last executing test programs: 2m14.856131547s ago: executing program 1 (id=48): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000002010904000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x48}, 0x1, 0x0, 0x0, 0x8c04}, 0x40c0) 2m14.75847686s ago: executing program 1 (id=51): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) mknod(&(0x7f00000014c0)='./file0\x00', 0x10, 0x7) 2m14.620319475s ago: executing program 1 (id=55): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd", 0x3}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}], 0x2, 0x4000000) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 2m14.507408898s ago: executing program 1 (id=58): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x13f903, 0x2c) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141201, 0x98) 2m13.848714939s ago: executing program 1 (id=69): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 2m13.153601471s ago: executing program 1 (id=80): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 2m13.153477871s ago: executing program 32 (id=80): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 2m8.390546043s ago: executing program 4 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newtfilter={0x68, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x40, 0x9, 0x6a4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 2m8.311925966s ago: executing program 4 (id=142): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x407, {0xa, 0x4e22, 0x4, @loopback, 0x7}}}, 0x32) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 2m8.262277007s ago: executing program 4 (id=143): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_emit_ethernet(0x22, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x2c, 0x14, 0x65, 0x0, 0x4, 0xff, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x4a}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m7.942368367s ago: executing program 4 (id=152): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0xfffffffe, 0xc2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m7.824160391s ago: executing program 4 (id=154): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 2m7.769056493s ago: executing program 4 (id=158): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) listen(r0, 0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) 1m52.684795063s ago: executing program 33 (id=158): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) listen(r0, 0x3) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) 1m27.888816773s ago: executing program 5 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d", 0x10}, {&(0x7f0000000200)="0000ffff", 0x4}, {&(0x7f0000000140)="f9", 0x1}], 0x3) 1m27.810805975s ago: executing program 5 (id=760): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) close_range(r2, 0xffffffffffffffff, 0x0) 1m27.715552578s ago: executing program 5 (id=761): open(0x0, 0x14957e, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 1m27.632993681s ago: executing program 5 (id=762): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 1m27.593228622s ago: executing program 5 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040002) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0x1, 0xc}, {0x5, 0xfff1}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040885}, 0x4041080) 1m27.135291426s ago: executing program 5 (id=770): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = gettid() rt_sigqueueinfo(r2, 0xc, &(0x7f0000000400)={0x1b, 0xadc, 0x4b6c010c}) 1m27.135182577s ago: executing program 34 (id=770): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = gettid() rt_sigqueueinfo(r2, 0xc, &(0x7f0000000400)={0x1b, 0xadc, 0x4b6c010c}) 1m22.532671433s ago: executing program 2 (id=847): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00005ec000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x822002f7}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x1136, 0x4) io_uring_enter(r0, 0x731d, 0x7721, 0x16, 0x0, 0x0) 1m22.469537885s ago: executing program 2 (id=848): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[], 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m22.410514067s ago: executing program 2 (id=852): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m22.326426159s ago: executing program 2 (id=853): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 1m22.272390771s ago: executing program 2 (id=856): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x40e0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1m22.181302984s ago: executing program 2 (id=862): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0xff05, 0x0, 0xfffffff8, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 1m22.163374515s ago: executing program 35 (id=862): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0xff05, 0x0, 0xfffffff8, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 1m21.275861153s ago: executing program 6 (id=876): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x4008080) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m20.40319934s ago: executing program 6 (id=890): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x177}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x75) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m20.262854235s ago: executing program 6 (id=891): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) r0 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m20.200345857s ago: executing program 6 (id=892): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0xc000, 0xc000, 0x0) 1m19.921378626s ago: executing program 6 (id=898): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = socket$pptp(0x18, 0x1, 0x2) unshare(0x2c020400) getpeername(r2, 0x0, &(0x7f0000003e80)=0xffffffffffffff48) 1m19.101422932s ago: executing program 6 (id=913): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) splice(r2, 0x0, r0, 0x0, 0x6, 0xc) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.049395374s ago: executing program 36 (id=913): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) splice(r2, 0x0, r0, 0x0, 0x6, 0xc) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 3.538788547s ago: executing program 9 (id=2068): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) 3.439184401s ago: executing program 3 (id=2071): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0xad27, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.375529683s ago: executing program 9 (id=2072): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="020300021000000000000000000f00000200080008000000780000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000440000000000299dc26c83a029018a9892b51dc4922c9444ac"], 0x80}, 0x1, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3.237823077s ago: executing program 3 (id=2074): socket$kcm(0x10, 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.979107305s ago: executing program 3 (id=2075): openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 2.977496475s ago: executing program 9 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.880496548s ago: executing program 9 (id=2080): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x37}, 0x24}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x89d, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7, 0x0, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.790103121s ago: executing program 9 (id=2083): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 2.242199549s ago: executing program 9 (id=2098): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 2.20396707s ago: executing program 7 (id=2099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @local, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x80, 0x0, @mcast1}}}}}}, 0x0) 2.089370304s ago: executing program 0 (id=2101): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x0) 2.089219664s ago: executing program 7 (id=2102): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x1000, 0xfffffffe, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xfe, @mcast1}}}, 0x108) 2.081421404s ago: executing program 7 (id=2103): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_create(&(0x7f0000000040)='\x00'/12, 0x4) ftruncate(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 1.676445017s ago: executing program 3 (id=2104): wait4(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setuid(0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0x4, 0x2004}, 0x20) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.675334837s ago: executing program 7 (id=2114): perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={0x0, 0x8}, 0x90, 0x0, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffca001}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x38, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xb, '\x00', {0x9, 0x6, "155569", 0x7, 0x6c, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, [], "68bf0010698f6ebc"}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x94, 0x30, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{0x80, 0x1, [@m_ife={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x8fac, 0x8, 0xd0, 0xf}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x200, 0xf, 0x20000000, 0x3, 0x2}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x81}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 1.401511266s ago: executing program 8 (id=2106): mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x800000017}, 0x60) 1.341392168s ago: executing program 8 (id=2107): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x0, 0xa2ad, 0x0, {0x2, 0xa}, {0x1, 0xffff}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x4008080) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.294531099s ago: executing program 0 (id=2108): syz_open_dev$evdev(0x0, 0x10000, 0xa0c00) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, 0x0]) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, 0x0, 0x800) 1.293976059s ago: executing program 3 (id=2109): syz_open_dev$loop(0x0, 0x7, 0x10c062) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 1.084932676s ago: executing program 0 (id=2110): socket$kcm(0x10, 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.084705685s ago: executing program 7 (id=2111): openat$random(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) timer_create(0x2, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 1.084466466s ago: executing program 3 (id=2112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 521.053303ms ago: executing program 8 (id=2113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @local, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x80, 0x0, @mcast1}}}}}}, 0x0) 518.275023ms ago: executing program 0 (id=2124): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) close(r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000300)={[{@abort}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@jqfmt_vfsv1}, {@nodioread_nolock}, {@prjquota}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@grpjquota}]}, 0x4, 0x486, &(0x7f0000005500)="$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") getcwd(&(0x7f0000000d00)=""/138, 0x8a) 517.764534ms ago: executing program 7 (id=2115): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 461.530116ms ago: executing program 0 (id=2116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x9}, {0xfff1, 0xffff}}}, 0x24}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@delchain={0x24, 0x2a, 0x201, 0x20000000, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 402.631797ms ago: executing program 8 (id=2117): socket$netlink(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f00000000c0)='&\x00', 0x40, 0x100, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 228.573103ms ago: executing program 0 (id=2118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000600)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x30, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x1c, 0x0, @opaque="5cf89a3eb25578c5f2cafb04004b53efc0212e6f"}}}, 0x3e) 223.766703ms ago: executing program 8 (id=2119): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000100"], 0x1c}, 0x1, 0x0, 0x0, 0x5001}, 0x20000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 0s ago: executing program 8 (id=2120): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x36081dbc8168b65f, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7e87c", 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): up link [ 85.466346][ T12] vhci_hcd vhci_hcd.2: release socket [ 85.470820][ T35] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 85.484462][ T6021] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 85.492356][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 85.498326][ T12] vhci_hcd vhci_hcd.2: stop threads [ 85.500544][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 85.503636][ T12] vhci_hcd vhci_hcd.2: release socket [ 85.515902][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 85.521932][ T12] vhci_hcd vhci_hcd.2: stop threads [ 85.527631][ T12] vhci_hcd vhci_hcd.2: release socket [ 85.533308][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 85.547079][ T12] vhci_hcd vhci_hcd.2: stop threads [ 85.558571][ T5953] team0: Port device team_slave_0 added [ 85.564276][ T12] vhci_hcd vhci_hcd.2: release socket [ 85.570449][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 85.580887][ T5953] team0: Port device team_slave_1 added [ 85.612139][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.626111][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.672560][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.695906][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.714644][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.757550][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.831253][ T5953] hsr_slave_0: entered promiscuous mode [ 85.849703][ T5953] hsr_slave_1: entered promiscuous mode [ 85.866719][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 85.887659][ T5953] Cannot create hsr debugfs directory [ 86.117907][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 86.178149][ T5953] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 86.194002][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.205097][ T5953] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 86.228140][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.247488][ T5953] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 86.269527][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.284734][ T5953] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 