last executing test programs: 3m9.111755903s ago: executing program 32 (id=442): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m9.002971797s ago: executing program 33 (id=447): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m4.816867332s ago: executing program 34 (id=484): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) 2m16.807521592s ago: executing program 7 (id=1129): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2c180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x34, 0xffff}, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="c80000000002010400000000010000000a0000033c0003800c00028005000100000000002c00018014000300fe80000000000000000000000000002414000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400fc0100000000000000000000000000010c00028005000100000000003c0001800c000280040001003a0000002c00018014000300fc0100"/179], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xffffffffffffffff, &(0x7f0000025000/0x3000)=nil, 0x3) 2m16.718604275s ago: executing program 7 (id=1134): unshare(0x20060400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0x8) 2m16.650640577s ago: executing program 7 (id=1136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x40) futex(&(0x7f000000cffc)=0x2, 0xa, 0x100000, 0x0, 0x0, 0x3000000) 2m15.777216315s ago: executing program 7 (id=1149): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x1, 0x24b, &(0x7f0000001180)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb31e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) 2m15.667651969s ago: executing program 7 (id=1151): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, [0x6577, 0x6, 0x4760, 0x200, 0x7, 0x4, 0x3, 0x200, 0xffffffff00000000, 0xc, 0x0, 0x0, 0x8000000000000001, 0x76d, 0x2]}, &(0x7f0000000580)=0x100) 2m14.973642232s ago: executing program 7 (id=1163): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1fd}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000280)="4c00000012001f15b9409b849ac00a00a5784002000002000000030038c88cc055c5ac27a6c5b06875d8cb9cfe83f24cd0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x4c, 0x0, 0x0, 0x0) 2m14.948228673s ago: executing program 35 (id=1163): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1fd}, 0x1c) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000280)="4c00000012001f15b9409b849ac00a00a5784002000002000000030038c88cc055c5ac27a6c5b06875d8cb9cfe83f24cd0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0c", 0x4c, 0x0, 0x0, 0x0) 1m46.483300791s ago: executing program 1 (id=1611): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000058f000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004b2000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x974, 0x1f480, 0x0, 0x39a}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x4}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m46.390308464s ago: executing program 1 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x108}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1m46.21580079s ago: executing program 1 (id=1620): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m46.140402602s ago: executing program 1 (id=1632): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x83101a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 1m46.139632262s ago: executing program 1 (id=1633): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x97ff) 1m45.959545458s ago: executing program 1 (id=1624): socket(0x15, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r0, 0x4094, 0x7721, 0x16, 0x0, 0x0) 1m45.926295239s ago: executing program 36 (id=1624): socket(0x15, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r0, 0x4094, 0x7721, 0x16, 0x0, 0x0) 1m7.17879763s ago: executing program 9 (id=2242): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r3, @ANYBLOB="080002007f000001"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1m7.100806163s ago: executing program 9 (id=2243): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000640)=""/45, 0x0, 0x2d, 0x1, 0x18}, 0x28) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x82, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 1m7.046233745s ago: executing program 9 (id=2246): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300006e000d0000000000b702000000000000739af0ff00000000c509000035000800c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(0x0, 0xee00) r2 = socket(0xa, 0x1, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(0x4) ioctl(r2, 0x8936, 0x0) 1m6.714026936s ago: executing program 9 (id=2257): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1m6.616328069s ago: executing program 9 (id=2260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, 0x0, 0x0, 0x407f0b00}]) 1m5.897344622s ago: executing program 9 (id=2264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000091) 1m5.842928364s ago: executing program 37 (id=2264): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000091) 52.397266528s ago: executing program 8 (id=2434): mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) 51.436405219s ago: executing program 8 (id=2439): timer_create(0x0, &(0x7f0000001040)={0x0, 0x21, 0x2}, &(0x7f0000001080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 50.47417974s ago: executing program 8 (id=2445): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="7014cfb50115d090801699032960b31877413a78896d9ab89e5ad51a683f80c36ed84fe735595884912577f18127a1ac483c714d45dfae4c80739dd7011375846eadaa93e0", 0x45}], 0x1}}], 0x1, 0x40000040) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x20000000}) 50.45521476s ago: executing program 8 (id=2446): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000100)={[{@minixdf}, {@dioread_lock}, {@discard}, {@nolazytime}, {@grpid}, {@lazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0xff}}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}, {@oldalloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[]}, 