last executing test programs: 2m28.278856346s ago: executing program 32 (id=528): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfc4, 0x2db0, 0xffefffff, 0x0, 0x7, "7f4638af000000000100170000379100000001"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 2m22.559076638s ago: executing program 33 (id=608): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x2, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m13.745405336s ago: executing program 34 (id=874): syz_emit_ethernet(0x86, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0xfffe, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m38.621472036s ago: executing program 35 (id=1324): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m35.484734152s ago: executing program 8 (id=1325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, r3, 0x25, 0x0, @val=@tracing={0x0, 0x5a7}}, 0x20) syz_emit_ethernet(0x12, &(0x7f0000000580)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x800}}}, 0x0) 1m35.383422075s ago: executing program 8 (id=1353): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r0 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1m35.320605116s ago: executing program 8 (id=1355): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x8, 0xc, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x7, 0x100]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x100fbff}]) 1m35.197519819s ago: executing program 36 (id=1357): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r0, &(0x7f0000001000)=""/4075, 0xfeb) 1m34.817688997s ago: executing program 8 (id=1365): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r1, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xfdef}, {0x0, 0xe00}], 0x10000000000000fb) 1m33.791504169s ago: executing program 8 (id=1370): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 1m33.791365119s ago: executing program 37 (id=1370): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 1m26.483203344s ago: executing program 9 (id=1434): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x1) creat(&(0x7f00000000c0)='./bus\x00', 0x107) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x44, &(0x7f0000000100)='trans=rdma,\xd6\xd2\x1e\x80\xc2W\xbe\xbf\x16S\x84j\xea1Z\x8e\xe9\xc7\x0ep*\xd9\x94Mk\xb9\xc6\x9e\xcf\xd7\x9eoc\xe2(\x03\xc3.{\x8aY\x17\xd0\xa3\xfe\xe3/\xc4\f\b2t\x1c4\x93/^\x91\xe8\xabK\x9e\x14j\xb3\x92\x13\x80\x96m\xc7\x96\"\xcb\xdc\xcc\xd8\x18\"\x9eT\x97Kh5i\x8f\xfc\xd8=\x8b\xe9\x1b\xce\xe4\xf5$\xf1sa,\x8f\xb6\x89\xcfZ\xa0\xae>Xs=\xadu\x9aQ\xe2z\xaf\x90\x90\x9b\x92\x9b\xeb\aQb#\xec}\xa79\xd7\xe6<6\xadL\xd8$\xd3\xa9\x1d\xd9W\x8a\xb9F\x982%g!\x8a\"@*\xb8\xc6\xddw\xefY\xefJ\x0e\xc5%S.\n\xde\x95l\xd9\x1cPp\xb3\xfe+rY\xc24\x99\x88\xe7\njs\xb2\x8f') 1m26.201416871s ago: executing program 9 (id=1436): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000056000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xdb) r0 = io_uring_setup(0x1a3c, &(0x7f0000000040)={0x0, 0x7c25, 0xc000, 0x80000b, 0x220}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = syz_io_uring_setup(0x4eb0, &(0x7f0000000380)={0x0, 0x51b7, 0x8, 0x3, 0x6, 0x0, r0}, &(0x7f0000000180), &(0x7f0000002c00), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0}], 0x1) io_setup(0x101, &(0x7f0000000340)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000280)=[{}, {}], 0x0, 0x0) 1m25.230569262s ago: executing program 9 (id=1440): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8800, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0x7fff]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 1m25.026571126s ago: executing program 9 (id=1442): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) 1m24.519452007s ago: executing program 9 (id=1447): socket$inet6_icmp(0xa, 0x2, 0x3a) unshare(0x6020400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1, &(0x7f00000006c0)=""/70, 0x46}, 0x12041) r1 = add_key(&(0x7f0000000500)='ceph\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="94567499399ec8e91b371c1235d861e21ce6c907a93a3342cbf0160c4251c9d00a3e4be1cf7283732f1b6069157d7fad8ee46de6d90462d64c5f60c61b255d89294a27be2d3dd73ed64a21d16e2e5bdcc72aba927be0f7f7e9bfd8c77d9f4ec4b70b4c9301352a4d8627f62b7bb84b285af1a1d5fd71c7eafa1f60e16069f0ed8422983c4157398144bdfc762d1b76b92f6c3049f2b084b7134523ac440950ba38d616e2c44673c0547e0e6ef88d47df82a993748b2a043078895c66d13380f710d5ec5dabd5aa879f7c010dfcab290b3bdc84dc629564437c742d65b6235988185ac2c169a48d8a67a5696885aa", 0xee, 0xffffffffffffffff) request_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='([\\,![/).\x00', r1) 1m23.89725641s ago: executing program 9 (id=1452): unshare(0x20000400) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m23.88055212s ago: executing program 38 (id=1452): unshare(0x20000400) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x2, 0xfffffffffffffffd, 0x9, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x56d92c8a, 0x0, 0xfffffffffffffffc, 0x10000, 0x10}, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m23.022318018s ago: executing program 1 (id=1459): syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x208853, &(0x7f0000000080)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000140)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m22.378423172s ago: executing program 1 (id=1464): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x5, 0x2bb}) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m22.275267685s ago: executing program 1 (id=1465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x8084) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) recvmmsg(r1, &(0x7f00000085c0)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x100, 0x0) 1m22.082945349s ago: executing program 1 (id=1466): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d682000000000000000000000001", [0x7]}) unlink(&(0x7f0000000100)='./file1\x00') 1m21.55404802s ago: executing program 1 (id=1472): socket$inet6_icmp(0xa, 0x2, 0x3a) unshare(0x6020400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1, &(0x7f00000006c0)=""/70, 0x46}, 0x12041) r1 = add_key(&(0x7f0000000500)='ceph\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="94567499399ec8e91b371c1235d861e21ce6c907a93a3342cbf0160c4251c9d00a3e4be1cf7283732f1b6069157d7fad8ee46de6d90462d64c5f60c61b255d89294a27be2d3dd73ed64a21d16e2e5bdcc72aba927be0f7f7e9bfd8c77d9f4ec4b70b4c9301352a4d8627f62b7bb84b285af1a1d5fd71c7eafa1f60e16069f0ed8422983c4157398144bdfc762d1b76b92f6c3049f2b084b7134523ac440950ba38d616e2c44673c0547e0e6ef88d47df82a993748b2a043078895c66d13380f710d5ec5dabd5aa879f7c010dfcab290b3bdc84dc629564437c742d65b6235988185ac2c169a48d8a67a5696885aa", 0xee, 0xffffffffffffffff) request_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='([\\,![/).\x00', r1) 1m21.110807849s ago: executing program 1 (id=1477): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x33, 0x0, 0x0) 1m21.0620645s ago: executing program 39 (id=1477): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x33, 0x0, 0x0) 23.163593315s ago: executing program 2 (id=2228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x7fffffff}, &(0x7f00000002c0)=0x8) 23.036625968s ago: executing program 2 (id=2220): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {}, {@quota}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodiscard}, {}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000001080)={0xa0c8, 0x5, 0x75dd, 0x30a, 0x5}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x8000000000000000, 0x80000008, 0x1, 0x8}) 22.741590415s ago: executing program 2 (id=2225): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x80000000000006}, 0x0, 0x5bd20da1, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 22.397121522s ago: executing program 2 (id=2235): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 22.366702732s ago: executing program 2 (id=2236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}}, 0x40050) close_range(r0, r0, 0x0) 21.813087515s ago: executing program 2 (id=2241): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 21.788028035s ago: executing program 40 (id=2241): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 17.465023827s ago: executing program 4 (id=2294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xfff1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xbd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c044) 17.264239431s ago: executing program 4 (id=2297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f000000a680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="df5b", 0x2}, {&(0x7f0000000500)="f9", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000600)='YU', 0x2}, {&(0x7f0000000640)='!', 0x1}, {&(0x7f0000000680)="23ae", 0x2}, {&(0x7f0000000700)="a218", 0x2}, {&(0x7f0000000780)="b624", 0x2}, {&(0x7f0000001180)="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", 0xe81}], 0x6}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003500)="16fc", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000003c00)="dc", 0x1}, {&(0x7f0000003d00)="55e1", 0x2}, {&(0x7f0000003e00)="da", 0x1}, {&(0x7f0000003f00)="a2", 0x1}, {&(0x7f0000003f40)='^', 0x1}, {&(0x7f0000004000)="05", 0x1}, {&(0x7f0000004040)="a7", 0x1}], 0x7}}], 0x4, 0x4044040) 17.217482973s ago: executing program 4 (id=2298): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 16.641049355s ago: executing program 4 (id=2311): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d682000000000000000000000001", [0x7]}) unlink(&(0x7f0000000100)='./file1\x00') 16.282134742s ago: executing program 4 (id=2316): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x6b) pread64(r1, &(0x7f00000000c0)=""/23, 0x17, 0x1) 15.765276904s ago: executing program 4 (id=2327): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944ba9d7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfc4, 0x2db0, 0xffefffff, 0x0, 0x7, "7f4638af000000000100170000379100000001"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 15.739387684s ago: executing program 41 (id=2327): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944ba9d7f"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xfc4, 0x2db0, 0xffefffff, 0x0, 0x7, "7f4638af000000000100170000379100000001"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 9.523722107s ago: executing program 0 (id=2410): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents(r2, &(0x7f0000000680)=""/155, 0x1a) 9.487314628s ago: executing program 0 (id=2411): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 9.465020218s ago: executing program 0 (id=2412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8b24, 0x1931, 0x20000000, 0x8, 0x4}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4080) 9.384365869s ago: executing program 0 (id=2414): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f00000002c0)={0x8}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000200)={[{@grpquota}]}, 0x9, 0xbac, &(0x7f00000017c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 9.239684543s ago: executing program 0 (id=2417): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x8}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.930853009s ago: executing program 0 (id=2426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000008c0)=@ccm_128={{0x303}, "6469f7c597100ce3", "f4bd0cdeaba1cdc4fa4a379ef53617a6", "eba724b2", "d76c279862b39995"}, 0x28) sendto$inet6(r0, &(0x7f0000000ac0)="81", 0x1, 0xc000, 0x0, 0x0) write(r0, &(0x7f0000000900)="ff96", 0x2) 8.89508595s ago: executing program 42 (id=2426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000008c0)=@ccm_128={{0x303}, "6469f7c597100ce3", "f4bd0cdeaba1cdc4fa4a379ef53617a6", "eba724b2", "d76c279862b39995"}, 0x28) sendto$inet6(r0, &(0x7f0000000ac0)="81", 0x1, 0xc000, 0x0, 0x0) write(r0, &(0x7f0000000900)="ff96", 0x2) 7.473578221s ago: executing program 3 (id=2441): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x75e, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=""/6, 0x6}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/146, 0x92}, 0x8}], 0x2, 0x89dae3db0a2be9c3, 0x0) 6.487432801s ago: executing program 3 (id=2451): madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810754, &(0x7f00000001c0), 0x4, 0x4b1, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 5.755131317s ago: executing program 3 (id=2455): recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001780)=""/4098, 0x1002}, {&(0x7f0000000500)=""/40, 0x28}], 0x2}, 0x2000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 5.560125762s ago: executing program 3 (id=2457): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x110) 5.479672033s ago: executing program 3 (id=2458): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x1f4, 0xe, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 5.340695526s ago: executing program 5 (id=2460): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.196452049s ago: executing program 5 (id=2461): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x192, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(r1, r2, 0xfffffffffffffc01, 0x0) 4.290570189s ago: executing program 5 (id=2467): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 4.129588552s ago: executing program 3 (id=2468): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x60, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x110) 4.129476342s ago: executing program 43 (id=2468): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={0x60, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x110) 4.024862114s ago: executing program 6 (id=2471): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$eJzs3U9rJEUUAPDXk57OhICZswj2YQ9eDJu9ejCLRBBzUubgH9BFs7BsBiGBgVVx2JOfwIMHv4c374IXv4HgwaM3FwmUdPf8zUxmdlcnK+H3u6R49V5V9XQ1Ewhd+fSV/ksRcf/x179Fp5NF6zAO40kW3WjFWBoJAOBGeJJS/Plc3+95a1NrAgA2a+b7v31FyvZi6M1NLwsA2KD3P/jw3bvHx0fvlWUnov/toJdF87Ppv3s/HsRpnMTt2IuL6d8CUmrab79zfBR5WenGrf5w0Ksq+5/8Mkktoq4/iL3oLq8/KBsz9cNBXv/mkWURDw6rhdzpjFY8V1/1H91ZUh+9Il4bl1Tz78de/PpZfBGn8Xk9ynT+b4oo30rf/fXVR1VyVZ8NB73tOm8qbV3nfQEAAAAAAAAAAAAAAAAAAAAA4GbbLye6catfhZrzd3pbF3X//lx/fb5Oq+5v6rOIom5cOh9omOKH8fk6t8uyTFmTPznfZyePl/PIX9iFAwAAAAAAAAAAAAAAAAAAwP/I+aMvH947PT05+08ao5f8J6/1P+84hzORV2N18vYzzRVbo/RqrZdzDn7+uD+JVBdxsrOQs7YxaJcRq9bcXojsVOtZP/LfKaWUZREzXTv1XPnTlI8b7WdJvqKxuzqn+oB/+n739Yf3slgzYGd8436c7Sri7PzRpXsa2epJL+YiaW5L5Gu2erFi5GK0Y57m8yl2/+VD9MbvzWSjSLZmY7fHje70KYirtl9n3b2Yf1IAAAAAAAAAAAAAAAAAAIBrNn3pd0nn45WlrY0tCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu2fT//08bsRC51BjGH3Xx8pyU0nASKeLs/EVfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADffPwEAAP//NZhh/A==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) 3.914449557s ago: executing program 5 (id=2472): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 3.877211857s ago: executing program 7 (id=2473): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.795330979s ago: executing program 6 (id=2474): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002fb}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x3c, 0x0, 0x0) 779.259023ms ago: executing program 6 (id=2475): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 615.228296ms ago: executing program 6 (id=2476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 523.834658ms ago: executing program 6 (id=2477): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x20, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 496.57393ms ago: executing program 5 (id=2478): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 462.814ms ago: executing program 7 (id=2479): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000042, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x4, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}}, 0x0) 419.700981ms ago: executing program 7 (id=2480): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) 