86.314207][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.429348][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.464327][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.487907][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.495053][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.510660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.517794][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.564740][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 86.771796][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.993257][ T5953] veth0_vlan: entered promiscuous mode [ 87.009212][ T5953] veth1_vlan: entered promiscuous mode [ 87.034708][ T5953] veth0_macvtap: entered promiscuous mode [ 87.042629][ T5953] veth1_macvtap: entered promiscuous mode [ 87.062654][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.092314][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.111802][ T1909] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.123984][ T1909] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.194318][ T1909] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.218566][ T1909] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.232552][ T28] kauditd_printk_skb: 194 callbacks suppressed [ 87.232570][ T28] audit: type=1400 audit(1779605952.045:829): avc: denied { mounton } for pid=5953 comm="syz-executor" path="/root/syzkaller.oeO310/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=12742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 87.298587][ T28] audit: type=1400 audit(1779605952.085:830): avc: denied { mount } for pid=5953 comm="syz-executor" name="/" dev="gadgetfs" ino=4685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 87.328356][ T6153] loop2: detected capacity change from 0 to 1024 [ 87.336573][ T6153] EXT4-fs: Ignoring removed orlov option [ 87.367976][ T6153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.396664][ T28] audit: type=1400 audit(1779605952.215:831): avc: denied { mount } for pid=6160 comm="syz.0.810" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 87.420008][ T28] audit: type=1400 audit(1779605952.215:832): avc: denied { write } for pid=6152 comm="syz.2.809" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.441876][ T28] audit: type=1400 audit(1779605952.215:833): avc: denied { read write } for pid=6152 comm="syz.2.809" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.465230][ T28] audit: type=1400 audit(1779605952.215:834): avc: denied { open } for pid=6152 comm="syz.2.809" path="/171/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.489311][ T28] audit: type=1400 audit(1779605952.215:835): avc: denied { map } for pid=6152 comm="syz.2.809" path="/171/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.512779][ T28] audit: type=1400 audit(1779605952.215:836): avc: denied { execute } for pid=6152 comm="syz.2.809" path="/171/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.594493][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.658996][ T6172] loop0: detected capacity change from 0 to 128 [ 87.666490][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 87.681258][ T6165] loop6: detected capacity change from 0 to 8192 [ 87.687155][ T6172] EXT4-fs: Ignoring removed orlov option [ 87.696637][ T6170] netlink: 'syz.2.813': attribute type 12 has an invalid length. [ 87.706350][ T3287] udevd[3287]: incorrect ext4 checksum on /dev/loop0 [ 87.718370][ T6172] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 87.731367][ T28] audit: type=1400 audit(1779605952.535:837): avc: denied { create } for pid=6167 comm="syz.7.814" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.761576][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 87.761697][ T3746] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.788702][ T3287] udevd[3287]: incorrect ext4 checksum on /dev/loop0 [ 87.796594][ T6170] netlink: 'syz.2.813': attribute type 12 has an invalid length. [ 87.824838][ T28] audit: type=1400 audit(1779605952.615:838): avc: denied { map } for pid=6163 comm="syz.6.812" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.841612][ T3746] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.891011][ T3746] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.909398][ T3746] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.368844][ T6216] netlink: 'syz.7.834': attribute type 83 has an invalid length. [ 88.856447][ T6250] loop0: detected capacity change from 0 to 512 [ 88.868429][ T6250] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.846: corrupted in-inode xattr: invalid ea_ino [ 88.883932][ T6250] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.886132][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 88.901803][ C1] EXT4-fs (loop0): initial error at time 1779605953: ext4_iget_extra_inode:5128: inode 15 [ 88.911781][ C1] EXT4-fs (loop0): last error at time 1779605953: ext4_iget_extra_inode:5128: inode 15 [ 88.922920][ T6250] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.846: couldn't read orphan inode 15 (err -117) [ 88.938429][ T6250] loop0: lost filesystem error report for type 5 error -117 [ 88.942342][ T6250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.008416][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.044423][ T6262] loop6: detected capacity change from 0 to 128 [ 89.054693][ T6262] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 89.063201][ T6262] FAT-fs (loop6): Filesystem has been set read-only [ 89.070634][ T6262] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 89.234005][ T1909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.297424][ T1909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.308757][ T6288] loop0: detected capacity change from 0 to 256 [ 89.357351][ T1909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.377046][ T6296] all: renamed from bridge_slave_1 (while UP) [ 89.409235][ T1909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.485428][ T1909] bridge_slave_1: left allmulticast mode [ 89.491236][ T1909] bridge_slave_1: left promiscuous mode [ 89.497289][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.505177][ T1909] bridge_slave_0: left allmulticast mode [ 89.511030][ T1909] bridge_slave_0: left promiscuous mode [ 89.516879][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.599637][ T1909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.611229][ T1909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.622326][ T1909] bond0 (unregistering): Released all slaves [ 89.662870][ T6312] loop7: detected capacity change from 0 to 512 [ 89.674640][ T6312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.693242][ T6312] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.870: invalid indirect mapped block 4294967295 (level 1) [ 89.707762][ T1909] tipc: Disabling bearer [ 89.717804][ T6312] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.719728][ T6312] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.870: invalid indirect mapped block 4294967295 (level 1) [ 89.723510][ T1909] tipc: Left network mode [ 89.728997][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 89.729017][ C1] EXT4-fs (loop7): initial error at time 1779605954: ext4_free_branches:1023: inode 11 [ 89.763395][ C1] EXT4-fs (loop7): last error at time 1779605954: ext4_free_branches:1023: inode 11 [ 89.779909][ T6312] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 89.780380][ T6312] EXT4-fs (loop7): 2 truncates cleaned up [ 89.801860][ T1909] hsr_slave_0: left promiscuous mode [ 89.809635][ T1909] hsr_slave_1: left promiscuous mode [ 89.817826][ T6312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.832226][ T1909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.843708][ T1909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.855002][ T6312] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.870: bg 0: block 5: invalid block bitmap [ 89.928302][ T5953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.965783][ T1909] team0 (unregistering): Port device team_slave_1 removed [ 89.993362][ T1909] team0 (unregistering): Port device team_slave_0 removed [ 90.111917][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 90.136158][ T6337] netlink: 14 bytes leftover after parsing attributes in process `syz.7.874'. [ 90.233641][ T6350] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.876'. [ 90.265256][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.6.876'. [ 90.268361][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.285557][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.297697][ T6291] bridge_slave_0: entered allmulticast mode [ 90.309886][ T6356] sctp: [Deprecated]: syz.3.878 (pid 6356) Use of int in maxseg socket option. [ 90.309886][ T6356] Use struct sctp_assoc_value instead [ 90.325067][ T6291] bridge_slave_0: entered promiscuous mode [ 90.339247][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.357642][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.379480][ T6291] bridge_slave_1: entered allmulticast mode [ 90.401451][ T6291] bridge_slave_1: entered promiscuous mode [ 90.418475][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 90.449938][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 90.470172][ T6291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.496169][ T35] usb 5-1: enqueue for inactive port 0 [ 90.505524][ T6291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.510413][ T35] usb 5-1: enqueue for inactive port 0 [ 90.555951][ T6370] bond4: entered promiscuous mode [ 90.563107][ T6370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.578607][ T1909] IPVS: stop unused estimator thread 0... [ 90.597163][ T35] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 90.645934][ T6370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.658005][ T6370] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 90.670096][ T6370] bond4: (slave sit1): Error -95 calling set_mac_address [ 90.685462][ T6291] team0: Port device team_slave_0 added [ 90.693879][ T6291] team0: Port device team_slave_1 added [ 90.734987][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.742552][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.768817][ T6291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.783205][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.790404][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.817118][ T6291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.831910][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 90.860666][ T6291] hsr_slave_0: entered promiscuous mode [ 90.867007][ T6291] hsr_slave_1: entered promiscuous mode [ 90.873018][ T6291] debugfs: 'hsr0' already exists in 'hsr' [ 90.879081][ T6291] Cannot create hsr debugfs directory [ 91.003505][ T6291] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 91.097837][ T6291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.108269][ T6291] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 91.120943][ T6291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.131783][ T6291] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 91.144206][ T6291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.162447][ T6291] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 91.192820][ T6291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.258273][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 91.287478][ T6434] loop6: detected capacity change from 0 to 1024 [ 91.298011][ T6291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.316185][ T6434] EXT4-fs: Ignoring removed bh option [ 91.335419][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.347755][ T6434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 91.365251][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.372412][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.391761][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.398917][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.437202][ T6434] loop6: detected capacity change from 1024 to 64 [ 91.613732][ T6291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.833577][ T6291] veth0_vlan: entered promiscuous mode [ 91.862046][ T6291] veth1_vlan: entered promiscuous mode [ 91.898320][ T6291] veth0_macvtap: entered promiscuous mode [ 91.929248][ T6489] netlink: 'syz.0.903': attribute type 2 has an invalid length. [ 91.946709][ T6291] veth1_macvtap: entered promiscuous mode [ 91.958949][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.904'. [ 91.970888][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.999601][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.019711][ T3742] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.032488][ T3742] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.072834][ T3742] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.104381][ T3742] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.223378][ T4565] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 92.233386][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.7.908'. [ 92.243540][ T6438] kmmpd-loop6: attempt to access beyond end of device [ 92.243540][ T6438] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 92.271086][ T6438] buffer_io_error: 1 callbacks suppressed [ 92.271103][ T6438] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 92.315005][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 92.315024][ T28] audit: type=1400 audit(1779605957.125:872): avc: denied { map } for pid=6510 comm="syz.0.911" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.407326][ T28] audit: type=1400 audit(1779605957.125:873): avc: denied { read write } for pid=6510 comm="syz.0.911" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.452082][ T6521] netlink: 'syz.7.916': attribute type 1 has an invalid length. [ 92.474137][ T6521] netlink: 'syz.7.916': attribute type 4 has an invalid length. [ 92.481287][ T28] audit: type=1400 audit(1779605957.255:874): avc: denied { name_bind } for pid=6518 comm="syz.8.917" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 92.505258][ T6523] loop0: detected capacity change from 0 to 1024 [ 92.511822][ T6521] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.916'. [ 92.544069][ T6523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.597111][ T6523] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.631337][ T6522] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.918: lblock 0 mapped to illegal pblock 0 (length 1) [ 92.631623][ T28] audit: type=1400 audit(1779605957.445:875): avc: denied { write } for pid=6522 comm="syz.0.918" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.652633][ T6522] EXT4-fs (loop0): Remounting filesystem read-only [ 92.712925][ T6543] netlink: 'syz.3.922': attribute type 12 has an invalid length. [ 92.778782][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 92.872325][ T28] audit: type=1400 audit(1779605957.685:876): avc: denied { read } for