last executing test programs: 1m25.690885158s ago: executing program 1 (id=600): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x26c, &(0x7f0000000840)="$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") mkdir(&(0x7f0000000340)='./file\x00', 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) rmdir(&(0x7f0000000000)='./file/file0/..//file0\x00') 1m25.467056332s ago: executing program 1 (id=606): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x1b}, {0xffff, 0xffff}, {0x12, 0xd}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x0, 0x3, 0x9, 0x0, 0xff, 0x2}}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x5d}}]}, 0x54}}, 0x0) 1m25.395462753s ago: executing program 1 (id=608): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m25.130841168s ago: executing program 1 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x4) 1m25.068359879s ago: executing program 1 (id=620): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xc8c4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigqueueinfo(0x0, 0x28, &(0x7f0000000000)={0x9, 0x9}) 1m24.824550924s ago: executing program 1 (id=629): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) 1m24.790263674s ago: executing program 32 (id=629): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) 33.519112443s ago: executing program 2 (id=2149): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) r2 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00x\xdd\x02', 0x0) ftruncate(r2, 0xdcb) copy_file_range(r2, 0x0, r1, 0x0, 0x7, 0x0) 33.452807654s ago: executing program 2 (id=2150): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x5, 0x2}, 0xff19, 0x6, 0x1, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) 33.403581195s ago: executing program 2 (id=2154): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r1, &(0x7f0000000040)="05", 0x1, 0x0, 0x0, 0x0) 33.292458887s ago: executing program 2 (id=2156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x158) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 33.269352567s ago: executing program 2 (id=2157): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xf7fffff8, 0xf21f96ac, 0x64, 0x3ff, 0xc, "00000000001a00f5ff7d0d00", 0x0, 0xa}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xd) 33.017016502s ago: executing program 2 (id=2164): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 33.013296012s ago: executing program 33 (id=2164): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 27.983121557s ago: executing program 6 (id=2225): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) 27.943168237s ago: executing program 6 (id=2227): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 26.72098501s ago: executing program 6 (id=2276): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x37, 0x43a1bd78, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) link(0x0, &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') 26.670469061s ago: executing program 6 (id=2278): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) 26.596675812s ago: executing program 6 (id=2279): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x7fff800000000}) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x800000000, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x800000000, 0x13}) 25.223546288s ago: executing program 3 (id=2309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.911658284s ago: executing program 3 (id=2314): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 24.693922738s ago: executing program 3 (id=2316): r0 = getpid() syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES64=r0, @ANYRES64=0x0], 0x9, 0x2a1, &(0x7f0000000ac0)="$eJzs3c9KW0scB/BvNP7dRLh3dbmLA91006C+QSgWSgMFSxZ2ZagKxYgQQWgX1V3fpau+Q9+gj9EXqAvBoietxkZpm2owfj4Qzg9mvmHOITCzmMmZS7Kxu7e19s+XzM4WqSaHH4+TZCKTKT36VF6nklQynYsOAwDcNaur7caox8DN6nYb7dO128xPLa0PIxkQAAAAAAAAAAAAQ1v/f2b78v7/HCULF/b/V3rXCfv/AWAs2P8//rrdRnu+t37rZ/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpHJye1k2s+14artzZMAOAvGmr+BwDuJPM/ANw/R31zfSXmfwAYfy/WXj5rNJsrq0Uxm+y832/tt8pr2d7Yyut0spnF1HKc0/VBT1k/edpcWSzOLGR956CXP9hvTfbnl1LLwuD8Upkv+vNTmb+YX04t/w7OLw/MT+fhg2Ti+43WU8vnV9lNJxs5zZ7n3y0VxePnzUv5mbN+AAAAAAAAAAAAAAAAAAAAcBvqxQ8Dz+/X61e1l/nf+H+A9Oer+c/7AwAAAAAAAAAAAAAAAAAAAODM3pu32+1OZ7M7sPjaO8t/XZ+xKSq9RzLE98z90lP9s6Ka5Oo+SWXYwSsUfb8oAAAAAAAAAAAAAAAAAADgdp0f+h31SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgdM7f/39zxajvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgfvgUAAP//B3XiIw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 24.58982014s ago: executing program 3 (id=2319): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, &(0x7f0000000200)={0x84, 0x70, 0x0, {r0}}, 0x20) 24.55284676s ago: executing program 3 (id=2320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x10004010) 24.410360733s ago: executing program 3 (id=2323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) 24.410132433s ago: executing program 34 (id=2323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) 22.604360027s ago: executing program 6 (id=2350): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x400, 0x0, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 22.599399867s ago: executing program 35 (id=2350): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x400, 0x0, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 1.671317058s ago: executing program 7 (id=2810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000000)="f7", 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x7, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x5, 0x3, 0x0, 0xff}, 0xe) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/39, 0x27}}], 0x1, 0x10142, 0x0) 1.542754931s ago: executing program 4 (id=2813): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1.509116441s ago: executing program 8 (id=2814): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xfff8}, {0x6, 0xc}, {0x1, 0x5}}}, 0x24}}, 0x20040000) 1.428941973s ago: executing program 8 (id=2815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1.428706893s ago: executing program 5 (id=2816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) 1.409077013s ago: executing program 5 (id=2817): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0xc408, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) 1.266157916s ago: executing program 5 (id=2818): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x571e, 0x202, 0x1, 0x4}, 0x10) 1.193220177s ago: executing program 5 (id=2819): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c46, 0x0) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x3, 0x171}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1.125213979s ago: executing program 5 (id=2820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @local, 0x3}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1.125043779s ago: executing program 8 (id=2821): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000280)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) 1.081871529s ago: executing program 8 (id=2823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@private=0xa010101, @in=@remote, 0x0, 0x7, 0x0, 0x843, 0x2}, {0x0, 0x1}, {0xfffffffffffffffc, 0x7fffffffffd, 0x4, 0x1000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@private, 0x1, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1001}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.06344706s ago: executing program 4 (id=2824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0xd0c}], 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.055075439s ago: executing program 0 (id=2825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb894f"], 0x72) 1.054872339s ago: executing program 8 (id=2826): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x2200400, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1207, &(0x7f0000003680)="$eJzs3E+LW1UYB+B3xtqpU+ePWqstiAfd6ObSmYUb3QwyBWlAaRuhFYRb50ZDrknIDQMRsbpy6+cQQQR3grjTzWz8BoK72bisIF5pYtuJTsGR0lvK8yySF875JeckJHAu95z91774sNepsk4+jsWFhVgcRqQbKVIsxi2fxsuv/vjTc5euXL2w1WptX0zp/NbljVdSSqvPf//Ox1+98MP45Nvfrn63FHvr7+7/tvnr3um9M/t/Xv6gW6VulfqDccrTtcFgnF8ri7TTrXpZSm+VRV4VqduvitFce6ccDIeTlPd3VpaHo6KqUt6fpF4xSeNBGo8mKX8/7/ZTlmVpZTk4umO3q/aXN+q6jqjrR+N41HVdPxbLcTIej5VYjbVYjyfiyXgqTsXTcTqeiWfjm1++ntxMAAAAAAAAAAAAAAAAAAAAAPfOwvTxv+//PzPt1fSoAQAAAAAAAAAAAAAAAAAA4OFy6crVC1ut1vbFlE5ElJ/vtnfbs+dZ+1YnulFGEediLf6I6e7/mVl9/o3W9rk0tR6fldf/zl/fbT8yn9+YHidwaH5jlk/z+aVYPpjfjLU4dXh+81Y+4kD+RLz04oF8Fmvx83sxiDJ2pice3Ml/spHS62+2/vH+Z6f9AAAA4GGQpdsOXb9n2d3aZ/kjXB+YW1/fzJ491ujUiYhq8lEvL8tipHjgi+PNDuP3uq6b/xAaKu7+S1mKiP/9ygsR8WBM8F9F0/9M3A93vvSmRwIAAAAAAAAAAMBR3I/bCZueIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7EDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//uiDOPA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) pwrite64(r0, &(0x7f00000001c0)="8a", 0x1, 0x8280c59) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) pwrite64(r1, &(0x7f0000000040)="10", 0xffffffb7, 0x8081000) 972.411801ms ago: executing program 0 (id=2827): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x2, 0x2) 817.213204ms ago: executing program 7 (id=2828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) 773.438685ms ago: executing program 7 (id=2829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4005, &(0x7f0000000000)=0x6, 0x9, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) 772.049595ms ago: executing program 0 (id=2830): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x0) 731.665436ms ago: executing program 7 (id=2831): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x4000004) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x200000, 0x0, 0x0, 0x5989}) fcntl$setpipe(r1, 0x407, 0x100000) 714.592406ms ago: executing program 7 (id=2832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 611.469038ms ago: executing program 8 (id=2833): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 478.87064ms ago: executing program 0 (id=2834): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="030000000000000000f8ff"]) 441.605801ms ago: executing program 7 (id=2835): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 202.145695ms ago: executing program 4 (id=2836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x1, 0x1, 0xe92}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 201.351816ms ago: executing program 0 (id=2837): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x15, 0xff, 0x8f}, 0x2c) 201.177136ms ago: executing program 5 (id=2846): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) 161.022517ms ago: executing program 4 (id=2838): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0xc408, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) 80.130128ms ago: executing program 4 (id=2839): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[], 0x27) 130.789µs ago: executing program 0 (id=2840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=2841): unshare(0x22020600) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000240)) kernel console output (not intermixed with test programs): t:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 72.283399][ T6988] bridge0: port 3(syz_tun) entered blocking state [ 72.305902][ T6988] bridge0: port 3(syz_tun) entered disabled state [ 72.320718][ T6988] syz_tun: entered allmulticast mode [ 72.334363][ T6988] syz_tun: entered promiscuous mode [ 72.341677][ T6990] loop3: detected capacity change from 0 to 512 [ 72.342217][ T6992] loop2: detected capacity change from 0 to 128 [ 72.356578][ T6988] bridge0: port 3(syz_tun) entered blocking state [ 72.363159][ T6988] bridge0: port 3(syz_tun) entered forwarding state [ 72.503072][ T7009] loop3: detected capacity change from 0 to 512 [ 72.523337][ T7009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.545601][ T7009] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1445: invalid indirect mapped block 4294967295 (level 1) [ 72.560663][ T7014] loop5: detected capacity change from 0 to 512 [ 72.569194][ T7014] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.583616][ T7009] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.583830][ T7009] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1445: invalid indirect mapped block 4294967295 (level 1) [ 72.593010][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 72.593031][ C0] EXT4-fs (loop3): initial error at time 2000000011: ext4_free_branches:1023: inode 11 [ 72.593074][ C0] EXT4-fs (loop3): last error at time 2000000011: ext4_free_branches:1023: inode 11 [ 72.639170][ T7014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.665810][ T7009] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 72.666044][ T7009] EXT4-fs (loop3): 2 truncates cleaned up [ 72.690191][ T7009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.711599][ T7014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.724092][ T7014] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.735314][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.764791][ T28] audit: type=1400 audit(2000000011.440:458): avc: denied { append } for pid=7012 comm="syz.5.1447" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.796986][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.808358][ T7029] loop3: detected capacity change from 0 to 512 [ 72.836563][ T7029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1451: bg 0: block 393: padding at end of block bitmap is not set [ 72.875244][ T7036] xt_l2tp: unknown flags: 10 [ 72.881140][ T7029] loop3: lost filesystem error report for type 5 error -117 [ 72.889911][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 72.903958][ C0] EXT4-fs (loop3): initial error at time 2000000011: ext4_validate_block_bitmap:441 [ 72.907638][ T7029] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 72.913389][ C0] EXT4-fs (loop3): last error at time 2000000011: ext4_validate_block_bitmap:441 [ 72.936483][ T7029] loop3: lost filesystem error report for type 5 error -117 [ 72.945372][ T7029] EXT4-fs (loop3): 2 truncates cleaned up [ 72.979175][ T7040] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=7040 comm=syz.2.1456 [ 72.997481][ T7044] loop4: detected capacity change from 0 to 1024 [ 73.009369][ T7029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.040769][ T7044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.066908][ T7044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 73.092989][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.111253][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.235038][ T7062] loop3: detected capacity change from 0 to 1024 [ 73.246360][ T7062] EXT4-fs: Ignoring removed bh option [ 73.262253][ T7065] __nla_validate_parse: 1 callbacks suppressed [ 73.262271][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1467'. [ 73.285716][ T7062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.388602][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1468'. [ 73.399129][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.422676][ T7071] gtp0: entered promiscuous mode [ 73.427741][ T7071] gtp0: entered allmulticast mode [ 73.481241][ T7080] loop2: detected capacity change from 0 to 512 [ 73.491813][ T7080] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.515057][ T7080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.523244][ T7084] netlink: 'syz.5.1472': attribute type 16 has an invalid length. [ 73.548974][ T7080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.556603][ T7084] netlink: 'syz.5.1472': attribute type 17 has an invalid length. [ 73.565054][ T7080] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.615680][ T7084] bridge0: port 3(syz_tun) entered disabled state [ 73.625800][ T7084] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.633081][ T7084] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.693095][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.701666][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.715236][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.738745][ T7101] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1479'. [ 73.833320][ T7091] bridge0: port 3(syz_tun) entered blocking state [ 73.839839][ T7091] bridge0: port 3(syz_tun) entered forwarding state [ 73.849078][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.857309][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.866483][ T7091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.885556][ T82] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.895547][ T82] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.921815][ T82] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.930827][ T82] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.432572][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 74.496066][ T7163] loop2: detected capacity change from 0 to 1764 [ 74.510648][ T7163] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 74.533738][ T7163] isofs_fill_super: get root inode failed [ 74.915853][ T7208] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 74.926526][ T7208] isofs_fill_super: get root inode failed [ 75.328556][ T7224] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.464861][ T7236] tipc: Started in network mode [ 75.480106][ T7236] tipc: Node identity ac14140f, cluster identity 4711 [ 75.487065][ T7236] tipc: Enabled bearer , priority 10 [ 75.509716][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1539'. [ 75.621342][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1544'. [ 75.701011][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 75.701026][ T28] audit: type=1400 audit(2000000014.380:465): avc: denied { write } for pid=7258 comm="syz.2.1546" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 75.986769][ T28] audit: type=1400 audit(2000000014.660:466): avc: denied { mount } for pid=7279 comm="syz.3.1559" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.089990][ T28] audit: type=1400 audit(2000000014.760:467): avc: denied { mount } for pid=7286 comm="syz.0.1562" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 76.185224][ T28] audit: type=1400 audit(2000000014.800:468): avc: denied { ioctl } for pid=7291 comm="syz.4.1564" path="socket:[17051]" dev="sockfs" ino=17051 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.288905][ T28] audit: type=1400 audit(2000000014.960:469): avc: denied { mounton } for pid=7303 comm="syz.0.1571" path="/305/file0" dev="tmpfs" ino=1594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.600001][ T3390] tipc: Node number set to 2886997007 [ 76.639973][ T28] audit: type=1400 audit(2000000015.300:470): avc: denied { mount } for pid=7344 comm="syz.2.1586" name="/" dev="ramfs" ino=17136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.688214][ T35] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 76.723499][ T35] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 76.724376][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'. [ 76.881773][ T7355] netlink: 'syz.2.1589': attribute type 16 has an invalid length. [ 76.901410][ T7355] netlink: 'syz.2.1589': attribute type 17 has an invalid length. [ 76.971484][ T7355] bridge0: port 3(team0) entered disabled state [ 76.977860][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.985259][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.008602][ T28] audit: type=1400 audit(2000000015.680:471): avc: denied { write } for pid=7356 comm="syz.3.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.122530][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.144877][ T7355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.236445][ T7358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.262258][ T7358] bridge0: port 3(team0) entered blocking state [ 77.268630][ T7358] bridge0: port 3(team0) entered forwarding state [ 77.300076][ T7358] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.331828][ T7358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.439495][ T47] bridge0: port 3(team0) entered disabled state [ 77.459369][ T7361] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.465756][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.475658][ T7361] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.476800][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.580351][ T7361] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.581592][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.610061][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.706848][ T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 77.717305][ T7361] infiniband syz2: set down [ 77.721961][ T3378] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.728553][ T7361] infiniband syz2: added ip6_vti0 [ 77.751215][ T7361] RDS/IB: syz2: added [ 77.760022][ T7361] smc: adding ib device syz2 with port count 1 [ 77.774840][ T7361] smc: ib device syz2 port 1 has no pnetid [ 77.808319][ T28] audit: type=1400 audit(2000000016.480:472): avc: denied { open } for pid=7383 comm="syz.4.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.830540][ T3378] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.837109][ T7361] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.881608][ T7361] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.901293][ T28] audit: type=1400 audit(2000000016.510:473): avc: denied { kernel } for pid=7383 comm="syz.4.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.910976][ T7394] sctp: [Deprecated]: syz.5.1604 (pid 7394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.910976][ T7394] Use struct sctp_sack_info instead [ 77.959113][ T7361] ip6_vti0 speed is unknown, defaulting to 1000 [ 77.960491][ T28] audit: type=1400 audit(2000000016.510:474): avc: denied { tracepoint } for pid=7383 comm="syz.4.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 78.061940][ T7361] ip6_vti0 speed is unknown, defaulting to 1000 [ 78.150044][ T7361] ip6_vti0 speed is unknown, defaulting to 1000 [ 78.336528][ T7429] SELinux: failed to load policy [ 78.443286][ T7446] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1627'. [ 78.485554][ T7452] set_capacity_and_notify: 3 callbacks suppressed [ 78.485576][ T7452] loop4: detected capacity change from 0 to 512 [ 78.533408][ T7452] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.1630: corrupted inode contents [ 78.569996][ T7452] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.570214][ T7452] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #3: comm syz.4.1630: mark_inode_dirty error [ 78.590537][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.590560][ C0] EXT4-fs (loop4): initial error at time 2000000017: ext4_do_update_inode:5569: inode 3 [ 78.590584][ C0] EXT4-fs (loop4): last error at time 2000000017: ext4_do_update_inode:5569: inode 3 [ 78.636831][ T7462] netlink: 'syz.5.1633': attribute type 13 has an invalid length. [ 78.639947][ T7452] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.645131][ T7462] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.1633'. [ 78.645131][ T7452] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #3: comm syz.4.1630: corrupted inode contents [ 78.714850][ T7452] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.715014][ T7452] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.1630: mark_inode_dirty error [ 78.735815][ T7452] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.736457][ T7452] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1630: Failed to acquire dquot type 0 [ 78.758252][ T7452] loop4: lost filesystem error report for type 5 error -117 [ 78.758776][ T7452] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.1630: corrupted inode contents [ 78.778091][ T7452] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.778331][ T7452] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.1630: mark_inode_dirty error [ 78.799386][ T7452] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.799600][ T7452] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.1630: corrupted inode contents [ 78.820702][ T7452] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.820860][ T7452] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.1630: mark_inode_dirty error [ 78.841467][ T7452] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.841725][ T7452] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.1630: corrupted inode contents [ 78.862858][ T7452] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.863096][ T7452] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 78.881064][ T7452] loop4: lost filesystem error report for type 5 error -117 [ 78.881516][ T7452] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.1630: corrupted inode contents [ 78.919944][ T7452] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 78.920494][ T7452] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.1630: mark_inode_dirty error [ 78.960217][ T7452] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 78.974475][ T7452] loop4: lost filesystem error report for type 5 error -117 [ 78.975199][ T7452] EXT4-fs (loop4): 1 truncate cleaned up [ 78.989395][ T7452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.002448][ T7452] ext4 filesystem being mounted at /379/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.021178][ T7452] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #3: comm syz.4.1630: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 79.021178][ T7452] [ 79.055825][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.199202][ T262] team0: left allmulticast mode [ 79.231064][ T262] team_slave_0: left allmulticast mode [ 79.251268][ T262] team_slave_1: left allmulticast mode [ 79.256834][ T262] team0: left promiscuous mode [ 79.280201][ T262] team_slave_0: left promiscuous mode [ 79.309999][ T262] team_slave_1: left promiscuous mode [ 79.339541][ T262] bridge0: port 3(team0) entered disabled state [ 79.370199][ T262] bridge_slave_1: left allmulticast mode [ 79.375871][ T262] bridge_slave_1: left promiscuous mode [ 79.401429][ T7485] loop0: detected capacity change from 0 to 2048 [ 79.408106][ T262] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.475110][ T262] bridge_slave_0: left allmulticast mode [ 79.486148][ T262] bridge_slave_0: left promiscuous mode [ 79.493795][ T7485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.520090][ T262] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.551100][ T7493] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1643'. [ 79.598960][ T7493] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1643'. [ 79.632747][ T7501] netlink: 'syz.3.1644': attribute type 16 has an invalid length. [ 79.659855][ T7501] netlink: 'syz.3.1644': attribute type 17 has an invalid length. [ 79.680293][ T262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.698125][ T262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.714441][ T262] bond0 (unregistering): Released all slaves [ 79.761976][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.778698][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.786055][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.871843][ T7501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.888054][ T7501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.943364][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.963093][ T7506] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.983582][ T7506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.012516][ T262] tipc: Disabling bearer [ 80.019061][ T262] tipc: Left network mode [ 80.025619][ T41] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.040766][ T3411] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.054830][ T41] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.076205][ T3411] syz2: Port: 1 Link ACTIVE [ 80.082985][ T7496] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.100103][ T69] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 80.109270][ T69] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 80.131304][ T69] bond0: now running without any active interface! [ 80.138111][ T41] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.151379][ T3411] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.157709][ T41] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.300596][ T7472] ip6_vti0 speed is unknown, defaulting to 1000 [ 80.361386][ T262] hsr_slave_0: left promiscuous mode [ 80.369943][ T262] hsr_slave_1: left promiscuous mode [ 80.375852][ T262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.440218][ T262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.569605][ T262] team0 (unregistering): Port device team_slave_1 removed [ 80.598375][ T262] team0 (unregistering): Port device team_slave_0 removed [ 80.743758][ T7567] loop3: detected capacity change from 0 to 512 [ 80.771831][ T7567] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 80.798534][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 80.855041][ T7567] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 80.961933][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.969137][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.987564][ T7472] bridge_slave_0: entered allmulticast mode [ 81.000677][ T7472] bridge_slave_0: entered promiscuous mode [ 81.011554][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.025376][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.046576][ T7472] bridge_slave_1: entered allmulticast mode [ 81.070856][ T7472] bridge_slave_1: entered promiscuous mode [ 81.087319][ T7595] syzkaller1: entered promiscuous mode [ 81.100257][ T7595] syzkaller1: entered allmulticast mode [ 81.118428][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.129397][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.150380][ T7472] team0: Port device team_slave_0 added [ 81.160663][ T7472] team0: Port device team_slave_1 added [ 81.187325][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.195109][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.223092][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.235226][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.242630][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.270493][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.335540][ T7472] hsr_slave_0: entered promiscuous mode [ 81.347584][ T7472] hsr_slave_1: entered promiscuous mode [ 81.358511][ T7472] debugfs: 'hsr0' already exists in 'hsr' [ 81.369974][ T7472] Cannot create hsr debugfs directory [ 81.650174][ T7613] tun0: tun_chr_ioctl cmd 1074025675 [ 81.655539][ T7613] tun0: persist enabled [ 81.679291][ T7613] tun0: tun_chr_ioctl cmd 1074025675 [ 81.691968][ T7617] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1668'. [ 81.710049][ T7613] tun0: persist enabled [ 81.817573][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 81.817591][ T28] audit: type=1400 audit(2000000020.490:511): avc: denied { append } for pid=7630 comm="syz.4.1670" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 81.837499][ T7472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.920788][ T7472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.950785][ T7472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.969274][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 81.998779][ T7472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.044335][ T3314] CPU: 0 UID: 0 PID: 3314 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 82.044368][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.044381][ T3314] Call Trace: [ 82.044387][ T3314] [ 82.044450][ T3314] __dump_stack+0x1d/0x30 [ 82.044482][ T3314] dump_stack_lvl+0x95/0xd0 [ 82.044508][ T3314] dump_stack+0x15/0x1b [ 82.044532][ T3314] dump_header+0x80/0x240 [ 82.044586][ T3314] oom_kill_process+0x295/0x350 [ 82.044612][ T3314] out_of_memory+0x97d/0xb80 [ 82.044643][ T3314] try_charge_memcg+0x62e/0xa10 [ 82.044679][ T3314] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 82.044789][ T3314] __swap_cache_prepare_and_add+0x386/0x530 [ 82.044830][ T3314] swap_cache_alloc_folio+0xa2/0x120 [ 82.044863][ T3314] swap_cluster_readahead+0x26e/0x3d0 [ 82.044961][ T3314] swapin_readahead+0xde/0x840 [ 82.045048][ T3314] ? mm_trace_rss_stat+0x1d/0xf0 [ 82.045070][ T3314] ? __rcu_read_unlock+0x33/0x70 [ 82.045093][ T3314] ? __rcu_read_unlock+0x4e/0x70 [ 82.045137][ T3314] ? swap_cache_get_folio+0x26f/0x280 [ 82.045240][ T3314] do_swap_page+0x30d/0x2220 [ 82.045274][ T3314] ? css_rstat_updated+0xbb/0x280 [ 82.045296][ T3314] ? __rcu_read_lock+0x36/0x50 [ 82.045314][ T3314] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 82.045347][ T3314] handle_mm_fault+0xb46/0x3020 [ 82.045383][ T3314] ? vma_start_read+0x1c7/0x2c0 [ 82.045479][ T3314] do_user_addr_fault+0x62f/0x1050 [ 82.045588][ T3314] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 82.045662][ T3314] ? trace_page_fault_user+0x1f/0xe0 [ 82.045694][ T3314] exc_page_fault+0x62/0xa0 [ 82.045713][ T3314] asm_exc_page_fault+0x26/0x30 [ 82.045748][ T3314] RIP: 0033:0x7f9c4b67a7b7 [ 82.045766][ T3314] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24 [ 82.045824][ T3314] RSP: 002b:00007ffc60575380 EFLAGS: 00010202 [ 82.045842][ T3314] RAX: 0000001b33324000 RBX: 00000000000002d0 RCX: 0000000000013c68 [ 82.045857][ T3314] RDX: 000000000e960a6c RSI: 00007ffc60575410 RDI: 0000000000000004 [ 82.045871][ T3314] RBP: 00007ffc605753bc R08: 0000000037a43c24 R09: 7fffffffffffffff [ 82.045887][ T3314] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 82.045902][ T3314] R13: 00000000000927c0 R14: 0000000000013c96 R15: 00007ffc60575410 [ 82.045927][ T3314] [ 82.045944][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 432 [ 82.288519][ T3314] memory+swap: usage 307480kB, limit 9007199254740988kB, failcnt 0 [ 82.312916][ T3314] kmem: usage 299004kB, limit 9007199254740988kB, failcnt 0 [ 82.321633][ T3314] Memory cgroup stats for /syz0: [ 82.321962][ T3314] cache 0 [ 82.330480][ T3314] rss 8388608 [ 82.334242][ T3314] shmem 0 [ 82.343992][ T3314] mapped_file 0 [ 82.351836][ T3314] dirty 0 [ 82.362345][ T3314] writeback 0 [ 82.373526][ T3314] workingset_refault_anon 39 [ 82.388025][ T3314] workingset_refault_file 388 [ 82.406349][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.419228][ T3314] swap 286720 [ 82.422836][ T3314] swapcached 290816 [ 82.428943][ T3314] pgpgin 90061 [ 82.451166][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.457819][ T3314] pgpgout 88012 [ 82.470039][ T3314] pgfault 92537 [ 82.473562][ T3314] pgmajfault 65 [ 82.482681][ T3314] inactive_anon 0 [ 82.486324][ T3314] active_anon 4096 [ 82.500899][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.507990][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.519437][ T3314] inactive_file 0 [ 82.527323][ T3314] active_file 0 [ 82.535094][ T3314] unevictable 8388608 [ 82.535621][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.546168][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.549265][ T3314] hierarchical_memory_limit 314572800 [ 82.559801][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 82.569726][ T3314] total_cache 0 [ 82.587009][ T3314] total_rss 8388608 [ 82.605416][ T3314] total_shmem 0 [ 82.608911][ T3314] total_mapped_file 0 [ 82.621532][ T3314] total_dirty 0 [ 82.635203][ T3314] total_writeback 0 [ 82.656527][ T3314] total_workingset_refault_anon 39 [ 82.674445][ T3314] total_workingset_refault_file 388 [ 82.679759][ T3314] total_swap 286720 [ 82.710013][ T3314] total_swapcached 290816 [ 82.714389][ T3314] total_pgpgin 90061 [ 82.743103][ T3314] total_pgpgout 88012 [ 82.747218][ T3314] total_pgfault 92537 [ 82.753778][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.768724][ T3314] total_pgmajfault 65 [ 82.778112][ T3314] total_inactive_anon 0 [ 82.803077][ T3314] total_active_anon 4096 [ 82.807343][ T3314] total_inactive_file 0 [ 82.820519][ T3314] total_active_file 0 [ 82.830320][ T3314] total_unevictable 8388608 [ 82.845320][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1664,pid=7586,uid=0 [ 82.909579][ T3314] Memory cgroup out of memory: Killed process 7586 (syz.0.1664) total-vm:96080kB, anon-rss:9416kB, file-rss:22148kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 82.933216][ T7472] veth0_vlan: entered promiscuous mode [ 82.961639][ T7472] veth1_vlan: entered promiscuous mode [ 82.972773][ T7710] loop3: detected capacity change from 0 to 1024 [ 83.004333][ T7472] veth0_macvtap: entered promiscuous mode [ 83.011217][ T7710] EXT4-fs: inline encryption not supported [ 83.033527][ T7710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.051135][ T7472] veth1_macvtap: entered promiscuous mode [ 83.072028][ T7710] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.085050][ T3397] kernel write not supported for file bpf-prog (pid: 3397 comm: kworker/0:4) [ 83.108880][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.139675][ T7710] EXT4-fs (loop3): shut down requested (1) [ 83.154335][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.190351][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 83.204875][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.230409][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.253489][ T7738] sctp: [Deprecated]: syz.3.1685 (pid 7738) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.253489][ T7738] Use struct sctp_sack_info instead [ 83.272411][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.297090][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.328899][ T28] audit: type=1400 audit(2000000022.000:512): avc: denied { mounton } for pid=7472 comm="syz-executor" path="/root/syzkaller.au0giG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 83.419948][ T28] audit: type=1400 audit(2000000022.030:513): avc: denied { mount } for pid=7472 comm="syz-executor" name="/" dev="gadgetfs" ino=3819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 83.493634][ T28] audit: type=1400 audit(2000000022.160:514): avc: denied { cpu } for pid=7748 comm="syz.4.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 83.527853][ T7740] SELinux: failed to load policy [ 83.610755][ T28] audit: type=1326 audit(2000000022.280:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c2cdc799 code=0x7ffc0000 [ 83.641579][ T28] audit: type=1326 audit(2000000022.280:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c2cdc799 code=0x7ffc0000 [ 83.666732][ T28] audit: type=1326 audit(2000000022.280:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c2cdc799 code=0x7ffc0000 [ 83.706066][ T7768] loop2: detected capacity change from 0 to 1024 [ 83.718612][ T7768] EXT4-fs: Ignoring removed orlov option [ 83.730082][ T28] audit: type=1326 audit(2000000022.280:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f52c2cdc799 code=0x7ffc0000 [ 83.769057][ T28] audit: type=1326 audit(2000000022.280:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c2cdc799 code=0x7ffc0000 [ 83.795886][ T28] audit: type=1326 audit(2000000022.340:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7763 comm="syz.3.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c2cdc799 code=0x7ffc0000 [ 83.801606][ T7768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.871977][ T7472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.929542][ T7788] loop3: detected capacity change from 0 to 128 [ 83.943439][ T7786] loop4: detected capacity change from 0 to 512 [ 83.945761][ T7788] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.964010][ T7786] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.976329][ T7788] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.033454][ T7786] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 1: comm syz.4.1705: invalid block [ 84.046215][ T7786] fserror_report: 1 callbacks suppressed [ 84.046232][ T7786] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 84.052765][ T7786] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1705: couldn't read orphan inode 11 (err -117) [ 84.061948][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 84.061968][ C0] EXT4-fs (loop4): initial error at time 2000000022: __ext4_iget:5378: inode 11: block 1 [ 84.061998][ C0] EXT4-fs (loop4): last error at time 2000000022: __ext4_iget:5378: inode 11: block 1 [ 84.100027][ T7786] loop4: lost filesystem error report for type 5 error -117 [ 84.100752][ T7786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.121168][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.359724][ T7835] netlink: 'syz.2.1726': attribute type 15 has an invalid length. [ 84.386420][ T7833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.413170][ T7840] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1728'. [ 84.425155][ T7840] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1728'. [ 84.517508][ T7836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.576556][ T7853] ip6_vti0 speed is unknown, defaulting to 1000 [ 84.618199][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 84.639807][ T7862] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 84.722773][ T7868] loop5: detected capacity change from 0 to 1024 [ 84.741568][ T7868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.825036][ T7880] loop2: detected capacity change from 0 to 164 [ 84.834692][ T7876] ip6_vti0 speed is unknown, defaulting to 1000 [ 84.851023][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.872168][ T7880] ISOFS: Bad logical zone size 2816 [ 85.078285][ T7900] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 85.100049][ T7900] syzkaller0: ignored: set checksum disabled [ 85.116348][ T7900] syzkaller0: tun_chr_ioctl cmd 35111 [ 85.218311][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1760'. [ 85.298755][ T7919] Invalid argument reading file caps for ./file0 [ 85.382570][ T7928] loop3: detected capacity change from 0 to 128 [ 85.511478][ T7942] loop5: detected capacity change from 0 to 512 [ 85.539191][ T7942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.581996][ T7942] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.1775: Unimplemented hash flags: 0x0001 [ 85.603928][ T7942] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1775: Corrupt directory, running e2fsck is recommended [ 85.617852][ T7942] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.1775: path /216/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 85.753719][ T7960] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 85.800283][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.891086][ T7970] loop3: detected capacity change from 0 to 512 [ 85.932845][ T7970] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1785: bg 0: block 248: padding at end of block bitmap is not set [ 