0x78) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x16}]) 49.306400868s ago: executing program 8 (id=2454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) recvmsg(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) 48.159653905s ago: executing program 8 (id=2464): inotify_init() io_uring_setup(0x1af2, &(0x7f0000000040)={0x0, 0x3cb3, 0x100, 0xa, 0x20002f7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c71, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 48.137703105s ago: executing program 38 (id=2464): inotify_init() io_uring_setup(0x1af2, &(0x7f0000000040)={0x0, 0x3cb3, 0x100, 0xa, 0x20002f7}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c71, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 46.74299505s ago: executing program 4 (id=2475): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd2012, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x80008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 45.078079314s ago: executing program 4 (id=2481): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mremap(&(0x7f0000cc0000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 44.504380243s ago: executing program 4 (id=2486): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x0, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000700), &(0x7f00000006c0)=r2}, 0x5d) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000080) 44.450873835s ago: executing program 4 (id=2487): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x9, 0x34f, &(0x7f00000004c0)="$eJzs3M1vG0UYx/FfjO04qZr1AYE4oD4SF7isknDigrBQKyEiUYUa8SIhts0GrCx25LWCjBBpT1w4IP4IDlWPvVWC/gO5cOOAuHDLBYkDPSAWed+8bpzEdes2L9+PVO00M8/ubGazemalmf0Pf/hyazN0N72eSjXTnCQ9kOoqKTOXHktxuaq6hm7qtQt///by+x99/G5jbe3yutmVxrXXV81s6dLPX32zkDa7N6+9+qf7f63+uffC3kv7/137ohVaK7R2p2eeXe/80fOuB75ttMIt1+xq4Huhb6126HeT+mhXCnzbDDrb233z2gsXF7e7fhia1+7blt+3Xsd63b55n3uttrmuaxcXdbz5CdqcZc3b6+teI/3PG889WvCNWfQIjyca80h3uw1vMLYLB2qat59OrwAAwEmS5v95tl8apPTH5P9Fef5fTvL/3yUV8v879fu9Cx/cXUrz/3vVQf4vFfL/z/JT1WQbpTz/r0ka5v+dZH6Q5/8bTyb/P5gRnW7fjw6OoigvVse1H8n/cUYN8v/F9O83duuTO8txgfwfAAAAAAAAAAAAAAAAAAAAAIDT4EEUOVEUOckxWwEeOfPxghwpSusPCX/EJeM4aUbHf/hvwvHHKTfcuKO8JAXf7TR3mskxbXBfUiBfy3L0b/w8pAbl6k0rrqL7JdhN43d3msmrobGpVhy/Ikf1h+Oj6Mo7a5dXzLJdCwrxFS0W41fl6Hlpfkz8qiXy61cGx6pefaUQ78rRrzfUUaCNdGVcFv/titnb763ZaP8X4nYAAAAAAJwFruXq2fy3uIWg6x6sT+bHSX0yvy5r/PeBZH69/PD8PI4vq1R+VncNAAAAAMD5Eva/3vKCwO/OqHBL0lFtyprN1YffMCaNyjbIPaTNnOaefFdrkuJCdvHpzjPo2xRXr4ytqkz0GytN1dVL1ckHpXpoVfbZ6LBwXZ1mLCInHYvHGNMXf/zpn6PbJF/GpElO+Obd2jF3esQjUT6qTfW4O62MvCRKs30HAQAAAHg6hkl/9pO3pMqz7RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfNrPf/K+4sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJx3/wcAAP//QOD4ig==") mkdir(0x0, 0x10f) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 44.005238019s ago: executing program 4 (id=2492): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 43.404337648s ago: executing program 4 (id=2497): syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20040800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffe0, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.335917761s ago: executing program 39 (id=2497): syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20040800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffe0, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.02905904s ago: executing program 0 (id=2997): sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="437e63215f87cb719ccd82c2215b2b3f1fa000f90483e401476b91dd04ae12837ec8b594e61cdc1077588e6229279df3f5db8bb5513a145e9c757a9b31ff1ffc562ca53f9c0aff425b2a6b219587c5662dc2c51fb360213d6775689c89fad14ef826a135bce597a4ddd1bd74198d466946ac716f0f50583f0d4b491be408c1332cfd3b641339dd35dcde3fd14aedf3120fc975a75eccdf1066815cbd6156750984c43987b64b1d78d1be2e4a1dac2e947bbf19e97747226b850a6a400e26eb67255d", 0xc2}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x93) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x2a9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000400)) 3.879922285s ago: executing program 0 (id=2999): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 3.732250649s ago: executing program 6 (id=3004): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 3.212017306s ago: executing program 2 (id=3012): perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x400000) 2.209498198s ago: executing program 2 (id=3017): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1100e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "04744f", 0x0, 0x2b, 0x1, @empty, @local}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x2, 0x0, 0x4) 2.203711459s ago: executing program 6 (id=3027): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchown(r1, 0x0, 0x0) 1.938463267s ago: executing program 2 (id=3022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x2}, 0x3ff}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={r3, 0x6}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000004c0)={r4, 0x5, 0x1, 0x2}, 0x10) 1.807236792s ago: executing program 2 (id=3025): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0xe) write$cgroup_devices(r4, 0x0, 0x9) write(r2, 0x0, 0x0) 1.799997072s ago: executing program 0 (id=3026): r0 = syz_clone3(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfa}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000004c0)='net/nfsfs\x00') mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009) exit(0xffff) timer_delete(r1) 1.680599026s ago: executing program 3 (id=3028): ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x400000000002d5, 0x2, 0x4], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x6, 0xe77, 