365.530612ms ago: executing program 5 (id=2481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) 309.693253ms ago: executing program 7 (id=2482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 290.039194ms ago: executing program 7 (id=2483): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r0, 0x8924, &(0x7f0000000080)="963a") 4.47975ms ago: executing program 7 (id=2484): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x1000}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, [0x0, 0x0, 0x1fe0000ff], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2c8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/241, 0xf1}, 0x5}, {{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000bc0)=""/95}, {&(0x7f0000000c40)=""/96}, {&(0x7f0000000cc0)=""/177}, {&(0x7f0000000d80)=""/9}, {&(0x7f0000000dc0)=""/18}], 0x0, &(0x7f0000000e80)=""/183}, 0x3}], 0xdf, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 6 (id=2485): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0xfffffffe, 0xdd4}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) kernel console output (not intermixed with test programs): tadv0: Adding interface: batadv_slave_1 [ 149.272669][ T3758] IPVS: stop unused estimator thread 0... [ 149.287072][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.375788][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.407945][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 149.526745][ T8547] hsr_slave_0: entered promiscuous mode [ 149.550596][ T8547] hsr_slave_1: entered promiscuous mode [ 149.569213][ T8547] debugfs: 'hsr0' already exists in 'hsr' [ 149.590170][ T8547] Cannot create hsr debugfs directory [ 149.663710][ T8388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.693773][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.732364][ T8388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.753327][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 149.775927][ T8388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.793452][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 149.820250][ T8388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.842178][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 149.996176][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.042125][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.067317][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.076406][ T8406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.102132][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.112312][ T8654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.189410][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 150.411787][ T8547] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.439838][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.463562][ T8547] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.497606][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.520244][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.543597][ T8547] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.571714][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.595291][ T8547] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.629452][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.820594][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.835650][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.847793][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.855351][ T8654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.911314][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.919918][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.944728][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 150.944751][ T28] audit: type=1400 audit(1782873307.208:825): avc: denied { write } for pid=8701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.006530][ T8388] veth0_vlan: entered promiscuous mode [ 151.024255][ T8732] loop4: detected capacity change from 0 to 1024 [ 151.041277][ T8388] veth1_vlan: entered promiscuous mode [ 151.056625][ T8547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.069046][ T8547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.080891][ T28] audit: type=1400 audit(1782873307.338:826): avc: denied { write } for pid=8739 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.114851][ T8732] EXT4-fs: Ignoring removed orlov option [ 151.140504][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 151.173569][ T8732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.188994][ T8388] veth0_macvtap: entered promiscuous mode [ 151.202858][ T28] audit: type=1400 audit(1782873307.468:827): avc: denied { write } for pid=8731 comm="syz.4.1504" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.264737][ T8388] veth1_macvtap: entered promiscuous mode [ 151.292463][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.308618][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.322553][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.347729][ T3752] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.367377][ T3752] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.387402][ T3752] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.420645][ T3752] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.531189][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'. [ 151.621722][ T28] audit: type=1400 audit(1782873307.888:828): avc: denied { write } for pid=8755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.694377][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.726531][ T28] audit: type=1400 audit(1782873307.988:829): avc: denied { write } for pid=8786 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.802872][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 151.817903][ T8790] loop7: detected capacity change from 0 to 1024 [ 151.872341][ T8790] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.1513: bad orphan inode 131072 [ 151.906538][ T8790] loop7: lost filesystem error report for type 5 error -117 [ 151.908687][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 151.928678][ C0] EXT4-fs (loop7): initial error at time 1782873308: ext4_orphan_get:1425 [ 151.939119][ C0] EXT4-fs (loop7): last error at time 1782873308: ext4_orphan_get:1425 [ 151.947757][ T8790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.002885][ T8803] xt_hashlimit: size too large, truncated to 1048576 [ 152.123899][ T28] audit: type=1400 audit(1782873308.388:830): avc: denied { write } for pid=8794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.190235][ T28] audit: type=1400 audit(1782873308.448:831): avc: denied { write } for pid=8818 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.384630][ T28] audit: type=1400 audit(1782873308.648:832): avc: denied { write } for pid=8820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.452608][ T28] audit: type=1400 audit(1782873308.718:833): avc: denied { write } for pid=8831 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.530307][ T8547] veth0_vlan: entered promiscuous mode [ 152.568011][ T6003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.590071][ T8547] veth1_vlan: entered promiscuous mode [ 152.687904][ T8547] veth0_macvtap: entered promiscuous mode [ 152.748130][ T8547] veth1_macvtap: entered promiscuous mode [ 152.805715][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.817014][ T8848] loop4: detected capacity change from 0 to 128 [ 152.842134][ T8848] bio_check_eod: 18 callbacks suppressed [ 152.842154][ T8848] syz.4.1518: attempt to access beyond end of device [ 152.842154][ T8848] loop4: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 152.882083][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.914747][ T3756] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.929853][ T28] audit: type=1400 audit(1782873309.198:834): avc: denied { write } for pid=8833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.938228][ T3756] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.982770][ T3770] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.058601][ T3770] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.138187][ T8865] loop7: detected capacity change from 0 to 2048 [ 153.264219][ T8865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.311580][ T8865] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.493149][ T6003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.718202][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.821663][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.272334][ T8975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1535'. [ 155.076364][ T8982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1536'. [ 155.124584][ T8982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.474657][ T8903] Set syz1 is full, maxelem 65536 reached [ 155.772997][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 155.963277][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 155.963295][ T28] audit: type=1400 audit(1782873312.228:854): avc: denied { write } for pid=9139 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.171498][ T9147] loop3: detected capacity change from 0 to 128 [ 156.281990][ T28] audit: type=1400 audit(1782873312.548:855): avc: denied { write } for pid=9146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.407257][ T28] audit: type=1400 audit(1782873312.668:856): avc: denied { write } for pid=9166 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.495344][ T28] audit: type=1400 audit(1782873312.688:857): avc: denied { setattr } for pid=9167 comm="syz.5.1555" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.566328][ T28] audit: type=1400 audit(1782873312.748:858): avc: denied { unmount } for pid=8547 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 156.637586][ T28] audit: type=1400 audit(1782873312.788:859): avc: denied { ioctl } for pid=9173 comm="syz.5.1557" path="/9/file0" dev="tmpfs" ino=64 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 156.825682][ T28] audit: type=1400 audit(1782873313.088:860): avc: denied { write } for pid=9174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.929389][ T28] audit: type=1400 audit(1782873313.188:861): avc: denied { write } for pid=9203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.991587][ T28] audit: type=1400 audit(1782873313.218:862): avc: denied { kexec_image_load } for pid=9199 comm="syz.2.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.069994][ T28] audit: type=1400 audit(1782873313.338:863): avc: denied { remount } for pid=9212 comm="syz.3.1568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.323616][ T8427] bridge_slave_1: left allmulticast mode [ 157.331298][ T8427] bridge_slave_1: left promiscuous mode [ 157.348624][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.391690][ T8427] bridge_slave_0: left allmulticast mode [ 157.406685][ T8427] bridge_slave_0: left promiscuous mode [ 157.423633][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.576202][ T8427] bond1 (unregistering): (slave gretap1): Releasing active interface [ 157.664477][ T8427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.680423][ T8427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.697226][ T8427] bond0 (unregistering): Released all slaves [ 157.718175][ T8427] bond1 (unregistering): Released all slaves [ 157.735601][ T8427] bond2 (unregistering): Released all slaves [ 157.771888][ T9260] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 157.807229][ T9205] kexec: Could not allocate control_code_buffer [ 157.829729][ T9258] vlan0: entered allmulticast mode [ 157.837656][ T9262] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 157.837693][ T9262] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 157.849318][ T9258] bond0: entered allmulticast mode [ 157.849345][ T9258] bond_slave_0: entered allmulticast mode [ 157.849366][ T9258] bond_slave_1: entered allmulticast mode [ 157.851004][ T9258] bridge0: port 3(vlan0) entered blocking state [ 157.851043][ T9258] bridge0: port 3(vlan0) entered disabled state [ 157.851789][ T9258] vlan0: entered promiscuous mode [ 157.851809][ T9258] bond0: entered promiscuous mode [ 157.851999][ T9258] bond_slave_0: entered promiscuous mode [ 157.852076][ T9258] bond_slave_1: entered promiscuous mode [ 157.852781][ T9258] bridge0: port 3(vlan0) entered blocking state [ 157.852816][ T9258] bridge0: port 3(vlan0) entered forwarding state [ 157.967139][ T9262] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 157.967169][ T9262] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 157.996303][ T8427] hsr_slave_0: left promiscuous mode [ 158.072078][ T8427] hsr_slave_1: left promiscuous mode [ 158.094447][ T8427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.131532][ T9283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.141498][ T9283] IPv6: NLM_F_CREATE should be set when creating new route [ 158.149980][ T9283] IPv6: NLM_F_CREATE should be set when creating new route [ 158.158720][ T9283] IPv6: NLM_F_CREATE should be set when creating new route [ 158.181409][ T8427] batadv0: mtu less than device minimum [ 158.191403][ T8427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.205755][ T8427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.218541][ T8427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.230561][ T8427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.244515][ T8427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.257877][ T8427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 158.279785][ T9283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.326684][ T8427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.380731][ T8427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.408625][ T9294] loop7: detected capacity change from 0 to 512 [ 158.429188][ T8427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.463300][ T8427] batman_adv: batadv0: Interface deactivated: dummy0 [ 158.467474][ T9294] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.470734][ T8427] batman_adv: batadv0: Removing interface: dummy0 [ 158.517713][ T8427] veth1_macvtap: left promiscuous mode [ 158.540976][ T8427] veth0_macvtap: left promiscuous mode [ 158.542524][ T9294] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1585: corrupted in-inode xattr: invalid ea_ino [ 158.552572][ T8427] veth1_vlan: left promiscuous mode [ 158.570822][ T9294] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 158.577046][ T9294] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1585: couldn't read orphan inode 15 (err -117) [ 158.587945][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 158.588126][ C1] EXT4-fs (loop7): initial error at time 1782873314: ext4_iget_extra_inode:5180: inode 15 [ 158.588267][ C1] EXT4-fs (loop7): last error at time 1782873314: ext4_iget_extra_inode:5180: inode 15 [ 158.663351][ T8427] veth0_vlan: left promiscuous mode [ 158.700425][ T9294] loop7: lost filesystem error report for type 5 error -117 [ 158.726313][ T9294] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.887250][ T8427] team0 (unregistering): Port device team_slave_1 removed [ 158.901984][ T6003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.915769][ T8427] team0 (unregistering): Port device team_slave_0 removed [ 159.029703][ T9304] syzkaller0: entered promiscuous mode [ 159.043395][ T9304] syzkaller0: entered allmulticast mode [ 159.136948][ T9314] loop2: detected capacity change from 0 to 512 [ 159.172516][ T9314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.238765][ T9314] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.337040][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.390086][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 