85.997741][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1787'. [ 86.010260][ T7970] loop3: lost filesystem error report for type 5 error -117 [ 86.010553][ T7970] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1785: Failed to acquire dquot type 1 [ 86.029120][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 86.029142][ C1] EXT4-fs (loop3): last error at time 2000000024: ext4_validate_block_bitmap:441 [ 86.052952][ T7970] loop3: lost filesystem error report for type 5 error -117 [ 86.053891][ T7970] EXT4-fs (loop3): 1 truncate cleaned up [ 86.067805][ T7970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.088329][ T7970] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.168735][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.197690][ T7996] netlink: 'syz.3.1796': attribute type 3 has an invalid length. [ 86.484219][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1809'. [ 86.504530][ T1033] IPVS: starting estimator thread 0... [ 86.511198][ T8019] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 86.570403][ T8031] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1811'. [ 86.620325][ T8037] ipvlan2: entered promiscuous mode [ 86.625546][ T8037] ipvlan2: entered allmulticast mode [ 86.630918][ T8025] IPVS: using max 2496 ests per chain, 124800 per kthread [ 86.637933][ T8037] gretap0: entered allmulticast mode [ 86.645270][ T8037] team0: Device ipvlan2 failed to register rx_handler [ 86.815712][ T8051] ip6_vti0 speed is unknown, defaulting to 1000 [ 86.854963][ T8054] loop0: detected capacity change from 0 to 512 [ 86.864566][ T28] kauditd_printk_skb: 125 callbacks suppressed [ 86.864582][ T28] audit: type=1326 audit(2000000025.540:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72d28c799 code=0x7ffc0000 [ 86.918053][ T28] audit: type=1326 audit(2000000025.540:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff72d28c502 code=0x7ffc0000 [ 86.941687][ T28] audit: type=1326 audit(2000000025.540:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff72d28c597 code=0x7ffc0000 [ 86.942015][ T8054] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.991769][ T28] audit: type=1326 audit(2000000025.540:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff72d249491 code=0x7ffc0000 [ 87.027443][ T28] audit: type=1326 audit(2000000025.540:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff72d28d589 code=0x7ffc0000 [ 87.060353][ T8054] EXT4-fs (loop0): 1 truncate cleaned up [ 87.066633][ T8054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.109999][ T28] audit: type=1326 audit(2000000025.540:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff72d2494fb code=0x7ffc0000 [ 87.134035][ T28] audit: type=1326 audit(2000000025.540:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72d28c799 code=0x7ffc0000 [ 87.134781][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1824'. [ 87.157556][ T28] audit: type=1326 audit(2000000025.540:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ff72d248bec code=0x7ffc0000 [ 87.169806][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.189773][ T28] audit: type=1326 audit(2000000025.540:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff72d248c4e code=0x7ffc0000 [ 87.247648][ T28] audit: type=1326 audit(2000000025.540:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8050 comm="syz.2.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff72d28c42b code=0x7ffc0000 [ 87.322616][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1826'. [ 87.366913][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1826'. [ 87.382265][ T8072] loop2: detected capacity change from 0 to 512 [ 87.431358][ T8072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 87.445760][ T8072] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.1829: Unimplemented hash flags: 0x0001 [ 87.457930][ T8072] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1829: Corrupt directory, running e2fsck is recommended [ 87.471154][ T8072] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 3: comm syz.2.1829: path /22/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 87.654276][ T7472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.863560][ T8107] netlink: 'syz.3.1844': attribute type 29 has an invalid length. [ 88.270381][ T8129] all (unregistering): Released all slaves [ 88.478190][ T8155] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 88.633922][ T8170] ip6_vti0 speed is unknown, defaulting to 1000 [ 88.654981][ T8179] netlink: 'syz.3.1877': attribute type 21 has an invalid length. [ 88.742887][ T8183] set_capacity_and_notify: 2 callbacks suppressed [ 88.742945][ T8183] loop2: detected capacity change from 0 to 512 [ 88.828516][ T8183] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1880: bg 0: block 248: padding at end of block bitmap is not set [ 88.860311][ T8183] loop2: lost filesystem error report for type 5 error -117 [ 88.860663][ T8183] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.1880: Failed to acquire dquot type 1 [ 88.879331][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 88.879354][ C0] EXT4-fs (loop2): last error at time 2000000027: ext4_validate_block_bitmap:441 [ 88.929974][ T8183] loop2: lost filesystem error report for type 5 error -117 [ 88.931178][ T8183] EXT4-fs (loop2): 1 truncate cleaned up [ 88.944709][ T8183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.958026][ T8183] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.052693][ T8204] ip6_vti0 speed is unknown, defaulting to 1000 [ 89.059956][ T8183] syz.2.1880 (8183) used greatest stack depth: 8184 bytes left [ 89.079543][ T7472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.080988][ T8210] netlink: 'syz.5.1889': attribute type 4 has an invalid length. [ 89.099977][ T8211] netlink: 'syz.4.1885': attribute type 16 has an invalid length. [ 89.142536][ T8211] netlink: 'syz.4.1885': attribute type 17 has an invalid length. [ 89.149181][ T8213] loop2: detected capacity change from 0 to 512 [ 89.171450][ T8213] EXT4-fs (loop2): 1 truncate cleaned up [ 89.181342][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.182805][ T8213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.189777][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.282957][ T7472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.298063][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.305344][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.322661][ T8226] loop2: detected capacity change from 0 to 1024 [ 89.331451][ T8226] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 89.343888][ T8226] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 89.354059][ T8226] EXT4-fs (loop2): invalid journal inode [ 89.359780][ T8226] EXT4-fs (loop2): can't get journal size [ 89.369689][ T8226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.385418][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.394923][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.417595][ T7472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.443787][ T47] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.480286][ T47] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.500869][ T47] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.519734][ T47] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.957998][ T8274] __nla_validate_parse: 7 callbacks suppressed [ 89.958017][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1916'. [ 89.978734][ T8274] bond0: ARP target 8.4.0.0 is already present [ 89.985980][ T8274] bond0: option arp_ip_target: invalid value (1032) [ 90.046716][ T8283] syzkaller1: entered promiscuous mode [ 90.049375][ T8281] loop5: detected capacity change from 0 to 256 [ 90.057604][ T8283] syzkaller1: entered allmulticast mode [ 90.083157][ T8281] SELinux: failed to load policy [ 90.102302][ T8287] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1922'. [ 90.339346][ T8306] loop2: detected capacity change from 0 to 512 [ 90.351030][ T8306] EXT4-fs: Ignoring removed bh option [ 90.362174][ T8306] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.410402][ T8306] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 90.761754][ T8332] unsupported nla_type 210 [ 90.886942][ T8338] netlink: 'syz.0.1946': attribute type 4 has an invalid length. [ 90.953688][ T8351] loop3: detected capacity change from 0 to 2048 [ 90.966268][ T8351] EXT4-fs: Ignoring removed i_version option [ 90.993380][ T8351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.005524][ T8351] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.067469][ T8369] pimreg: entered allmulticast mode [ 91.073371][ T8369] pimreg: left allmulticast mode [ 91.089448][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.388122][ T8396] bond0: (slave vlan2): Opening slave failed [ 91.516644][ T8411] loop5: detected capacity change from 0 to 512 [ 91.575080][ T8411] EXT4-fs (loop5): 1 truncate cleaned up [ 91.594183][ T8411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.626765][ T8411] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1974: invalid indirect mapped block 4294901760 (level 0) [ 91.664916][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1980'. [ 91.691007][ T8411] EXT4-fs (loop5): Remounting filesystem read-only [ 91.701245][ T8431] netlink: 'syz.0.1979': attribute type 16 has an invalid length. [ 91.704457][ T8430] loop2: detected capacity change from 0 to 8192 [ 91.709173][ T8431] netlink: 'syz.0.1979': attribute type 17 has an invalid length. [ 91.721696][ T8428] bond1: Invalid ad_actor_system MAC address. [ 91.736918][ T8428] bond1: option ad_actor_system: invalid value (4294967295) [ 91.745128][ T8428] bond1 (unregistering): Released all slaves [ 91.751792][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.891417][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.902589][ T8431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.979104][ T8431] macvlan2: left promiscuous mode [ 92.013584][ T8431] gtp0: left promiscuous mode [ 92.018547][ T8431] gtp0: left allmulticast mode [ 92.028035][ T8426] ip6_vti0 speed is unknown, defaulting to 1000 [ 92.095861][ T8433] bridge0: left promiscuous mode [ 92.113090][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.134231][ T8458] loop3: detected capacity change from 0 to 128 [ 92.181797][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.209987][ T8433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.254219][ T82] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.275225][ T82] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.303998][ T8467] loop3: detected capacity change from 0 to 128 [ 92.315692][ T82] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.328532][ T82] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.343377][ T8467] EXT4-fs: Ignoring removed nobh option [ 92.372762][ T8467] ext4 filesystem being mounted at /367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.397213][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 92.397227][ T28] audit: type=1400 audit(2000000031.070:734): avc: denied { watch } for pid=8466 comm="syz.3.1990" path="/367/mnt" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.537540][ T28] audit: type=1326 audit(2000000031.210:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.4.1998" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18373fc799 code=0x0 [ 92.600559][ T8489] netlink: 'syz.5.2000': attribute type 29 has an invalid length. [ 92.619501][ T8489] netlink: 'syz.5.2000': attribute type 29 has an invalid length. [ 92.628512][ T8489] netlink: 'syz.5.2000': attribute type 29 has an invalid length. [ 92.637450][ T8489] netlink: 'syz.5.2000': attribute type 29 has an invalid length. [ 92.740462][ T28] audit: type=1400 audit(2000000031.410:736): avc: denied { remount } for pid=8497 comm="syz.0.2003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.770454][ T28] audit: type=1400 audit(2000000031.450:737): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.815247][ T28] audit: type=1400 audit(2000000031.490:738): avc: denied { relabelfrom } for pid=8503 comm="syz.0.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 92.839972][ T28] audit: type=1400 audit(2000000031.490:739): avc: denied { relabelto } for pid=8503 comm="syz.0.