0x9, 0x5, 0x4512}, {0xd3, 0x0, 0x8, 0x2, 0x8, 0x101}, {0x6b0c, 0x9, 0x7, 0x3ff, 0x4}, {0x5f, 0x4, 0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x4, 0x1200000, 0x7, 0x800, 0x6}, {0x1, 0x6, 0x80, 0xef8, 0x0, 0x5}, {0x40000, 0x6, 0x1, 0x1, 0x2, 0xd09}, {0x8000, 0x9, 0xfffffffd, 0x100, 0x6, 0xfffffff7}, {0x9, 0x2, 0x9, 0x1, 0x3, 0xbe2}, {0x4, 0xa, 0x0, 0x0, 0x6, 0x6}, {0x3ff, 0x5, 0x1, 0x7000, 0x4e, 0x8}, {0xd6, 0x9, 0x10000, 0x8, 0xff, 0x2}, {0xb, 0x1, 0x1f36, 0x8ff4, 0xfff, 0x6}, {0x0, 0x516607, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff4b03, 0x5, 0x10, 0x1, 0x3, 0x6}, {0x7, 0x0, 0x6, 0x8000, 0x10, 0xa}, {0x2, 0x6c, 0xffffffff, 0x2, 0x94, 0x9}, {0x3, 0x40, 0xfffffffa, 0x6, 0x0, 0xef0}, {0x8, 0x8, 0x64, 0x10, 0x49, 0x80}, {0x9, 0xc, 0x8000, 0x7, 0x3, 0x140}, {0x7, 0x7, 0xf16, 0x7ff, 0x3, 0x7}, {0x1ff, 0x9, 0x1, 0x9, 0x4e, 0xffffffff}, {0x4, 0x2, 0xffffffff, 0xe559, 0xc16, 0x4}, {0xfffff802, 0x1, 0x4, 0x1, 0x6}, {0x2, 0xf, 0x10, 0x3, 0xafae, 0x3}, {0x10000, 0x4, 0x6, 0x2, 0x6, 0xa4}, {0x0, 0x4, 0x0, 0x4, 0x1000, 0x6f17}, {0x2, 0x4, 0xd9, 0x7fffffff, 0x3, 0x805}, {0xf17, 0x4, 0x40, 0x5, 0x1, 0xff}, {0x0, 0x80000001, 0xb44f, 0xfffffffa, 0x0, 0x8a5}, {0x8000, 0x7ff, 0x5, 0x3, 0x4, 0x600}, {0x4b, 0xad, 0x8, 0x669, 0x1ff, 0x3}, {0x2, 0xa45, 0x1000, 0x0, 0xa, 0x1}, {0x4, 0x1, 0x8, 0x2, 0xe0, 0x4}, {0x4, 0xffd, 0x5, 0x3, 0x7fffffff, 0xfffffffb}, {0x8, 0x4, 0x4, 0x6, 0x1, 0x5}, {0x6, 0x0, 0xffffdbdc, 0x2, 0x9, 0x140000}, {0x2, 0x1, 0xdc, 0x8, 0x80000000, 0x569}, {0x0, 0x8, 0xffffffff, 0xa, 0x80000001, 0xa}, {0xfffffbff, 0x10, 0x8, 0x101, 0xfffffffa, 0x8000}, {0xa9c, 0x6, 0x1ff, 0x8, 0x1d, 0x3}, {0x2, 0xfffff16c, 0x5, 0x3, 0x5, 0x7ff}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2d451479be6868cc, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa02f5fe57b5d7768}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x7}, {0x1}, {0x3}, {0x2}, {}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x2220886d9e210a2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x1dd4}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.497113352s ago: executing program 1 (id=2282): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300021000000000000000000f00000200080008000000780000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000440000000000299dc26c83a029018a9892b51dc4922c9444ac"], 0x80}, 0x1, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.489502572s ago: executing program 2 (id=2283): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x20000000) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x2) 1.422383814s ago: executing program 2 (id=2285): socketpair$unix(0x1, 0x5, 0x0, 0x0) stat(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xb}, 0x1004, 0x0, 0x10000, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="fd", 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) inotify_init1(0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 1.421071225s ago: executing program 1 (id=2286): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000, 0x1000}, 0x6c8d, 0x7, 0xffffffff, 0x4, 0x0, 0x6f, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 995.741708ms ago: executing program 2 (id=2288): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 995.585548ms ago: executing program 4 (id=2289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)='$', 0x11, 0x0, 0x0, 0x0) 960.379119ms ago: executing program 1 (id=2290): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0xc844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 935.42605ms ago: executing program 4 (id=2291): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 827.982273ms ago: executing program 4 (id=2294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80000052f000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 765.526485ms ago: executing program 1 (id=2296): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1fd}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000280)="4c00000012001f15b9409b849ac00a00a5784002000002000000030038c88cc055c5ac27a6c5b06875d8cb9cfe83f24cd0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x4c, 0x0, 0x0, 0x0) 759.491215ms ago: executing program 4 (id=2297): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x5fffd, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 692.112728ms ago: executing program 4 (id=2299): socketpair$unix(0x1, 0x5, 0x0, 0x0) stat(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0xb}, 0x1004, 0x0, 0x10000, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="fd", 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) inotify_init1(0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 590.936751ms ago: executing program 1 (id=2300): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') 590.594191ms ago: executing program 3 (id=2301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 542.195872ms ago: executing program 3 (id=2302): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 514.830363ms ago: executing program 3 (id=2303): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000100"], 0x1c}, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 508.188003ms ago: executing program 0 (id=2304): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfeac, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) 423.761016ms ago: executing program 0 (id=2305): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 422.824246ms ago: executing program 2 (id=2306): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0xc844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 321.027669ms ago: executing program 0 (id=2307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000c40000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 299.70254ms ago: executing program 0 (id=2308): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000002c80)=@gcm_128={{0x304}, '\x00', "362574ad5924c0c5aedd72261081b10f", "0700d871", "d97ab19fbd9a8e17"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)='3', 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) write$binfmt_elf64(r0, 0x0, 0xfdd6) 280.781281ms ago: executing program 3 (id=2310): syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7, 0x4) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 211.000783ms ago: executing program 0 (id=2311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf650f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x8}, 0x26, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 207.328693ms ago: executing program 3 (id=2312): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffef}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) 165.151905ms ago: executing program 0 (id=2313): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e24, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 152.130565ms ago: executing program 4 (id=2314): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x102013, 0x0, 0x7, 0x7, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0xff) recvmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10102, 0x0) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 128.437136ms ago: executing program 2 (id=2315): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/66, 0x42}, 0x7}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 76.2µs ago: executing program 2 (id=2316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0x1, 0xe766}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, r3, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x11, &(0x7f0000000140)={@link_local, @remote, @void, {@llc_tr={0x11, {@llc={0xbc, 0xaa, '\x00'}}}}}, 0x0) 0s ago: executing program 3 (id=2317): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) kernel console output (not intermixed with test programs): ted capacity change from 0 to 512 [ 98.522085][ T6107] ªªªªªª: renamed from wg2 [ 98.556511][ T4293] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.567924][ T6115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6115 comm=syz.1.892 [ 98.590195][ T4293] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.621447][ T6115] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 98.648042][ T6113] loop4: detected capacity change from 0 to 4096 [ 98.658315][ T6113] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 98.679340][ T6115] bond1: (slave geneve2): making interface the new active one [ 98.699106][ T6115] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 98.721880][ T6126] loop3: detected capacity change from 0 to 2048 [ 98.730109][ T1808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.777537][ T1679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.798158][ T1679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.822265][ T1679] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 98.918692][ T6139] loop3: detected capacity change from 0 to 512 [ 98.949213][ T6139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.972262][ T6139] EXT4-fs: Ignoring removed nobh option [ 98.986648][ T6143] netlink: 'syz.4.905': attribute type 83 has an invalid length. [ 99.006959][ T6139] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 99.014940][ T6139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 99.023611][ T6139] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 99.055285][ T6139] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 99.132562][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 99.132593][ T28] audit: type=1326 audit(99.105:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.170994][ T28] audit: type=1326 audit(99.145:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.196672][ T28] audit: type=1326 audit(99.145:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.222040][ T28] audit: type=1326 audit(99.145:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.254159][ T28] audit: type=1326 audit(99.145:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.298082][ T28] audit: type=1326 audit(99.145:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.340197][ T28] audit: type=1326 audit(99.145:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.394972][ T28] audit: type=1326 audit(99.145:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.450810][ T6160] netlink: 'syz.4.912': attribute type 21 has an invalid length. [ 99.459035][ T28] audit: type=1326 audit(99.145:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.459616][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.4.912'. [ 99.496594][ T6162] Set syz1 is full, maxelem 14 reached [ 99.517633][ T6164] loop0: detected capacity change from 0 to 512 [ 99.524045][ T28] audit: type=1326 audit(99.145:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6149 comm="syz.3.906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc1f5ce59 code=0x7ffc0000 [ 99.568210][ T6164] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.913: corrupted in-inode xattr: invalid ea_ino [ 99.581887][ T6164] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.595981][ T6164] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.913: couldn't read orphan inode 15 (err -117) [ 99.605185][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 99.605216][ C1] EXT4-fs (loop0): initial error at time 99: ext4_iget_extra_inode:5128: inode 15 [ 99.605239][ C1] EXT4-fs (loop0): last error at time 99: ext4_iget_extra_inode:5128: inode 15 [ 99.674914][ T6164] loop0: lost filesystem error report for type 5 error -117 [ 99.675544][ T6164] EXT4-fs mount: 6 callbacks suppressed [ 99.675561][ T6164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.748827][ T6179] loop1: detected capacity change from 0 to 1024 [ 99.769728][ T6179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.783411][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.822605][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.096664][ T6188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.116024][ T6188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.224385][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.246993][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.750928][ T6251] loop1: detected capacity change from 0 to 128 [ 100.795386][ T6254] syzkaller0: entered allmulticast mode [ 100.795510][ T6254] syzkaller0: entered promiscuous mode [ 100.805949][ T6254] syzkaller0 (unregistering): left allmulticast mode [ 100.805970][ T6254] syzkaller0 (unregistering): left promiscuous mode [ 101.260582][ T6286] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿ [ 101.940973][ T6318] loop1: detected capacity change from 0 to 1024 [ 101.950481][ T6318] EXT4-fs: Ignoring removed bh option [ 101.971743][ T6318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.080771][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.177925][ T6341] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.190535][ T6341] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 103.212813][ T6348] loop3: detected capacity change from 0 to 1024 [ 103.288845][ T6348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.478138][ T6358] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.992: bg 0: block 112: padding at end of block bitmap is not set [ 103.509787][ T6358] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 488 with error 28 [ 103.536154][ T6358] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.536154][ T6358] [ 103.556575][ T6358] EXT4-fs (loop3): Total free blocks count 0 [ 103.565428][ T6358] EXT4-fs (loop3): Free/Dirty block details [ 103.571507][ T6358] EXT4-fs (loop3): free_blocks=0 [ 103.576784][ T6358] EXT4-fs (loop3): dirty_blocks=2416 [ 103.582635][ T6358] EXT4-fs (loop3): Block reservation details [ 103.588847][ T6358] EXT4-fs (loop3): i_reserved_data_blocks=151 [ 103.597686][ T1808] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 6) [ 103.621521][ T1808] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 103.646078][ T1808] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 103.747410][ T6358] syz.3.992 (6358) used greatest stack depth: 9200 bytes left [ 104.247749][ T5229] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 104.292714][ T6457] syz_tun: entered allmulticast mode [ 104.316660][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 104.316678][ T28] audit: type=1400 audit(104.285:1118): avc: denied { bind } for pid=6458 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.323566][ T6456] syz_tun: left allmulticast mode [ 104.349792][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.997'. [ 104.363221][ T28] audit: type=1400 audit(104.285:1119): avc: denied { setopt } for pid=6458 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.503927][ T6473] loop3: detected capacity change from 0 to 512 [ 104.541264][ T6473] EXT4-fs: Ignoring removed bh option [ 104.548681][ T6473] EXT4-fs: inline encryption not supported [ 104.557182][ T6473] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 104.595493][ T6473] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 104.621906][ T6473] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.995: bg 0: block 248: padding at end of block bitmap is not set [ 104.642497][ T6473] loop3: lost filesystem error report for type 5 error -117 [ 104.643997][ T6473] Quota error (device loop3): write_blk: dquota write failed [ 104.651367][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 104.651406][ C1] EXT4-fs (loop3): last error at time 104: ext4_validate_block_bitmap:441 [ 104.656037][ T28] audit: type=1400 audit(104.625:1120): avc: denied { ioctl } for pid=6483 comm="syz.1.1006" path="socket:[14416]" dev="sockfs" ino=14416 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.659662][ T6473] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 104.669436][ T6489] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 104.674436][ T6473] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.995: Failed to acquire dquot type 1 [ 104.729842][ T6473] loop3: lost filesystem error report for type 5 error -28 [ 104.730752][ T6473] EXT4-fs (loop3): 1 truncate cleaned up [ 104.757060][ T6489] bond1: entered promiscuous mode [ 104.767397][ T6473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 104.780539][ T6489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.828753][ T6498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.868793][ T6498] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 104.902736][ T6498] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 104.955485][ T6498] bond1: (slave gre1): making interface the new active one [ 104.955781][ T6507] loop1: detected capacity change from 0 to 256 [ 104.972716][ T6507] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.984555][ T6498] gre1: entered promiscuous mode [ 105.007996][ T6498] bond1: (slave gre1): Enslaving as an active interface with an up link [ 105.026950][ T6467] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.995: deleted inode referenced: 12 [ 105.049860][ T6473] syz.3.995 (6473) used greatest stack depth: 9128 bytes left [ 105.150594][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 105.376144][ T28] audit: type=1400 audit(105.345:1121): avc: denied { execute } for pid=6517 comm="syz.4.1016" dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.398223][ T28] audit: type=1400 audit(105.345:1122): avc: denied { execute_no_trans } for pid=6517 comm="syz.4.1016" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.795188][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.803385][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.812623][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.305685][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.314111][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.323991][ T6545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.334586][ T6545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.346969][ T6545] veth1_vlan: left promiscuous mode [ 106.352782][ T6545] veth0_vlan: left promiscuous mode [ 106.358577][ T6545] veth0_vlan: entered promiscuous mode [ 106.366429][ T6545] veth1_vlan: entered promiscuous mode [ 106.374583][ T6545] veth1_macvtap: left promiscuous mode [ 106.380748][ T6545] veth0_macvtap: left promiscuous mode [ 106.387193][ T6545] veth0_macvtap: entered promiscuous mode [ 106.393647][ T6545] veth1_macvtap: entered promiscuous mode [ 106.402596][ T6545] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.410910][ T6545] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.419500][ T6545] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.427806][ T6545] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.522104][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.529276][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.727118][ T6558] loop1: detected capacity change from 0 to 1024 [ 106.760374][ T6558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.799521][ T28] audit: type=1400 audit(106.775:1123): avc: denied { write } for pid=6556 comm="syz.1.1045" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.906872][ T6565] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1045: bg 0: block 112: padding at end of block bitmap is not set [ 106.922027][ T6565] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 488 with error 28 [ 106.934921][ T6565] EXT4-fs (loop1): This should not happen!! Data will be lost [ 106.934921][ T6565] [ 106.944855][ T6565] EXT4-fs (loop1): Total free blocks count 0 [ 106.951005][ T6565] EXT4-fs (loop1): Free/Dirty block details [ 106.957287][ T6565] EXT4-fs (loop1): free_blocks=0 [ 106.963143][ T6565] EXT4-fs (loop1): dirty_blocks=2160 [ 106.968970][ T6565] EXT4-fs (loop1): Block reservation details [ 106.975856][ T6565] EXT4-fs (loop1): i_reserved_data_blocks=135 [ 106.984431][ T1748] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 107.002587][ T1748] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 107.018823][ T1748] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 107.124334][ T28] audit: type=1400 audit(107.095:1124): avc: denied { mounton } for pid=6575 comm="syz.4.1038" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.148331][ T6576] VFS: Mount too revealing [ 107.239015][ T3306] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 107.301750][ T6587] siw: device registration error -23 [ 108.609459][ T6695] syz_tun: entered allmulticast mode [ 108.642153][ T6694] syz_tun: left allmulticast mode [ 108.689540][ T6700] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿ [ 108.907274][ T6723] loop2: detected capacity change from 0 to 1024 [ 108.929555][ T6723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.939897][ T6723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.412784][ T28] audit: type=1400 audit(109.385:1125): avc: denied { connect } for pid=6742 comm="syz.0.1069" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.605401][ T28] audit: type=1400 audit(109.575:1126): avc: denied { cmd } for pid=6753 comm="syz.4.1073" path="socket:[14706]" dev="sockfs" ino=14706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 109.682278][ T6756] netlink: 'syz.3.1074': attribute type 4 has an invalid length. [ 109.706431][ T6756] netlink: 'syz.3.1074': attribute type 4 has an invalid length. [ 109.849179][ T6766] program syz.1.1078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.849288][ T6764] loop3: detected capacity change from 0 to 512 [ 109.868402][ T6764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.886624][ T6764] EXT4-fs (loop3): 1 truncate cleaned up [ 109.893693][ T6764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.912194][ T28] audit: type=1400 audit(109.885:1127): avc: denied { write } for pid=6763 comm="syz.3.1079" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.957481][ T6772] futex_wake_op: syz.1.1090 tries to shift op by 36; fix this program [ 110.035352][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.499668][ T6801] loop1: detected capacity change from 0 to 512 [ 110.572202][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 110.648239][ T6801] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1092: inode has both inline data and extents flags [ 110.665969][ T6801] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.672854][ T6801] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1092: couldn't read orphan inode 15 (err -117) [ 110.724893][ T28] audit: type=1400 audit(110.675:1128): avc: denied { bind } for pid=6825 comm="syz.4.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.883127][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 110.883506][ C1] EXT4-fs (loop1): initial error at time 110: ext4_orphan_get:1397: inode 15 [ 110.884725][ C1] EXT4-fs (loop1): last error at time 110: ext4_orphan_get:1397: inode 15 [ 110.966198][ T6801] loop1: lost filesystem error report for type 5 error -117 [ 111.000302][ T6792] 9pnet_fd: p9_fd_create_tcp (6792): problem connecting socket to 127.0.0.1 [ 111.011413][ T6801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.233330][ T28] audit: type=1400 audit(111.205:1129): avc: denied { write } for pid=6800 comm="syz.1.1092" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.325156][ T6871] loop3: detected capacity change from 0 to 512 [ 111.352943][ T6871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0400-000000000000 r/w without journal. Quota mode: writeback. [ 111.371013][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.385457][ T6878] loop0: detected capacity change from 0 to 1024 [ 111.400361][ T28] audit: type=1400 audit(111.375:1130): avc: denied { write } for pid=6870 comm="syz.3.1121" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.440614][ T6878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.466926][ T28] audit: type=1400 audit(111.435:1131): avc: denied { write } for pid=6870 comm="syz.3.1121" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.497953][ T6878] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.1133: lblock 3 mapped to illegal pblock 3 (length 3) [ 111.516862][ T28] audit: type=1400 audit(111.455:1132): avc: denied { write } for pid=6877 comm="syz.0.1133" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.542087][ T6878] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 111.560864][ T28] audit: type=1400 audit(111.535:1133): avc: denied { ioctl } for pid=6870 comm="syz.3.1121" path="/80/file0/cpuset.effective_mems" dev="loop3" ino=19 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.586346][ T6878] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.586346][ T6878] [ 111.604983][ T6892] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1133: lblock 3 mapped to illegal pblock 3 (length 1) [ 111.636022][ T6892] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.1133: lblock 3 mapped to illegal pblock 3 (length 1) [ 111.656269][ T6896] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.1133: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 111.681402][ T6896] EXT4-fs error (device loop0) in ext4_setattr:6120: Corrupt filesystem [ 111.707631][ T12] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 111.721718][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 111.734208][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.734208][ T12] [ 111.764877][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0400-000000000000. [ 112.287133][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 112.331329][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.020368][ T6934] syz.2.1145 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 113.034620][ T6934] CPU: 1 UID: 0 PID: 6934 Comm: syz.2.1145 Tainted: G W syzkaller #0 PREEMPT(full) [ 113.034685][ T6934] Tainted: [W]=WARN [ 113.034694][ T6934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 113.034707][ T6934] Call Trace: [ 113.034714][ T6934] [ 113.034723][ T6934] __dump_stack+0x1d/0x30 [ 113.034782][ T6934] dump_stack_lvl+0x95/0xd0 [ 113.034810][ T6934] dump_stack+0x15/0x1b [ 113.034836][ T6934] dump_header+0x80/0x240 [ 113.034869][ T6934] oom_kill_process+0x295/0x350 [ 113.034952][ T6934] out_of_memory+0x97d/0xb80 [ 113.034991][ T6934] try_charge_memcg+0x62f/0xa10 [ 113.035033][ T6934] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 113.035075][ T6934] __alloc_frozen_pages_noprof+0x18a/0x350 [ 113.035171][ T6934] alloc_pages_mpol+0xb3/0x260 [ 113.035195][ T6934] alloc_pages_noprof+0x8f/0x140 [ 113.035295][ T6934] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 113.035331][ T6934] __kvmalloc_node_noprof+0x3d4/0x640 [ 113.035358][ T6934] ? futex_hash_allocate+0x190/0x9a0 [ 113.035396][ T6934] ? futex_hash_allocate+0x190/0x9a0 [ 113.035470][ T6934] futex_hash_allocate+0x190/0x9a0 [ 113.035546][ T6934] ? cap_task_prctl+0x13f/0x6b0 [ 113.035578][ T6934] futex_hash_prctl+0xd8/0xf0 [ 113.035616][ T6934] __se_sys_prctl+0x4f4/0x1400 [ 113.035665][ T6934] __x64_sys_prctl+0x67/0x80 [ 113.035691][ T6934] x64_sys_call+0x2533/0x3020 [ 113.035753][ T6934] do_syscall_64+0x12c/0x3b0 [ 113.035801][ T6934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.035909][ T6934] RIP: 0033:0x7f6c6084ce59 [ 113.035927][ T6934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.036019][ T6934] RSP: 002b:00007f6c5f29f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 113.036045][ T6934] RAX: ffffffffffffffda RBX: 00007f6c60ac5fa0 RCX: 00007f6c6084ce59 [ 113.036062][ T6934] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 