pid=6556 comm="syz.7.926" path="socket:[15446]" dev="sockfs" ino=15446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.157714][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.192169][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.208324][ T6524] bridge_slave_0: entered allmulticast mode [ 93.223310][ T6524] bridge_slave_0: entered promiscuous mode [ 93.256037][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.286554][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.293280][ T6582] tipc: Failed to remove unknown binding: 66,1,1/0:3489188889/3489188891 [ 93.317556][ T6524] bridge_slave_1: entered allmulticast mode [ 93.330804][ T6524] bridge_slave_1: entered promiscuous mode [ 93.391256][ T28] audit: type=1400 audit(1779605958.205:877): avc: denied { ioctl } for pid=6587 comm="syz.0.937" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.420103][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.434086][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.470957][ T6524] team0: Port device team_slave_0 added [ 93.484315][ T6524] team0: Port device team_slave_1 added [ 93.527227][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.546260][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.617754][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.642150][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.657638][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.713896][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.767259][ T6524] hsr_slave_0: entered promiscuous mode [ 93.781326][ T6524] hsr_slave_1: entered promiscuous mode [ 93.799359][ T6524] debugfs: 'hsr0' already exists in 'hsr' [ 93.816153][ T6524] Cannot create hsr debugfs directory [ 94.722703][ T6653] loop8: detected capacity change from 0 to 256 [ 94.815062][ T6603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.825763][ T6524] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 94.838866][ T6524] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.846992][ T6524] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 94.862074][ T6524] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.873693][ T6524] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 94.888882][ T6524] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.911671][ T6524] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 94.944203][ T6524] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.975499][ T6668] loop8: detected capacity change from 0 to 512 [ 95.000227][ T6668] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 95.031439][ T6668] EXT4-fs (loop8): 1 truncate cleaned up [ 95.045487][ T6668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.084147][ T28] audit: type=1400 audit(1779605959.895:878): avc: denied { write } for pid=6667 comm="syz.8.966" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.160862][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.198644][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.233329][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.240468][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.271535][ T28] audit: type=1400 audit(1779605960.085:879): avc: denied { remount } for pid=6686 comm="syz.3.971" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 95.282043][ T3746] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.298661][ T3746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.409575][ T412] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.441363][ T412] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.563103][ T412] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.598135][ T412] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.701009][ T412] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.742485][ T412] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.835613][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.865415][ T412] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 95.906153][ T412] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.068892][ T412] bridge_slave_1: left allmulticast mode [ 96.093411][ T412] bridge_slave_1: left promiscuous mode [ 96.102652][ T6291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.106914][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.139673][ T412] bridge_slave_0: left allmulticast mode [ 96.152476][ T412] bridge_slave_0: left promiscuous mode [ 96.170728][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.237464][ T3401] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.253644][ T3401] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.579372][ T412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.594635][ T412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.606675][ T412] bond0 (unregistering): Released all slaves [ 96.620290][ T412] bond1 (unregistering): Released all slaves [ 96.703879][ T412] hsr_slave_0: left promiscuous mode [ 96.727795][ T412] hsr_slave_1: left promiscuous mode [ 96.736895][ T412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.748515][ T412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.767980][ T412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.789431][ T412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.812593][ T6752] loop0: detected capacity change from 0 to 512 [ 96.830265][ T412] veth1_macvtap: left promiscuous mode [ 96.841367][ T6752] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 96.856281][ T412] veth0_macvtap: left promiscuous mode [ 96.865409][ T412] veth1_vlan: left promiscuous mode [ 96.872638][ T412] veth0_vlan: left promiscuous mode [ 96.878557][ T6752] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 96.908685][ T6752] EXT4-fs (loop0): orphan cleanup on readonly fs [ 96.926989][ T6752] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.985: bad orphan inode 3 [ 96.952907][ T6752] loop0: lost filesystem error report for type 5 error -117 [ 96.953105][ T6752] EXT4-fs (loop0): Remounting filesystem read-only [ 96.960590][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 96.960617][ C0] EXT4-fs (loop0): initial error at time 1779605961: ext4_orphan_get:1423 [ 96.960647][ C0] EXT4-fs (loop0): last error at time 1779605961: ext4_orphan_get:1423 [ 97.085813][ T6752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 97.100206][ T28] audit: type=1400 audit(1779605961.895:880): avc: denied { write } for pid=6746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.165565][ T28] audit: type=1400 audit(1779605961.975:881): avc: denied { write } for pid=6777 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.194141][ T6745] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.985: dx entry: limit 0 != root limit 125 [ 97.214538][ T6745] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.985: Corrupt directory, running e2fsck is recommended [ 97.244795][ T6745] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 97.256356][ T412] team0 (unregistering): Port device team_slave_1 removed [ 97.283569][ T6745] SELinux: failed to load policy [ 97.290066][ T412] team0 (unregistering): Port device team_slave_0 removed [ 97.341253][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 97.396488][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 97.504441][ T6524] veth0_vlan: entered promiscuous mode [ 97.537058][ T6524] veth1_vlan: entered promiscuous mode [ 97.559271][ T28] audit: type=1400 audit(1779605962.375:882): avc: denied { write } for pid=6803 comm="syz.0.1000" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.608672][ T6524] veth0_macvtap: entered promiscuous mode [ 97.647482][ T6524] veth1_macvtap: entered promiscuous mode [ 97.714320][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.726563][ T28] audit: type=1400 audit(1779605962.535:883): avc: denied { write } for pid=6793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.763246][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.793931][ T3742] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.816379][ T3742] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.820802][ T28] audit: type=1326 audit(1779605962.635:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.3.1002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 97.849540][ T3742] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.892214][ T3742] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.942518][ T28] audit: type=1326 audit(1779605962.665:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.3.1002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 98.040856][ T28] audit: type=1326 audit(1779605962.665:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.3.1002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 98.122412][ T28] audit: type=1326 audit(1779605962.665:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.3.1002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 98.162201][ T6823] loop7: detected capacity change from 0 to 1024 [ 98.184714][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.9.915'. [ 98.210531][ T6823] EXT4-fs: Ignoring removed nobh option [ 98.219672][ T28] audit: type=1326 audit(1779605962.665:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.3.1002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 98.245767][ T6823] EXT4-fs: Ignoring removed bh option [ 98.255393][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.9.915'. [ 98.273121][ T6823] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 98.324810][ T28] audit: type=1326 audit(1779605962.665:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.3.1002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 98.356289][ T6823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.406261][ T28] audit: type=1400 audit(1779605962.675:891): avc: denied { write } for pid=6818 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.428952][ T28] audit: type=1326 audit(1779605962.675:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6819 comm="syz.3.1002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 98.463753][ T6858] xt_connbytes: Forcing CT accounting to be enabled [ 98.709072][ T6791] IPVS: starting estimator thread 0... [ 98.798822][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1015'. [ 98.808567][ T6881] IPVS: using max 1680 ests per chain, 84000 per kthread [ 98.832566][ T5953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.853943][ T6885] l2tp_ppp: sess 2/0: no socket in recv [ 98.947834][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 99.088491][ T6914] loop9: detected capacity change from 0 to 128 [ 99.115844][ T6914] msdos: Unknown parameter 'ÿÿÿ1844674407370955161500000000000000000000' [ 99.226331][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 99.322233][ T6935] loop7: detected capacity change from 0 to 1024 [ 99.332038][ T6935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.357868][ T6935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.543919][ T5953] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.643393][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 100.302806][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1040'. [ 100.567555][ T7035] netlink: 'syz.9.1047': attribute type 2 has an invalid length. [ 100.589456][ T7035] netlink: 199824 bytes leftover after parsing attributes in process `syz.9.1047'. [ 101.188299][ T7049] loop9: detected capacity change from 0 to 2048 [ 101.336827][ T7052] loop9: detected capacity change from 0 to 8192 [ 102.148323][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1073'. [ 102.172787][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1073'. [ 102.197441][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.215040][ T7080] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.228336][ T7080] bridge_slave_0: entered allmulticast mode [ 102.236880][ T7080] bridge_slave_0: entered promiscuous mode [ 102.243880][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.252025][ T7080] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.259529][ T7080] bridge_slave_1: entered allmulticast mode [ 102.266147][ T7080] bridge_slave_1: entered promiscuous mode [ 102.304548][ T7080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.352501][ T7080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.401000][ T7080] team0: Port device team_slave_0 added [ 102.415424][ T7080] team0: Port device team_slave_1 added [ 102.435525][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 102.477896][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.490480][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.548307][ T7080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.584156][ T7080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.612816][ T7080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.645686][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 102.645704][ T28] audit: type=1400 audit(1779605967.455:966): avc: denied { write } for pid=7129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.668681][ T7080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.754455][ T7152] loop8: detected capacity change from 0 to 2048 [ 102.759399][ T28] audit: type=1400 audit(1779605967.565:967): avc: denied { write } for pid=7153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.809268][ T7080] hsr_slave_0: entered promiscuous mode [ 102.817920][ T7152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.837150][ T7080] hsr_slave_1: entered promiscuous mode [ 102.854442][ T28] audit: type=1400 audit(1779605967.665:968): avc: denied { write } for pid=7151 comm="syz.8.1081" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.957853][ T7151] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 102.984219][ T7151] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.997571][ T7080] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.003521][ T7148] loop9: detected capacity change from 0 to 512 [ 103.010668][ T7151] EXT4-fs (loop8): This should not happen!! Data will be lost [ 103.010668][ T7151] [ 103.010689][ T7151] EXT4-fs (loop8): Total free blocks count 0 [ 103.010705][ T7151] EXT4-fs (loop8): Free/Dirty block details [ 103.010816][ T7151] EXT4-fs (loop8): free_blocks=4096 [ 103.010832][ T7151] EXT4-fs (loop8): dirty_blocks=32 [ 103.010848][ T7151] EXT4-fs (loop8): Block reservation details [ 103.010862][ T7151] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 103.136956][ T7080] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.174575][ T28] audit: type=1400 audit(1779605967.985:969): avc: denied { write } for pid=7165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.215900][ T28] audit: type=1400 audit(1779605968.025:970): avc: denied { append } for pid=7151 comm="syz.8.1081" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.251325][ T7080] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.282033][ T28] audit: type=1400 audit(1779605968.095:971): avc: denied { write } for pid=7183 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.282630][ T7148] FAT-fs (loop9): Directory bread(block 199916) failed [ 103.358532][ T7148] FAT-fs (loop9): Directory bread(block 199917) failed [ 103.368919][ T6291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.378894][ T7148] FAT-fs (loop9): Directory bread(block 199918) failed [ 103.392749][ T7080] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.415694][ T7148] FAT-fs (loop9): Directory bread(block 199919) failed [ 103.439992][ T7148] FAT-fs (loop9): Directory bread(block 199920) failed [ 103.481790][ T7148] FAT-fs (loop9): Directory bread(block 199921) failed [ 103.498952][ T7148] FAT-fs (loop9): Directory bread(block 199922) failed [ 103.507870][ T7148] FAT-fs (loop9): Directory bread(block 199923) failed [ 103.556473][ T7080] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 103.573806][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.581708][ T7080] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 103.593792][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.601850][ T7080] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 103.612492][ T7197] loop8: detected capacity change from 0 to 256 [ 103.621059][ T7197] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.633861][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.641925][ T7080] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 103.650378][ T7197] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.663542][ T7080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.737066][ T28] audit: type=1400 audit(1779605968.555:972): avc: denied { write } for pid=7190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.828644][ T28] audit: type=1400 audit(1779605968.645:973): avc: denied { write } for pid=7206 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.875902][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1090'. [ 103.903520][ T7080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.930348][ T7214] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.951526][ T3379] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 103.969006][ T7080] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.980910][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.988062][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.021065][ T3746] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.028208][ T3746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.053939][ T7080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.068327][ T7080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.101385][ T7220] loop0: detected capacity change from 0 to 1024 [ 104.138970][ T7220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.161171][ T28] audit: type=1400 audit(1779605968.975:974): avc: denied { write } for pid=7219 comm="syz.0.1092" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.186021][ T28] audit: type=1400 audit(1779605968.985:975): avc: denied { write } for pid=7219 comm="syz.0.1092" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 104.292609][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.337471][ T7080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.370510][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 104.600872][ T7080] veth0_vlan: entered promiscuous mode [ 104.609794][ T7080] veth1_vlan: entered promiscuous mode [ 104.632959][ T7080] veth0_macvtap: entered promiscuous mode [ 104.641257][ T7080] veth1_macvtap: entered promiscuous mode [ 104.654229][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.668011][ T7080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.680275][ T3754] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.982281][ T3754] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.007253][ T3754] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.027605][ T3754] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.085877][ T7278] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1100'. [ 105.096539][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1063'. [ 105.437789][ T7294] loop9: detected capacity change from 0 to 128 [ 105.895731][ T7328] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1119'. [ 105.931801][ T7331] xt_hashlimit: size too large, truncated to 1048576 [ 106.051397][ T7342] loop7: detected capacity change from 0 to 1764 [ 106.481385][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1136'. [ 106.868734][ T7386] veth1_macvtap: left promiscuous mode [ 106.889373][ T7386] macsec0: entered allmulticast mode [ 106.935939][ T7386] veth1_macvtap: entered promiscuous mode [ 106.969004][ T7386] veth1_macvtap: entered allmulticast mode [ 106.991094][ T7386] macsec0: left allmulticast mode [ 107.021057][ T7386] veth1_macvtap: left allmulticast mode [ 107.364669][ T7399] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 107.371254][ T7399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.407154][ T7399] vhci_hcd vhci_hcd.0: Device attached [ 107.427691][ T7402] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 107.434266][ T7402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.461733][ T7402] vhci_hcd vhci_hcd.0: Device attached [ 107.486378][ T7399] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 107.492940][ T7399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.521237][ T7399] vhci_hcd vhci_hcd.0: Device attached [ 107.543504][ T7399] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 107.550132][ T7399] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.592971][ T7402] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 107.599768][ T7402] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.607380][ T7399] vhci_hcd vhci_hcd.0: Device attached [ 107.636170][ T7402] vhci_hcd vhci_hcd.0: Device attached [ 107.657802][ T7399] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(12) [ 107.664557][ T7399] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.690437][ T7399] vhci_hcd vhci_hcd.0: Device attached [ 107.702745][ T7413] vhci_hcd: connection closed [ 107.704836][ T7410] vhci_hcd: connection closed [ 107.709619][ T7403] vhci_hcd: connection closed [ 107.714346][ T7400] vhci_hcd: connection closed [ 107.719087][ T7407] vhci_hcd: connection closed [ 107.723964][ T3746] vhci_hcd vhci_hcd.0: stop threads [ 107.725901][ T7415] vhci_hcd: connection closed [ 107.734290][ T3746] vhci_hcd vhci_hcd.0: release socket [ 107.752841][ T3746] vhci_hcd vhci_hcd.0: disconnect device [ 107.763727][ T3746] vhci_hcd vhci_hcd.0: stop threads [ 107.773983][ T3746] vhci_hcd vhci_hcd.0: release socket [ 107.783982][ T3746] vhci_hcd vhci_hcd.0: disconnect device [ 107.795692][ T3746] vhci_hcd vhci_hcd.0: stop threads [ 107.806551][ T3746] vhci_hcd vhci_hcd.0: release socket [ 107.818130][ T3746] vhci_hcd vhci_hcd.0: disconnect device [ 107.831014][ T3746] vhci_hcd vhci_hcd.0: stop threads [ 107.842764][ T3746] vhci_hcd vhci_hcd.0: release socket [ 107.854160][ T3746] vhci_hcd vhci_hcd.0: disconnect device [ 107.865617][ T3746] vhci_hcd vhci_hcd.0: stop threads [ 107.876126][ T3746] vhci_hcd vhci_hcd.0: release socket [ 107.887098][ T3746] vhci_hcd vhci_hcd.0: disconnect device [ 107.898523][ T3746] vhci_hcd vhci_hcd.0: stop threads [ 107.909037][ T3746] vhci_hcd vhci_hcd.0: release socket [ 107.920072][ T3746] vhci_hcd vhci_hcd.0: disconnect device [ 108.164210][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 108.164228][ T28] audit: type=1400 audit(1779606228.977:1017): avc: denied { accept } for pid=7417 comm="syz.9.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.262385][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1152'. [ 108.663912][ T7433] loop7: detected capacity change from 0 to 128 [ 108.691908][ T7433] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.718992][ T7433] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.740909][ T7437] loop0: detected capacity change from 0 to 1024 [ 108.768155][ T7437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.794781][ T7437] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.811034][ T28] audit: type=1400 audit(1779606229.627:1018): avc: denied { write } for pid=7436 comm="syz.0.1157" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.813858][ T7437] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.1157: lblock 3 mapped to illegal pblock 3 (length 3) [ 108.847842][ T7437] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 108.860493][ T7437] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.860493][ T7437] [ 108.915732][ T7437] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm syz.0.1157: lblock 8 mapped to illegal pblock 8 (length 4) [ 108.941504][ T7437] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 108.960077][ T28] audit: type=1400 audit(1779606229.777:1019): avc: denied { tracepoint } for pid=7450 comm="syz.9.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 108.978749][ T7437] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.978749][ T7437] [ 109.008061][ T7437] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm syz.0.1157: lblock 8 mapped to illegal pblock 8 (length 1) [ 109.022550][ T28] audit: type=1400 audit(1779606229.827:1020): avc: denied { watch watch_reads } for pid=7436 comm="syz.0.1157" path="/227/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.048045][ T7437] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 109.061524][ T7437] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.061524][ T7437] [ 109.120763][ T3754] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 112: padding at end of block bitmap is not set [ 109.139974][ T3754] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 109.169833][ T3754] EXT4-fs (loop0): This should not happen!! Data will be lost [ 109.169833][ T3754] [ 109.169975][ T28] audit: type=1400 audit(1779606229.987:1021): avc: denied { append } for pid=7457 comm="syz.9.1165" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.198365][ T3754] EXT4-fs (loop0): Total free blocks count 0 [ 109.242856][ T3302] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 109.464908][ T28] audit: type=1400 audit(1779606230.277:1022): avc: denied { bind } for pid=7471 comm="syz.9.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.555905][ T7476] geneve1: entered promiscuous mode [ 109.727763][ T7484] netlink: 'syz.9.1177': attribute type 13 has an invalid length. [ 109.759059][ T7484] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1177'. [ 109.792194][ T7484] erspan0: refused to change device tx_queue_len [ 109.813113][ T7484] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 109.946592][ T7487] loop9: detected capacity change from 0 to 512 [ 109.968906][ T7487] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 109.995343][ T7487] EXT4-fs warning (device loop9): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 110.370535][ T7493] loop5: detected capacity change from 0 to 7 [ 110.485226][ T7498] netlink: 'syz.8.1183': attribute type 10 has an invalid length. [ 110.583927][ T7498] team0 (unregistering): Port device team_slave_0 removed [ 110.613268][ T7498] team0 (unregistering): Port device team_slave_1 removed [ 110.678476][ T28] audit: type=1400 audit(1779606231.497:1023): avc: denied { write } for pid=7499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.792795][ T28] audit: type=1400 audit(1779606231.607:1024): avc: denied { write } for pid=7519 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.830846][ T7523] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 110.854718][ T7520] loop8: detected capacity change from 0 to 4096 [ 110.873230][ T28] audit: type=1400 audit(1779606231.687:1025): avc: denied { relabelto } for pid=7521 comm="syz.0.1189" name="/" dev="ramfs" ino=17166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 110.918774][ T7520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.947858][ T28] audit: type=1400 audit(1779606231.687:1026): avc: denied { associate } for pid=7521 comm="syz.0.1189" name="/" dev="ramfs" ino=17166 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 111.123155][ T7535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'. [ 111.229228][ T7541] dummy0: entered allmulticast mode [ 111.265390][ T7539] dummy0: left allmulticast mode [ 111.599642][ T7577] loop7: detected capacity change from 0 to 128 [ 111.788692][ T7595] loop9: detected capacity change from 0 to 512 [ 111.797647][ T7595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.818854][ T7595] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.840135][ T7595] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.896802][ T6291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.943799][ T6524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.990935][ T7605] loop8: detected capacity change from 0 to 8192 [ 111.998042][ T9] IPVS: starting estimator thread 0... [ 112.008163][ T7605] syz.8.1209: attempt to access beyond end of device [ 112.008163][ T7605] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.021667][ T7605] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.030104][ T7605] syz.8.1209: attempt to access beyond end of device [ 112.030104][ T7605] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.043563][ T7605] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.051848][ T7605] syz.8.1209: attempt to access beyond end of device [ 112.051848][ T7605] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.065359][ T7605] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.073661][ T7605] syz.8.1209: attempt to access beyond end of device [ 112.073661][ T7605] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.087141][ T7605] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.095363][ T7605] syz.8.1209: attempt to access beyond end of device [ 112.095363][ T7605] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.108813][ T7605] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.117141][ T7605] syz.8.1209: attempt to access beyond end of device [ 112.117141][ T7605] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.125288][ T7613] netlink: 'syz.9.1210': attribute type 1 has an invalid length. [ 112.130564][ T7605] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.130689][ T7605] syz.8.1209: attempt to access beyond end of device [ 112.130689][ T7605] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.159936][ T7605] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.167970][ T7610] IPVS: using max 1920 ests per chain, 96000 per kthread [ 112.168340][ T7605] syz.8.1209: attempt to access beyond end of device [ 112.168340][ T7605] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.188567][ T7605] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.196817][ T7611] syz.8.1209: attempt to access beyond end of device [ 112.196817][ T7611] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.213464][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1213'. [ 112.230816][ T7613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.242220][ T7611] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.254452][ T7611] syz.8.1209: attempt to access beyond end of device [ 112.254452][ T7611] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 112.268364][ T7611] Buffer I/O error on dev loop8, logical block 57847, async page read [ 112.345747][ T7620] bond1: (slave veth7): Enslaving as an active interface with a down link [ 112.646293][ C1] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 112.937826][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.974151][ T7613] bond1: (slave batadv1): making interface the new active one [ 113.002530][ T7613] batadv1: entered promiscuous mode [ 113.008056][ T7613] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 113.302715][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1238'. [ 113.383492][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1241'. [ 113.395966][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 113.395982][ T28] audit: type=1400 audit(1779606234.207:1036): avc: denied { append } for pid=7683 comm="syz.3.1243" name="rt_cache" dev="proc" ino=4026532462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 113.655234][ T28] audit: type=1400 audit(1779606234.467:1037): avc: denied { write } for pid=7699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.707371][ T28] audit: type=1400 audit(1779606234.517:1038): avc: denied { write } for pid=7721 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.789821][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 113.809540][ T7728] loop8: detected capacity change from 0 to 1024 [ 113.830353][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 113.860917][ T7728] EXT4-fs: Ignoring removed nobh option [ 113.872450][ T7728] EXT4-fs: Ignoring removed bh option [ 113.885459][ T7728] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 113.914577][ T7728] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.945878][ T28] audit: type=1400 audit(1779606234.757:1039): avc: denied { write } for pid=7727 comm="syz.8.1254" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.106553][ T6291] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.143986][ T7752] loop8: detected capacity change from 0 to 128 [ 114.235482][ T7756] veth0_macvtap: Caught tx_queue_len zero misconfig [ 114.299725][ T28] audit: type=1326 audit(1779606235.117:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.8.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 114.335263][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1269'. [ 114.353443][ T28] audit: type=1326 audit(1779606235.117:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.8.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 114.393241][ T7762] syz_tun: entered allmulticast mode [ 114.400314][ T28] audit: type=1326 audit(1779606235.117:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.8.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 114.413337][ T7762] pimreg: entered allmulticast mode [ 114.453469][ T7761] pimreg: left allmulticast mode [ 114.454729][ T28] audit: type=1326 audit(1779606235.117:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.8.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 114.484007][ T7761] syz_tun: left allmulticast mode [ 114.486387][ T28] audit: type=1326 audit(1779606235.117:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.8.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 114.544941][ T28] audit: type=1326 audit(1779606235.117:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.8.1268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 114.818183][ T7774] loop9: detected capacity change from 0 to 128 [ 114.858161][ T7774] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.909490][ T7774] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.998380][ T6524] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.152849][ T7789] io-wq is not configured for unbound workers [ 115.232472][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1284'. [ 115.265211][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1284'. [ 115.346858][ T7797] loop9: detected capacity change from 0 to 2048 [ 115.375509][ T7797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.399048][ T7797] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.539713][ T7802] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1286: bg 0: block 345: padding at end of block bitmap is not set [ 115.573453][ T7805] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1286: bg 0: block 345: padding at end of block bitmap is not set [ 115.588296][ T7805] EXT4-fs (loop9): Remounting filesystem read-only [ 115.596594][ T3754] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 115.673171][ T3740] nci: nci_ntf_packet: unknown ntf opcode 0x135 [ 115.697655][ T6524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.200730][ T7842] netlink: 'syz.8.1301': attribute type 1 has an invalid length. [ 116.218965][ T7842] netlink: 'syz.8.1301': attribute type 4 has an invalid length. [ 116.230153][ T7842] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1301'. [ 117.204815][ T7876] lo: Caught tx_queue_len zero misconfig [ 117.544742][ T7904] loop9: detected capacity change from 0 to 256 [ 117.572517][ T7904] FAT-fs (loop9): Directory bread(block 64) failed [ 117.593446][ T7904] FAT-fs (loop9): Directory bread(block 65) failed [ 117.606238][ T7904] FAT-fs (loop9): Directory bread(block 66) failed [ 117.617771][ T7904] FAT-fs (loop9): Directory bread(block 67) failed [ 117.631484][ T7904] FAT-fs (loop9): Directory bread(block 68) failed [ 117.639918][ T7904] FAT-fs (loop9): Directory bread(block 69) failed [ 117.648462][ T7904] FAT-fs (loop9): Directory bread(block 70) failed [ 117.655198][ T7904] FAT-fs (loop9): Directory bread(block 71) failed [ 117.662124][ T7904] FAT-fs (loop9): Directory bread(block 72) failed [ 117.669047][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1328'. [ 117.669441][ T7904] FAT-fs (loop9): Directory bread(block 73) failed [ 118.010452][ T7923] loop9: detected capacity change from 0 to 512 [ 118.043610][ T7923] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.058019][ T7923] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.086578][ T6524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.555920][ T7804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.013352][ T7946] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1341'. [ 119.323082][ T6524] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 119.380944][ T6524] CPU: 1 UID: 0 PID: 6524 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 119.380987][ T6524] Tainted: [W]=WARN [ 119.380995][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.381012][ T6524] Call Trace: [ 119.381020][ T6524] [ 119.381029][ T6524] __dump_stack+0x1d/0x30 [ 119.381079][ T6524] dump_stack_lvl+0x95/0xd0 [ 119.381106][ T6524] dump_stack+0x15/0x1b [ 119.381268][ T6524] dump_header+0x80/0x240 [ 119.381297][ T6524] oom_kill_process+0x295/0x350 [ 119.381337][ T6524] out_of_memory+0x97d/0xb80 [ 119.381374][ T6524] try_charge_memcg+0x62f/0xa10 [ 119.381440][ T6524] charge_memcg+0x6d/0x120 [ 119.381533][ T6524] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 119.381587][ T6524] __swap_cache_prepare_and_add+0x69/0x4a0 [ 119.381624][ T6524] ? alloc_pages_mpol+0x217/0x260 [ 119.381659][ T6524] swap_cache_alloc_folio+0xa2/0x120 [ 119.381789][ T6524] swap_cluster_readahead+0x25f/0x3c0 [ 119.381845][ T6524] swapin_readahead+0xde/0x840 [ 119.381932][ T6524] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 119.381958][ T6524] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 119.381990][ T6524] ? __rcu_read_unlock+0x4e/0x70 [ 119.382080][ T6524] ? swap_cache_get_folio+0x1e0/0x1f0 [ 119.382109][ T6524] do_swap_page+0x31e/0x2180 [ 119.382137][ T6524] ? __schedule+0x951/0xd40 [ 119.382165][ T6524] ? __rcu_read_lock+0x36/0x50 [ 119.382211][ T6524] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 119.382246][ T6524] handle_mm_fault+0xb30/0x2e70 [ 119.382277][ T6524] ? vma_start_read+0x1c7/0x2c0 [ 119.382326][ T6524] do_user_addr_fault+0x62f/0x1050 [ 119.382443][ T6524] ? trace_page_fault_user+0x1f/0xa0 [ 119.382552][ T6524] exc_page_fault+0x62/0xa0 [ 119.382583][ T6524] asm_exc_page_fault+0x26/0x30 [ 119.382752][ T6524] RIP: 0033:0x7fcad63a7fd7 [ 119.382847][ T6524] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 119.382870][ T6524] RSP: 002b:00007ffcc9c777b0 EFLAGS: 00010202 [ 119.382890][ T6524] RAX: 0000000000000000 RBX: 00005555641b3500 RCX: 00007fcad63a7fd7 [ 119.382906][ T6524] RDX: 00007ffcc9c777f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.382922][ T6524] RBP: 00007ffcc9c7785c R08: 0000000000000000 R09: 0000000000000000 [ 119.382985][ T6524] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 119.383001][ T6524] R13: 00000000000927c0 R14: 000000000001d142 R15: 00007ffcc9c778b0 [ 119.383031][ T6524] [ 119.461282][ T6524] memory: usage 307200kB, limit 307200kB, failcnt 408 [ 119.643934][ T6524] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 119.711955][ T6524] kmem: usage 285996kB, limit 9007199254740988kB, failcnt 0 [ 119.740778][ T6524] Memory cgroup stats for /syz9: [ 119.741023][ T6524] cache 0 [ 119.778913][ T7973] ipvlan2: entered promiscuous mode [ 119.789815][ T6524] rss 0 [ 119.795516][ T7973] team0: Device ipvlan2 failed to register rx_handler [ 119.805446][ T6524] shmem 0 [ 119.812773][ T6524] mapped_file 0 [ 119.825376][ T6524] dirty 0 [ 119.830442][ T6524] writeback 0 [ 119.834174][ T6524] workingset_refault_anon 109 [ 119.840633][ T6524] workingset_refault_file 0 [ 119.845299][ T6524] swap 163840 [ 119.852089][ T6524] swapcached 745472 [ 119.864971][ T6524] pgpgin 14134 [ 119.869524][ T6524] pgpgout 14133 [ 119.873083][ T6524] pgfault 23709 [ 119.877057][ T6524] pgmajfault 89 [ 119.880586][ T6524] inactive_anon 4096 [ 119.884634][ T6524] active_anon 0 [ 119.888934][ T6524] inactive_file 0 [ 119.894065][ T6524] active_file 0 [ 119.899018][ T6524] unevictable 0 [ 119.904301][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 119.904329][ T28] audit: type=1400 audit(1779606240.717:1065): avc: denied { create } for pid=7975 comm="syz.8.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.932031][ T6524] hierarchical_memory_limit 314572800 [ 119.937540][ T6524] hierarchical_memsw_limit 9223372036854771712 [ 119.943877][ T6524] total_cache 0 [ 119.948782][ T6524] total_rss 0 [ 119.952215][ T6524] total_shmem 0 [ 119.955845][ T6524] total_mapped_file 0 [ 119.961606][ T6524] total_dirty 0 [ 119.965164][ T6524] total_writeback 0 [ 119.990312][ T6524] total_workingset_refault_anon 109 [ 120.001069][ T6524] total_workingset_refault_file 0 [ 120.012337][ T6524] total_swap 163840 [ 120.020889][ T6524] total_swapcached 745472 [ 120.030115][ T6524] total_pgpgin 14134 [ 120.038617][ T6524] total_pgpgout 14133 [ 120.051682][ T6524] total_pgfault 23709 [ 120.065784][ T6524] total_pgmajfault 89 [ 120.081414][ T6524] total_inactive_anon 4096 [ 120.098367][ T6524] total_active_anon 0 [ 120.108021][ T6524] total_inactive_file 0 [ 120.118744][ T6524] total_active_file 0 [ 120.133954][ T6524] total_unevictable 0 [ 120.148113][ T6524] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1335,pid=7928,uid=0 [ 120.188579][ T6524] Memory cgroup out of memory: OOM victim 7928 (syz.9.1335) is already exiting. Skip killing the task [ 120.559743][ T28] audit: type=1326 audit(1779606241.377:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7988 comm="syz.7.1360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb05e8ece59 code=0x0 [ 120.804319][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1364'. [ 120.871330][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 120.882174][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 121.199780][ T28] audit: type=1326 audit(1779606242.007:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.8.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 121.225970][ T28] audit: type=1326 audit(1779606242.017:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.8.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 121.252012][ T28] audit: type=1326 audit(1779606242.017:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.8.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 121.277767][ T28] audit: type=1326 audit(1779606498.023:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.8.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 121.322868][ T28] audit: type=1326 audit(1779606498.023:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.8.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 121.358925][ T28] audit: type=1326 audit(1779606498.053:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.8.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa81ba2d68e code=0x7ffc0000 [ 121.405524][ T8021] loop9: detected capacity change from 0 to 128 [ 121.412483][ T28] audit: type=1326 audit(1779606498.053:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.8.