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 92.961434][ T28] audit: type=1400 audit(2000000031.640:740): avc: denied { ioctl } for pid=8514 comm="syz.0.2011" path="socket:[20437]" dev="sockfs" ino=20437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.018454][ T8519] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.039985][ T28] audit: type=1400 audit(2000000031.640:741): avc: denied { read } for pid=8514 comm="syz.0.2011" path="socket:[20437]" dev="sockfs" ino=20437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.094898][ T28] audit: type=1326 audit(2000000031.770:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889a87c799 code=0x7ffc0000 [ 93.123723][ T8519] EXT4-fs (loop0): 1 truncate cleaned up [ 93.181107][ T28] audit: type=1326 audit(2000000031.770:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889a87c799 code=0x7ffc0000 [ 93.222766][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'. [ 93.250812][ T8536] team0: Port device team_slave_0 removed [ 93.489404][ T8569] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.511331][ T8569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.511905][ T8567] ip6_vti0 speed is unknown, defaulting to 1000 [ 93.545024][ T8569] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.952938][ T8582] Invalid argument reading file caps for ./file0 [ 93.983171][ T8584] set_capacity_and_notify: 4 callbacks suppressed [ 93.983186][ T8584] loop3: detected capacity change from 0 to 164 [ 94.018075][ T8584] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.032754][ T8584] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 94.041426][ T8584] Symlink component flag not implemented [ 94.047129][ T8584] Symlink component flag not implemented [ 94.054224][ T8584] Symlink component flag not implemented (7) [ 94.060281][ T8584] Symlink component flag not implemented (116) [ 94.096436][ T8594] loop3: detected capacity change from 0 to 1024 [ 94.211494][ T8608] netlink: 'syz.3.2049': attribute type 3 has an invalid length. [ 94.414331][ T8622] random: crng reseeded on system resumption [ 94.552849][ T8636] Cannot find add_set index 0 as target [ 94.646421][ T8646] loop0: detected capacity change from 0 to 512 [ 94.668182][ T8646] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2068: invalid indirect mapped block 256 (level 2) [ 94.702543][ T8646] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 94.702842][ T8646] EXT4-fs (loop0): 2 truncates cleaned up [ 94.712007][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 94.712024][ C1] EXT4-fs (loop0): initial error at time 2000000033: ext4_free_branches:1023: inode 11 [ 94.712068][ C1] EXT4-fs (loop0): last error at time 2000000033: ext4_free_branches:1023: inode 11 [ 94.882573][ T8659] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 94.908055][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'. [ 94.917727][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'. [ 95.004522][ T8677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2081'. [ 95.131966][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.151841][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.176486][ T8687] loop0: detected capacity change from 0 to 256 [ 95.188178][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.213537][ T8687] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.230077][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.268054][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.290005][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.310669][ T8693] loop5: detected capacity change from 0 to 128 [ 95.317511][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.353692][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.378929][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.430938][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8685 comm=syz.4.2085 [ 95.510178][ T8707] loop2: detected capacity change from 0 to 512 [ 95.552973][ T8707] EXT4-fs (loop2): 1 orphan inode deleted [ 95.571056][ T8707] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.586439][ T8713] batadv_slave_1: entered promiscuous mode [ 95.594535][ T8459] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 1 [ 95.609834][ T8712] batadv_slave_1: left promiscuous mode [ 95.823602][ T8743] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 95.837477][ T8743] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.903652][ T8751] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2112'. [ 96.175509][ T8774] loop0: detected capacity change from 0 to 764 [ 96.217301][ T8778] loop2: detected capacity change from 0 to 128 [ 96.336064][ T8789] loop3: detected capacity change from 0 to 512 [ 96.365507][ T8789] EXT4-fs mount: 12 callbacks suppressed [ 96.365527][ T8789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.383996][ T8789] ext4 filesystem being mounted at /382/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.408859][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.449173][ T8801] bridge0: entered promiscuous mode [ 96.459500][ T8801] macvlan2: entered promiscuous mode [ 96.510077][ T8807] loop3: detected capacity change from 0 to 512 [ 96.623013][ T8814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.651912][ T8814] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2140: invalid indirect mapped block 4294967295 (level 1) [ 96.667311][ T8814] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 96.667411][ T8814] EXT4-fs (loop2): Remounting filesystem read-only [ 96.676795][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 96.676833][ C0] EXT4-fs (loop2): initial error at time 2000000035: ext4_free_branches:1023: inode 11 [ 96.676875][ C0] EXT4-fs (loop2): last error at time 2000000035: ext4_free_branches:1023: inode 11 [ 96.709605][ T8814] EXT4-fs (loop2): 2 truncates cleaned up [ 96.740527][ T8814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.783890][ T7472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.857284][ T8826] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.870864][ T8826] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.952486][ T7472] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.961107][ T8829] xt_hashlimit: size too large, truncated to 1048576 [ 97.112221][ T8840] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.119564][ T8840] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 97.162673][ T8845] ip6_vti0 speed is unknown, defaulting to 1000 [ 97.505363][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 97.505377][ T28] audit: type=1400 audit(2000000036.180:787): avc: denied { ioctl } for pid=8844 comm="syz.0.2153" path="socket:[22171]" dev="sockfs" ino=22171 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.630009][ T8881] EXT4-fs: Ignoring removed nobh option [ 97.636003][ T8881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.683774][ T28] audit: type=1400 audit(2000000036.360:788): avc: denied { mounton } for pid=8887 comm="syz.4.2171" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 97.727488][ T8881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.745281][ T28] audit: type=1400 audit(2000000036.420:789): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.782712][ T8881] EXT4-fs (loop0): shut down requested (2) [ 97.807479][ T8904] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 97.820030][ T8904] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 97.831184][ T8904] EXT4-fs (loop5): group descriptors corrupted! [ 97.842466][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2175'. [ 97.888467][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.899484][ T8875] ip6_vti0 speed is unknown, defaulting to 1000 [ 98.051959][ T8914] EXT4-fs: Ignoring removed bh option [ 98.071853][ T8875] chnl_net:caif_netlink_parms(): no params data found [ 98.105168][ T8914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.150158][ T28] audit: type=1400 audit(2000000036.820:790): avc: denied { ioctl } for pid=8913 comm="syz.0.2179" path="/409/file3/blkio.bfq.group_wait_time" dev="loop0" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.219628][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.263296][ T8932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.270291][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.284776][ T8875] bridge_slave_0: entered allmulticast mode [ 98.291461][ T8875] bridge_slave_0: entered promiscuous mode [ 98.293473][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2185'. [ 98.298302][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.313485][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.321704][ T8875] bridge_slave_1: entered allmulticast mode [ 98.327110][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.328410][ T8875] bridge_slave_1: entered promiscuous mode [ 98.372098][ T28] audit: type=1400 audit(2000000037.040:791): avc: denied { ioctl } for pid=8940 comm="syz.5.2188" path="socket:[22319]" dev="sockfs" ino=22319 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.417429][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.435274][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.446309][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.506380][ T8875] team0: Port device team_slave_0 added [ 98.523821][ T8875] team0: Port device team_slave_1 added [ 98.539820][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.548996][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.600073][ T8875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.630935][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.639004][ T8953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.660271][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.711992][ T8875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.771908][ T8875] hsr_slave_0: entered promiscuous mode [ 98.785623][ T8875] hsr_slave_1: entered promiscuous mode [ 98.798645][ T8875] debugfs: 'hsr0' already exists in 'hsr' [ 98.811348][ T8875] Cannot create hsr debugfs directory [ 98.948457][ T8875] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 101.578676][ T8875] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 101.603230][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.603956][ T8875] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 101.620991][ T8875] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 101.700298][ T28] audit: type=1400 audit(2000000040.380:792): avc: denied { connect } for pid=8973 comm="syz.5.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.712613][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.754212][ T8875] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.790629][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.797730][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.834006][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.841109][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.008304][ T8875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.043605][ T9006] bpf: Bad value for 'gid' [ 102.048123][ T28] audit: type=1400 audit(2000000040.720:793): avc: denied { getopt } for pid=9005 comm="syz.5.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 102.255019][ T8875] veth0_vlan: entered promiscuous mode [ 102.272488][ T8875] veth1_vlan: entered promiscuous mode [ 102.302708][ T8875] veth0_macvtap: entered promiscuous mode [ 102.328536][ T8875] veth1_macvtap: entered promiscuous mode [ 102.346843][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.355898][ T8875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.380087][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.404307][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.422236][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.449557][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.640592][ T9056] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.731020][ T9056] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.765121][ T28] audit: type=1326 audit(2000000041.440:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4b7ac799 code=0x7ffc0000 [ 102.789344][ T28] audit: type=1326 audit(2000000041.460:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4b7ac799 code=0x7ffc0000 [ 102.813621][ T28] audit: type=1326 audit(2000000041.490:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9c4b7ac799 code=0x7ffc0000 [ 102.892479][ T9056] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.892747][ T28] audit: type=1326 audit(2000000041.490:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4b7ac799 code=0x7ffc0000 [ 102.950323][ T28] audit: type=1326 audit(2000000041.490:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9065 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4b7ac799 code=0x7ffc0000 [ 103.025328][ T9056] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.057740][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2240'. [ 103.085710][ T9083] set_capacity_and_notify: 8 callbacks suppressed [ 103.085771][ T9083] loop0: detected capacity change from 0 to 2048 [ 103.111482][ T9091] bridge1: entered promiscuous mode [ 103.116712][ T9091] bridge1: entered allmulticast mode [ 103.129978][ T9091] team0: Port device bridge1 added [ 103.173324][ T9097] loop3: detected capacity change from 0 to 128 [ 103.204615][ T28] audit: type=1400 audit(2000000041.880:799): avc: denied { watch } for pid=9096 comm="syz.3.2247" path="/413/file0/file0" dev="loop3" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 103.228887][ T9091] bridge0: port 4(team0) entered blocking state [ 103.239500][ T9091] bridge0: port 4(team0) entered disabled state [ 103.246331][ T9091] team0: entered allmulticast mode [ 103.252005][ T9091] team_slave_0: entered allmulticast mode [ 103.257915][ T9091] team_slave_1: entered allmulticast mode [ 103.268379][ T9091] team0: entered promiscuous mode [ 103.294933][ T9091] team_slave_0: entered promiscuous mode [ 103.300301][ T9104] selinux_netlink_send: 6 callbacks suppressed [ 103.300367][ T9104] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9104 comm=syz.3.2250 [ 103.317317][ T9091] team_slave_1: entered promiscuous mode [ 103.630513][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2265'. [ 103.641284][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2265'. [ 103.719740][ T262] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.732389][ T262] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.746973][ T262] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.787376][ T82] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.071607][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 104.090301][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2281'. [ 104.130979][ T9175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.221032][ T9181] netlink: 'syz.4.2288': attribute type 6 has an invalid length. [ 104.547211][ T9193] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2292'. [ 105.194642][ T28] audit: type=1400 audit(2000000043.870:800): avc: denied { write } for pid=9214 comm="syz.4.2301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 105.293972][ T28] audit: type=1400 audit(2000000043.970:801): avc: denied { bind } for pid=9224 comm="syz.5.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.365074][ T28] audit: type=1400 audit(2000000043.990:802): avc: denied { setopt } for pid=9224 comm="syz.5.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.391969][ T28] audit: type=1400 audit(2000000043.990:803): avc: denied { connect } for pid=9224 comm="syz.5.