113.036077][ T6934] RBP: 00007f6c608e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 113.036090][ T6934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.036165][ T6934] R13: 00007f6c60ac6038 R14: 00007f6c60ac5fa0 R15: 00007fffa031f588 [ 113.036253][ T6934] [ 113.036260][ T6934] memory: usage 307200kB, limit 307200kB, failcnt 344 [ 113.264601][ T6934] memory+swap: usage 311916kB, limit 9007199254740988kB, failcnt 0 [ 113.272757][ T6934] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 113.280406][ T6934] Memory cgroup stats for /syz2: [ 113.280760][ T6934] cache 0 [ 113.288687][ T6934] rss 4096 [ 113.291742][ T6934] shmem 0 [ 113.294753][ T6934] mapped_file 0 [ 113.298602][ T6934] dirty 0 [ 113.301546][ T6934] writeback 0 [ 113.304861][ T6934] workingset_refault_anon 39 [ 113.309472][ T6934] workingset_refault_file 1344 [ 113.314273][ T6934] swap 4829184 [ 113.317688][ T6934] swapcached 9003008 [ 113.321600][ T6934] pgpgin 68237 [ 113.324959][ T6934] pgpgout 68235 [ 113.328432][ T6934] pgfault 66691 [ 113.331982][ T6934] pgmajfault 6173 [ 113.335609][ T6934] inactive_anon 8192 [ 113.339551][ T6934] active_anon 0 [ 113.343106][ T6934] inactive_file 0 [ 113.346733][ T6934] active_file 0 [ 113.350358][ T6934] unevictable 0 [ 113.354268][ T6934] hierarchical_memory_limit 314572800 [ 113.359962][ T6934] hierarchical_memsw_limit 9223372036854771712 [ 113.366269][ T6934] total_cache 0 [ 113.369850][ T6934] total_rss 4096 [ 113.373486][ T6934] total_shmem 0 [ 113.376995][ T6934] total_mapped_file 0 [ 113.381073][ T6934] total_dirty 0 [ 113.384553][ T6934] total_writeback 0 [ 113.388383][ T6934] total_workingset_refault_anon 39 [ 113.393570][ T6934] total_workingset_refault_file 1344 [ 113.398879][ T6934] total_swap 4829184 [ 113.402779][ T6934] total_swapcached 9003008 [ 113.407223][ T6934] total_pgpgin 68237 [ 113.411217][ T6934] total_pgpgout 68235 [ 113.415208][ T6934] total_pgfault 66691 [ 113.419260][ T6934] total_pgmajfault 6173 [ 113.423528][ T6934] total_inactive_anon 8192 [ 113.427964][ T6934] total_active_anon 0 [ 113.431944][ T6934] total_inactive_file 0 [ 113.436400][ T6934] total_active_file 0 [ 113.440429][ T6934] total_unevictable 0 [ 113.444425][ T6934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1145,pid=6933,uid=0 [ 113.459183][ T6934] Memory cgroup out of memory: Killed process 6933 (syz.2.1145) total-vm:96216kB, anon-rss:1232kB, file-rss:22536kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 113.567612][ T6934] syz.2.1145 (6934) used greatest stack depth: 8440 bytes left [ 113.608238][ T6947] loop3: detected capacity change from 0 to 1024 [ 113.630342][ T6947] EXT4-fs: Ignoring removed bh option [ 113.672284][ T6947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.708859][ T28] audit: type=1400 audit(113.685:1134): avc: denied { write } for pid=6941 comm="syz.3.1148" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.873205][ T6956] loop0: detected capacity change from 0 to 1024 [ 113.916989][ T6956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.198317][ T6962] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1149: bg 0: block 112: padding at end of block bitmap is not set [ 114.219012][ T6962] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 488 with error 28 [ 114.231941][ T6962] EXT4-fs (loop0): This should not happen!! Data will be lost [ 114.231941][ T6962] [ 114.242091][ T6962] EXT4-fs (loop0): Total free blocks count 0 [ 114.248351][ T6962] EXT4-fs (loop0): Free/Dirty block details [ 114.262795][ T6962] EXT4-fs (loop0): free_blocks=0 [ 114.276355][ T6962] EXT4-fs (loop0): dirty_blocks=3504 [ 114.292775][ T6962] EXT4-fs (loop0): Block reservation details [ 114.310847][ T6962] EXT4-fs (loop0): i_reserved_data_blocks=219 [ 114.329270][ T1748] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 114.354087][ T1748] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 114.381555][ T6965] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿ [ 114.653261][ T1748] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 8) [ 114.655359][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.675284][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 114.758711][ T6972] loop0: detected capacity change from 0 to 1024 [ 114.790615][ T6972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.827434][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 114.827451][ T28] audit: type=1400 audit(114.805:1136): avc: denied { write } for pid=6970 comm="syz.0.1167" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.070964][ T6984] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1167: bg 0: block 112: padding at end of block bitmap is not set [ 115.107937][ T6984] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 20 with max blocks 488 with error 28 [ 115.127672][ T6984] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.127672][ T6984] [ 115.146368][ T6984] EXT4-fs (loop0): Total free blocks count 0 [ 115.156971][ T6984] EXT4-fs (loop0): Free/Dirty block details [ 115.168009][ T6984] EXT4-fs (loop0): free_blocks=0 [ 115.177305][ T6984] EXT4-fs (loop0): dirty_blocks=1648 [ 115.188292][ T6984] EXT4-fs (loop0): Block reservation details [ 115.200041][ T6984] EXT4-fs (loop0): i_reserved_data_blocks=103 [ 115.214614][ T1748] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 115.230395][ T1748] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 116.378321][ T49] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 116.400959][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 116.665649][ T7108] loop0: detected capacity change from 0 to 1024 [ 116.686320][ T7108] EXT4-fs: Ignoring removed bh option [ 116.718533][ T7108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.751154][ T28] audit: type=1400 audit(116.725:1137): avc: denied { write } for pid=7107 comm="syz.0.1164" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.832990][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.913581][ T7123] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿ [ 117.132287][ T7132] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 117.176962][ T7132] bond2: entered promiscuous mode [ 117.194706][ T7132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.606957][ T7137] loop0: detected capacity change from 0 to 512 [ 117.902542][ T7137] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1171: inode has both inline data and extents flags [ 117.933733][ T7137] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.943627][ T7137] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1171: couldn't read orphan inode 15 (err -117) [ 117.955388][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 117.955507][ C0] EXT4-fs (loop0): initial error at time 117: ext4_orphan_get:1397: inode 15 [ 117.955798][ C0] EXT4-fs (loop0): last error at time 117: ext4_orphan_get:1397: inode 15 [ 118.027535][ T7137] loop0: lost filesystem error report for type 5 error -117 [ 118.102777][ T7137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.228761][ T7141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.237447][ T28] audit: type=1400 audit(118.205:1138): avc: denied { write } for pid=7135 comm="syz.0.1171" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 118.239278][ T7141] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 118.276148][ T7141] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 118.289083][ T7141] bond2: (slave gre1): making interface the new active one [ 118.299480][ T7141] gre1: entered promiscuous mode [ 118.322124][ T7141] bond2: (slave gre1): Enslaving as an active interface with an up link [ 118.333575][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.551830][ T7244] loop2: detected capacity change from 0 to 1024 [ 119.569184][ T7244] EXT4-fs: Ignoring removed bh option [ 119.803736][ T7250] 9p: Bad value for 'rfdno' [ 119.815865][ T7244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.852149][ T28] audit: type=1400 audit(119.805:1139): avc: denied { write } for pid=7242 comm="syz.2.1183" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.005352][ T7266] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 120.023967][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.069290][ T7266] bond1: entered promiscuous mode [ 120.097380][ T7266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.137963][ T7274] loop0: detected capacity change from 0 to 512 [ 120.183186][ T7274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0400-000000000000 r/w without journal. Quota mode: writeback. [ 120.226907][ T28] audit: type=1400 audit(120.195:1140): avc: denied { write } for pid=7273 comm="syz.0.1193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.248253][ T28] audit: type=1400 audit(120.205:1141): avc: denied { write } for pid=7273 comm="syz.0.1193" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.270766][ T7266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.311212][ T7266] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 120.335408][ T7266] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 120.370324][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0400-000000000000. [ 120.381072][ T7266] bond1: (slave gre1): making interface the new active one [ 120.396876][ T7266] gre1: entered promiscuous mode [ 120.404333][ T7266] bond1: (slave gre1): Enslaving as an active interface with an up link [ 120.712631][ T7271] loop2: detected capacity change from 0 to 512 [ 121.064574][ T7271] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1189: inode has both inline data and extents flags [ 121.080648][ T7271] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.085348][ T7271] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1189: couldn't read orphan inode 15 (err -117) [ 121.095176][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 121.095316][ C0] EXT4-fs (loop2): initial error at time 121: ext4_orphan_get:1397: inode 15 [ 121.096208][ C0] EXT4-fs (loop2): last error at time 121: ext4_orphan_get:1397: inode 15 [ 121.145755][ T7260] syz.1.1190 (7260) used greatest stack depth: 7896 bytes left [ 121.177471][ T7271] loop2: lost filesystem error report for type 5 error -117 [ 121.182446][ T7271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.232558][ T28] audit: type=1400 audit(121.205:1142): avc: denied { write } for pid=7270 comm="syz.2.1189" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.302737][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.324869][ T7298] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 121.373441][ T7298] bond2: entered promiscuous mode [ 121.392947][ T7298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.484309][ T7298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.495427][ T7298] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 121.511162][ T7298] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 121.522675][ T7298] bond2: (slave gre1): making interface the new active one [ 121.530251][ T7298] gre1: entered promiscuous mode [ 121.538063][ T7298] bond2: (slave gre1): Enslaving as an active interface with an up link [ 121.559753][ T7318] loop2: detected capacity change from 0 to 512 [ 121.584318][ T7318] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0400-000000000000 r/w without journal. Quota mode: writeback. [ 121.637469][ T28] audit: type=1400 audit(121.615:1143): avc: denied { write } for pid=7317 comm="syz.2.1207" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.666976][ T28] audit: type=1400 audit(121.635:1144): avc: denied { write } for pid=7317 comm="syz.2.1207" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.853174][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0400-000000000000. [ 124.111984][ T7432] loop0: detected capacity change from 0 to 1024 [ 124.138388][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.158905][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.386024][ T7438] netlink: 'syz.1.1255': attribute type 4 has an invalid length. [ 124.422492][ T7438] netlink: 'syz.1.1255': attribute type 4 has an invalid length. [ 124.988949][ T7461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.019868][ T7461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.294781][ T7478] netlink: 'syz.0.1271': attribute type 4 has an invalid length. [ 125.313886][ T7478] netlink: 'syz.0.1271': attribute type 4 has an invalid length. [ 126.450104][ T7496] syz.0.1281 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 126.464748][ T7496] CPU: 1 UID: 0 PID: 7496 Comm: syz.0.1281 Tainted: G W syzkaller #0 PREEMPT(full) [ 126.464774][ T7496] Tainted: [W]=WARN [ 126.464779][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.464788][ T7496] Call Trace: [ 126.464793][ T7496] [ 126.464799][ T7496] __dump_stack+0x1d/0x30 [ 126.464859][ T7496] dump_stack_lvl+0x95/0xd0 [ 126.464875][ T7496] dump_stack+0x15/0x1b [ 126.464888][ T7496] dump_header+0x80/0x240 [ 126.464943][ T7496] oom_kill_process+0x295/0x350 [ 126.464965][ T7496] out_of_memory+0x97d/0xb80 [ 126.465008][ T7496] try_charge_memcg+0x62f/0xa10 [ 126.465068][ T7496] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 126.465086][ T7496] __alloc_frozen_pages_noprof+0x18a/0x350 [ 126.465105][ T7496] alloc_pages_mpol+0xb3/0x260 [ 126.465122][ T7496] alloc_pages_noprof+0x8f/0x140 [ 126.465185][ T7496] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 126.465261][ T7496] __kvmalloc_node_noprof+0x3d4/0x640 [ 126.465291][ T7496] ? futex_hash_allocate+0x190/0x9a0 [ 126.465321][ T7496] ? futex_hash_allocate+0x190/0x9a0 [ 126.465431][ T7496] futex_hash_allocate+0x190/0x9a0 [ 126.465456][ T7496] ? cap_task_prctl+0x13f/0x6b0 [ 126.465474][ T7496] futex_hash_prctl+0xd8/0xf0 [ 126.465496][ T7496] __se_sys_prctl+0x4f4/0x1400 [ 126.465572][ T7496] __x64_sys_prctl+0x67/0x80 [ 126.465590][ T7496] x64_sys_call+0x2533/0x3020 [ 126.465630][ T7496] do_syscall_64+0x12c/0x3b0 [ 126.465653][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.465669][ T7496] RIP: 0033:0x7ff49bf4ce59 [ 126.465682][ T7496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.465764][ T7496] RSP: 002b:00007ff49a9a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 126.465780][ T7496] RAX: ffffffffffffffda RBX: 00007ff49c1c5fa0 RCX: 00007ff49bf4ce59 [ 126.465824][ T7496] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 126.465834][ T7496] RBP: 00007ff49bfe2d6f R08: 0000000000000000 R09: 0000000000000000 [ 126.465843][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.465852][ T7496] R13: 00007ff49c1c6038 R14: 00007ff49c1c5fa0 R15: 00007ffea82ce968 [ 126.465865][ T7496] [ 126.465870][ T7496] memory: usage 307200kB, limit 307200kB, failcnt 304 [ 126.693977][ T7496] memory+swap: usage 364724kB, limit 9007199254740988kB, failcnt 0 [ 126.702098][ T7496] kmem: usage 296612kB, limit 9007199254740988kB, failcnt 0 [ 126.709680][ T7496] Memory cgroup stats for /syz0: [ 126.709869][ T7496] cache 9097216 [ 126.718499][ T7496] rss 270336 [ 126.721709][ T7496] shmem 9097216 [ 126.725152][ T7496] mapped_file 0 [ 126.728627][ T7496] dirty 0 [ 126.731615][ T7496] writeback 0 [ 126.734979][ T7496] workingset_refault_anon 8 [ 126.739533][ T7496] workingset_refault_file 192 [ 126.744212][ T7496] swap 58904576 [ 126.747781][ T7496] swapcached 60395520 [ 126.751791][ T7496] pgpgin 81624 [ 126.755150][ T7496] pgpgout 78977 [ 126.758657][ T7496] pgfault 68001 [ 126.762129][ T7496] pgmajfault 2059 [ 126.765748][ T7496] inactive_anon 360448 [ 126.769833][ T7496] active_anon 10481664 [ 126.773901][ T7496] inactive_file 0 [ 126.777555][ T7496] active_file 0 [ 126.781074][ T7496] unevictable 0 [ 126.784519][ T7496] hierarchical_memory_limit 314572800 [ 126.789916][ T7496] hierarchical_memsw_limit 9223372036854771712 [ 126.796073][ T7496] total_cache 9097216 [ 126.800189][ T7496] total_rss 270336 [ 126.803966][ T7496] total_shmem 9097216 [ 126.808081][ T7496] total_mapped_file 0 [ 126.812069][ T7496] total_dirty 0 [ 126.815526][ T7496] total_writeback 0 [ 126.819368][ T7496] total_workingset_refault_anon 8 [ 126.824406][ T7496] total_workingset_refault_file 192 [ 126.829692][ T7496] total_swap 58904576 [ 126.833682][ T7496] total_swapcached 60395520 [ 126.838209][ T7496] total_pgpgin 81624 [ 126.842122][ T7496] total_pgpgout 78977 [ 126.846143][ T7496] total_pgfault 68001 [ 126.850180][ T7496] total_pgmajfault 2059 [ 126.854594][ T7496] total_inactive_anon 360448 [ 126.859403][ T7496] total_active_anon 10481664 [ 126.864081][ T7496] total_inactive_file 0 [ 126.868289][ T7496] total_active_file 0 [ 126.872278][ T7496] total_unevictable 0 [ 126.876268][ T7496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1281,pid=7495,uid=0 [ 126.891043][ T7496] Memory cgroup out of memory: Killed process 7495 (syz.0.1281) total-vm:96216kB, anon-rss:1420kB, file-rss:22300kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 127.934986][ T7510] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 127.952202][ T7510] netlink: 'syz.2.1287': attribute type 4 has an invalid length. [ 128.099475][ T28] audit: type=1400 audit(128.075:1145): avc: denied { write } for pid=7526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.159040][ T28] audit: type=1400 audit(128.135:1146): avc: denied { write } for pid=7542 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.310054][ T7555] loop2: detected capacity change from 0 to 2048 [ 128.343322][ T7555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.379095][ T28] audit: type=1400 audit(128.355:1147): avc: denied { write } for pid=7547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.408237][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.430212][ T28] audit: type=1400 audit(128.405:1148): avc: denied { write } for pid=7564 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.510715][ T7573] syzkaller0: entered allmulticast mode [ 128.522196][ T7573] syzkaller0: entered promiscuous mode [ 128.531816][ T7573] syzkaller0 (unregistering): left allmulticast mode [ 128.539107][ T7573] syzkaller0 (unregistering): left promiscuous mode [ 128.803669][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 129.670932][ T7601] loop2: detected capacity change from 0 to 256 [ 129.736245][ T7604] loop1: detected capacity change from 0 to 1024 [ 129.768798][ T7604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 129.786828][ T28] audit: type=1400 audit(129.755:1149): avc: denied { write } for pid=7603 comm="syz.1.1314" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.788569][ T7604] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.1314: lblock 3 mapped to illegal pblock 3 (length 3) [ 129.822376][ T7604] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 129.835197][ T7604] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.835197][ T7604] [ 129.845968][ T7607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1314: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.860748][ T7607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1314: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.875471][ T7607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1314: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.890135][ T7607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1314: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.927636][ T7607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1314: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.942264][ T7607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1314: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.957011][ T7607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #15: block 3: comm syz.1.1314: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.972565][ T7604] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.1314: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 129.991283][ T7604] EXT4-fs error (device loop1) in ext4_setattr:6120: Corrupt filesystem [ 130.362587][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 130.386632][ T7610] netlink: 'syz.2.1315': attribute type 83 has an invalid length. [ 130.395978][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.395978][ T12] [ 130.406584][ T3306] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 130.429344][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 130.501643][ T7616] netlink: 'syz.2.1329': attribute type 29 has an invalid length. [ 130.512713][ T7616] netlink: 'syz.2.1329': attribute type 29 has an invalid length. [ 130.526112][ T7616] netlink: 'syz.2.1329': attribute type 32 has an invalid length. [ 130.534337][ T7616] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1329'. [ 131.049326][ T7627] loop2: detected capacity change from 0 to 512 [ 131.062525][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 131.079047][ T7627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.128525][ T7627] EXT4-fs (loop2): 1 truncate cleaned up [ 131.129044][ T7627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.141367][ T28] audit: type=1400 audit(131.115:1150): avc: denied { write } for pid=7624 comm="syz.2.1321" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.264690][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.922172][ T7686] hub 8-0:1.0: USB hub found [ 131.928228][ T7686] hub 8-0:1.0: 8 ports detected [ 131.995508][ T7692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7692 comm=syz.1.1353 [ 132.008984][ T7692] netlink: 'syz.1.1353': attribute type 2 has an invalid length. [ 132.019361][ T7692] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 132.027219][ T7692] netlink: 'syz.1.1353': attribute type 8 has an invalid length. [ 132.035105][ T7692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1353'. [ 132.069632][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 132.211461][ T7705] loop2: detected capacity change from 0 to 512 [ 132.229884][ T7705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.246586][ T7705] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #18: comm syz.2.1358: corrupted inode contents [ 132.259308][ T7705] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 132.259434][ T7705] EXT4-fs (loop2): Remounting filesystem read-only [ 132.275631][ T7705] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -30) [ 132.298979][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.528131][ T7719] hub 8-0:1.0: USB hub found [ 132.533135][ T7719] hub 8-0:1.0: 8 ports detected [ 132.558699][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1366'. [ 132.653360][ T7731] loop2: detected capacity change from 0 to 512 [ 132.681970][ T7731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.701107][ T28] audit: type=1400 audit(132.675:1151): avc: denied { write } for pid=7730 comm="syz.2.1380" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.728521][ T7738] loop0: detected capacity change from 0 to 512 [ 132.758823][ T7738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.776841][ T7738] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #18: comm syz.0.1369: corrupted inode contents [ 132.789293][ T7738] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 132.789467][ T7738] EXT4-fs (loop0): Remounting filesystem read-only [ 132.805197][ T7738] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -30) [ 132.827635][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.631130][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.678689][ T7782] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1398'. [ 133.980988][ T28] audit: type=1400 audit(133.955:1152): avc: denied { connect } for pid=7795 comm="syz.3.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.115054][ T7819] loop0: detected capacity change from 0 to 512 [ 134.140607][ T7819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.185827][ T28] audit: type=1400 audit(134.155:1153): avc: denied { write } for pid=7818 comm="syz.0.1400" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.134615][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.354296][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'. [ 135.364390][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 135.402117][ T7847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.432990][ T7854] bond3: (slave hsr0): The slave device specified does not support setting the MAC address [ 135.488710][ T7854] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 135.509697][ T7854] bond3: (slave hsr0): Error -22 calling dev_set_mtu [ 136.445858][ T7888] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 136.607523][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1429'. [ 136.622628][ T7898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 136.625781][ T7892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.654350][ T7892] bond2: (slave hsr0): The slave device specified does not support setting the MAC address [ 136.676392][ T7892] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 136.699999][ T7892] bond2: (slave hsr0): Error -22 calling dev_set_mtu [ 137.034657][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1447'. [ 137.107604][ T7938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1460'. [ 137.227702][ T7951] loop1: detected capacity change from 0 to 512 [ 137.242245][ T7951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.259233][ T28] audit: type=1400 audit(137.235:1154): avc: denied { write } for pid=7950 comm="syz.1.1453" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.307024][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.315746][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.192370][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.442137][ T8054] loop1: detected capacity change from 0 to 512 [ 139.461263][ T8054] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1499: iget: bad i_size value: 38620345925642 [ 139.482986][ T8054] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.483269][ T8054] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1499: couldn't read orphan inode 15 (err -117) [ 139.492536][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 139.492572][ C0] EXT4-fs (loop1): initial error at time 139: ext4_orphan_get:1397: inode 15 [ 139.492606][ C0] EXT4-fs (loop1): last error at time 139: ext4_orphan_get:1397: inode 15 [ 139.529609][ T8054] loop1: lost filesystem error report for type 5 error -117 [ 139.530355][ T8054] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.579825][ T28] audit: type=1400 audit(139.555:1155): avc: denied { write } for pid=8053 comm="syz.1.1499" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.609025][ T28] audit: type=1400 audit(139.555:1156): avc: denied { write } for pid=8053 comm="syz.1.1499" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.646853][ T28] audit: type=1400 audit(139.555:1157): avc: denied { write } for pid=8053 comm="syz.1.1499" name="file1" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.685520][ T28] audit: type=1400 audit(139.555:1158): avc: denied { write } for pid=8053 comm="syz.1.1499" name="file4" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.731192][ T28] audit: type=1400 audit(139.555:1159): avc: denied { write } for pid=8053 comm="syz.1.1499" name="file4" dev="loop1" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.732251][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 139.806757][ T28] audit: type=1400 