159.537679][ T9353] netlink: 'syz.2.1598': attribute type 30 has an invalid length. [ 159.730084][ T9360] loop5: detected capacity change from 0 to 512 [ 159.790124][ T9360] EXT4-fs error (device loop5): ext4_quota_enable:7228: comm syz.5.1599: Bad quota inum: 1, type: 2 [ 159.812204][ T9360] loop5: lost filesystem error report for type 5 error -117 [ 159.812421][ T9360] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 159.820887][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 159.820915][ C0] EXT4-fs (loop5): initial error at time 1782873316: ext4_quota_enable:7228 [ 159.820945][ C0] EXT4-fs (loop5): last error at time 1782873316: ext4_quota_enable:7228 [ 159.875256][ T9376] loop7: detected capacity change from 0 to 256 [ 159.884493][ T9376] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.941501][ T9360] EXT4-fs (loop5): mount failed [ 160.252865][ T9404] loop3: detected capacity change from 0 to 512 [ 160.342571][ T9404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.480873][ T9431] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.673844][ T7911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.698328][ T9399] loop2: detected capacity change from 0 to 512 [ 160.827974][ T9399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.956726][ T9399] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.1608: corrupted in-inode xattr: invalid ea_ino [ 160.984326][ T28] kauditd_printk_skb: 187 callbacks suppressed [ 160.984343][ T28] audit: type=1326 audit(1782873317.248:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ef622e68e code=0x7ffc0000 [ 161.011175][ T9399] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.028391][ T9399] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1608: couldn't read orphan inode 15 (err -117) [ 161.028721][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 161.029098][ C0] EXT4-fs (loop2): initial error at time 1782873317: ext4_iget_extra_inode:5180: inode 15 [ 161.029620][ C0] EXT4-fs (loop2): last error at time 1782873317: ext4_iget_extra_inode:5180: inode 15 [ 161.098108][ T9399] loop2: lost filesystem error report for type 5 error -117 [ 161.136230][ T9399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.148879][ T28] audit: type=1326 audit(1782873317.298:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ef622e68e code=0x7ffc0000 [ 161.218436][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.301825][ T28] audit: type=1326 audit(1782873317.298:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ef622e68e code=0x7ffc0000 [ 161.413900][ T28] audit: type=1326 audit(1782873317.298:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ef622e68e code=0x7ffc0000 [ 161.539957][ T28] audit: type=1326 audit(1782873317.318:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ef622e68e code=0x7ffc0000 [ 161.644411][ T28] audit: type=1326 audit(1782873317.318:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5ef622e68e code=0x7ffc0000 [ 161.723196][ T9487] loop3: detected capacity change from 0 to 1024 [ 161.742813][ T28] audit: type=1326 audit(1782873317.318:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef626de59 code=0x7ffc0000 [ 161.816185][ T9487] EXT4-fs: Ignoring removed bh option [ 161.924979][ T28] audit: type=1326 audit(1782873317.318:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef626de59 code=0x7ffc0000 [ 161.964170][ T9487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.019266][ T28] audit: type=1326 audit(1782873317.498:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ef626de59 code=0x7ffc0000 [ 162.054801][ T28] audit: type=1326 audit(1782873317.498:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9436 comm="syz.5.1619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ef626de59 code=0x7ffc0000 [ 162.237859][ T7911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.458385][ T9548] loop2: detected capacity change from 0 to 1024 [ 162.477811][ T9548] EXT4-fs: Ignoring removed oldalloc option [ 162.514340][ T9548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.547290][ T9548] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.654035][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.866266][ T9539] bridge0: port 4(syz_tun) entered blocking state [ 162.875399][ T9539] bridge0: port 4(syz_tun) entered disabled state [ 162.885168][ T9539] syz_tun: entered allmulticast mode [ 162.918467][ T9539] syz_tun: entered promiscuous mode [ 162.956232][ T9539] bridge0: port 4(syz_tun) entered blocking state [ 162.964712][ T9539] bridge0: port 4(syz_tun) entered forwarding state [ 163.022880][ T9573] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.175435][ T9545] net_ratelimit: 33 callbacks suppressed [ 163.175453][ T9545] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.271597][ T9656] loop2: detected capacity change from 0 to 1024 [ 164.304214][ T9656] EXT4-fs: Ignoring removed bh option [ 164.331925][ T9656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.354064][ T9663] netlink: 'syz.5.1677': attribute type 8 has an invalid length. [ 164.362169][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1677'. [ 164.375879][ T9663] veth1_to_team: entered promiscuous mode [ 164.384833][ T9663] gretap0: entered promiscuous mode [ 164.394486][ T9656] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.424806][ T9663] veth1_to_team: left promiscuous mode [ 164.436172][ T9656] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1676: lblock 3 mapped to illegal pblock 3 (length 3) [ 164.455336][ T9656] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 164.469389][ T9663] gretap0: left promiscuous mode [ 164.482021][ T9656] EXT4-fs (loop2): This should not happen!! Data will be lost [ 164.482021][ T9656] [ 164.515258][ T9666] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1676: lblock 0 mapped to illegal pblock 0 (length 3) [ 164.554773][ T9666] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.1676: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 164.582083][ T9656] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1676: lblock 3 mapped to illegal pblock 3 (length 3) [ 164.662437][ T9656] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 4: comm syz.2.1676: lblock 4 mapped to illegal pblock 4 (length 1) [ 164.692266][ T9656] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 5: comm syz.2.1676: lblock 5 mapped to illegal pblock 5 (length 1) [ 164.714535][ T9656] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1676: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.784457][ T9656] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1676: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.810294][ T9656] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1676: lblock 3 mapped to illegal pblock 3 (length 1) [ 164.851819][ T9656] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #15: block 3: comm syz.2.1676: lblock 3 mapped to illegal pblock 3 (length 1) [ 165.233260][ T8406] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 165.303992][ T8406] EXT4-fs (loop2): This should not happen!! Data will be lost [ 165.303992][ T8406] [ 165.332258][ T8388] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 165.376079][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.398800][ T9700] loop5: detected capacity change from 0 to 512 [ 165.472065][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1693'. [ 165.509768][ T9734] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1693'. [ 165.534629][ T9700] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.598870][ T9700] EXT4-fs (loop5): 1 truncate cleaned up [ 165.661812][ T9700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.737696][ T8547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.856949][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1700'. [ 166.185255][ T9787] loop4: detected capacity change from 0 to 512 [ 166.203513][ T9789] loop7: detected capacity change from 0 to 256 [ 166.228067][ T9787] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 166.240011][ T9787] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.1707: invalid block [ 166.259048][ T9787] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 166.259618][ T9787] EXT4-fs (loop4): Remounting filesystem read-only [ 166.272875][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 166.273210][ C1] EXT4-fs (loop4): initial error at time 1782873322: ext4_get_branch:178: inode 13: block 1024 [ 166.273241][ C1] EXT4-fs (loop4): last error at time 1782873322: ext4_get_branch:178: inode 13: block 1024 [ 166.282218][ T9799] capability: warning: `syz.7.1710' uses deprecated v2 capabilities in a way that may be insecure [ 166.307536][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 166.307589][ T28] audit: type=1400 audit(1782873322.578:1086): avc: denied { getattr } for pid=9792 comm="syz.2.1709" path="socket:[24941]" dev="sockfs" ino=24941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 166.328061][ T9787] EXT4-fs (loop4): 1 truncate cleaned up [ 166.410286][ T9787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.453578][ T28] audit: type=1400 audit(1782873322.678:1087): avc: denied { read } for pid=9801 comm="syz.7.1711" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.504808][ T28] audit: type=1400 audit(1782873322.678:1088): avc: denied { open } for pid=9801 comm="syz.7.1711" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.545050][ T28] audit: type=1400 audit(1782873322.698:1089): avc: denied { write } for pid=9776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.576145][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.658515][ T28] audit: type=1400 audit(1782873322.858:1090): avc: denied { write } for pid=9807 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.823680][ T9826] loop4: detected capacity change from 0 to 1024 [ 166.844997][ T9826] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.905982][ T9826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.941880][ T28] audit: type=1400 audit(1782873323.208:1091): avc: denied { write } for pid=9815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.010279][ T9835] loop2: detected capacity change from 0 to 128 [ 167.046425][ T28] audit: type=1400 audit(1782873323.268:1092): avc: denied { write } for pid=9825 comm="syz.4.1716" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.074186][ T28] audit: type=1400 audit(1782873323.288:1093): avc: denied { write } for pid=9834 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.134416][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.270039][ T28] audit: type=1400 audit(1782873323.538:1094): avc: denied { write } for pid=9840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.357105][ T28] audit: type=1400 audit(1782873323.618:1095): avc: denied { write } for pid=9856 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.064771][ T9894] bridge0: port 4(syz_tun) entered disabled state [ 168.096188][ T9894] bridge0: port 3(vlan0) entered disabled state [ 168.103583][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.112846][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.212023][ T9900] loop5: detected capacity change from 0 to 512 [ 168.242881][ T9900] EXT4-fs: Ignoring removed i_version option [ 168.268561][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.280408][ T9900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.296598][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.345570][ T9900] EXT4-fs (loop5): 1 truncate cleaned up [ 168.359661][ T9900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.477023][ T8427] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.528777][ T8427] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.560786][ T3765] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.587361][ T3765] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.623099][ T8547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.000813][ T9936] gretap1: entered promiscuous mode [ 169.041903][ T1041] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.052186][ T1041] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.125308][ T9920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.174948][ T9920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.605325][ T9952] loop3: detected capacity change from 0 to 512 [ 169.629679][ T9952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 169.656184][ T9952] EXT4-fs (loop3): 1 truncate cleaned up [ 169.669757][ T9952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.729370][ T7459] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 169.775680][ T9958] loop2: detected capacity change from 0 to 4096 [ 169.777213][ T7459] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.801625][ T9958] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 170.024784][ T7911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.754526][T10005] loop2: detected capacity change from 0 to 8192 [ 170.813578][T10013] loop7: detected capacity change from 0 to 128 [ 170.865788][T10013] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.906020][T10013] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.933023][T10013] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.064237][T10022] netlink: 6760 bytes leftover after parsing attributes in process `syz.7.1775'. [ 171.126137][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1776'. [ 171.177311][T10024] ip6erspan0: entered promiscuous mode [ 171.371819][T10036] loop3: detected capacity change from 0 to 512 [ 171.402237][T10036] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1783: inode has both inline data and extents flags [ 171.418802][T10036] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.419486][T10036] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1783: couldn't read orphan inode 15 (err -117) [ 171.430130][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 171.430157][ C0] EXT4-fs (loop3): initial error at time 1782873327: ext4_orphan_get:1399: inode 15 [ 171.430196][ C0] EXT4-fs (loop3): last error at time 1782873327: ext4_orphan_get:1399: inode 15 [ 171.476176][T10036] loop3: lost filesystem error report for type 5 error -117 [ 171.476753][T10036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.506129][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 171.506146][ T28] audit: type=1400 audit(1782873327.768:1102): avc: denied { write } for pid=10035 comm="syz.3.1783" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.710155][ T7911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.715093][T10049] loop2: detected capacity change from 0 to 512 [ 171.835258][T10049] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 171.856596][T10049] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 171.867324][T10070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1795'. [ 171.877167][T10049] System zones: 0-1, 15-15, 18-18, 34-34 [ 171.927148][T10049] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.961321][T10049] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 171.981254][T10072] loop4: detected capacity change from 0 to 1024 [ 171.982791][T10049] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.027113][T10049] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 172.056685][T10049] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1787: bad orphan inode 16 [ 172.084078][T10049] loop2: lost filesystem error report for type 5 error -117 [ 172.088681][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 172.106888][ C0] EXT4-fs (loop2): initial error at time 1782873328: ext4_orphan_get:1425 [ 172.116362][ C0] EXT4-fs (loop2): last error at time 1782873328: ext4_orphan_get:1425 [ 172.126858][T10049] ext4_test_bit(bit=15, block=18) = 1 [ 172.135137][T10049] is_bad_inode(inode)=0 [ 172.142183][T10049] NEXT_ORPHAN(inode)=0 [ 172.148532][T10072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.163688][T10049] max_ino=32 [ 172.168108][T10049] i_nlink=2 [ 172.214477][ T28] audit: type=1400 audit(1782873328.468:1103): avc: denied { write } for pid=10071 comm="syz.4.1796" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.238306][T10080] loop3: detected capacity change from 0 to 128 [ 172.241417][T10072] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.1796: Attempting to read directory block (623) that is past i_size (638464) [ 172.280605][T10080] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.294085][ T28] audit: type=1400 audit(1782873328.468:1104): avc: denied { write } for pid=10071 comm="syz.4.1796" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.301430][T10049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.331745][T10080] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.336586][T10080] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.355999][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.371422][ T28] audit: type=1400 audit(1782873328.478:1105): avc: denied { rename } for pid=10071 comm="syz.4.1796" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.394148][ T28] audit: type=1400 audit(1782873328.478:1106): avc: denied { rmdir } for pid=10071 comm="syz.4.1796" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.416878][ T28] audit: type=1400 audit(1782873328.638:1107): avc: denied { read } for pid=10048 comm="syz.2.1787" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 172.461261][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.481121][T10086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1800'. [ 172.497966][T10086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1800'. [ 172.513258][T10086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1800'. [ 172.601289][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 172.632842][T10095] loop4: detected capacity change from 0 to 128 [ 172.634529][T10088] VFS: Mount too revealing [ 172.654371][T10095] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.680829][T10095] ext4 filesystem being mounted at /422/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.721744][ T28] audit: type=1400 audit(1782873328.938:1108): avc: denied { create } for pid=10092 comm="syz.5.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 172.813954][ T28] audit: type=1400 audit(1782873329.058:1109): avc: denied { write } for pid=10094 comm="syz.4.1803" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.901561][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.971871][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 173.137877][T10121] netlink: 'syz.7.1815': attribute type 1 has an invalid length. [ 173.174995][T10121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.236970][T10121] bond1: (slave veth3): Enslaving as an active interface with an up link [ 173.248011][T10126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'. [ 173.321535][T10126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'. [ 173.330949][ T8406] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.348591][ T8406] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.371711][T10131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=10131 comm=syz.5.1819 [ 173.403448][T10133] vti0: entered allmulticast mode [ 173.413422][T10135] loop4: detected capacity change from 0 to 512 [ 173.420779][ T8406] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.430349][ T8406] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.444684][T10135] EXT4-fs: Ignoring removed i_version option [ 173.457777][T10135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.480469][T10133] ip6gretap1: entered promiscuous mode [ 173.496835][T10135] EXT4-fs (loop4): 1 truncate cleaned up [ 173.512436][T10135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.568870][ T28] audit: type=1400 audit(1782873329.828:1110): avc: denied { write } for pid=10134 comm="syz.4.1820" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.766732][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.608359][T10192] EXT4-fs: Ignoring removed i_version option [ 174.643785][T10192] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.663028][T10192] EXT4-fs (loop2): 1 truncate cleaned up [ 174.671332][T10192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.106091][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.194857][ T8427] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.252593][ T8427] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.281399][ T8427] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.307470][ T8427] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.812848][T10253] netlink: 'syz.5.1855': attribute type 8 has an invalid length. [ 175.832594][T10253] veth1_to_team: entered promiscuous mode [ 175.846700][T10253] gretap0: entered promiscuous mode [ 176.330445][T10253] veth1_to_team: left promiscuous mode [ 176.396930][T10253] gretap0: left promiscuous mode [ 176.527700][T10326] set_capacity_and_notify: 2 callbacks suppressed [ 176.527775][T10326] loop4: detected capacity change from 0 to 256 [ 176.556979][T10326] FAT-fs (loop4): data area starts beyond volume (274 > 64) [ 176.579760][T10326] FAT-fs (loop4): Can't find a valid FAT filesystem [ 176.627177][T10329] __nla_validate_parse: 3 callbacks suppressed [ 176.627204][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1862'. [ 176.627950][T10326] xt_hashlimit: size too large, truncated to 1048576 [ 176.654294][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 176.654388][ T28] audit: type=1400 audit(1782873332.888:1113): avc: denied { write } for pid=10328 comm="syz.5.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 176.814847][T10344] netlink: 'syz.7.1868': attribute type 1 has an invalid length. [ 176.847483][T10344] bond2: entered promiscuous mode [ 176.853578][T10344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.881404][T10344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 176.916001][T10344] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 176.961006][T10344] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 176.995993][T10344] bond2: (slave ip6gre1): making interface the new active one [ 177.006282][T10344] ip6gre1: entered promiscuous mode [ 177.015330][T10344] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 177.050661][ T28] audit: type=1400 audit(1782873333.318:1114): avc: denied { setopt } for pid=10354 comm="syz.2.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.107324][ T28] audit: type=1400 audit(1782873333.318:1115): avc: denied { read } for pid=10354 comm="syz.2.1871" path="socket:[25915]" dev="sockfs" ino=25915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.562423][T10380] netlink: 'syz.3.1879': attribute type 8 has an invalid length. [ 177.584570][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1878'. [ 177.585291][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 177.619153][T10380] veth1_to_team: entered promiscuous mode [ 177.627118][T10380] gretap0: entered promiscuous mode [ 177.636068][T10380] veth1_to_team: left promiscuous mode [ 177.643500][T10380] gretap0: left promiscuous mode [ 177.757422][ T28] audit: type=1400 audit(1782873334.018:1116): avc: denied { write } for pid=10375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.869391][ T28] audit: type=1326 audit(1782873334.058:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.7.1881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e19ade59 code=0x7ffc0000 [ 177.956747][T10400] loop2: detected capacity change from 0 to 512 [ 177.975006][ T28] audit: type=1326 audit(1782873334.058:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.7.1881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e19ade59 code=0x7ffc0000 [ 177.984421][T10400] EXT4-fs: Ignoring removed bh option [ 178.054887][ T28] audit: type=1326 audit(1782873334.058:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.7.1881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e19ade59 code=0x7ffc0000 [ 178.100917][T10400] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 178.118753][ T28] audit: type=1326 audit(1782873334.058:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.7.1881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e19ade59 code=0x7ffc0000 [ 178.146699][ T28] audit: type=1326 audit(1782873334.058:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.7.1881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f49e19ade59 code=0x7ffc0000 [ 178.174903][ T28] audit: type=1326 audit(1782873334.058:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.7.1881" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e19ade59 code=0x7ffc0000 [ 178.197134][T10400] EXT4-fs (loop2): 1 truncate cleaned up [ 178.240300][T10400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.490549][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.621996][T10521] loop3: detected capacity change from 0 to 512 [ 179.644898][T10521] EXT4-fs: Ignoring removed i_version option [ 179.662083][T10521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.676867][T10521] EXT4-fs (loop3): 1 truncate cleaned up [ 179.690504][T10521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.821901][ T7911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.312893][T10558] loop3: detected capacity change from 0 to 1024 [ 180.328621][T10558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.494782][T10558] EXT4-fs warning (device loop3): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 180.537785][ T7911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.568160][T10576] loop4: detected capacity change from 0 to 128 [ 180.585141][T10576] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 180.606748][T10576] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.627395][T10576] ext2 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.662923][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.707630][T10586] netlink: 'syz.4.1927': attribute type 4 has an invalid length. [ 180.717179][T10586] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1927'. [ 180.848832][T10594] random: crng reseeded on system resumption [ 181.483707][T10419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.543267][T10618] loop7: detected capacity change from 0 to 512 [ 181.553675][T10618] EXT4-fs: Ignoring removed i_version option [ 181.561445][T10618] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 181.579017][T10618] EXT4-fs (loop7): 1 truncate cleaned up [ 181.589084][T10618] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.754441][ T6003] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.825993][T10636] bond2: entered allmulticast mode [ 181.832908][T10636] ip6gre1: entered allmulticast mode [ 181.842132][T10634] bond2: left allmulticast mode [ 181.850036][T10634] ip6gre1: left allmulticast mode [ 182.616647][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 182.616736][ T28] audit: type=1400 audit(1782873338.878:1184): avc: denied { getopt } for pid=10657 comm="syz.2.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 184.113458][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 184.125109][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 184.198000][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 184.211297][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 185.290540][T10719] loop4: detected capacity change from 0 to 256 [ 185.312607][ T28] audit: type=1400 audit(1782873341.578:1185): avc: denied { write } for pid=10718 comm="syz.4.1978" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 185.351052][T10719] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 185.367329][T10719] FAT-fs (loop4): Filesystem has been set read-only [ 185.381053][T10719] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 185.491622][ T6003] syz_tun (unregistering): left allmulticast mode [ 185.499216][ T6003] syz_tun (unregistering): left promiscuous mode [ 185.516726][ T6003] bridge0: port 4(syz_tun) entered disabled state [ 185.596169][T10730] netlink: 'syz.4.1984': attribute type 1 has an invalid length. [ 185.645737][T10730] bond1: entered promiscuous mode [ 185.661752][T10730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.721872][T10730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.754565][T10730] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 185.796462][T10730] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 185.833680][T10730] bond1: (slave ip6gre2): making interface the new active one [ 185.856240][T10730] ip6gre2: entered promiscuous mode [ 185.873750][T10730] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 186.029086][ T28] audit: type=1400 audit(1782873342.298:1186): avc: denied { ioctl } for pid=10749 comm="syz.3.1990" path="socket:[28290]" dev="sockfs" ino=28290 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.058759][ T3756] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.433658][ T8407] vlan0: left promiscuous mode [ 186.441840][ T8407] bond0: left promiscuous mode [ 186.452477][ T8407] bond_slave_0: left promiscuous mode [ 186.463347][ T8407] bond_slave_1: left promiscuous mode [ 186.478321][ T8407] bridge0: port 3(vlan0) entered disabled state [ 186.497320][ T8407] bridge_slave_1: left allmulticast mode [ 186.509701][ T8407] bridge_slave_1: left promiscuous mode [ 186.522614][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.543782][ T8407] bridge_slave_0: left allmulticast mode [ 186.551008][ T8407] bridge_slave_0: left promiscuous mode [ 186.556941][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.595939][ T8407] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 186.604393][ T8407] ip6gre1 (unregistering): left promiscuous mode [ 186.622922][ T8407] gretap0 (unregistering): left promiscuous mode [ 186.647789][ T8407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.657478][ T8407] bond_slave_0: left allmulticast mode [ 186.667534][ T8407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.680795][ T8407] bond_slave_1: left allmulticast mode [ 186.691469][ T8407] bond0 (unregistering): Released all slaves [ 186.703271][ T8407] bond1 (unregistering): (slave veth3): Releasing backup interface [ 186.713273][ T8407] bond1 (unregistering): Released all slaves [ 186.726012][ T8407] bond2 (unregistering): Released all slaves [ 186.794393][ T8407] veth1_to_team: left promiscuous mode [ 186.834219][ T8407] veth0_to_hsr: left promiscuous mode [ 186.857188][ T8407] hsr_slave_0: left promiscuous mode [ 186.865773][ T8407] hsr_slave_1: left promiscuous mode [ 186.878308][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.889045][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.940304][ T8407] team0 (unregistering): Port device team_slave_1 removed [ 186.955906][ T8407] team0 (unregistering): Port device team_slave_0 removed [ 187.057433][T10784] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 187.138560][ T28] audit: type=1400 audit(1782873343.398:1187): avc: denied { write } for pid=10789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.243632][ T28] audit: type=1400 audit(1782873343.498:1188): avc: denied { write } for pid=10802 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.277029][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 187.406863][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 