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.451184][ T9241] loop5: detected capacity change from 0 to 128 [ 105.585608][ T9241] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.601192][ T9241] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.754554][ T30] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.826161][ T9250] loop3: detected capacity change from 0 to 512 [ 105.852702][ T9250] FAT-fs (loop3): Directory bread(block 199916) failed [ 105.862142][ T9252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9252 comm=syz.5.2317 [ 105.863122][ T9250] FAT-fs (loop3): Directory bread(block 199917) failed [ 105.881924][ T9250] FAT-fs (loop3): Directory bread(block 199918) failed [ 105.888890][ T9250] FAT-fs (loop3): Directory bread(block 199919) failed [ 105.896398][ T9250] FAT-fs (loop3): Directory bread(block 199920) failed [ 105.903627][ T9250] FAT-fs (loop3): Directory bread(block 199921) failed [ 105.911783][ T9250] FAT-fs (loop3): Directory bread(block 199922) failed [ 105.920552][ T9250] FAT-fs (loop3): Directory bread(block 199923) failed [ 105.946373][ T9254] syzkaller1: entered promiscuous mode [ 105.970498][ T9254] syzkaller1: entered allmulticast mode [ 106.340570][ T9264] ip6_vti0 speed is unknown, defaulting to 1000 [ 106.417637][ T30] bridge_slave_1: left allmulticast mode [ 106.427704][ T30] bridge_slave_1: left promiscuous mode [ 106.439814][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.457912][ T30] bridge_slave_0: left allmulticast mode [ 106.467281][ T30] bridge_slave_0: left promiscuous mode [ 106.478711][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.513557][ T82] smc: removing ib device syz2 [ 106.581876][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.601109][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.611025][ T30] bond0 (unregistering): Released all slaves [ 106.621688][ T3378] ip6_vti0 speed is unknown, defaulting to 1000 [ 106.628011][ T3378] syz2: Port: 1 Link DOWN [ 106.733223][ T9264] chnl_net:caif_netlink_parms(): no params data found [ 106.923277][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.930511][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.937761][ T9264] bridge_slave_0: entered allmulticast mode [ 106.944914][ T9264] bridge_slave_0: entered promiscuous mode [ 106.951788][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.958908][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.966319][ T9264] bridge_slave_1: entered allmulticast mode [ 106.972838][ T9264] bridge_slave_1: entered promiscuous mode [ 106.990471][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.046693][ T30] hsr_slave_0: left promiscuous mode [ 107.052525][ T30] hsr_slave_1: left promiscuous mode [ 107.058380][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.066165][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.073803][ T30] batman_adv: batadv0: Removing interface: ipvlan2 [ 107.103238][ T30] team_slave_1 (unregistering): left allmulticast mode [ 107.110580][ T30] team0 (unregistering): Port device team_slave_1 removed [ 107.119972][ T30] team_slave_0 (unregistering): left allmulticast mode [ 107.127532][ T30] team0 (unregistering): Port device team_slave_0 removed [ 107.151591][ T9328] loop5: detected capacity change from 0 to 512 [ 107.160609][ T9328] EXT4-fs: Mount option(s) incompatible with ext2 [ 107.214907][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.245342][ T9264] team0: Port device team_slave_0 added [ 107.258247][ T9264] team0: Port device team_slave_1 added [ 107.266411][ T9332] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 107.293591][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.300701][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.333606][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.346010][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.360304][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.421609][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.459452][ T9264] hsr_slave_0: entered promiscuous mode [ 107.545749][ T9264] hsr_slave_1: entered promiscuous mode [ 107.643582][ T9264] debugfs: 'hsr0' already exists in 'hsr' [ 107.649324][ T9264] Cannot create hsr debugfs directory [ 107.776229][ T9367] ip6erspan0: entered allmulticast mode [ 107.807846][ T9264] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 107.836633][ T9264] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 107.847448][ T9264] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 107.857041][ T9264] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 107.893691][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.920122][ T9395] netlink: 'syz.5.2347': attribute type 3 has an invalid length. [ 107.927940][ T9395] netlink: 'syz.5.2347': attribute type 1 has an invalid length. [ 107.940423][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.971908][ T82] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.990679][ T9395] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.2347'. [ 108.011671][ T82] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.079243][ T9406] syzkaller1: entered promiscuous mode [ 108.086662][ T9406] syzkaller1: entered allmulticast mode [ 108.102356][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.112653][ T82] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.141368][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.169385][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.176534][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.202164][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.209274][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.218858][ T82] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.261688][ T8444] IPVS: starting estimator thread 0... [ 108.269872][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 108.295750][ T28] audit: type=1400 audit(2000000046.940:827): avc: denied { read } for pid=9422 comm="syz.5.2357" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.302023][ T9264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.331044][ T28] audit: type=1400 audit(2000000046.940:828): avc: denied { open } for pid=9422 comm="syz.5.2357" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.360461][ T9427] IPVS: using max 2496 ests per chain, 124800 per kthread [ 108.433581][ T9403] chnl_net:caif_netlink_parms(): no params data found [ 108.450428][ T82] bridge_slave_1: left allmulticast mode [ 108.456153][ T82] bridge_slave_1: left promiscuous mode [ 108.461813][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.469415][ T82] bridge_slave_0: left allmulticast mode [ 108.475250][ T82] bridge_slave_0: left promiscuous mode [ 108.481024][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.572266][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.582332][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.593650][ T82] bond0 (unregistering): Released all slaves [ 108.601289][ T28] audit: type=1400 audit(2000000047.280:829): avc: denied { bind } for pid=9441 comm="syz.5.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.625804][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.676363][ T9451] loop0: detected capacity change from 0 to 512 [ 108.692233][ T82] hsr_slave_0: left promiscuous mode [ 108.698187][ T82] hsr_slave_1: left promiscuous mode [ 108.704200][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.711809][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.727381][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.737277][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.748004][ T9455] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 108.756240][ T82] veth1_macvtap: left promiscuous mode [ 108.764617][ T82] veth0_macvtap: left promiscuous mode [ 108.770219][ T82] veth1_vlan: left promiscuous mode [ 108.775597][ T82] veth0_vlan: left promiscuous mode [ 108.852091][ T82] team0 (unregistering): Port device team_slave_1 removed [ 108.866232][ T82] team0 (unregistering): Port device team_slave_0 removed [ 108.926487][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.934562][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.947720][ T9403] bridge_slave_0: entered allmulticast mode [ 108.958397][ T9403] bridge_slave_0: entered promiscuous mode [ 108.972466][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.988747][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.009637][ T9403] bridge_slave_1: entered allmulticast mode [ 109.023684][ T9403] bridge_slave_1: entered promiscuous mode [ 109.039292][ T28] audit: type=1400 audit(2000000047.710:830): avc: denied { write } for pid=9487 comm="syz.5.2372" name="cgroup.subtree_control" dev="cgroup2" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.073356][ T28] audit: type=1400 audit(2000000047.710:831): avc: denied { open } for pid=9487 comm="syz.5.2372" path="" dev="cgroup2" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.100102][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.111452][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.132889][ T9403] team0: Port device team_slave_0 added [ 109.142641][ T9403] team0: Port device team_slave_1 added [ 109.166205][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.173427][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.199740][ T9403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.211205][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.218132][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.244101][ T9403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.264348][ T9264] veth0_vlan: entered promiscuous mode [ 109.287913][ T9403] hsr_slave_0: entered promiscuous mode [ 109.294093][ T9403] hsr_slave_1: entered promiscuous mode [ 109.299830][ T9403] debugfs: 'hsr0' already exists in 'hsr' [ 109.305980][ T9403] Cannot create hsr debugfs directory [ 109.319733][ T9264] veth1_vlan: entered promiscuous mode [ 109.349764][ T9264] veth0_macvtap: entered promiscuous mode [ 109.373101][ T9264] veth1_macvtap: entered promiscuous mode [ 109.404213][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.416959][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.433723][ T8459] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.449367][ T8459] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.458331][ T8459] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.475173][ T9403] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 109.484006][ T8459] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.505357][ T9403] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 109.514424][ T9403] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 109.524408][ T9403] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 109.606974][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.622059][ T9403] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.643992][ T262] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.651204][ T262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.677441][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2375'. [ 109.748681][ T9546] bond1: Invalid ad_actor_system MAC address. [ 109.757436][ T9546] bond1: option ad_actor_system: invalid value (4294967295) [ 109.765957][ T9546] bond1 (unregistering): Released all slaves [ 109.783502][ T28] audit: type=1400 audit(2000000048.460:832): avc: denied { listen } for pid=9557 comm="syz.4.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.784893][ T8445] IPVS: starting estimator thread 0... [ 109.814100][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.821179][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.959994][ T9559] IPVS: using max 2448 ests per chain, 122400 per kthread [ 109.992222][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2396'. [ 110.011380][ T9585] bond1: Invalid ad_actor_system MAC address. [ 110.017528][ T9585] bond1: option ad_actor_system: invalid value (4294967295) [ 110.025838][ T9585] bond1 (unregistering): Released all slaves [ 110.038648][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.170474][ T9403] veth0_vlan: entered promiscuous mode [ 110.178154][ T9403] veth1_vlan: entered promiscuous mode [ 110.194356][ T9403] veth0_macvtap: entered promiscuous mode [ 110.201619][ T9403] veth1_macvtap: entered promiscuous mode [ 110.212812][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.223640][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.235544][ T69] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.244453][ T69] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.254215][ T82] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.263175][ T82] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.482732][ T9628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2391'. [ 110.495812][ T28] audit: type=1326 audit(2000000049.170:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889a87c799 code=0x7ffc0000 [ 110.542347][ T28] audit: type=1326 audit(2000000049.170:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f889a87c799 code=0x7ffc0000 [ 110.567352][ T28] audit: type=1326 audit(2000000049.170:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889a87c799 code=0x7ffc0000 [ 110.594104][ T28] audit: type=1326 audit(2000000049.170:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.5.2392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f889a87c799 code=0x7ffc0000 [ 110.622664][ T9640] loop7: detected capacity change from 0 to 128 [ 110.771293][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2409'. [ 110.807234][ T47] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.852719][ T9664] syzkaller1: entered promiscuous mode [ 110.858834][ T9664] syzkaller1: entered allmulticast mode [ 110.867016][ T9664] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 42 [ 110.891263][ T47] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.942600][ T47] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.992646][ T47] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.074075][ T47] bridge_slave_1: left allmulticast mode [ 111.079791][ T47] bridge_slave_1: left promiscuous mode [ 111.085530][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.093695][ T47] bridge_slave_0: left allmulticast mode [ 111.099360][ T47] bridge_slave_0: left promiscuous mode [ 111.105160][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.202705][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.212486][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.221916][ T47] bond0 (unregistering): Released all slaves [ 111.256941][ T47] hsr_slave_0: left promiscuous mode [ 111.263053][ T47] hsr_slave_1: left promiscuous mode [ 