audit(139.555:1160): avc: denied { write } for pid=8053 comm="syz.1.1499" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.861980][ T28] audit: type=1400 audit(139.555:1161): avc: denied { write } for pid=8053 comm="syz.1.1499" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.942282][ T8064] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1502'. [ 140.368231][ T8077] loop2: detected capacity change from 0 to 8192 [ 140.485429][ T8086] loop2: detected capacity change from 0 to 512 [ 140.519476][ T8075] loop1: detected capacity change from 0 to 32768 [ 140.542695][ T8086] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1511: iget: bad i_size value: 38620345925642 [ 140.567750][ T8075] loop1: p1 p3 < > [ 140.586836][ T8086] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.587092][ T8086] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1511: couldn't read orphan inode 15 (err -117) [ 140.608150][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 140.608172][ C1] EXT4-fs (loop2): initial error at time 140: ext4_orphan_get:1397: inode 15 [ 140.608219][ C1] EXT4-fs (loop2): last error at time 140: ext4_orphan_get:1397: inode 15 [ 140.633457][ T8086] loop2: lost filesystem error report for type 5 error -117 [ 140.634535][ T8086] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.659751][ T28] audit: type=1400 audit(140.635:1162): avc: denied { write } for pid=8085 comm="syz.2.1511" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.712363][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 140.728353][ T28] audit: type=1400 audit(140.665:1163): avc: denied { write } for pid=8085 comm="syz.2.1511" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.775180][ T28] audit: type=1400 audit(140.665:1164): avc: denied { write } for pid=8085 comm="syz.2.1511" name="file1" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.898540][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 140.908726][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 141.184548][ T8097] netlink: 'syz.3.1516': attribute type 9 has an invalid length. [ 141.196832][ T8097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1516'. [ 141.302803][ T8103] netlink: 'syz.3.1517': attribute type 13 has an invalid length. [ 141.335944][ T8103] netlink: 'syz.3.1517': attribute type 17 has an invalid length. [ 141.465122][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.472478][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.497384][ T8110] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1520'. [ 141.603473][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.630384][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.879098][ T8103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.921242][ T8103] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.960182][ T8103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.003177][ T8103] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.010368][ T8103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.021889][ T8103] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.029141][ T8103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.091889][ T8103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.117736][ T8103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.159015][ T8103] veth1_vlan: left promiscuous mode [ 142.175836][ T8103] veth0_vlan: left promiscuous mode [ 142.183465][ T8103] veth0_vlan: entered promiscuous mode [ 142.193249][ T8103] veth1_vlan: entered promiscuous mode [ 142.209440][ T8103] veth1_macvtap: left promiscuous mode [ 142.216077][ T8103] veth0_macvtap: left promiscuous mode [ 142.223021][ T8103] veth0_macvtap: entered promiscuous mode [ 142.249408][ T8103] veth1_macvtap: entered promiscuous mode [ 142.269526][ T8103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.290350][ T8103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.308347][ T8103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.330468][ T8103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.353005][ T8103] bond1: left promiscuous mode [ 142.367143][ T8103] gre1: left promiscuous mode [ 142.401530][ T8103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.483046][ T8110] batman_adv: batadv0: Removing interface: dummy0 [ 142.988275][ T8144] syzkaller1: entered allmulticast mode [ 143.906487][ T8182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1549'. [ 143.930459][ T8182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1549'. [ 144.980081][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 144.980101][ T28] audit: type=1400 audit(144.955:1173): avc: denied { write } for pid=8251 comm="syz.1.1578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 145.250876][ T28] audit: type=1326 audit(145.225:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49bf4ce59 code=0x7ffc0000 [ 145.276861][ T28] audit: type=1326 audit(145.225:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49bf4ce59 code=0x7ffc0000 [ 145.303786][ T28] audit: type=1326 audit(145.255:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49bf4ce59 code=0x7ffc0000 [ 145.347901][ T28] audit: type=1326 audit(145.255:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49bf4ce59 code=0x7ffc0000 [ 145.387511][ T28] audit: type=1326 audit(145.255:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff49bf4ce59 code=0x7ffc0000 [ 145.419345][ T28] audit: type=1326 audit(145.305:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff49bf0d68e code=0x7ffc0000 [ 145.444270][ T28] audit: type=1326 audit(145.305:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff49bf0d68e code=0x7ffc0000 [ 145.476013][ T8262] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 145.489978][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1582'. [ 145.499424][ T28] audit: type=1326 audit(145.305:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff49bf0d68e code=0x7ffc0000 [ 145.548588][ T28] audit: type=1326 audit(145.305:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.0.1580" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff49bf0d68e code=0x7ffc0000 [ 145.935295][ T8287] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1593'. [ 145.944611][ T8287] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1593'. [ 145.953911][ T8287] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1593'. [ 146.002293][ T8291] : renamed from bond0 [ 146.087621][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1598'. [ 146.234180][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 146.255383][ T8313] bond3: entered promiscuous mode [ 146.260921][ T8313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.281874][ T8313] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.290723][ T8313] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 146.303282][ T8313] bond3: (slave sit1): Error -95 calling set_mac_address [ 146.354855][ T8320] xt_hashlimit: size too large, truncated to 1048576 [ 146.490460][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'. [ 146.499800][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 146.514297][ T6453] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.514331][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'. [ 146.534952][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 146.534948][ T6453] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.535072][ T6453] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.606869][ T6453] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.661896][ T8339] loop2: detected capacity change from 0 to 512 [ 146.680439][ T8339] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 146.693611][ T8339] EXT4-fs (loop2): orphan cleanup on readonly fs [ 146.700793][ T8339] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.1613: Block bitmap for bg 0 marked uninitialized [ 146.714381][ T8339] loop2: lost filesystem error report for type 5 error -117 [ 146.716818][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 146.730794][ C0] EXT4-fs (loop2): initial error at time 146: ext4_read_block_bitmap_nowait:517 [ 146.739904][ C0] EXT4-fs (loop2): last error at time 146: ext4_read_block_bitmap_nowait:517 [ 146.749827][ T8339] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 146.759132][ T8339] loop2: lost filesystem error report for type 5 error -117 [ 146.759475][ T8339] EXT4-fs (loop2): 1 orphan inode deleted [ 146.777315][ T8339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 147.107016][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.163591][ T8343] loop2: detected capacity change from 0 to 1024 [ 147.196823][ T8343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.260299][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.346223][ T8356] loop0: detected capacity change from 0 to 512 [ 147.379507][ T8356] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1620: iget: bad i_size value: 38620345925642 [ 147.425348][ T8356] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 147.425600][ T8356] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1620: couldn't read orphan inode 15 (err -117) [ 147.434820][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 147.434860][ C1] EXT4-fs (loop0): initial error at time 147: ext4_orphan_get:1397: inode 15 [ 147.434910][ C1] EXT4-fs (loop0): last error at time 147: ext4_orphan_get:1397: inode 15 [ 147.473755][ T8359] loop2: detected capacity change from 0 to 512 [ 147.480429][ T8356] loop0: lost filesystem error report for type 5 error -117 [ 147.504037][ T8356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.525314][ T8359] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.541220][ T8359] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.1619: bad orphan inode 131083 [ 147.554382][ T8355] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1620: bg 0: block 5: invalid block bitmap [ 147.573135][ T8359] loop2: lost filesystem error report for type 5 error -117 [ 147.573711][ T8359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.594098][ T8356] EXT4-fs (loop0): shut down requested (0) [ 147.611760][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.741325][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.822161][ T8384] VFS: Mount too revealing [ 148.707336][ T8424] netlink: 41 bytes leftover after parsing attributes in process `syz.2.1643'. [ 148.717705][ T8424] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1643'. [ 148.733992][ T8424] netlink: 41 bytes leftover after parsing attributes in process `syz.2.1643'. [ 148.780621][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1644'. [ 149.064982][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1659'. [ 149.437512][ T8482] : renamed from bond0 [ 149.531193][ T1748] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.545149][ T1748] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.562379][ T1748] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.578702][ T1748] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.229526][ T8508] : renamed from bond0 (while UP) [ 150.722748][ T8535] : renamed from bond0 (while UP) [ 151.044609][ T8558] ªªªªªª: renamed from wg2 (while UP) [ 152.122858][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 152.122945][ T28] audit: type=1400 audit(152.095:1211): avc: denied { getopt } for pid=8587 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.168283][ T8592] macsec1: entered allmulticast mode [ 152.173869][ T8592] dummy0: entered allmulticast mode [ 152.181811][ T8592] dummy0: left allmulticast mode [ 152.206107][ T8596] ªªªªªª: renamed from wg2 [ 153.593719][ T28] audit: type=1400 audit(153.565:1212): avc: denied { unmount } for pid=8623 comm="syz.4.1745" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.912190][ T8684] netlink: 'syz.4.1755': attribute type 34 has an invalid length. [ 154.992066][ T28] audit: type=1400 audit(154.965:1213): avc: denied { bind } for pid=8687 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.030508][ T28] audit: type=1400 audit(154.985:1214): avc: denied { listen } for pid=8687 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.385843][ T8707] __nla_validate_parse: 5 callbacks suppressed [ 155.385874][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'. [ 155.402216][ T8707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1766'. [ 155.510584][ T8714] netlink: 'syz.0.1767': attribute type 13 has an invalid length. [ 155.531281][ T8714] netlink: 'syz.0.1767': attribute type 17 has an invalid length. [ 155.541321][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.611702][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.620864][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.651659][ T8715] netlink: 'syz.3.1768': attribute type 34 has an invalid length. [ 155.720354][ T8714] 8021q: adding VLAN 0 to HW filter on device  [ 155.729168][ T8714] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.739127][ T8714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.770703][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.779619][ T8714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.792681][ T8714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.803537][ T8714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.817309][ T8714] veth1_vlan: left promiscuous mode [ 155.823329][ T8714] veth0_vlan: left promiscuous mode [ 155.829224][ T8714] veth0_vlan: entered promiscuous mode [ 155.838590][ T8714] veth1_vlan: entered promiscuous mode [ 155.847306][ T8714] veth1_macvtap: left promiscuous mode [ 155.853744][ T8714] veth0_macvtap: left promiscuous mode [ 155.860707][ T8714] veth0_macvtap: entered promiscuous mode [ 155.871197][ T8714] veth1_macvtap: entered promiscuous mode [ 155.887957][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 155.900097][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 155.910857][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 155.921900][ T8714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 155.932508][ T8714] geneve2: left promiscuous mode [ 155.940309][ T8714] bond1: left promiscuous mode [ 155.945239][ T8714] gre1: left promiscuous mode [ 155.969933][ T8714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.986151][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.993506][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.190071][ T8730] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1773'. [ 156.749590][ T8749] loop0: detected capacity change from 0 to 4096 [ 156.784026][ T8749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.840142][ T8749] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1782: corrupted inode contents [ 156.852241][ T28] audit: type=1400 audit(156.815:1215): avc: denied { write } for pid=8748 comm="syz.0.1782" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.897741][ T8749] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.1782: mark_inode_dirty error [ 156.938609][ T8749] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1782: corrupted inode contents [ 156.976590][ T8749] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.1782: mark_inode_dirty error [ 156.997427][ T8749] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1782: corrupted inode contents [ 157.031656][ T8749] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.1782: mark_inode_dirty error [ 157.061332][ T8749] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1782: corrupted inode contents [ 157.087932][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 157.107057][ T8749] EXT4-fs error (device loop0): ext4_truncate:4690: inode #15: comm syz.0.1782: mark_inode_dirty error [ 157.127035][ T8754] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1783'. [ 157.146745][ T8749] EXT4-fs error (device loop0) in ext4_setattr:6120: Corrupt filesystem [ 157.171970][ T8752] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.1782: corrupted inode contents [ 157.274184][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.430570][ T28] audit: type=1326 audit(157.405:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8764 comm="syz.0.1787" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff49bf4ce59 code=0x0 [ 157.480668][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.510700][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.626700][ T8772] loop2: detected capacity change from 0 to 8192 [ 157.708492][ T28] audit: type=1400 audit(157.685:1217): avc: denied { map } for pid=8771 comm="syz.2.1790" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.796199][ T8783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8783 comm=syz.4.1796 [ 157.832627][ T8783] netlink: 'syz.4.1796': attribute type 1 has an invalid length. [ 158.200693][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1800'. [ 158.227140][ T8792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1800'. [ 159.592631][ T8819] netlink: 'syz.4.1805': attribute type 13 has an invalid length. [ 159.601010][ T8819] netlink: 'syz.4.1805': attribute type 17 has an invalid length. [ 159.706228][ T8819] 8021q: adding VLAN 0 to HW filter on device  [ 159.725235][ T8819] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.737409][ T8819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.770471][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.779758][ T8819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.791962][ T8819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.803200][ T8819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.817304][ T8819] veth1_vlan: left promiscuous mode [ 159.823499][ T8819] veth0_vlan: left promiscuous mode [ 159.829512][ T8819] veth0_vlan: entered promiscuous mode [ 159.838612][ T8819] veth1_vlan: entered promiscuous mode [ 159.847387][ T8819] veth1_macvtap: left promiscuous mode [ 159.853950][ T8819] veth0_macvtap: left promiscuous mode [ 159.860509][ T8819] veth0_macvtap: entered promiscuous mode [ 159.871297][ T8819] veth1_macvtap: entered promiscuous mode [ 159.881637][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.892919][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.904315][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.915341][ T8819] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.926929][ T8819] geneve2: left promiscuous mode [ 159.935621][ T8819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.946721][ T8819] bond2: left promiscuous mode [ 159.951735][ T8819] gre1: left promiscuous mode [ 159.975873][ T8819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.989945][ T8819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.004484][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.011777][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.021755][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.028862][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.071120][ T1748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.080476][ T6453] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 160.089426][ T1748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.101647][ T1748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.127246][ T1748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.270892][ T30] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.277254][ T8832] netlink: 'syz.1.1824': attribute type 13 has an invalid length. [ 160.295473][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.311815][ T8832] netlink: 'syz.1.1824': attribute type 17 has an invalid length. [ 160.322885][ T30] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.335920][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.346398][ T1748] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.368954][ T1748] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 160.467596][ T8832] 8021q: adding VLAN 0 to HW filter on device  [ 160.489878][ T8832] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.517862][ T8832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.595928][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.613404][ T8832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.638556][ T8832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.659227][ T8832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.685040][ T8832] veth1_vlan: left promiscuous mode [ 160.698218][ T8832] veth0_vlan: left promiscuous mode [ 160.709712][ T8832] veth0_vlan: entered promiscuous mode [ 160.729199][ T8832] veth1_vlan: entered promiscuous mode [ 160.748474][ T8832] veth1_macvtap: left promiscuous mode [ 160.762028][ T8832] veth0_macvtap: left promiscuous mode [ 160.789155][ T8832] veth0_macvtap: entered promiscuous mode [ 160.818445][ T8832] veth1_macvtap: entered promiscuous mode [ 160.839457][ T8832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.866044][ T8832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.891317][ T8832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.918266][ T8832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.945159][ T8832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.966017][ T8832] bond2: left promiscuous mode [ 160.976550][ T8832] gre1: left promiscuous mode [ 161.025621][ T8832] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.048286][ T8832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.095824][ T1748] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 161.117349][ T1748] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.139820][ T1748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.162349][ T1748] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.193669][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.200826][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.241933][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.249324][ T6453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.336594][ T1748] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.356523][ T1748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.370090][ T1748] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 161.379750][ T1748] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.389633][ T1748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.399209][ T1748] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 162.101202][ T28] audit: type=1400 audit(162.075:1218): avc: denied { write } for pid=8874 comm="syz.1.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 162.272287][ T28] audit: type=1400 audit(162.245:1219): avc: denied { watch watch_reads } for pid=8880 comm="syz.0.1835" path="/339/file0" dev="tmpfs" ino=1767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 162.340735][ T28] audit: type=1400 audit(162.315:1220): avc: denied { setopt } for pid=8884 comm="syz.0.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.537467][ T8891] sctp: [Deprecated]: syz.1.1840 (pid 8891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.537467][ T8891] Use struct sctp_sack_info instead [ 162.564737][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1842'. [ 162.677105][ T28] audit: type=1326 audit(162.645:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 162.749921][ T28] audit: type=1326 audit(162.685:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 162.826458][ T28] audit: type=1326 audit(162.685:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 162.893002][ T28] audit: type=1326 audit(162.685:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 162.980341][ T28] audit: type=1326 audit(162.685:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 163.063795][ T8929] loop0: detected capacity change from 0 to 2048 [ 163.084791][ T28] audit: type=1326 audit(162.685:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 163.136332][ T8929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.149440][ T28] audit: type=1326 audit(162.685:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 163.174579][ T28] audit: type=1326 audit(162.685:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 163.200542][ T28] audit: type=1326 audit(162.685:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6084ce59 code=0x7ffc0000 [ 163.225624][ T28] audit: type=1326 audit(162.755:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8907 comm="syz.2.1847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6c6080d68e code=0x7ffc0000 [ 163.257766][ T8929] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1855'. [ 163.268918][ T8929] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1855'. [ 163.278880][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1855'. [ 163.298895][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.797119][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 164.787838][ T9009] loop2: detected capacity change from 0 to 128 [ 164.829475][ T9012] netlink: 'syz.3.1886': attribute type 1 has an invalid length. [ 164.866302][ T9012] bond0: entered promiscuous mode [ 164.875545][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.920807][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.973250][ T9012] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 165.011972][ T9012] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 165.047224][ T9023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1891'. [ 165.058878][ T9012] bond0: (slave ip6gre1): making interface the new active one [ 165.059612][ T9023] netlink: 'syz.2.1891': attribute type 7 has an invalid length. [ 165.077091][ T9012] ip6gre1: entered promiscuous mode [ 165.082387][ T9023] netlink: 'syz.2.1891': attribute type 8 has an invalid length. [ 165.093431][ T9012] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 165.094632][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 165.175260][ T9017] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.302442][ T9017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.320760][ T9017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.476324][ T1867] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.502222][ T1867] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.534548][ T1867] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.560685][ T1867] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.761832][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 165.824989][ T9033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.849624][ T9037] bond3: option ad_select: unable to set because the bond device is up [ 166.027991][ T9045] loop0: detected capacity change from 0 to 256 [ 166.186639][ T9056] netlink: 'syz.0.1905': attribute type 13 has an invalid length. [ 166.205139][ T9056] netlink: 'syz.0.1905': attribute type 17 has an invalid length. [ 166.245059][ T9056] 8021q: adding VLAN 0 to HW filter on device  [ 166.261824][ T9056] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.281536][ T9056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.330675][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.344371][ T9056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.362497][ T9056] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.376880][ T9056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.394051][ T9056] veth1_vlan: left promiscuous mode [ 166.403882][ T9056] veth0_vlan: left promiscuous mode [ 166.413012][ T9056] veth0_vlan: entered promiscuous mode [ 166.423169][ T9056] veth1_vlan: entered promiscuous mode [ 166.431740][ T9056] veth1_macvtap: left promiscuous mode [ 166.438493][ T9056] veth0_macvtap: left promiscuous mode [ 166.444831][ T9056] veth0_macvtap: entered promiscuous mode [ 166.451797][ T9056] veth1_macvtap: entered promiscuous mode [ 166.461433][ T9056] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.472321][ T9056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.481379][ T9056] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.491030][ T9056] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.520847][ T9056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.580758][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.587978][ T6453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.675614][ T9066] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1908'. [ 166.688771][ T6446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.688897][ T9066] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1908'. [ 166.707630][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1908'. [ 166.720580][ T6446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.730786][ T6446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.740442][ T6446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.433922][ T9115] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 167.671647][ T9130] __nla_validate_parse: 1 callbacks suppressed [ 167.671667][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 167.704767][ T9130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.754610][ T9130] bond0: option ad_select: unable to set because the bond device is up [ 167.878318][ T9135] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 167.914102][ T9135] bond4: entered promiscuous mode [ 167.925240][ T9135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.961743][ T9135] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.969891][ T9135] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 167.980593][ T9135] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 167.995589][ T9135] bond4: (slave ip6gre1): making interface the new active one [ 168.004138][ T9135] ip6gre1: entered promiscuous mode [ 168.011821][ T9135] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 168.312740][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.320072][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.418846][ T9158] netlink: 'syz.1.1948': attribute type 1 has an invalid length. [ 168.422500][ T9144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.460331][ T9144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.593950][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.624799][ T1867] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.639507][ T1867] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.648825][ T1867] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.657956][ T1867] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.668310][ T1867] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.677492][ T1867] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.686418][ T1867] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.695457][ T1867] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.954301][ T9179] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 168.968653][ T9179] bond4: entered promiscuous mode [ 168.973896][ T9179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.001545][ T9179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.008824][ T9179] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 169.019511][ T9179] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 169.033820][ T9179] bond4: (slave ip6gre1): making interface the new active one [ 169.041525][ T9179] ip6gre1: entered promiscuous mode [ 169.048899][ T9179] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 169.260535][ T9201] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.311590][ T9201] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.361362][ T9201] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.419624][ T9215] netlink: 'syz.1.1971': attribute type 39 has an invalid length. [ 169.466416][ T9201] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.541085][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.559278][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.584171][ T1748] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.602404][ T1748] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.678726][ T9225] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1975'. [ 169.689229][ T9225] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1975'. [ 169.701067][ T9225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1975'. [ 169.714684][ T9229] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 169.912377][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1980'. [ 169.980970][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 169.980988][ T28] audit: type=1400 audit(169.955:1267): avc: denied { mount } for pid=9242 comm="syz.0.1982" name="/" dev="autofs" ino=20336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 170.048241][ T28] audit: type=1400 audit(170.015:1268): avc: denied { accept } for pid=9245 comm="syz.3.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 170.551991][ T28] audit: type=1326 audit(170.525:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.4.1992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4aa1bce59 code=0x7fc00000 [ 171.295262][ T28] audit: type=1326 audit(171.255:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9263 comm="syz.4.1992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe4aa1bce59 code=0x7fc00000 [ 171.319146][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 171.798812][ T28] audit: type=1400 audit(171.775:1271): avc: denied { mounton } for pid=9308 comm="syz.3.2010" path="/file0" dev="ramfs" ino=20405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 172.024848][ T9320] netlink: 'syz.3.2013': attribute type 13 has an invalid length. [ 172.026001][ T9318] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.033777][ T9320] netlink: 'syz.3.2013': attribute type 17 has an invalid length. [ 172.040039][ T9318] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.087129][ T9323] loop0: detected capacity change from 0 to 1024 [ 172.126542][ T9323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.181250][ T28] audit: type=1400 audit(172.155:1272): avc: denied { map } for pid=9322 comm="syz.0.2014" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.189644][ T9318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.205715][ T28] audit: type=1400 audit(172.155:1273): avc: denied { execute } for pid=9322 comm="syz.0.2014" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.244237][ T9318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.283737][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.296959][ T28] audit: type=1400 audit(172.165:1274): avc: denied { write } for pid=9322 comm="syz.0.2014" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.400101][ T28] audit: type=1400 audit(172.215:1275): avc: denied { map } for pid=9322 comm="syz.0.2014" path="/378/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.435069][ T9320] 8021q: adding VLAN 0 to HW filter on device  [ 172.458609][ T28] audit: type=1400 audit(172.215:1276): avc: denied { execute } for pid=9322 comm="syz.0.2014" path="/378/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 172.466099][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.525372][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.560946][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.569672][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.580535][ T9320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.591590][ T9320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.609758][ T9320] veth1_vlan: left promiscuous mode [ 172.618328][ T9320] veth0_vlan: left promiscuous mode [ 172.623964][ T9320] veth0_vlan: entered promiscuous mode [ 172.631566][ T9320] veth1_vlan: entered promiscuous mode [ 172.639206][ T9320] veth1_macvtap: left promiscuous mode [ 172.645282][ T9320] veth0_macvtap: left promiscuous mode [ 172.651389][ T9320] veth0_macvtap: entered promiscuous mode [ 172.657870][ T9320] veth1_macvtap: entered promiscuous mode [ 172.666444][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.675103][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.683545][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.692183][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.719039][ T9320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.730783][ T9320] bond0: left promiscuous mode [ 172.735602][ T9320] ip6gre1: left promiscuous mode [ 172.742098][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.758731][ T1867] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.765872][ T1867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.784994][ T1867] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.792104][ T1867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.982322][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.989617][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.113422][ T9342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.161580][ T9342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.270176][ T1748] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.296533][ T1748] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.324819][ T1748] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.337538][ T1748] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.979035][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2031'. [ 174.057656][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2035'. [ 176.105939][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 176.105956][ T28] audit: type=1400 audit(176.075:1279): avc: denied { accept } for pid=9416 comm="syz.0.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 176.202148][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'. [ 176.231569][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2050'. [ 176.247754][ T9428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2051'. [ 176.930452][ T9457] loop2: detected capacity change from 0 to 1024 [ 176.951435][ T9457] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.990595][ T9457] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.019950][ T28] audit: type=1400 audit(176.995:1280): avc: denied { write } for pid=9456 comm="syz.2.2063" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.257106][ T9469] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 177.267667][ T28] audit: type=1400 audit(177.235:1281): avc: denied { mac_admin } for pid=9468 comm="syz.1.2066" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.320122][ T28] audit: type=1400 audit(177.285:1282): avc: denied { relabelto } for pid=9468 comm="syz.1.2066" name="/" dev="ramfs" ino=21297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 177.376600][ T9471] loop0: detected capacity change from 0 to 512 [ 177.380309][ T28] audit: type=1400 audit(177.285:1283): avc: denied { associate } for pid=9468 comm="syz.1.2066" name="/" dev="ramfs" ino=21297 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 177.431763][ T9471] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 177.459289][ T9471] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 177.481790][ T9471] EXT4-fs (loop0): orphan cleanup on readonly fs [ 177.520279][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.539014][ T9471] Quota error (device loop0): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 177.616289][ T9471] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.679632][ T9471] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 177.704658][ T28] audit: type=1400 audit(177.675:1284): avc: denied { listen } for pid=9483 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.707254][ T9471] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2064: bg 0: block 15: invalid block bitmap [ 177.819957][ T9471] loop0: lost filesystem error report for type 5 error -117 [ 177.820153][ T9471] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 177.827627][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 177.827649][ C1] EXT4-fs (loop0): initial error at time 177: ext4_validate_block_bitmap:432 [ 177.827674][ C1] EXT4-fs (loop0): last error at time 177: ext4_validate_block_bitmap:432 [ 177.872877][ T9471] loop0: lost filesystem error report for type 5 error -117 [ 177.876128][ T9471] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #16: comm syz.0.2064: data will be lost [ 177.936329][ T9471] EXT4-fs (loop0): 1 truncate cleaned up [ 177.952918][ T9471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.150983][ T9502] loop2: detected capacity change from 0 to 1024 [ 178.175978][ T9502] EXT4-fs: Ignoring removed bh option [ 178.203797][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.281060][ T9502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.421207][ T28] audit: type=1400 audit(178.395:1285): avc: denied { write } for pid=9501 comm="syz.2.2075" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.680181][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.946609][ T9525] loop8: detected capacity change from 0 to 7 [ 178.992472][ T9525] loop8: [ 179.651269][ T9543] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.658467][ T9543] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.764014][ T9543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.796220][ T9543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.979311][ T6451] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.005283][ T6451] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.033156][ T6451] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.058345][ T6451] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.083816][ T6451] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.107670][ T6451] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.137692][ T6451] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.165272][ T6451] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.192179][ T6451] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.224846][ T6451] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.253619][ T6451] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 180.279966][ T6451] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 180.864326][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 181.251414][ T28] audit: type=1400 audit(181.225:1286): avc: denied { open } for pid=9582 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.300605][ T28] audit: type=1400 audit(181.225:1287): avc: denied { kernel } for pid=9582 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.338488][ T28] audit: type=1400 audit(181.255:1288): avc: denied { write } for pid=9582 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 181.589463][ T28] audit: type=1400 audit(181.565:1289): avc: denied { create } for pid=9590 comm="syz.0.