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 121.438158][ T28] audit: type=1326 audit(1779606498.053:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.8.1370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x7ffc0000 [ 121.476494][ T8021] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.500770][ T8021] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.587297][ T6524] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.860707][ T8046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.868380][ T8046] batadv_slave_1: entered promiscuous mode [ 122.521606][ T8067] loop0: detected capacity change from 0 to 4096 [ 122.567330][ T8067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.724544][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.906928][ T8091] netlink: 'syz.0.1394': attribute type 4 has an invalid length. [ 122.959077][ T8091] netlink: 'syz.0.1394': attribute type 4 has an invalid length. [ 122.998908][ T8096] pimreg: entered allmulticast mode [ 123.025210][ T8096] veth1_to_bond: entered allmulticast mode [ 123.111721][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.119046][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.289816][ T8091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.417352][ T8098] pimreg: left allmulticast mode [ 123.457550][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.488629][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.512101][ T8095] veth1_to_bond: left allmulticast mode [ 123.519592][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.532746][ T8116] xt_hashlimit: size too large, truncated to 1048576 [ 123.536209][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.553785][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.580934][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.611288][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.631746][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.266235][ T3754] batadv1: left promiscuous mode [ 124.405611][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 124.677368][ T8181] loop0: detected capacity change from 0 to 8192 [ 124.931677][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1437'. [ 125.065462][ T8197] loop9: detected capacity change from 0 to 1024 [ 125.098697][ T8197] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 125.171589][ T8197] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.247328][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 125.247347][ T28] audit: type=1400 audit(1779606502.063:1098): avc: denied { write } for pid=8196 comm="syz.9.1439" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.279799][ T8197] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.1439: lblock 3 mapped to illegal pblock 3 (length 3) [ 125.346165][ T8197] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 125.397945][ T8205] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 8: comm syz.9.1439: lblock 8 mapped to illegal pblock 8 (length 4) [ 125.446188][ T8200] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 125.460862][ T8197] EXT4-fs (loop9): This should not happen!! Data will be lost [ 125.460862][ T8197] [ 125.470920][ T8205] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 125.554476][ T8205] EXT4-fs (loop9): This should not happen!! Data will be lost [ 125.554476][ T8205] [ 125.564791][ T8205] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 8: comm syz.9.1439: lblock 8 mapped to illegal pblock 8 (length 1) [ 125.612258][ T3754] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 125.645402][ T3754] EXT4-fs (loop9): This should not happen!! Data will be lost [ 125.645402][ T3754] [ 125.668441][ T3754] EXT4-fs (loop9): Total free blocks count 0 [ 125.687918][ T3754] EXT4-fs (loop9): Free/Dirty block details [ 125.706031][ T3754] EXT4-fs (loop9): free_blocks=0 [ 125.723338][ T6524] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 125.838026][ T8223] loop9: detected capacity change from 0 to 128 [ 125.923333][ T8223] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.953220][ T28] audit: type=1326 audit(1779606502.763:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8230 comm="syz.3.1451" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x0 [ 125.991151][ T8223] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.014696][ T28] audit: type=1400 audit(1779606502.823:1100): avc: denied { write } for pid=8222 comm="syz.9.1449" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.037153][ T28] audit: type=1400 audit(1779606502.843:1101): avc: denied { write } for pid=8222 comm="syz.9.1449" name="encrypted_dir" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 126.395294][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 126.477923][ T6524] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.941587][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1471'. [ 127.003989][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1471'. [ 127.083296][ T8286] dummy0: entered allmulticast mode [ 127.091515][ T8291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.098813][ T8291] IPv6: NLM_F_CREATE should be set when creating new route [ 127.104702][ T8285] dummy0: left allmulticast mode [ 127.106075][ T8291] IPv6: NLM_F_CREATE should be set when creating new route [ 127.123086][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1475'. [ 127.133555][ T8291] sit0: entered promiscuous mode [ 127.153260][ T8291] netlink: 'syz.9.1477': attribute type 1 has an invalid length. [ 127.166119][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1475'. [ 127.180505][ T8291] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1477'. [ 127.288768][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1481'. [ 127.338289][ T3754] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.347292][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1481'. [ 127.362357][ T3754] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.391812][ T3754] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.418128][ T3754] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.453379][ T8315] syz_tun: entered allmulticast mode [ 127.471318][ T8315] syz_tun: left allmulticast mode [ 127.547256][ T8319] loop0: detected capacity change from 0 to 512 [ 127.585513][ T8319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.648887][ T8319] EXT4-fs (loop0): 1 truncate cleaned up [ 127.666925][ T8319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.821904][ T8319] xt_hashlimit: size too large, truncated to 1048576 [ 127.891765][ T28] audit: type=1400 audit(1779606504.693:1102): avc: denied { connect } for pid=8316 comm="syz.0.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.956500][ T28] audit: type=1400 audit(1779606504.733:1103): avc: denied { write } for pid=8316 comm="syz.0.1487" lport=48164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.497108][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.563240][ T8340] 8021q: VLANs not supported on gre0 [ 128.991465][ T8368] netlink: 'syz.9.1508': attribute type 1 has an invalid length. [ 129.030022][ T8368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.086821][ T8368] bond2: (slave veth13): Enslaving as an active interface with a down link [ 129.140360][ T8368] bond3: entered allmulticast mode [ 129.152983][ T8368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.166323][ T8368] bond2: (slave bond3): Enslaving as an active interface with a down link [ 129.320827][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.328143][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.385611][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.397758][ T8379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.461801][ T3740] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.483082][ T3740] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.502269][ T3740] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.522973][ T3740] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.824049][ T8413] loop0: detected capacity change from 0 to 512 [ 129.859418][ T28] audit: type=1400 audit(1779606506.673:1104): avc: denied { read } for pid=8414 comm="syz.3.1519" laddr=fe80::13 lport=59861 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.279766][ T8428] loop9: detected capacity change from 0 to 1024 [ 130.310857][ T8428] EXT4-fs: Ignoring removed nobh option [ 130.331831][ T8428] EXT4-fs: Ignoring removed bh option [ 130.351284][ T8428] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 130.375173][ T8428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.424424][ T28] audit: type=1400 audit(1779606507.233:1105): avc: denied { write } for pid=8426 comm="syz.9.1522" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.616349][ T6524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.190902][ T8451] xt_connbytes: Forcing CT accounting to be enabled [ 131.734230][ T28] audit: type=1326 audit(1779606508.543:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 131.780130][ T28] audit: type=1326 audit(1779606508.573:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 131.812593][ T28] audit: type=1326 audit(1779606508.573:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 131.848676][ T28] audit: type=1326 audit(1779606508.573:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 131.929326][ T28] audit: type=1326 audit(1779606508.573:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 132.007303][ T28] audit: type=1326 audit(1779606508.573:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 132.073989][ T28] audit: type=1326 audit(1779606508.573:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 132.143761][ T28] audit: type=1326 audit(1779606508.573:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 132.205750][ T28] audit: type=1326 audit(1779606508.573:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.9.1552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad63ece59 code=0x7ffc0000 [ 132.628565][ T8585] netlink: 'syz.9.1569': attribute type 10 has an invalid length. [ 132.641056][ T8585] team0: Port device dummy0 added [ 132.968243][ T8646] loop0: detected capacity change from 0 to 1024 [ 133.008773][ T8646] EXT4-fs: Ignoring removed bh option [ 133.039700][ T8646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.142750][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.172130][ T8666] netlink: 'syz.7.1580': attribute type 1 has an invalid length. [ 133.211752][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 133.222946][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 133.280636][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1585'. [ 134.265551][ T8755] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1598'. [ 134.412886][ T8755] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1598'. [ 135.239954][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1614'. [ 135.340785][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1617'. [ 135.448967][ T8830] loop0: detected capacity change from 0 to 2048 [ 135.476813][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 135.476828][ T28] audit: type=1326 audit(1779606512.293:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.520516][ T28] audit: type=1326 audit(1779606512.323:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.547137][ T28] audit: type=1326 audit(1779606512.323:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.573003][ T28] audit: type=1326 audit(1779606512.323:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.599520][ T28] audit: type=1326 audit(1779606512.323:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.626375][ T28] audit: type=1326 audit(1779606512.323:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.652186][ T28] audit: type=1326 audit(1779606512.323:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.677953][ T28] audit: type=1326 audit(1779606512.323:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.704332][ T28] audit: type=1326 audit(1779606512.323:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 135.732084][ T28] audit: type=1326 audit(1779606512.323:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8831 comm="syz.3.1618" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7fc00000 [ 136.038291][ T8853] netlink: 'syz.7.1627': attribute type 1 has an invalid length. [ 136.060187][ T8855] netlink: 'syz.3.1628': attribute type 13 has an invalid length. [ 136.072079][ T8853] macvlan2: entered promiscuous mode [ 136.080962][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'. [ 136.083971][ T8853] macvlan2: entered allmulticast mode [ 136.103577][ T8853] bond1: entered promiscuous mode [ 136.109357][ T8853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.118950][ T8853] bond1: left promiscuous mode [ 136.147065][ T3732] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.155978][ T8855] netlink: 'syz.3.1628': attribute type 13 has an invalid length. [ 136.167539][ T3732] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.177302][ T3732] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.181501][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1628'. [ 136.195701][ T3732] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.638410][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1646'. [ 136.887927][ T8916] loop0: detected capacity change from 0 to 512 [ 136.930002][ T8916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.960368][ T8916] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.002179][ T8916] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.1651: corrupted inode contents [ 137.047909][ T8916] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #2: comm syz.0.1651: mark_inode_dirty error [ 137.101180][ T8916] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #2: comm syz.0.1651: corrupted inode contents [ 137.128006][ T8916] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1651: mark_inode_dirty error [ 137.177258][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.165453][ T8984] veth1_macvtap: left promiscuous mode [ 138.179461][ T8984] macsec0: entered allmulticast mode [ 138.216656][ T8984] veth1_macvtap: entered promiscuous mode [ 138.231813][ T8984] veth1_macvtap: entered allmulticast mode [ 138.287789][ T8984] macsec0: left allmulticast mode [ 138.292975][ T8984] veth1_macvtap: left allmulticast mode [ 138.528513][ T8999] syz.7.1683 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 138.536336][ T8957] syz.0.1666 (8957) used greatest stack depth: 8312 bytes left [ 139.133171][ T9021] xt_hashlimit: size too large, truncated to 1048576 [ 139.494460][ T9036] __nla_validate_parse: 2 callbacks suppressed [ 139.494477][ T9036] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1697'. [ 139.566825][ T9041] netlink: 'syz.9.1700': attribute type 1 has an invalid length. [ 139.608259][ T9041] bond4: entered promiscuous mode [ 139.619604][ T9041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.680991][ T9041] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.698334][ T9041] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 139.714839][ T9041] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 139.727216][ T9041] bond4: (slave vti0): making interface the new active one [ 139.734873][ T9041] vti0: entered promiscuous mode [ 139.742689][ T9041] bond4: (slave vti0): Enslaving as an active interface with an up link [ 139.823146][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1708'. [ 139.843696][ T9058] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1708'. [ 140.322777][ T9099] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1722'. [ 140.332931][ T9099] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1722'. [ 140.721628][ T9136] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 140.890515][ T9136] veth0_macvtap: left promiscuous mode [ 140.935722][ T9136] veth0_macvtap: entered promiscuous mode [ 140.949176][ T9136] team0: Device macvtap0 failed to