111.268683][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.276808][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.285880][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.293501][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.304194][ T47] veth1_macvtap: left promiscuous mode [ 111.309833][ T47] veth0_macvtap: left promiscuous mode [ 111.315660][ T47] veth1_vlan: left promiscuous mode [ 111.321464][ T47] veth0_vlan: left promiscuous mode [ 111.372795][ T9692] loop0: detected capacity change from 0 to 128 [ 111.431598][ T9696] xt_connbytes: Forcing CT accounting to be enabled [ 111.444230][ T9696] program syz.0.2419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.453743][ T47] team0 (unregistering): Port device team_slave_1 removed [ 111.507847][ T9700] loop5: detected capacity change from 0 to 512 [ 111.549104][ T9700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.565792][ T9700] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.573409][ T9708] loop7: detected capacity change from 0 to 1024 [ 111.584877][ T9708] EXT4-fs: Ignoring removed oldalloc option [ 111.592315][ T9708] EXT4-fs: Ignoring removed bh option [ 111.655256][ T9708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.767615][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.800731][ T9264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.845099][ T9733] openvswitch: netlink: Missing key (keys=40, expected=100) [ 111.976758][ T9755] syzkaller1: entered promiscuous mode [ 111.989772][ T9755] syzkaller1: entered allmulticast mode [ 112.107083][ T9771] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.136632][ T9782] loop7: detected capacity change from 0 to 7 [ 112.222513][ T9771] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.253474][ T9792] IPVS: Error connecting to the multicast addr [ 112.286982][ T9771] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.342889][ T9771] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.488255][ T47] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.505032][ T47] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.542509][ T82] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.552581][ T82] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.574095][ T9822] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.613774][ T9827] loop7: detected capacity change from 0 to 512 [ 112.633553][ T9827] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 112.668249][ T9827] EXT4-fs (loop7): 1 truncate cleaned up [ 112.677910][ T9827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.740082][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.749338][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.769731][ T9264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.789084][ T9845] loop7: detected capacity change from 0 to 512 [ 112.803184][ T9845] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.816516][ T9845] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.838332][ T9264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.959926][ T9843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.970664][ T9843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.370055][ T9877] xt_connbytes: Forcing CT accounting to be enabled [ 113.377513][ T9877] program syz.7.2475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.520251][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 113.520267][ T28] audit: type=1400 audit(2000000052.200:871): avc: denied { bind } for pid=9891 comm="syz.8.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.524876][ T9895] loop0: detected capacity change from 0 to 2048 [ 113.575476][ T9895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.629015][ T9895] EXT4-fs (loop0): shut down requested (2) [ 113.655625][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2488'. [ 113.667417][ T9903] team0: Port device netdevsim1 removed [ 113.678387][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.751212][ T9919] xt_connbytes: Forcing CT accounting to be enabled [ 113.758680][ T9919] program syz.8.2493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.929736][ T9937] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.003642][ T9937] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.061210][ T28] audit: type=1400 audit(2000000052.740:872): avc: denied { view } for pid=9947 comm="syz.4.2503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 114.086932][ T9937] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.088190][ T9951] loop7: detected capacity change from 0 to 7 [ 114.106521][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.142269][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.157297][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.191040][ T9937] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.206659][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.220596][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.233339][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.248213][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.261417][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.275460][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.313920][ T47] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.320683][ T9953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=9953 comm=syz.7.2504 [ 114.350056][ T47] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.359535][ T47] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.368418][ T47] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.512524][ T9983] loop8: detected capacity change from 0 to 512 [ 114.548642][ T9983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.582058][ T9983] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.623733][ T9403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.642697][ T9994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.659195][ T9994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.682516][ T9997] loop8: detected capacity change from 0 to 512 [ 114.693722][ T9997] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 114.716544][ T9997] EXT4-fs (loop8): 1 truncate cleaned up [ 114.722843][ T9997] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.749019][ T28] audit: type=1326 audit(2000000053.420:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 114.772542][ T28] audit: type=1326 audit(2000000053.420:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 114.796403][ T28] audit: type=1326 audit(2000000053.420:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 114.820183][ T28] audit: type=1326 audit(2000000053.420:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 114.844221][ T28] audit: type=1326 audit(2000000053.500:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 114.867706][ T28] audit: type=1326 audit(2000000053.500:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52c410c502 code=0x7ffc0000 [ 114.891134][ T28] audit: type=1326 audit(2000000053.500:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f52c410c597 code=0x7ffc0000 [ 114.892181][ T9403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.914597][ T28] audit: type=1326 audit(2000000053.500:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.7.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f52c40c9491 code=0x7ffc0000 [ 115.043416][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2532'. [ 115.213302][T10027] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2537'. [ 115.240442][T10027] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2537'. [ 115.368873][T10048] loop5: detected capacity change from 0 to 1024 [ 115.397047][T10048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.444714][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2556'. [ 115.527872][T10059] xt_hashlimit: size too large, truncated to 1048576 [ 115.548317][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.623982][T10071] loop5: detected capacity change from 0 to 128 [ 115.662749][T10071] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.679494][T10071] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.740245][ T4894] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.778381][T10082] 9pnet: p9_errstr2errno: server reported unknown error [ 115.829652][T10097] loop7: detected capacity change from 0 to 1024 [ 115.872540][T10097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.930783][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2564'. [ 115.981203][ T9264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.183485][T10123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2572'. [ 116.343787][T10145] loop5: detected capacity change from 0 to 2048 [ 116.394441][T10145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.456344][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.761522][T10175] loop5: detected capacity change from 0 to 512 [ 116.774077][T10177] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2598'. [ 116.799979][T10177] bond0: ARP target 8.4.0.0 is already present [ 116.816348][T10177] bond0: option arp_ip_target: invalid value (1032) [ 117.507807][T10216] loop5: detected capacity change from 0 to 512 [ 117.531662][T10216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.537622][T10219] bpf: Bad value for 'gid' [ 117.581757][T10216] EXT4-fs (loop5): 1 truncate cleaned up [ 117.600581][T10216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.661000][T10231] loop7: detected capacity change from 0 to 1024 [ 117.681528][T10231] EXT4-fs: Ignoring removed nobh option [ 117.735792][T10231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.781938][T10231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.795976][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.844925][T10231] EXT4-fs (loop7): shut down requested (2) [ 117.918825][ T9264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.373977][T10278] EXT4-fs: inline encryption not supported [ 118.424133][T10278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.652449][ T9264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.775407][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 119.775422][ T28] audit: type=1326 audit(2000000058.450:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 119.909001][ T28] audit: type=1326 audit(2000000058.450:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 119.973134][ T28] audit: type=1326 audit(2000000058.450:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 120.065250][ T28] audit: type=1326 audit(2000000058.450:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 120.140164][ T28] audit: type=1326 audit(2000000058.480:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 120.199934][ T28] audit: type=1326 audit(2000000058.480:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 120.249925][ T28] audit: type=1326 audit(2000000058.480:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 120.319967][ T28] audit: type=1326 audit(2000000058.490:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 120.374844][ T28] audit: type=1326 audit(2000000058.490:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 120.400653][T10389] set_capacity_and_notify: 2 callbacks suppressed [ 120.400669][T10389] loop8: detected capacity change from 0 to 8192 [ 120.477875][ T28] audit: type=1326 audit(2000000058.540:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.2657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52c410c799 code=0x7ffc0000 [ 120.729756][T10430] loop8: detected capacity change from 0 to 512 [ 120.899188][T10437] xt_hashlimit: size too large, truncated to 1048576 [ 121.295266][T10457] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2681'. [ 121.688218][T10497] loop5: detected capacity change from 0 to 512 [ 121.714296][T10497] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2690: invalid indirect mapped block 256 (level 2) [ 121.748360][T10497] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 121.748691][T10497] EXT4-fs (loop5): 2 truncates cleaned up [ 121.757874][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 121.757896][ C0] EXT4-fs (loop5): initial error at time 2000000060: ext4_free_branches:1023: inode 11 [ 121.757929][ C0] EXT4-fs (loop5): last error at time 2000000060: ext4_free_branches:1023: inode 11 [ 121.898231][T10497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.945954][T10507] loop0: detected capacity change from 0 to 512 [ 121.963212][T10507] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.988782][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.999589][T10507] EXT4-fs (loop0): 1 truncate cleaned up [ 122.010458][T10507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.185566][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.278327][T10518] loop5: detected capacity change from 0 to 512 [ 122.350210][T10518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.371126][T10518] EXT4-fs (loop5): 1 truncate cleaned up [ 122.377270][T10518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.571145][T10539] selinux_netlink_send: 7 callbacks suppressed [ 122.571167][T10539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10539 comm=syz.0.2701 [ 122.631353][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.357276][T10588] loop8: detected capacity change from 0 to 512 [ 123.390883][T10588] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2715: invalid indirect mapped block 256 (level 2) [ 123.420151][T10588] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 123.420622][T10588] EXT4-fs (loop8): 2 truncates cleaned up [ 123.435542][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 123.435563][ C0] EXT4-fs (loop8): initial error at time 2000000062: ext4_free_branches:1023: inode 11 [ 123.435597][ C0] EXT4-fs (loop8): last error at time 2000000062: ext4_free_branches:1023: inode 11 [ 123.506792][T10588] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.580161][T10603] loop0: detected capacity change from 0 to 512 [ 123.593390][ T9403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.647550][T10608] loop5: detected capacity change from 0 to 512 [ 123.722421][ T8456] tipc: Subscription rejected, illegal request [ 123.821991][T10614] loop8: detected capacity change