187.415656][T10734] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.424723][T10734] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.442650][T10734] bridge_slave_0: entered allmulticast mode [ 187.451725][T10734] bridge_slave_0: entered promiscuous mode [ 187.492455][T10734] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.500683][T10734] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.508504][T10734] bridge_slave_1: entered allmulticast mode [ 187.516284][T10734] bridge_slave_1: entered promiscuous mode [ 187.565132][T10734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.597680][T10734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.717510][T10734] team0: Port device team_slave_0 added [ 187.723797][ T28] audit: type=1326 audit(1782873343.988:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.2.2007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f226680de59 code=0x0 [ 187.737537][T10734] team0: Port device team_slave_1 added [ 187.794600][ T28] audit: type=1400 audit(1782873344.058:1190): avc: denied { write } for pid=10820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.831327][T10734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.848988][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.875831][ T28] audit: type=1400 audit(1782873344.108:1191): avc: denied { write } for pid=10838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.898876][T10734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.926466][T10734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.935221][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.962853][T10734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.981208][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 188.055135][T10734] hsr_slave_0: entered promiscuous mode [ 188.055668][T10821] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2006'. [ 188.064233][T10734] hsr_slave_1: entered promiscuous mode [ 188.079328][ T3983] Bluetooth: hci0: command 0x1003 tx timeout [ 188.080832][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.229028][ T28] audit: type=1400 audit(1782873344.488:1192): avc: denied { write } for pid=10842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.265561][ T28] audit: type=1400 audit(1782873344.518:1193): avc: denied { ioctl } for pid=10853 comm="syz.5.2010" path="socket:[28665]" dev="sockfs" ino=28665 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.306686][ T28] audit: type=1400 audit(1782873344.568:1194): avc: denied { write } for pid=10863 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.357711][T10867] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 188.357711][T10867] program syz.3.2012 not setting count and/or reply_len properly [ 188.383542][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 188.439517][T10869] syzkaller0: entered promiscuous mode [ 188.445390][T10869] syzkaller0: entered allmulticast mode [ 188.661728][ T28] audit: type=1400 audit(1782873344.928:1195): avc: denied { write } for pid=10875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.726980][ T28] audit: type=1400 audit(1782873344.988:1196): avc: denied { write } for pid=10894 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.832438][T10734] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 188.858986][T10734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.887080][T10734] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 188.909634][T10903] loop4: detected capacity change from 0 to 512 [ 188.922927][T10734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.939523][T10734] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 188.951499][T10903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.978325][T10734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.987151][T10734] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 188.998307][T10734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.013950][ T28] audit: type=1400 audit(1782873345.278:1197): avc: denied { write } for pid=10902 comm="syz.4.2020" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.057680][ T28] audit: type=1400 audit(1782873345.318:1198): avc: denied { write } for pid=10902 comm="syz.4.2020" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 189.114346][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.193061][T10734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.222001][T10734] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.243242][ T8653] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.250482][ T8653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.274734][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.281908][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.631656][T10959] loop3: detected capacity change from 0 to 256 [ 189.646197][T10734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.901862][T10978] loop3: detected capacity change from 0 to 512 [ 189.944064][T10978] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 10: comm syz.3.2032: lblock 0 mapped to illegal pblock 10 (length 1) [ 189.998027][T10734] veth0_vlan: entered promiscuous mode [ 190.004683][T10978] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 190.007716][T10978] EXT4-fs (loop3): Remounting filesystem read-only [ 190.017197][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 190.017225][ C0] EXT4-fs (loop3): initial error at time 1782873346: ext4_map_blocks:791: inode 11: block 10 [ 190.017277][ C0] EXT4-fs (loop3): last error at time 1782873346: ext4_map_blocks:791: inode 11: block 10 [ 190.054035][T10978] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 190.067467][T10734] veth1_vlan: entered promiscuous mode [ 190.073266][T10978] EXT4-fs (loop3): 1 orphan inode deleted [ 190.092868][T10978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.122128][T10734] veth0_macvtap: entered promiscuous mode [ 190.128892][ T7911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.143386][T10734] veth1_macvtap: entered promiscuous mode [ 190.170096][T10734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.206053][T10734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.235235][ T8655] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.248185][ T8655] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.263409][ T8655] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.272348][ T8655] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.177652][T11038] loop7: detected capacity change from 0 to 256 [ 191.209967][ T11] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.222222][ T11] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.236191][T11038] msdos: Unknown parameter 'û›Q‹K.Ýa³¦¼h†;vÚKÁ¾Ê!ñ' [ 191.311968][T11042] fido_id[11042]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 194.341457][T11058] serio: Serial port ptm0 [ 194.750137][T11081] loop2: detected capacity change from 0 to 512 [ 194.782973][T11081] EXT4-fs: Ignoring removed oldalloc option [ 194.790522][T11081] EXT4-fs: Ignoring removed i_version option [ 194.830600][T11081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.855001][T11081] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.863089][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2073'. [ 194.872653][T11081] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2072: invalid block [ 194.887454][T11081] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.888646][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 194.905229][ C0] EXT4-fs (loop2): initial error at time 1782873351: ext4_get_branch:178: inode 11: block 4294967295 [ 194.916309][ C0] EXT4-fs (loop2): last error at time 1782873351: ext4_get_branch:178: inode 11: block 4294967295 [ 194.931161][T11081] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2072: invalid indirect mapped block 4294967295 (level 1) [ 194.948035][T11081] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.948311][T11081] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2072: invalid indirect mapped block 4294967295 (level 1) [ 194.973316][T11081] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.974739][T11081] EXT4-fs (loop2): 2 truncates cleaned up [ 194.999198][T11081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 195.056855][T11081] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 195.066488][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 195.066503][ T28] audit: type=1400 audit(1782873351.318:1207): avc: denied { remount } for pid=11080 comm="syz.2.2072" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 195.112436][T11081] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 195.132369][T11081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 195.155240][T11096] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 195.172036][T11081] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 195.217055][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.442976][T11091] loop5: detected capacity change from 0 to 32768 [ 195.519660][T11091] loop5: p1 p3 < > [ 195.826536][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 195.837805][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 196.216113][ T28] audit: type=1400 audit(1782873352.478:1208): avc: denied { bind } for pid=11132 comm="syz.2.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.216462][ T8655] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.535200][ T28] audit: type=1400 audit(1782873352.798:1209): avc: denied { bind } for pid=11124 comm="syz.5.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 196.915890][ T28] audit: type=1400 audit(1782873353.178:1210): avc: denied { ioctl } for pid=11150 comm="syz.4.2102" path="socket:[29305]" dev="sockfs" ino=29305 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 197.073731][ T28] audit: type=1400 audit(1782873353.338:1211): avc: denied { getopt } for pid=11156 comm="syz.5.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.335255][T11164] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2105'. [ 197.514387][T11172] loop7: detected capacity change from 0 to 512 [ 197.574337][T11172] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 197.597719][T11172] EXT4-fs (loop7): 1 truncate cleaned up [ 197.604785][T11172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.631749][ T28] audit: type=1400 audit(1782873353.888:1212): avc: denied { mounton } for pid=11171 comm="syz.7.2109" path="/10/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.687282][T11172] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.239471][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 198.246863][ T3983] Bluetooth: hci0: command 0x1003 tx timeout [ 198.570717][T11204] loop2: detected capacity change from 0 to 512 [ 198.588602][T11208] loop3: detected capacity change from 0 to 512 [ 198.605941][T11204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.651515][T11204] EXT4-fs (loop2): too many log groups per flexible block group [ 198.680879][T11204] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 198.710060][T11212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.728987][T11204] EXT4-fs (loop2): mount failed [ 198.749645][T11212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.816603][T11212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.853347][T11208] syz.3.2126: attempt to access beyond end of device [ 198.853347][T11208] loop3: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 198.870132][T11212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.899631][T11208] syz.3.2126: attempt to access beyond end of device [ 198.899631][T11208] loop3: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 198.923682][T11208] syz.3.2126: attempt to access beyond end of device [ 198.923682][T11208] loop3: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 198.958915][T11212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.968075][T11208] syz.3.2126: attempt to access beyond end of device [ 198.968075][T11208] loop3: rw=2049, sector=720, nr_sectors = 32 limit=512 [ 198.994312][T11212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.995922][T11221] xt_connbytes: Forcing CT accounting to be enabled [ 199.016148][T11208] syz.3.2126: attempt to access beyond end of device [ 199.016148][T11208] loop3: rw=2049, sector=784, nr_sectors = 32 limit=512 [ 199.033147][T11208] syz.3.2126: attempt to access beyond end of device [ 199.033147][T11208] loop3: rw=2049, sector=848, nr_sectors = 32 limit=512 [ 199.088155][T11208] syz.3.2126: attempt to access beyond end of device [ 199.088155][T11208] loop3: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 199.108102][T11208] syz.3.2126: attempt to access beyond end of device [ 199.108102][T11208] loop3: rw=2049, sector=976, nr_sectors = 32 limit=512 [ 199.148696][T11208] syz.3.2126: attempt to access beyond end of device [ 199.148696][T11208] loop3: rw=2049, sector=1040, nr_sectors = 32 limit=512 [ 199.188859][T11208] syz.3.2126: attempt to access beyond end of device [ 199.188859][T11208] loop3: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 199.666045][T11249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2142'. [ 199.683728][ T28] audit: type=1400 audit(1782873355.948:1213): avc: denied { read } for pid=11246 comm="syz.5.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.766567][T11252] loop2: detected capacity change from 0 to 4096 [ 199.799621][ T28] audit: type=1400 audit(1782873356.058:1214): avc: denied { map } for pid=11251 comm="syz.2.2143" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.491730][ T28] audit: type=1400 audit(1782873356.758:1215): avc: denied { setopt } for pid=11273 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.529011][ T28] audit: type=1400 audit(1782873356.758:1216): avc: denied { read } for pid=11273 comm="syz.4.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.809073][T11281] loop2: detected capacity change from 0 to 2048 [ 200.862358][T11281] loop2: p1 p4 [ 200.868074][T11281] loop2: p4 start 131072 is beyond EOD, truncated [ 201.018721][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 201.048092][T11286] vlan2: entered promiscuous mode [ 201.066544][T11286] bridge0: entered promiscuous mode [ 201.324055][T11297] 8021q: VLANs not supported on ip_vti0 [ 201.463161][ T8407] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 201.561249][T11302] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.687434][T11316] loop3: detected capacity change from 0 to 256 [ 201.702214][T11316] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.719444][ T28] audit: type=1400 audit(1782873357.988:1217): avc: denied { mount } for pid=11315 comm="syz.3.2168" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 201.772309][ T28] audit: type=1400 audit(1782873358.038:1218): avc: denied { unmount } for pid=7911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 201.783175][T11320] xt_hashlimit: size too large, truncated to 1048576 [ 201.985987][ T28] audit: type=1400 audit(1782873358.248:1219): avc: denied { mount } for pid=11327 comm="syz.5.2173" name="/" dev="mqueue" ino=20444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 202.171580][T11345] ALSA: seq fatal error: cannot create timer (-22) [ 202.200331][T11342] syzkaller0: entered promiscuous mode [ 202.213523][T11342] syzkaller0: entered allmulticast mode [ 202.570151][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 203.146843][T11392] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2195'. [ 203.264794][T11363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.319702][T11399] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 203.743991][T11416] option changes via remount are deprecated (pid=11415 comm=syz.5.2207) [ 203.865622][T11427] loop5: detected capacity change from 0 to 512 [ 203.889325][T11427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.922454][ T8547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.986285][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2213'. [ 204.076953][T11434] loop7: detected capacity change from 0 to 1024 [ 204.117234][T11434] EXT4-fs: Ignoring removed mblk_io_submit option [ 204.131815][T11434] EXT4-fs: Ignoring removed oldalloc option [ 204.136929][ T28] audit: type=1326 audit(1782873360.398:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.4.