register rx_handler [ 140.960282][ T9136] veth0_macvtap: left promiscuous mode [ 142.334946][ T9295] netlink: 'syz.9.1757': attribute type 12 has an invalid length. [ 142.349284][ T9297] dummy0: entered allmulticast mode [ 142.374324][ T9296] dummy0: left allmulticast mode [ 142.626471][ T9306] sit0: left promiscuous mode [ 142.742191][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 142.773266][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 142.798711][ T9316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 143.153388][ T28] kauditd_printk_skb: 965 callbacks suppressed [ 143.153407][ T28] audit: type=1400 audit(1779606519.963:2113): avc: denied { write } for pid=9348 comm="syz.9.1767" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 143.214024][ T9356] dummy0: entered allmulticast mode [ 143.234690][ T9355] dummy0: left allmulticast mode [ 143.761181][ T9423] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 143.776386][ T9423] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1777'. [ 144.034018][ T9438] netlink: 'syz.3.1783': attribute type 4 has an invalid length. [ 144.050871][ T9438] netlink: 'syz.3.1783': attribute type 4 has an invalid length. [ 144.129948][ T9441] netlink: 'syz.8.1784': attribute type 10 has an invalid length. [ 144.132495][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.145276][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.300158][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.322612][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.461530][ T9441] veth0_macvtap: left promiscuous mode [ 144.538007][ T311] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.556906][ T311] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.574760][ T311] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.601818][ T311] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.625942][ T311] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.636021][ T311] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.647143][ T311] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.656752][ T311] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.903863][ T28] audit: type=1400 audit(1779606521.713:2114): avc: denied { relabelfrom } for pid=9466 comm="syz.9.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 144.967540][ T28] audit: type=1400 audit(1779606521.713:2115): avc: denied { relabelto } for pid=9466 comm="syz.9.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 145.780378][ T9556] netlink: 'syz.7.1799': attribute type 10 has an invalid length. [ 145.809675][ T9556] team0: Device macvtap0 failed to register rx_handler [ 145.845119][ T9561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1802'. [ 145.886942][ T9561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1802'. [ 145.933562][ T28] audit: type=1400 audit(1779606522.743:2116): avc: denied { accept } for pid=9565 comm="syz.7.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 146.218366][ T9588] loop0: detected capacity change from 0 to 1024 [ 146.241079][ T9588] EXT4-fs: Ignoring removed orlov option [ 146.291687][ T9588] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 146.329111][ T9588] System zones: 0-1, 3-12 [ 146.367392][ T9588] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.450995][ T28] audit: type=1400 audit(1779606523.263:2117): avc: denied { write } for pid=9587 comm="syz.0.1812" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.532691][ T28] audit: type=1400 audit(1779606523.323:2118): avc: denied { write } for pid=9587 comm="syz.0.1812" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.615195][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 146.659364][ T9610] netlink: 'syz.8.1819': attribute type 1 has an invalid length. [ 146.696982][ T9610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.807154][ T9615] bond1: (slave veth7): Enslaving as an active interface with a down link [ 146.936958][ T9610] bond2: entered allmulticast mode [ 146.975361][ T9610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.020422][ T9610] bond1: (slave bond2): Enslaving as an active interface with a down link [ 147.117610][ T9623] syzkaller1: entered promiscuous mode [ 147.149033][ T9623] syzkaller1: entered allmulticast mode [ 148.051341][ T9642] syzkaller0: entered promiscuous mode [ 148.068482][ T9642] syzkaller0: refused to change device tx_queue_len [ 148.551978][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.559398][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.699558][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.733410][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.748767][ T9662] mmap: syz.0.1838 (9662) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 148.804916][ T9666] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1842'. [ 148.828053][ T9666] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1842'. [ 148.905797][ T412] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.928378][ T412] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.963206][ T412] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.982362][ T412] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.996273][ T412] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.022368][ T412] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.074058][ T412] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.125001][ T412] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.915356][ T28] audit: type=1400 audit(1779606526.723:2119): avc: denied { create } for pid=9686 comm="syz.0.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.943678][ T28] audit: type=1400 audit(1779606526.753:2120): avc: denied { connect } for pid=9686 comm="syz.0.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.969939][ T28] audit: type=1400 audit(1779606526.753:2121): avc: denied { read } for pid=9686 comm="syz.0.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.001496][ T28] audit: type=1400 audit(1779606526.803:2122): avc: denied { write } for pid=9686 comm="syz.0.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.467468][ T9694] netlink: 'syz.9.1850': attribute type 10 has an invalid length. [ 150.497533][ T9694] team0: Device macvtap0 failed to register rx_handler [ 150.754154][ T28] audit: type=1400 audit(1779606527.563:2123): avc: denied { mounton } for pid=9721 comm="syz.7.1863" path="/146/file1" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 150.839022][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1868'. [ 150.866882][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1868'. [ 150.882623][ T9736] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1869'. [ 151.008885][ T28] audit: type=1326 audit(1779606527.823:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9745 comm="syz.8.1873" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa81ba6ce59 code=0x0 [ 151.953704][ T28] audit: type=1400 audit(1779606528.763:2125): avc: denied { create } for pid=9769 comm="syz.9.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 152.117135][ T9780] bond2: (slave bond_slave_1): Device is not our slave [ 152.134334][ T9780] bond2: option active_slave: invalid value (bond_slave_1) [ 152.147867][ T9780] bond2 (unregistering): Released all slaves [ 152.161652][ T28] audit: type=1400 audit(1779606528.973:2126): avc: denied { bind } for pid=9782 comm="syz.0.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 152.655489][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1888'. [ 152.668273][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1888'. [ 153.238944][ T9836] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1894'. [ 153.305855][ T9836] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1894'. [ 154.386362][ T9942] netlink: 'syz.0.1902': attribute type 10 has an invalid length. [ 154.399634][ T9942] team0: Device macvtap0 failed to register rx_handler [ 154.494359][ T9951] netlink: 'syz.0.1918': attribute type 10 has an invalid length. [ 154.524973][ T9951] team0: Device macvtap0 failed to register rx_handler [ 154.566387][ T28] audit: type=1326 audit(1779606531.373:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.7.1920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e8ece59 code=0x7ffc0000 [ 154.567033][ T9958] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1909'. [ 154.634343][ T28] audit: type=1326 audit(1779606531.413:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.7.1920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e8ece59 code=0x7ffc0000 [ 154.665601][ T9958] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1909'. [ 154.918824][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 154.918840][ T28] audit: type=1326 audit(1779606787.720:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9956 comm="syz.7.1920" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb05e8ece59 code=0x7ffc0000 [ 155.152427][ T9996] netlink: 'syz.9.1927': attribute type 10 has an invalid length. [ 155.177161][ T9996] team0: Device macvtap0 failed to register rx_handler [ 155.256895][T10002] loop9: detected capacity change from 0 to 512 [ 155.271850][T10002] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec19c, mo2=0002] [ 155.309759][T10002] System zones: 1-12 [ 155.315659][T10002] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.1930: corrupted in-inode xattr: e_value size too large [ 155.336212][T10002] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 155.336640][T10002] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.1930: couldn't read orphan inode 15 (err -117) [ 155.357679][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 155.357703][ C1] EXT4-fs (loop9): initial error at time 1779606788: ext4_iget_extra_inode:5128: inode 15 [ 155.357739][ C1] EXT4-fs (loop9): last error at time 1779606788: ext4_iget_extra_inode:5128: inode 15 [ 155.437425][T10002] loop9: lost filesystem error report for type 5 error -117 [ 155.438060][T10002] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.471928][ T28] audit: type=1400 audit(1779606788.280:2147): avc: denied { write } for pid=10001 comm="syz.9.1930" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.498747][T10002] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1930: Unrecognised inode hash code 4 [ 155.517655][T10002] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1930: Corrupt directory, running e2fsck is recommended [ 155.533689][ T28] audit: type=1400 audit(1779606788.310:2148): avc: denied { write } for pid=10001 comm="syz.9.1930" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.561812][T10002] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.1930: Unrecognised inode hash code 4 [ 155.578057][T10002] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1930: Corrupt directory, running e2fsck is recommended [ 155.598499][ T28] audit: type=1400 audit(1779606788.310:2149): avc: denied { write } for pid=10001 comm="syz.9.1930" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.653363][ T28] audit: type=1400 audit(1779606788.310:2150): avc: denied { write } for pid=10001 comm="syz.9.1930" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.658379][ T6524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.721402][ T28] audit: type=1400 audit(1779606788.370:2151): avc: denied { write } for pid=10001 comm="syz.9.1930" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.403372][T10038] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1952'. [ 157.463435][T10038] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1952'. [ 158.243062][T10070] netlink: 'syz.8.1957': attribute type 13 has an invalid length. [ 158.251555][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1957'. [ 158.265094][ T1909] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.265139][T10070] netlink: 'syz.8.1957': attribute type 13 has an invalid length. [ 158.265156][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1957'. [ 158.296166][ T28] audit: type=1400 audit(1779606791.110:2152): avc: denied { mounton } for pid=10071 comm="syz.9.1955" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 158.296258][ T1909] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.296294][ T1909] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.354496][ T28] audit: type=1400 audit(1779606791.150:2153): avc: denied { unmount } for pid=6524 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 158.398499][ T3754] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.425959][ T28] audit: type=1326 audit(1779606791.230:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.3.1959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 158.458179][ T28] audit: type=1326 audit(1779606791.240:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10075 comm="syz.3.1959" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab17b5ce59 code=0x7ffc0000 [ 158.900417][T10087] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 158.930704][T10087] team0: Device macvtap0 failed to register rx_handler [ 160.037030][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 160.037050][ T28] audit: type=1400 audit(1779607048.850:2175): avc: denied { read } for pid=10215 comm="syz.7.1968" path="socket:[27633]" dev="sockfs" ino=27633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.387521][T10242] loop9: detected capacity change from 0 to 4096 [ 160.421319][T10242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.509723][ T28] audit: type=1400 audit(1779607049.310:2176): avc: denied { write } for pid=10241 comm="syz.9.1984" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.736347][ T6524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.302703][T10497] netlink: 'syz.8.2011': attribute type 27 has an invalid length. [ 163.327797][T10497] netlink: 'syz.8.2011': attribute type 3 has an invalid length. [ 163.346277][T10497] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2011'. [ 164.305570][T10531] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2012'. [ 164.347451][T10535] netlink: 'syz.9.2015': attribute type 27 has an invalid length. [ 164.360572][T10535] netlink: 'syz.9.2015': attribute type 3 has an invalid length. [ 164.375075][T10535] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2015'. [ 165.207445][T10557] loop0: detected capacity change from 0 to 1024 [ 165.228140][T10557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.280538][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.289265][T10563] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2024'. [ 165.561630][T10576] netlink: 'syz.3.2026': attribute type 27 has an invalid length. [ 165.570561][T10576] netlink: 'syz.3.2026': attribute type 3 has an invalid length. [ 