from 0 to 8192 [ 125.431608][T10680] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 125.608223][T10695] loop8: detected capacity change from 0 to 512 [ 125.630518][T10695] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 125.650236][T10695] EXT4-fs (loop8): 1 truncate cleaned up [ 125.660383][T10695] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.746042][ T9403] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.145095][T10709] loop5: detected capacity change from 0 to 1024 [ 126.187680][T10709] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 126.205319][T10709] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.2746: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.253448][T10709] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 126.256137][T10709] __quota_error: 39 callbacks suppressed [ 126.256150][T10709] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 126.265227][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 126.265266][ C0] EXT4-fs (loop5): initial error at time 2000000064: ext4_map_blocks:776: inode 3: block 2 [ 126.265304][ C0] EXT4-fs (loop5): last error at time 2000000064: ext4_map_blocks:776: inode 3: block 2 [ 126.305460][T10709] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.2746: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.319707][T10709] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 126.319918][T10709] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 126.338356][T10709] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2746: Failed to acquire dquot type 0 [ 126.349733][T10709] loop5: lost filesystem error report for type 5 error -117 [ 126.361638][T10709] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 126.380342][T10709] loop5: lost filesystem error report for type 5 error -117 [ 126.380726][T10709] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.2746: mark_inode_dirty error [ 126.426032][T10709] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.427064][T10709] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 126.446411][T10709] EXT4-fs (loop5): 1 orphan inode deleted [ 126.452491][T10709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.467232][ T30] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.482266][ T30] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 126.490783][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0 [ 126.577949][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.589427][ T4894] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.605425][ T4894] loop5: lost filesystem error report for type 5 error -117 [ 126.607393][ T4894] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 126.625260][ T4894] loop5: lost filesystem error report for type 5 error -117 [ 126.625417][ T4894] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 126.646491][T10723] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.653201][ T4894] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 126.691999][T10723] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.771040][T10723] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.821116][T10735] netlink: 'syz.4.2753': attribute type 1 has an invalid length. [ 126.841748][T10723] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.901929][T10743] loop5: detected capacity change from 0 to 8192 [ 126.908742][ T8459] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.952070][ T8456] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.997755][ T8456] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.009741][ T8456] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.140629][T10755] loop7: detected capacity change from 0 to 1024 [ 127.148527][T10755] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 127.178145][T10755] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.2764: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.212833][T10755] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.213041][T10755] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 127.222118][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 127.222142][ C1] EXT4-fs (loop7): initial error at time 2000000065: ext4_map_blocks:776: inode 3: block 2 [ 127.222199][ C1] EXT4-fs (loop7): last error at time 2000000065: ext4_map_blocks:776: inode 3: block 2 [ 127.270488][T10755] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.2764: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.286390][T10755] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.289449][T10755] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 127.310748][T10755] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2764: Failed to acquire dquot type 0 [ 127.322348][T10755] loop7: lost filesystem error report for type 5 error -117 [ 127.322504][T10755] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 127.339586][T10755] loop7: lost filesystem error report for type 5 error -117 [ 127.339730][T10755] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.2764: mark_inode_dirty error [ 127.359005][T10755] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.359151][T10755] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 127.378990][T10755] EXT4-fs (loop7): 1 orphan inode deleted [ 127.385866][T10755] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.398197][ T30] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.415528][ T30] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.415731][ T30] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 127.443811][ T30] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0 [ 127.550862][ T9264] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.562235][ T9264] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 127.575387][ T9264] loop7: lost filesystem error report for type 5 error -117 [ 127.575490][ T9264] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 127.619709][ T9264] loop7: lost filesystem error report for type 5 error -117 [ 127.619842][ T9264] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 127.638862][ T9264] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 127.783329][T10780] loop8: detected capacity change from 0 to 8192 [ 127.921050][T10796] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.012139][T10796] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.076965][T10811] syzkaller1: entered promiscuous mode [ 128.082799][T10811] syzkaller1: entered allmulticast mode [ 128.092604][T10813] loop0: detected capacity change from 0 to 8192 [ 128.101766][T10796] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.116525][ T28] audit: type=1400 audit(2000000066.790:1042): avc: denied { mounton } for pid=10812 comm="syz.0.2788" path="/519/file1/bus" dev="loop0" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 128.191445][T10796] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.209822][ T3314] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 128.225383][ T3314] FAT-fs (loop0): Filesystem has been set read-only [ 128.260945][ T28] audit: type=1400 audit(2000000066.940:1043): avc: denied { ioctl } for pid=10824 comm="syz.4.2793" path="socket:[31189]" dev="sockfs" ino=31189 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.307399][ T8459] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.327749][ T8459] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.352471][ T8456] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.379178][ T8456] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.497886][T10844] loop8: detected capacity change from 0 to 8192 [ 128.502822][T10848] IPVS: rr: FWM 3 0x00000003 - no destination available [ 128.518303][ T28] audit: type=1326 audit(2000000067.190:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953d19c799 code=0x7ffc0000 [ 128.590045][ T28] audit: type=1326 audit(2000000067.190:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.8.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f953d19c799 code=0x7ffc0000 [ 128.731999][T10859] loop5: detected capacity change from 0 to 1024 [ 128.823572][T10859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.859235][T10856] IPVS: You probably need to specify IP address on multicast interface. [ 128.910175][T10856] IPVS: Error connecting to the multicast addr [ 128.910992][T10859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.979188][ T4894] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.535557][T10899] loop8: detected capacity change from 0 to 8192 [ 129.791123][T10914] loop0: detected capacity change from 0 to 1024 [ 129.797961][T10914] EXT4-fs: Ignoring removed oldalloc option [ 129.910022][T10914] EXT4-fs: Ignoring removed bh option [ 129.993729][T10914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.074881][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.138612][T10924] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.162569][T10926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.193983][T10926] ext4 filesystem being mounted at /526/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.221675][T10924] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.281792][T10924] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.359333][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.376239][T10924] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.482743][ T8444] IPVS: starting estimator thread 0... [ 130.484340][T10935] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 130.564025][T10931] ================================================================== [ 130.572225][T10931] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 130.579351][T10931] [ 130.581673][T10931] write to 0xffff8881482812f8 of 2 bytes by task 10940 on cpu 1: [ 130.589388][T10931] fat16_ent_put+0x28/0x60 [ 130.593800][T10931] fat_ent_write+0x6c/0xe0 [ 130.598197][T10931] fat_chain_add+0x16c/0x490 [ 130.602946][T10931] fat_get_block+0x46c/0x5e0 [ 130.607543][T10931] __block_write_begin_int+0x400/0xf90 [ 130.613021][T10931] cont_write_begin+0x5fe/0x970 [ 130.617887][T10931] fat_write_begin+0x4f/0xe0 [ 130.622577][T10931] generic_perform_write+0x183/0x490 [ 130.627873][T10931] __generic_file_write_iter+0x9e/0x120 [ 130.633431][T10931] generic_file_write_iter+0x8d/0x310 [ 130.638811][T10931] vfs_write+0x5a6/0x9f0 [ 130.643078][T10931] ksys_write+0xdc/0x1a0 [ 130.647319][T10931] __x64_sys_write+0x40/0x50 [ 130.651915][T10931] x64_sys_call+0x27e1/0x3020 [ 130.656690][T10931] do_syscall_64+0x12c/0x370 [ 130.661284][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.667182][T10931] [ 130.669501][T10931] read to 0xffff888148281200 of 512 bytes by task 10931 on cpu 0: [ 130.677305][T10931] fat_mirror_bhs+0x1df/0x320 [ 130.681992][T10931] fat_alloc_clusters+0xb48/0xc50 [ 130.687029][T10931] fat_get_block+0x258/0x5e0 [ 130.691641][T10931] __block_write_begin_int+0x400/0xf90 [ 130.697207][T10931] cont_write_begin+0x5fe/0x970 [ 130.702074][T10931] fat_write_begin+0x4f/0xe0 [ 130.706754][T10931] generic_perform_write+0x183/0x490 [ 130.712033][T10931] __generic_file_write_iter+0x9e/0x120 [ 130.717577][T10931] generic_file_write_iter+0x8d/0x310 [ 130.722961][T10931] vfs_write+0x5a6/0x9f0 [ 130.727450][T10931] ksys_write+0xdc/0x1a0 [ 130.731767][T10931] __x64_sys_write+0x40/0x50 [ 130.736350][T10931] x64_sys_call+0x27e1/0x3020 [ 130.741116][T10931] do_syscall_64+0x12c/0x370 [ 130.745742][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.751625][T10931] [ 130.753942][T10931] Reported by Kernel Concurrency Sanitizer on: [ 130.760093][T10931] CPU: 0 UID: 0 PID: 10931 Comm: syz.5.2846 Not tainted syzkaller #0 PREEMPT(full) [ 130.769451][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.779577][T10931] ================================================================== [ 130.799891][ T69] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.810779][T10939] IPVS: using max 2448 ests per chain, 122400 per kthread [ 130.820056][ T69] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.834363][ T30] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.850510][ T30] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.945773][ T8456] ================================================================== [ 130.953889][ T8456] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 130.962116][ T8456] [ 130.964422][ T8456] write to 0xffff8881482814ee of 2 bytes by task 10931 on cpu 1: [ 130.972115][ T8456] fat16_ent_put+0x28/0x60 [ 130.976533][ T8456] fat_alloc_clusters+0x57b/0xc50 [ 130.981544][ T8456] fat_get_block+0x258/0x5e0 [ 130.986115][ T8456] __block_write_begin_int+0x400/0xf90 [ 130.991589][ T8456] cont_write_begin+0x5fe/0x970 [ 130.996439][ T8456] fat_write_begin+0x4f/0xe0 [ 131.001012][ T8456] generic_perform_write+0x183/0x490 [ 131.006297][ T8456] __generic_file_write_iter+0x9e/0x120 [ 131.011821][ T8456] generic_file_write_iter+0x8d/0x310 [ 131.017192][ T8456] vfs_write+0x5a6/0x9f0 [ 131.021409][ T8456] ksys_write+0xdc/0x1a0 [ 131.025632][ T8456] __x64_sys_write+0x40/0x50 [ 131.030200][ T8456] x64_sys_call+0x27e1/0x3020 [ 131.034948][ T8456] do_syscall_64+0x12c/0x370 [ 131.039514][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.045403][ T8456] [ 131.047706][ T8456] read to 0xffff888148281400 of 512 bytes by task 8456 on cpu 0: [ 131.055405][ T8456] copy_folio_from_iter_atomic+0x75f/0x1170 [ 131.061327][ T8456] generic_perform_write+0x2c1/0x490 [ 131.066594][ T8456] shmem_file_write_iter+0xc5/0xf0 [ 131.071686][ T8456] lo_rw_aio+0x67d/0x730 [ 131.075914][ T8456] loop_process_work+0x56c/0xac0 [ 131.080841][ T8456] loop_workfn+0x31/0x40 [ 131.085064][ T8456] process_scheduled_works+0x513/0xa10 [ 131.090502][ T8456] worker_thread+0x58a/0x780 [ 131.095080][ T8456] kthread+0x22a/0x280 [ 131.099132][ T8456] ret_from_fork+0x150/0x360 [ 131.103713][ T8456] ret_from_fork_asm+0x1a/0x30 [ 131.108466][ T8456] [ 131.110769][ T8456] Reported by Kernel Concurrency Sanitizer on: [ 131.116899][ T8456] CPU: 0 UID: 0 PID: 8456 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 131.126333][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.136372][ T8456] Workqueue: loop5 loop_workfn [ 131.141232][ T8456] ==================================================================