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379db2de59 code=0x7ffc0000 [ 204.197389][T11434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 204.228710][ T28] audit: type=1326 audit(1782873360.398:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.4.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379db2de59 code=0x7ffc0000 [ 204.231979][T11431] vlan2: entered promiscuous mode [ 204.259383][ T28] audit: type=1326 audit(1782873360.398:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.4.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379db2de59 code=0x7ffc0000 [ 204.259425][ T28] audit: type=1326 audit(1782873360.398:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.4.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379db2de59 code=0x7ffc0000 [ 204.259523][ T28] audit: type=1326 audit(1782873360.398:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz.4.2215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f379db2de59 code=0x7ffc0000 [ 204.259675][T11434] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.367054][T11431] bridge0: entered promiscuous mode [ 204.409620][T11434] netlink: 'syz.7.2214': attribute type 4 has an invalid length. [ 204.446076][T11443] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2216'. [ 204.618801][T10734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 204.647555][T11449] sctp: [Deprecated]: syz.2.2228 (pid 11449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.647555][T11449] Use struct sctp_sack_info instead [ 204.754527][T11459] loop2: detected capacity change from 0 to 1024 [ 204.768042][T11459] EXT4-fs: Ignoring removed orlov option [ 204.827216][T11459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.852751][T11466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.874163][T11466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.904408][T11466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.915059][T11466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.957167][T11466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.978928][T11466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.993309][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2224'. [ 205.077826][ T8388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.284416][T11486] bond1: entered allmulticast mode [ 205.290102][T11486] ip6gre2: entered allmulticast mode [ 205.303772][T11486] dvmrp8: entered allmulticast mode [ 205.325406][T11485] bond1: left allmulticast mode [ 205.330883][T11485] ip6gre2: left allmulticast mode [ 205.454184][T11491] loop4: detected capacity change from 0 to 512 [ 205.471444][T11491] EXT4-fs: Ignoring removed oldalloc option [ 205.489176][T11491] EXT4-fs (loop4): filesystem is read-only [ 205.495898][T11491] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 205.510375][T11491] EXT4-fs (loop4): filesystem is read-only [ 205.516675][T11491] EXT4-fs (loop4): orphan cleanup on readonly fs [ 205.526150][T11491] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2234: bg 0: block 64: padding at end of block bitmap is not set [ 205.541091][T11491] loop4: lost filesystem error report for type 5 error -117 [ 205.541570][T11491] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 205.549596][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 205.549629][ C0] EXT4-fs (loop4): initial error at time 1782873361: ext4_validate_block_bitmap:441 [ 205.549681][ C0] EXT4-fs (loop4): last error at time 1782873361: ext4_validate_block_bitmap:441 [ 205.586978][T11491] loop4: lost filesystem error report for type 5 error -117 [ 205.587936][T11491] EXT4-fs (loop4): 1 orphan inode deleted [ 205.607936][T11491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.636075][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.662310][T11495] loop4: detected capacity change from 0 to 1024 [ 205.674578][T11495] EXT4-fs: Ignoring removed orlov option [ 205.682965][T11495] EXT4-fs (loop4): stripe (63538) is not aligned with cluster size (16), stripe is disabled [ 205.716732][T11495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.753195][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 205.753212][ T28] audit: type=1400 audit(1782873362.018:1246): avc: denied { write } for pid=11494 comm="syz.4.2237" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.923526][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.000957][T11508] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2242'. [ 206.392764][T11510] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.400118][T11510] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.407942][T11510] bridge_slave_0: entered allmulticast mode [ 206.415255][T11510] bridge_slave_0: entered promiscuous mode [ 206.423255][T11510] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.430787][T11510] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.438957][T11510] bridge_slave_1: entered allmulticast mode [ 206.445909][T11510] bridge_slave_1: entered promiscuous mode [ 206.475980][T11510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.491374][T11510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.514239][T11510] team0: Port device team_slave_0 added [ 206.521638][T11510] team0: Port device team_slave_1 added [ 206.542538][T11510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.550251][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.579098][T11510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.592060][T11510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.599840][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.627940][T11510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.670993][T11510] hsr_slave_0: entered promiscuous mode [ 206.677317][T11510] hsr_slave_1: entered promiscuous mode [ 206.683631][T11510] debugfs: 'hsr0' already exists in 'hsr' [ 206.690402][T11510] Cannot create hsr debugfs directory [ 206.797978][T11510] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.863520][T11510] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.968010][T11510] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.034188][T11510] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.870730][T11620] all: renamed from lo [ 208.156376][ T28] audit: type=1400 audit(1782873620.471:1247): avc: denied { write } for pid=11631 comm="syz.4.2262" name="/" dev="configfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.172373][T11477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.180069][ T28] audit: type=1400 audit(1782873620.471:1248): avc: denied { add_name } for pid=11631 comm="syz.4.2262" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.213864][T11510] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 208.225101][ T28] audit: type=1400 audit(1782873620.471:1249): avc: denied { create } for pid=11631 comm="syz.4.2262" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 208.254009][T11510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.276467][T11510] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 208.295988][T11638] loop7: detected capacity change from 0 to 512 [ 208.302960][T11510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.314583][T11636] loop3: detected capacity change from 0 to 736 [ 208.322173][T11638] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 208.345235][T11510] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.366430][T11638] EXT4-fs (loop7): 1 truncate cleaned up [ 208.372928][T11510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.379908][T11638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.383230][T11510] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.404018][T11510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.416150][ T28] audit: type=1400 audit(1782873620.741:1250): avc: denied { write } for pid=11637 comm="syz.7.2265" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.464068][T10734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.476361][T11510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.493635][T11510] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.511427][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.518855][ T8655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.537100][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.544764][ T8429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.553381][T11652] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2267'. [ 208.566405][T11652] netlink: 'syz.7.2267': attribute type 12 has an invalid length. [ 208.575325][T11652] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2267'. [ 208.834934][T11510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.034662][T11510] veth0_vlan: entered promiscuous mode [ 209.043948][T11510] veth1_vlan: entered promiscuous mode [ 209.062066][T11510] veth0_macvtap: entered promiscuous mode [ 209.071848][T11510] veth1_macvtap: entered promiscuous mode [ 209.084339][T11510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.097872][T11510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.128057][ T8397] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.137092][ T8397] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.146968][ T8397] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.162743][ T8397] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.234464][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.266827][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.369205][T11719] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2283'. [ 209.379333][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 209.476417][T11725] loop7: detected capacity change from 0 to 2048 [ 209.500652][T11725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.513278][T11725] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.549129][T10734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.073185][T11734] loop4: detected capacity change from 0 to 164 [ 210.085330][T11734] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 210.253903][T11741] loop6: detected capacity change from 0 to 512 [ 210.289184][T11741] EXT4-fs: Ignoring removed oldalloc option [ 210.306192][T11744] loop5: detected capacity change from 0 to 512 [ 210.361891][T11741] EXT4-fs (loop6): filesystem is read-only [ 210.373509][T11741] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 210.383562][T11744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.389859][T11741] EXT4-fs (loop6): filesystem is read-only [ 210.402473][T11744] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.406335][T11741] EXT4-fs (loop6): orphan cleanup on readonly fs [ 210.426219][ T28] audit: type=1400 audit(1782873622.741:1251): avc: denied { write } for pid=11742 comm="syz.5.2292" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.427552][T11741] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2290: bg 0: block 64: padding at end of block bitmap is not set [ 210.449275][T11750] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 210.474632][T11741] loop6: lost filesystem error report for type 5 error -117 [ 210.478672][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 210.492534][ C0] EXT4-fs (loop6): initial error at time 1782873622: ext4_validate_block_bitmap:441 [ 210.502003][ C0] EXT4-fs (loop6): last error at time 1782873622: ext4_validate_block_bitmap:441 [ 210.516458][T11741] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 210.540822][T11741] loop6: lost filesystem error report for type 5 error -117 [ 210.545563][T11741] EXT4-fs (loop6): 1 orphan inode deleted [ 210.602214][T11741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 210.755859][T11779] loop7: detected capacity change from 0 to 128 [ 210.779874][T11779] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 210.807625][T11779] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.810979][ T28] audit: type=1400 audit(1782873623.121:1252): avc: denied { getopt } for pid=11783 comm="syz.3.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 210.839955][ T28] audit: type=1400 audit(1782873623.131:1253): avc: denied { write } for pid=11778 comm="syz.7.2306" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.972802][T11510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.974384][ T8547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.072120][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 211.096854][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 211.111121][T11792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11792 comm=syz.3.2309 [ 211.157251][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 211.159799][T11798] loop4: detected capacity change from 0 to 256 [ 211.167487][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 211.188261][T11798] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.240404][T11800] loop6: detected capacity change from 0 to 512 [ 211.248934][T11798] loop4: detected capacity change from 256 to 64 [ 211.273936][T11800] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2312: error while reading EA inode 32 err=-116 [ 211.307838][T11800] loop6: lost filesystem error report for type 5 error -117 [ 211.309074][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 211.320711][T11800] EXT4-fs (loop6): 1 orphan inode deleted [ 211.324158][ C0] EXT4-fs (loop6): initial error at time 1782873623: ext4_xattr_inode_iget:446 [ 211.339916][ C0] EXT4-fs (loop6): last error at time 1782873623: ext4_xattr_inode_iget:446 [ 211.357159][T11800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.396612][T11800] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.2312: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 211.427807][T11808] syzkaller1: entered allmulticast mode [ 211.443799][T11800] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.2312: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 211.492673][ T3300] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006900) [ 211.517596][ T3300] FAT-fs (loop4): Filesystem has been set read-only [ 211.525833][ T3300] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff) [ 211.537886][T11510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.547610][T10734] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.557421][ T3300] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff) [ 211.593120][T11812] loop7: detected capacity change from 0 to 128 [ 211.650946][ T8915] team0: Port device syz_tun removed [ 211.689868][ T28] audit: type=1326 audit(1782873624.001:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.7.2321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c1eade59 code=0x7ffc0000 [ 211.742185][ T28] audit: type=1326 audit(1782873624.001:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.7.2321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c1eade59 code=0x7ffc0000 [ 211.768263][ T28] audit: type=1326 audit(1782873624.001:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.7.2321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c1eade59 code=0x7ffc0000 [ 211.822277][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2324'. [ 211.831713][ T28] audit: type=1326 