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.650131][ T28] audit: type=1400 audit(181.585:1290): avc: denied { setopt } for pid=9590 comm="syz.0.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.709599][ T28] audit: type=1400 audit(181.585:1291): avc: denied { write } for pid=9590 comm="syz.0.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 181.809720][ T9593] loop0: detected capacity change from 0 to 1024 [ 181.850830][ T9593] EXT4-fs: Ignoring removed bh option [ 181.953673][ T9593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.149891][ T28] audit: type=1400 audit(182.115:1292): avc: denied { write } for pid=9592 comm="syz.0.2110" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.588765][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.661490][ T28] audit: type=1400 audit(182.615:1293): avc: denied { shutdown } for pid=9611 comm="syz.2.2115" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.709108][ T28] audit: type=1400 audit(182.615:1294): avc: denied { read } for pid=9611 comm="syz.2.2115" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.825573][ T9616] netlink: 'syz.0.2114': attribute type 1 has an invalid length. [ 182.856746][ T28] audit: type=1400 audit(182.825:1295): avc: denied { tracepoint } for pid=9619 comm="syz.1.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 182.979438][ T9616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.148871][ T9622] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 183.196882][ T30] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 183.326879][ T30] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 183.882173][ T9674] loop2: detected capacity change from 0 to 512 [ 183.904094][ T9674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.964820][ T9674] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 184.022596][ T9674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 184.054857][ T9674] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 184.078507][ T9674] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 184.132324][ T9674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 184.221348][ T9674] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.2137: dx entry: limit 65535 != root limit 120 [ 184.256896][ T9674] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2137: Corrupt directory, running e2fsck is recommended [ 184.319213][ T9674] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.2137: path /275/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 184.490669][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.554740][ T9700] sit0: entered promiscuous mode [ 184.588242][ T9700] netlink: 'syz.1.2149': attribute type 1 has an invalid length. [ 184.628528][ T9700] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2149'. [ 185.676661][ T9738] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 185.732012][ T9738] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.809427][ T9743] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 186.054716][ T9759] loop0: detected capacity change from 0 to 1024 [ 186.083111][ T9759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.167950][ T9759] EXT4-fs (loop0): shut down requested (0) [ 186.326485][ T9772] sit0: entered promiscuous mode [ 186.334798][ T9772] netlink: 'syz.4.2170': attribute type 1 has an invalid length. [ 186.349656][ T9769] loop2: detected capacity change from 0 to 4096 [ 186.356102][ T9772] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2170'. [ 186.396690][ T9769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.461908][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 186.461928][ T28] audit: type=1400 audit(186.435:1371): avc: denied { write } for pid=9768 comm="syz.2.2180" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.577722][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.709064][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.827274][ T28] audit: type=1326 audit(186.795:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 186.902678][ T28] audit: type=1326 audit(186.795:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 186.965989][ T28] audit: type=1326 audit(186.805:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 187.044979][ T28] audit: type=1326 audit(186.805:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 187.114153][ T28] audit: type=1326 audit(186.805:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 187.198959][ T28] audit: type=1326 audit(186.805:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 187.217780][ T4297] IPVS: starting estimator thread 0... [ 187.270477][ T28] audit: type=1326 audit(186.805:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 187.304626][ T9813] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2187'. [ 187.336895][ T9809] IPVS: using max 2592 ests per chain, 129600 per kthread [ 187.420567][ T28] audit: type=1326 audit(186.825:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 187.427298][ T9813] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2187'. [ 187.495869][ T28] audit: type=1326 audit(186.825:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9790 comm="syz.1.2178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5803cce59 code=0x7ffc0000 [ 187.528119][ T9819] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 187.566950][ T9819] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.647508][ T9823] bond3: (slave veth5): Enslaving as an active interface with a down link [ 187.752131][ T9819] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.776109][ T9819] bond3: (slave batadv1): making interface the new active one [ 187.794295][ T9819] batadv1: entered promiscuous mode [ 187.805473][ T9819] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 188.061070][ T9843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9843 comm=syz.0.2209 [ 188.110256][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2209'. [ 189.436108][ T9861] 9pnet_fd: p9_fd_create_tcp (9861): problem connecting socket to 127.0.0.1 [ 190.340758][ T9897] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 190.397294][ T9897] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.510570][ T9900] bond6: (slave veth3): Enslaving as an active interface with a down link [ 190.578190][ T9897] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.620822][ T9897] bond6: (slave batadv1): making interface the new active one [ 190.651519][ T9897] batadv1: entered promiscuous mode [ 190.670561][ T9897] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 190.854901][ T9914] netlink: 'syz.1.2225': attribute type 1 has an invalid length. [ 191.294878][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 191.324270][ T9924] netlink: 'syz.0.2228': attribute type 30 has an invalid length. [ 191.376941][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'. [ 191.427322][ T1867] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.451941][ T1867] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.457756][ T9927] netlink: 'syz.0.2228': attribute type 30 has an invalid length. [ 191.481308][ T1867] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.511279][ T1867] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.565278][ T9964] netlink: 'syz.4.2244': attribute type 1 has an invalid length. [ 192.623933][ T9964] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.726439][ T9970] bond4: (slave veth5): Enslaving as an active interface with a down link [ 192.796407][ T9975] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 192.825872][ T9975] bond4: (slave batadv1): making interface the new active one [ 192.850499][ T9975] batadv1: entered promiscuous mode [ 192.864496][ T9975] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 193.094459][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 193.094475][ T28] audit: type=1326 audit(193.065:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.4.2255" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4aa1bce59 code=0x0 [ 193.543005][T10009] loop2: detected capacity change from 0 to 512 [ 193.570804][T10009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.643772][ T28] audit: type=1400 audit(193.615:1444): avc: denied { write } for pid=10008 comm="syz.2.2264" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.814208][ T5425] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.260671][T10044] bond4: entered allmulticast mode [ 194.294774][T10044] ip6gre1: entered allmulticast mode [ 194.320502][T10048] pimreg: entered allmulticast mode [ 194.341256][T10043] pimreg: left allmulticast mode [ 194.355321][T10043] bond4: left allmulticast mode [ 194.370081][T10043] ip6gre1: left allmulticast mode [ 194.950027][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'. [ 194.977067][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 194.987120][T10077] netlink: 'syz.1.2290': attribute type 30 has an invalid length. [ 195.010784][ T30] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.016058][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2290'. [ 195.027329][ T30] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.035961][T10077] netlink: 'syz.1.2290': attribute type 30 has an invalid length. [ 195.048611][ T30] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.104410][ T30] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.265449][ T28] audit: type=1400 audit(195.235:1445): avc: denied { watch } for pid=10096 comm="syz.3.2309" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 195.449681][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 195.534198][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 195.557940][T10117] netlink: 'syz.2.2306': attribute type 30 has an invalid length. [ 195.589119][ T30] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.601044][ T30] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.611365][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 195.621867][ T30] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.639635][T10117] netlink: 'syz.2.2306': attribute type 30 has an invalid length. [ 195.650106][ T30] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.755724][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2312'. [ 196.229213][T10101] ================================================================== [ 196.237455][T10101] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 196.244551][T10101] [ 196.246898][T10101] read-write to 0xffff888100199064 of 4 bytes by task 10106 on cpu 1: [ 196.255083][T10101] fifo_open+0x86/0x5d0 [ 196.259279][T10101] do_dentry_open+0x4be/0xa90 [ 196.263981][T10101] vfs_open+0x37/0x1e0 [ 196.268073][T10101] path_openat+0x1b70/0x2050 [ 196.272786][T10101] do_file_open+0x16c/0x290 [ 196.277317][T10101] file_open_name+0xfa/0x120 [ 196.281924][T10101] __se_sys_acct+0x8c/0x500 [ 196.286454][T10101] __x64_sys_acct+0x1f/0x30 [ 196.290974][T10101] x64_sys_call+0x2e7f/0x3020 [ 196.295677][T10101] do_syscall_64+0x12c/0x3b0 [ 196.300377][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.306389][T10101] [ 196.308734][T10101] read to 0xffff888100199064 of 4 bytes by task 10101 on cpu 0: [ 196.316386][T10101] wait_for_partner+0x117/0x1e0 [ 196.321280][T10101] fifo_open+0x4b1/0x5d0 [ 196.325561][T10101] do_dentry_open+0x4be/0xa90 [ 196.330259][T10101] vfs_open+0x37/0x1e0 [ 196.334343][T10101] path_openat+0x1b70/0x2050 [ 196.338968][T10101] do_file_open+0x16c/0x290 [ 196.343550][T10101] do_sys_openat2+0x94/0x130 [ 196.348159][T10101] __x64_sys_creat+0x65/0x90 [ 196.352778][T10101] x64_sys_call+0x2ea0/0x3020 [ 196.357494][T10101] do_syscall_64+0x12c/0x3b0 [ 196.362116][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.368037][T10101] [ 196.370371][T10101] value changed: 0x00000001 -> 0x00000002 [ 196.376094][T10101] [ 196.378422][T10101] Reported by Kernel Concurrency Sanitizer on: [ 196.384595][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.1.2300 Tainted: G W syzkaller #0 PREEMPT(full) [ 196.395553][T10101] Tainted: [W]=WARN [ 196.399360][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.409592][T10101] ================================================================== [ 199.067191][ T30] batadv1: left promiscuous mode [ 201.946966][ T12] batadv1: left promiscuous mode [ 204.086833][ T1748] batadv1: left promiscuous mode