165.582159][T10576] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2026'. [ 165.693038][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 165.760189][ T28] audit: type=1400 audit(1779607054.570:2177): avc: denied { ioctl } for pid=10589 comm="syz.3.2035" path="socket:[28445]" dev="sockfs" ino=28445 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.011977][T10597] loop9: detected capacity change from 0 to 4096 [ 166.032520][T10597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.064522][ T28] audit: type=1400 audit(1779607054.870:2178): avc: denied { write } for pid=10596 comm="syz.9.2039" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.144206][ T6524] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.248156][T10606] sctp: [Deprecated]: syz.9.2040 (pid 10606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.248156][T10606] Use struct sctp_sack_info instead [ 166.299850][T10608] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.647281][T10629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2050'. [ 166.745809][ T28] audit: type=1326 audit(1779607055.550:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.0.2054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fc76ce59 code=0x7ffc0000 [ 166.797537][ T28] audit: type=1326 audit(1779607055.550:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.0.2054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fc76ce59 code=0x7ffc0000 [ 166.843953][ T28] audit: type=1326 audit(1779607055.590:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.0.2054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fc76ce59 code=0x7ffc0000 [ 166.884196][ T28] audit: type=1326 audit(1779607055.590:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.0.2054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fc76ce59 code=0x7ffc0000 [ 166.940462][ T28] audit: type=1326 audit(1779607055.590:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.0.2054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fc76ce59 code=0x7ffc0000 [ 166.992295][ T28] audit: type=1326 audit(1779607055.590:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.0.2054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff8fc76ce59 code=0x7ffc0000 [ 167.036382][ T28] audit: type=1326 audit(1779607055.590:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.0.2054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fc76ce59 code=0x7ffc0000 [ 167.123254][ T28] audit: type=1326 audit(1779607055.590:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.0.2054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8fc76ce59 code=0x7ffc0000 [ 167.172567][T10652] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2060'. [ 167.931519][T10672] loop9: detected capacity change from 0 to 256 [ 167.965548][T10672] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.145523][T10670] loop0: detected capacity change from 0 to 128 [ 168.474105][T10695] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2078'. [ 168.496792][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 168.589677][T10702] cgroup: fork rejected by pids controller in /syz9 [ 168.740133][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2088'. [ 168.750770][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2088'. [ 168.817056][T10719] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2090'. [ 169.067728][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2095'. [ 169.209613][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'. [ 169.404521][T10753] loop0: detected capacity change from 0 to 512 [ 169.458394][ T36] bridge_slave_1: left allmulticast mode [ 169.470097][T10753] EXT4-fs: Ignoring removed bh option [ 169.477263][ T36] bridge_slave_1: left promiscuous mode [ 169.496446][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.509378][T10753] EXT4-fs: inline encryption not supported [ 169.529658][ T36] bridge_slave_0: left allmulticast mode [ 169.538582][T10753] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.551488][ T36] bridge_slave_0: left promiscuous mode [ 169.561227][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.588844][T10753] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 169.616310][ T36] bond4 (unregistering): (slave vti0): Releasing backup interface [ 169.624308][ T36] vti0 (unregistering): left promiscuous mode [ 169.653505][T10753] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2101: bg 0: block 248: padding at end of block bitmap is not set [ 169.668637][T10753] loop0: lost filesystem error report for type 5 error -117 [ 169.669457][T10753] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2101: Failed to acquire dquot type 1 [ 169.676176][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 169.692530][T10753] loop0: lost filesystem error report for type 5 error -28 [ 169.694887][ C0] EXT4-fs (loop0): last error at time 1779607314: ext4_validate_block_bitmap:441 [ 169.701780][T10753] EXT4-fs (loop0): 1 truncate cleaned up [ 169.702237][ C0] [ 169.722022][T10753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 169.779740][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.797817][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.813569][ T36] bond0 (unregistering): Released all slaves [ 169.977513][ T36] bond1 (unregistering): (slave veth7): Releasing active interface [ 169.988800][ T36] batadv1: entered promiscuous mode [ 170.072290][ T36] bond1 (unregistering): (slave batadv1): Releasing active interface [ 170.080992][ T36] bond1 (unregistering): Released all slaves [ 170.107283][ T36] bond2 (unregistering): (slave veth13): Releasing active interface [ 170.117548][T10770] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.2107'. [ 170.135777][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2107'. [ 170.148015][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 170.159041][ T36] bond2 (unregistering): (slave bond3): Releasing active interface [ 170.175022][ T36] bond2 (unregistering): Released all slaves [ 170.202642][ T36] bond3 (unregistering): Released all slaves [ 170.218665][ T36] bond4 (unregistering): Released all slaves [ 170.278997][ T36] hsr_slave_0: left promiscuous mode [ 170.290618][ T36] hsr_slave_1: left promiscuous mode [ 170.301182][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.310882][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.601630][ T36] team0 (unregistering): Port device team_slave_1 removed [ 170.621967][ T36] team0 (unregistering): Port device team_slave_0 removed [ 170.701453][ T36] team0 (unregistering): Port device dummy0 removed [ 170.732455][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 170.943018][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 170.943033][ T28] audit: type=1400 audit(1779607571.754:2247): avc: denied { write } for pid=10801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.992371][T10822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2116'. [ 171.068334][ T36] IPVS: stop unused estimator thread 0... [ 171.089835][ T28] audit: type=1400 audit(1779607571.904:2248): avc: denied { write } for pid=10824 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.130151][T10749] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.144667][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.152101][T10749] bridge_slave_0: entered allmulticast mode [ 171.158914][T10749] bridge_slave_0: entered promiscuous mode [ 171.165931][T10749] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.173599][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.181224][T10749] bridge_slave_1: entered allmulticast mode [ 171.188016][T10749] bridge_slave_1: entered promiscuous mode [ 171.195031][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 171.217782][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.237107][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.286714][T10749] team0: Port device team_slave_0 added [ 171.304524][T10749] team0: Port device team_slave_1 added [ 171.349437][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.367902][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.429353][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.459749][T10819] ================================================================== [ 171.467883][T10819] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 171.475214][T10819] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.477568][T10819] read to 0xffff88812fdcebe8 of 4 bytes by task 10825 on cpu 1: [ 171.485219][T10819] atime_needs_update+0x25f/0x3e0 [ 171.490281][T10819] touch_atime+0x4a/0x330 [ 171.494653][T10819] shmem_file_read_iter+0x3f4/0x4b0 [ 171.499898][T10819] copy_splice_read+0x471/0x6c0 [ 171.504795][T10819] splice_direct_to_actor+0x28f/0x670 [ 171.510215][T10819] do_splice_direct+0x119/0x1a0 [ 171.515158][T10819] do_sendfile+0x382/0x650 [ 171.519611][T10819] __x64_sys_sendfile64+0x105/0x150 [ 171.524932][T10819] x64_sys_call+0x2dc4/0x3020 [ 171.529651][T10819] do_syscall_64+0x12c/0x3b0 [ 171.534304][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.540221][T10819] [ 171.542571][T10819] write to 0xffff88812fdcebe8 of 4 bytes by task 10819 on cpu 0: [ 171.550314][T10819] touch_atime+0x1d7/0x330 [ 171.554778][T10819] shmem_file_read_iter+0x3f4/0x4b0 [ 171.560015][T10819] copy_splice_read+0x471/0x6c0 [ 171.564911][T10819] splice_direct_to_actor+0x28f/0x670 [ 171.570341][T10819] do_splice_direct+0x119/0x1a0 [ 171.575239][T10819] do_sendfile+0x382/0x650 [ 171.579703][T10819] __x64_sys_sendfile64+0x105/0x150 [ 171.584946][T10819] x64_sys_call+0x2dc4/0x3020 [ 171.589700][T10819] do_syscall_64+0x12c/0x3b0 [ 171.594367][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.600302][T10819] [ 171.602648][T10819] value changed: 0x0fbe2687 -> 0x1056bd07 [ 171.608392][T10819] [ 171.610737][T10819] Reported by Kernel Concurrency Sanitizer on: [ 171.616920][T10819] CPU: 0 UID: 0 PID: 10819 Comm: syz.7.2115 Tainted: G W syzkaller #0 PREEMPT(full) [ 171.627889][T10819] Tainted: [W]=WARN [ 171.631716][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.641804][T10819] ================================================================== [ 171.665277][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.700601][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.744873][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.816658][ T28] audit: type=1400 audit(1779607572.624:2249): avc: denied { write } for pid=10839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.896109][ T28] audit: type=1400 audit(1779607572.694:2250): avc: denied { write } for pid=10852 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.946572][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 172.067145][ T3748] bridge_slave_1: left allmulticast mode [ 172.076362][ T3748] bridge_slave_1: left promiscuous mode [ 172.089097][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.111546][ T3748] bridge_slave_0: left allmulticast mode [ 172.122996][ T3748] bridge_slave_0: left promiscuous mode [ 172.140852][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.211754][ T28] audit: type=1400 audit(1779607573.024:2251): avc: denied { write } for pid=10855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.260543][ T3748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.272497][ T28] audit: type=1400 audit(1779607573.084:2252): avc: denied { write } for pid=10866 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.306292][ T3748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.327277][ T3748] bond0 (unregistering): Released all slaves [ 172.336500][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 172.378476][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.396846][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.416749][ T3748] team0 (unregistering): Port device team_slave_1 removed [ 172.429101][ T3748] team0 (unregistering): Port device team_slave_0 removed [ 172.719716][ T3748] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.730121][ T3748] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.769599][ T3748] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.779941][ T3748] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.829634][ T3748] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.840277][ T3748] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.859467][ T3748] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.869925][ T3748] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.937454][ T3748] bridge_slave_1: left allmulticast mode [ 172.943125][ T3748] bridge_slave_1: left promiscuous mode [ 172.948967][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.957304][ T3748] bridge_slave_0: left allmulticast mode [ 172.963042][ T3748] bridge_slave_0: left promiscuous mode [ 172.969193][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.058999][ T3748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.069273][ T3748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.078942][ T3748] bond0 (unregistering): Released all slaves [ 173.088009][ T3748] bond1 (unregistering): (slave veth7): Releasing active interface [ 173.097617][ T3748] bond1 (unregistering): (slave bond2): Releasing active interface [ 173.105960][ T3748] bond1 (unregistering): Released all slaves [ 173.115454][ T3748] bond2 (unregistering): Released all slaves [ 173.151814][ T3748] hsr_slave_0: left promiscuous mode [ 173.157731][ T3748] hsr_slave_1: left promiscuous mode [ 173.163493][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.171221][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.179140][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.186624][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.198974][ T3748] veth1_macvtap: left promiscuous mode [ 173.204568][ T3748] veth1_vlan: left promiscuous mode [ 173.210314][ T3748] veth0_vlan: left promiscuous mode [ 173.250905][ T28] audit: type=1400 audit(1779607574.064:2253): avc: denied { write } for pid=10874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.295824][ T28] audit: type=1400 audit(1779607574.104:2254): avc: denied { write } for pid=10885 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.372990][ T3023] 8021q: adding VLAN 0 to HW filter on device eth25 [ 173.461616][ T28] audit: type=1400 audit(1779607574.274:2255): avc: denied { write } for pid=10890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.494026][ T28] audit: type=1400 audit(1779607574.304:2256): avc: denied { write } for pid=10901 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.527764][ T3023] 8021q: adding VLAN 0 to HW filter on device eth26 [ 173.650031][ T3023] 8021q: adding VLAN 0 to HW filter on device eth27 [ 173.760012][ T3023] 8021q: adding VLAN 0 to HW filter on device eth28