audit(1782873624.001:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.7.2321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f58c1eade59 code=0x7ffc0000 [ 211.831832][ T28] audit: type=1326 audit(1782873624.051:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.7.2321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58c1e6e68e code=0x7ffc0000 [ 211.831866][ T28] audit: type=1326 audit(1782873624.051:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.7.2321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58c1e6e68e code=0x7ffc0000 [ 211.832010][ T28] audit: type=1326 audit(1782873624.061:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.7.2321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58c1e6e68e code=0x7ffc0000 [ 211.832113][ T28] audit: type=1326 audit(1782873624.061:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11817 comm="syz.7.2321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58c1e6e68e code=0x7ffc0000 [ 212.196262][T11824] team1: entered promiscuous mode [ 212.202512][T11824] team1: entered allmulticast mode [ 212.210657][T11824] 8021q: adding VLAN 0 to HW filter on device team1 [ 212.394005][T11853] serio: Serial port ptm0 [ 212.502846][T11863] veth1_macvtap: left promiscuous mode [ 212.509092][T11863] macsec0: entered promiscuous mode [ 212.535777][T11863] veth1_macvtap: entered promiscuous mode [ 212.542647][T11863] macsec0: entered allmulticast mode [ 212.548080][T11863] veth1_macvtap: entered allmulticast mode [ 212.666851][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 212.785310][T11882] team1: entered promiscuous mode [ 212.791297][T11882] team1: entered allmulticast mode [ 212.802003][T11882] 8021q: adding VLAN 0 to HW filter on device team1 [ 212.852732][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.859989][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.867552][T11833] bridge_slave_0: entered allmulticast mode [ 212.876591][T11833] bridge_slave_0: entered promiscuous mode [ 212.899867][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.908884][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.917227][T11833] bridge_slave_1: entered allmulticast mode [ 212.934726][T11833] bridge_slave_1: entered promiscuous mode [ 212.961657][T11833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.974412][T11833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.001561][T11833] team0: Port device team_slave_0 added [ 213.017888][T11833] team0: Port device team_slave_1 added [ 213.060523][T11833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.072032][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.104548][T11909] loop6: detected capacity change from 0 to 128 [ 213.111193][T11833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.126841][T11909] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 213.145736][T11909] System zones: 1-3, 19-19, 35-36 [ 213.161125][T11909] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 213.174723][T11833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.174794][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.211636][T11833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.226409][T11909] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.275249][T11510] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.303918][T11833] hsr_slave_0: entered promiscuous mode [ 213.315698][T11833] hsr_slave_1: entered promiscuous mode [ 213.343269][T11833] debugfs: 'hsr0' already exists in 'hsr' [ 213.352944][T11833] Cannot create hsr debugfs directory [ 213.385284][T11922] batadv0: entered promiscuous mode [ 213.392315][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.402083][T11926] .¿: renamed from vlan0 (while UP) [ 213.483923][T11930] netlink: 'syz.6.2362': attribute type 1 has an invalid length. [ 213.492174][T11930] netlink: 'syz.6.2362': attribute type 4 has an invalid length. [ 213.539271][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.565864][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.813107][T11833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.830943][T11833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.839745][T11833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.861603][T11833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.878932][T11833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.898082][T11833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.912397][T11833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.931014][T11833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.028325][T11833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.060979][T11833] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.088070][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.095366][ T8655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.110672][T11983] __nla_validate_parse: 4 callbacks suppressed [ 214.110776][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2368'. [ 214.117774][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.117818][ T8406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.432612][T11983] team1: entered promiscuous mode [ 214.439515][T11983] team1: entered allmulticast mode [ 214.451754][T11983] 8021q: adding VLAN 0 to HW filter on device team1 [ 214.733917][T11833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.845207][T12060] raw_sendmsg: syz.6.2380 forgot to set AF_INET. Fix it! [ 214.946000][T11833] veth0_vlan: entered promiscuous mode [ 214.971746][T11833] veth1_vlan: entered promiscuous mode [ 215.019569][T11833] veth0_macvtap: entered promiscuous mode [ 215.044982][T11833] veth1_macvtap: entered promiscuous mode [ 215.070139][T11833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.099936][T11833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.129128][ T8429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.140444][ T8429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.165640][ T8429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.195551][ T8429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.418050][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2384'. [ 215.516084][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810c9fea00: rx timeout, send abort [ 215.524748][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810c9fea00: 0x2f002: (3) A timeout occurred and this is the connection abort to close the session. [ 215.695384][T12115] team1: entered promiscuous mode [ 215.706855][T12115] team1: entered allmulticast mode [ 215.727142][T12115] 8021q: adding VLAN 0 to HW filter on device team1 [ 215.784901][T12131] loop3: detected capacity change from 0 to 512 [ 215.891931][T12131] EXT4-fs: Invalid want_extra_isize 1969 [ 215.931885][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 215.931902][ T28] audit: type=1400 audit(1782873628.251:1287): avc: denied { write } for pid=12136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.025515][ T28] audit: type=1400 audit(1782873628.321:1288): avc: denied { write } for pid=12153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.136495][ T28] audit: type=1400 audit(1782873628.451:1289): avc: denied { getopt } for pid=12159 comm="syz.3.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.180466][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.210066][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.216902][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.223826][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.230705][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.237465][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.245671][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.252476][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.260103][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.267369][T12171] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 216.313362][ T28] audit: type=1400 audit(1782873628.621:1290): avc: denied { write } for pid=12161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.379787][ T28] audit: type=1400 audit(1782873628.671:1291): avc: denied { write } for pid=12183 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.458811][ T28] audit: type=1400 audit(1782873628.781:1292): avc: denied { write } for pid=12185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.520259][ T28] audit: type=1400 audit(1782873628.841:1293): avc: denied { write } for pid=12196 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.696602][ T28] audit: type=1400 audit(1782873629.011:1294): avc: denied { write } for pid=12198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.788242][ T28] audit: type=1400 audit(1782873629.101:1295): avc: denied { write } for pid=12209 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.807793][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'. [ 217.822158][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2402'. [ 217.862769][ T8407] Bluetooth: hci0: Frame reassembly failed (-84) [ 217.977047][T12216] team1: entered promiscuous mode [ 217.989371][T12216] team1: entered allmulticast mode [ 217.999059][T12216] 8021q: adding VLAN 0 to HW filter on device team1 [ 218.417161][ T28] audit: type=1400 audit(1782873630.731:1296): avc: denied { accept } for pid=12250 comm="syz.6.2413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.457423][T12251] loop0: detected capacity change from 0 to 4096 [ 218.472207][T12251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.544307][T11833] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 218.565828][T11833] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 218.596524][T12260] loop7: detected capacity change from 0 to 128 [ 218.607359][T12260] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 218.622525][T12260] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.649985][T10734] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.803769][T11833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.821439][ T8407] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.837161][T12277] netlink: 192436 bytes leftover after parsing attributes in process `syz.7.2424'. [ 218.862548][T12279] loop6: detected capacity change from 0 to 256 [ 218.891282][T12279] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 218.903719][T12279] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.298474][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.317244][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.324941][T12282] bridge_slave_0: entered allmulticast mode [ 219.333913][T12282] bridge_slave_0: entered promiscuous mode [ 219.357673][ T8407] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.380763][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.408607][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.429081][T12282] bridge_slave_1: entered allmulticast mode [ 219.435832][T12282] bridge_slave_1: entered promiscuous mode [ 219.461147][T12282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.482170][T12302] syzkaller1: entered promiscuous mode [ 219.496793][T12302] syzkaller1: entered allmulticast mode [ 219.519630][ T8407] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.537438][T12282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.573907][T12282] team0: Port device team_slave_0 added [ 219.600032][T12282] team0: Port device team_slave_1 added [ 219.623599][T12282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.632252][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.658877][T12282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.703193][ T8407] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.737310][T12282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.750587][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.789255][T12282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.920157][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 219.926410][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 219.952408][T12282] hsr_slave_0: entered promiscuous mode [ 219.979179][T12282] hsr_slave_1: entered promiscuous mode [ 219.994845][T12282] debugfs: 'hsr0' already exists in 'hsr' [ 220.014227][T12282] Cannot create hsr debugfs directory [ 220.113403][T12332] loop3: detected capacity change from 0 to 8192 [ 220.136059][T12332] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.015003][ T8407] bridge_slave_1: left allmulticast mode [ 221.021600][ T8407] bridge_slave_1: left promiscuous mode [ 221.035320][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.088330][ T8407] bridge_slave_0: left allmulticast mode [ 221.094323][ T8407] bridge_slave_0: left promiscuous mode [ 221.100413][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.557754][T12448] loop3: detected capacity change from 0 to 512 [ 221.679011][T12448] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.2451: invalid block [ 221.691802][T12448] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 221.698969][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 221.722639][ C1] EXT4-fs (loop3): initial error at time 1782873634: __ext4_iget:5533: inode 11: block 1 [ 221.734270][ C1] EXT4-fs (loop3): last error at time 1782873634: __ext4_iget:5533: inode 11: block 1 [ 221.747187][T12448] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2451: couldn't read orphan inode 11 (err -117) [ 221.770842][T12448] loop3: lost filesystem error report for type 5 error -117 [ 221.797607][ T8407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.822071][T12448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.851858][ T8407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.867590][T12454] xt_hashlimit: size too large, truncated to 1048576 [ 221.869626][T12448] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 221.883920][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 221.883933][ T28] audit: type=1400 audit(1782873634.181:1301): avc: denied { mac_admin } for pid=12447 comm="syz.3.2451" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.918375][ T8407] bond0 (unregistering): Released all slaves [ 221.919530][ T28] audit: type=1400 audit(1782873634.241:1302): avc: denied { relabelto } for pid=12447 comm="syz.3.2451" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 221.955596][T12448] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 222.011189][ T8407] hsr_slave_0: left promiscuous mode [ 222.028391][ T7911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.047034][ T8407] hsr_slave_1: left promiscuous mode [ 222.061499][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.091407][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.114358][ T8407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.124743][ T8407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.159521][ T8407] veth1_macvtap: left promiscuous mode [ 222.176441][ T8407] veth0_macvtap: left promiscuous mode [ 222.194406][ T8407] veth1_vlan: left promiscuous mode [ 222.206088][ T8407] veth0_vlan: left promiscuous mode [ 222.277099][T12403] net_ratelimit: 3320 callbacks suppressed [ 222.277119][T12403] Set syz1 is full, maxelem 65536 reached [ 222.326522][ T28] audit: type=1400 audit(1782873634.641:1303): avc: denied { write } for pid=12462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.397865][ T28] audit: type=1400 audit(1782873634.711:1304): avc: denied { write } for pid=12484 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.462744][ T8407] team0 (unregistering): Port device team_slave_1 removed [ 222.530601][ T8407] team0 (unregistering): Port device team_slave_0 removed [ 222.606523][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 222.745140][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2463'. [ 222.764949][T12501] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2463'. [ 222.777987][ T28] audit: type=1400 audit(1782873635.091:1305): avc: denied { write } for pid=12493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.864243][ T28] audit: type=1400 audit(1782873635.181:1306): avc: denied { write } for pid=12508 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.914998][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 223.072477][ T8407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.102195][ T8407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.123482][ T28] audit: type=1400 audit(1782873635.431:1307): avc: denied { write } for pid=12513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.135017][T12511] loop6: detected capacity change from 0 to 512 [ 223.179484][T12282] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 223.207433][ T28] audit: type=1400 audit(1782873635.511:1308): avc: denied { write } for pid=12525 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.233935][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.270052][ T8407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.271718][T12511] EXT4-fs error (device loop6): __ext4_iget:5533: inode #11: block 1: comm syz.6.2465: invalid block [ 223.295770][T12511] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.306964][ T8407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.316352][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 223.316385][ C1] EXT4-fs (loop6): initial error at time 1782873635: __ext4_iget:5533: inode 11: block 1 [ 223.316429][ C1] EXT4-fs (loop6): last error at time 1782873635: __ext4_iget:5533: inode 11: block 1 [ 223.319169][T12511] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2465: couldn't read orphan inode 11 (err -117) [ 223.374693][T12282] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 223.395155][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.403894][T12282] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 223.414866][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.424776][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 223.430467][T12511] loop6: lost filesystem error report for type 5 error -117 [ 223.443400][T12282] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 223.490615][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.518940][T12511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.539298][ T8407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.564130][ T8407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.762799][T11510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.774524][ T8407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.786382][ T8407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.839768][T12555] loop6: detected capacity change from 0 to 256 [ 223.867241][T12555] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.927038][T12563] loop5: detected capacity change from 0 to 1024 [ 224.005728][T12563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.031763][ T28] audit: type=1400 audit(1782873636.341:1309): avc: denied { write } for pid=12553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.083657][ T28] audit: type=1400 audit(1782873636.381:1310): avc: denied { write } for pid=12576 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.941219][ T8407] bridge_slave_1: left allmulticast mode [ 226.946941][ T8407] bridge_slave_1: left promiscuous mode [ 226.953512][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.964801][ T8407] bridge_slave_0: left allmulticast mode [ 226.972627][ T8407] bridge_slave_0: left promiscuous mode [ 226.978437][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.150644][ T8407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.177767][ T8407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.210168][ T8407] bond0 (unregistering): Released all slaves [ 227.282235][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 227.292302][ T8547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.303965][T12282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.331581][T12588] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2477'. [ 227.356542][ T8407] hsr_slave_0: left promiscuous mode [ 227.369134][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 227.369152][ T28] audit: type=1400 audit(1782873639.691:1313): avc: denied { accept } for pid=12591 comm="syz.5.2478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 227.399854][ T8407] hsr_slave_1: left promiscuous mode [ 227.410485][ T8407] veth1_macvtap: left allmulticast mode [ 227.416343][ T8407] veth1_macvtap: left promiscuous mode [ 227.422996][ T8407] veth0_macvtap: left promiscuous mode [ 227.432171][ T8407] veth1_vlan: left promiscuous mode [ 227.440211][ T8407] veth0_vlan: left promiscuous mode [ 227.545452][ T28] audit: type=1400 audit(1782873639.861:1314): avc: denied { write } for pid=12592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.600293][ T28] audit: type=1400 audit(1782873639.921:1315): avc: denied { write } for pid=12617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.640731][ T8407] team0 (unregistering): Port device team_slave_1 removed [ 227.655283][ T8407] team0 (unregistering): Port device team_slave_0 removed [ 227.714324][T12282] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.740589][ T28] audit: type=1400 audit(1782873640.061:1316): avc: denied { write } for pid=12620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.792952][ T8437] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.800318][ T8437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.066091][ T28] audit: type=1400 audit(1782873640.371:1317): avc: denied { write } for pid=12634 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.100956][ C0] ================================================================== [ 228.109192][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 228.117498][ C0] [ 228.121087][ C0] read-write to 0xffff88811cc10f20 of 4 bytes by interrupt on cpu 1: [ 228.130955][ C0] can_can_gw_rcv+0x812/0x820 [ 228.136158][ C0] can_rcv_filter+0xc3/0x480 [ 228.143074][ C0] can_receive+0x13e/0x190 [ 228.147649][ C0] can_rcv+0x17d/0x1f0 [ 228.152383][ C0] process_backlog+0x354/0x680 [ 228.157484][ C0] __napi_poll+0x61/0x300 [ 228.163294][ C0] net_rx_action+0x456/0x930 [ 228.168419][ C0] handle_softirqs+0xb9/0x280 [ 228.174102][ C0] do_softirq+0x45/0x60 [ 228.179175][ C0] __local_bh_enable_ip+0x70/0x80 [ 228.184862][ C0] __alloc_skb+0x2bb/0x6f0 [ 228.189418][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 228.196022][ C0] process_scheduled_works+0x4d4/0x9a0 [ 228.201997][ C0] worker_thread+0x569/0x750 [ 228.206655][ C0] kthread+0x221/0x270 [ 228.210879][ C0] ret_from_fork+0x146/0x330 [ 228.215862][ C0] ret_from_fork_asm+0x1a/0x30 [ 228.220763][ C0] [ 228.223124][ C0] read-write to 0xffff88811cc10f20 of 4 bytes by interrupt on cpu 0: [ 228.231312][ C0] can_can_gw_rcv+0x812/0x820 [ 228.236036][ C0] can_rcv_filter+0xc3/0x480 [ 228.240664][ C0] can_receive+0x13e/0x190 [ 228.245119][ C0] can_rcv+0x17d/0x1f0 [ 228.249234][ C0] process_backlog+0x354/0x680 [ 228.254574][ C0] __napi_poll+0x61/0x300 [ 228.258969][ C0] net_rx_action+0x456/0x930 [ 228.263978][ C0] handle_softirqs+0xb9/0x280 [ 228.269575][ C0] do_softirq+0x45/0x60 [ 228.274211][ C0] __local_bh_enable_ip+0x70/0x80 [ 228.279395][ C0] __alloc_skb+0x6b1/0x6f0 [ 228.284118][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 228.290773][ C0] process_scheduled_works+0x4d4/0x9a0 [ 228.296988][ C0] worker_thread+0x569/0x750 [ 228.302390][ C0] kthread+0x221/0x270 [ 228.306563][ C0] ret_from_fork+0x146/0x330 [ 228.311301][ C0] ret_from_fork_asm+0x1a/0x30 [ 228.316114][ C0] [ 228.318477][ C0] value changed: 0x00003e97 -> 0x00003e98 [ 228.324226][ C0] [ 228.327125][ C0] Reported by Kernel Concurrency Sanitizer on: [ 228.333593][ C0] CPU: 0 UID: 0 PID: 3750 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.343985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.355323][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 228.362605][ C0] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 231.124174][ C1] ================================================================== [ 231.132336][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 231.139962][ C1] [ 231.142315][ C1] read-write to 0xffff88811cc10f20 of 4 bytes by interrupt on cpu 0: [ 231.150428][ C1] can_can_gw_rcv+0x812/0x820 [ 231.155141][ C1] can_rcv_filter+0xc3/0x480 [ 231.159766][ C1] can_receive+0x13e/0x190 [ 231.164420][ C1] can_rcv+0x17d/0x1f0 [ 231.168540][ C1] process_backlog+0x354/0x680 [ 231.173379][ C1] __napi_poll+0x61/0x300 [ 231.177758][ C1] net_rx_action+0x456/0x930 [ 231.182415][ C1] handle_softirqs+0xb9/0x280 [ 231.187414][ C1] do_softirq+0x45/0x60 [ 231.191619][ C1] __local_bh_enable_ip+0x70/0x80 [ 231.196768][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 231.201837][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 231.207958][ C1] process_scheduled_works+0x4d4/0x9a0 [ 231.213565][ C1] worker_thread+0x569/0x750 [ 231.218218][ C1] kthread+0x221/0x270 [ 231.222667][ C1] ret_from_fork+0x146/0x330 [ 231.227391][ C1] ret_from_fork_asm+0x1a/0x30 [ 231.232220][ C1] [ 231.234574][ C1] read-write to 0xffff88811cc10f20 of 4 bytes by interrupt on cpu 1: [ 231.242663][ C1] can_can_gw_rcv+0x812/0x820 [ 231.247383][ C1] can_rcv_filter+0xc3/0x480 [ 231.252352][ C1] can_receive+0x13e/0x190 [ 231.256896][ C1] can_rcv+0x17d/0x1f0 [ 231.261039][ C1] process_backlog+0x354/0x680 [ 231.265854][ C1] __napi_poll+0x61/0x300 [ 231.270229][ C1] net_rx_action+0x456/0x930 [ 231.274891][ C1] handle_softirqs+0xb9/0x280 [ 231.279697][ C1] do_softirq+0x45/0x60 [ 231.283884][ C1] __local_bh_enable_ip+0x70/0x80 [ 231.288963][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 231.294744][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 231.300431][ C1] process_scheduled_works+0x4d4/0x9a0 [ 231.306502][ C1] worker_thread+0x569/0x750 [ 231.311486][ C1] kthread+0x221/0x270 [ 231.316297][ C1] ret_from_fork+0x146/0x330 [ 231.321682][ C1] ret_from_fork_asm+0x1a/0x30 [ 231.327849][ C1] [ 231.330287][ C1] value changed: 0x0002b8fc -> 0x0002b8fd [ 231.337597][ C1] [ 231.340291][ C1] Reported by Kernel Concurrency Sanitizer on: [ 231.346622][ C1] CPU: 1 UID: 0 PID: 8653 Comm: kworker/u8:60 Not tainted syzkaller #0 PREEMPT(lazy) [ 231.356407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.367051][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 231.374013][ C1] ================================================================== [ 232.870660][ T28] audit: type=1400 audit(1782873645.181:1318): avc: denied { write } for pid=12638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.663435][ T28] audit: type=1400 audit(1782873645.981:1319): avc: denied { write } for pid=12649 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 234.297848][ C0] ================================================================== [ 234.306079][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 234.313351][ C0] [ 234.315730][ C0] read-write to 0xffff88811cc10f20 of 4 bytes by interrupt on cpu 1: [ 234.324195][ C0] can_can_gw_rcv+0x812/0x820 [ 234.329039][ C0] can_rcv_filter+0xc3/0x480 [ 234.333872][ C0] can_receive+0x13e/0x190 [ 234.338337][ C0] can_rcv+0x17d/0x1f0 [ 234.342896][ C0] process_backlog+0x354/0x680 [ 234.347913][ C0] __napi_poll+0x61/0x300 [ 234.352301][ C0] net_rx_action+0x456/0x930 [ 234.356962][ C0] handle_softirqs+0xb9/0x280 [ 234.361959][ C0] do_softirq+0x45/0x60 [ 234.366168][ C0] __local_bh_enable_ip+0x70/0x80 [ 234.371279][ C0] __alloc_skb+0x6b1/0x6f0 [ 234.376105][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 234.381815][ C0] process_scheduled_works+0x4d4/0x9a0 [ 234.387752][ C0] worker_thread+0x569/0x750 [ 234.392489][ C0] kthread+0x221/0x270 [ 234.396778][ C0] ret_from_fork+0x146/0x330 [ 234.401588][ C0] ret_from_fork_asm+0x1a/0x30 [ 234.406471][ C0] [ 234.408910][ C0] read-write to 0xffff88811cc10f20 of 4 bytes by interrupt on cpu 0: [ 234.417799][ C0] can_can_gw_rcv+0x812/0x820 [ 234.422659][ C0] can_rcv_filter+0xc3/0x480 [ 234.427504][ C0] can_receive+0x13e/0x190 [ 234.432162][ C0] can_rcv+0x17d/0x1f0 [ 234.436286][ C0] process_backlog+0x354/0x680 [ 234.441624][ C0] __napi_poll+0x61/0x300 [ 234.446107][ C0] net_rx_action+0x456/0x930 [ 234.450756][ C0] handle_softirqs+0xb9/0x280 [ 234.455558][ C0] do_softirq+0x45/0x60 [ 234.459945][ C0] __local_bh_enable_ip+0x70/0x80 [ 234.465420][ C0] __alloc_skb+0x6b1/0x6f0 [ 234.470089][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 234.476823][ C0] process_scheduled_works+0x4d4/0x9a0 [ 234.484002][ C0] worker_thread+0x569/0x750 [ 234.489474][ C0] kthread+0x221/0x270 [ 234.494094][ C0] ret_from_fork+0x146/0x330 [ 234.499624][ C0] ret_from_fork_asm+0x1a/0x30 [ 234.504748][ C0] [ 234.507126][ C0] value changed: 0x00056b46 -> 0x00056b47 [ 234.513235][ C0] [ 234.515761][ C0] Reported by Kernel Concurrency Sanitizer on: [ 234.522086][ C0] CPU: 0 UID: 0 PID: 352 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(lazy) [ 234.532149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 234.542775][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 234.549601][ C0] ================================================================== [ 237.385822][ C1] ================================================================== [ 237.394850][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 237.402177][ C1] [ 237.404525][ C1] read-write to 0xffff88811cc10f20 of 4 bytes by interrupt on cpu 0: [ 237.412645][ C1] can_can_gw_rcv+0x812/0x820 [ 237.417379][ C1] can_rcv_filter+0xc3/0x480 [ 237.422046][ C1] can_receive+0x13e/0x190 [ 237.428010][ C1] can_rcv+0x17d/0x1f0 [ 237.432316][ C1] process_backlog+0x354/0x680 [ 237.438673][ C1] __napi_poll+0x61/0x300 [ 237.443235][ C1] net_rx_action+0x456/0x930 [ 237.447895][ C1] handle_softirqs+0xb9/0x280 [ 237.452636][ C1] run_ksoftirqd+0x1c/0x30 [ 237.457279][ C1] smpboot_thread_fn+0x32a/0x510 [ 237.462364][ C1] kthread+0x221/0x270 [ 237.467138][ C1] ret_from_fork+0x146/0x330 [ 237.472046][ C1] ret_from_fork_asm+0x1a/0x30 [ 237.476855][ C1] [ 237.479290][ C1] read-write to 0xffff88811cc10f20 of 4 bytes by interrupt on cpu 1: [ 237.487486][ C1] can_can_gw_rcv+0x812/0x820 [ 237.492399][ C1] can_rcv_filter+0xc3/0x480 [ 237.497126][ C1] can_receive+0x13e/0x190 [ 237.501844][ C1] can_rcv+0x17d/0x1f0 [ 237.506045][ C1] process_backlog+0x354/0x680 [ 237.510867][ C1] __napi_poll+0x61/0x300 [ 237.515591][ C1] net_rx_action+0x456/0x930 [ 237.520445][ C1] handle_softirqs+0xb9/0x280 [ 237.525175][ C1] do_softirq+0x45/0x60 [ 237.529458][ C1] __local_bh_enable_ip+0x70/0x80 [ 237.535680][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 237.540668][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 237.546816][ C1] process_scheduled_works+0x4d4/0x9a0 [ 237.552423][ C1] worker_thread+0x569/0x750 [ 237.557081][ C1] kthread+0x221/0x270 [ 237.562417][ C1] ret_from_fork+0x146/0x330 [ 237.567146][ C1] ret_from_fork_asm+0x1a/0x30 [ 237.571960][ C1] [ 237.574303][ C1] value changed: 0x00081224 -> 0x00081225 [ 237.580058][ C1] [ 237.582578][ C1] Reported by Kernel Concurrency Sanitizer on: [ 237.588760][ C1] CPU: 1 UID: 0 PID: 3776 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(lazy) [ 237.598368][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 237.608475][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 237.616959][ C1] ================================================================== [ 237.918501][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811cd50600: Timeout. Failed to send simple message.