0x3, 0xfffffffffffffff0, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a6, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x7ffffffffffffff, 0x7, 0x7, 0x81, 0x100, 0x5, 0x931, 0x1000000000000004, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x1, 0x83, 0x9, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x1, 0x4, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0xd, 0x1, 0x8000000000000000, 0x7, 0x7, 0x0, 0x6, 0x6, 0x10001, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x10007, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x2, 0x7, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x5, 0x2000003, 0x43, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 1.680206846s ago: executing program 3 (id=3029): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x830d}, 0x0, 0xa57b, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.656375686s ago: executing program 3 (id=3030): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="cf", 0x1}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r1, r2, 0x3, 0x0) 1.636882147s ago: executing program 3 (id=3031): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0), 0x1, 0x44f, &(0x7f0000000640)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 1.611287068s ago: executing program 3 (id=3032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x49ff3254, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x11, 0x2, 0x8001) 1.320564167s ago: executing program 6 (id=3033): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x3, 0x0}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r2, 0x2f, 0x28, 0x4, @void, @void, @void, @value=r3}, 0x20) 1.297167858s ago: executing program 6 (id=3034): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x20000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x200, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) epoll_create1(0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) 1.269627589s ago: executing program 6 (id=3035): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x5}, {0x2, 0x3, 0xffffffff}]}, 0x94) close(r0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="bc", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) 941.866299ms ago: executing program 0 (id=3041): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 936.715889ms ago: executing program 2 (id=3042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x60}}, 0x8000) 873.544552ms ago: executing program 0 (id=3045): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 776.480425ms ago: executing program 2 (id=3048): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) 735.025816ms ago: executing program 3 (id=3050): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x368093, &(0x7f0000000280)={[], [{@smackfsdef={'smackfsdef', 0x3d, '~k\xe3\x0fT\xa6\"\x87aCOe?\x14\xa5\x05b\xdd\x11\xdf\xc0\xf4:\x9f3\xbb\x85s0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 412.779977ms ago: executing program 6 (id=3054): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788a5", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 363.715918ms ago: executing program 5 (id=3055): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x126}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x1}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @fwd={0x3}]}, {0x0, [0x10, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_create_resource$binfmt(&(0x7f0000000300)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x6, 0x80, 0x4, 0x7f0d, 0x52, r3}) 283.204301ms ago: executing program 5 (id=3056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 233.711643ms ago: executing program 5 (id=3057): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 116.786186ms ago: executing program 5 (id=3058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 62.191478ms ago: executing program 5 (id=3059): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 0s ago: executing program 5 (id=3060): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x40, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) kernel console output (not intermixed with test programs): =0002] [ 168.058657][T10285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.093209][T10287] System zones: 0-1, 3-36 [ 168.100661][T10287] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1998: bad orphan inode 134217728 [ 168.111768][T10287] loop9: lost filesystem error report for type 5 error -117 [ 168.112594][T10287] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.148740][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.234039][T10296] bond4: (slave bond_slave_1): Device is not our slave [ 168.252288][T10296] bond4: option active_slave: invalid value (bond_slave_1) [ 168.263075][T10296] bond4 (unregistering): Released all slaves [ 168.272779][T10290] Process accounting paused [ 168.282282][ T9069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.348284][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2007'. [ 168.380192][T10309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2007'. [ 168.415015][T10316] loop6: detected capacity change from 0 to 512 [ 168.441425][T10316] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2010: iget: bad i_size value: 38620345925642 [ 168.458771][T10316] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.464439][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 168.472725][T10316] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2010: couldn't read orphan inode 15 (err -117) [ 168.473690][ C0] EXT4-fs (loop6): initial error at time 1779505473: ext4_orphan_get:1397: inode 15 [ 168.501495][ C0] EXT4-fs (loop6): last error at time 1779505473: ext4_orphan_get:1397: inode 15 [ 168.511122][T10316] loop6: lost filesystem error report for type 5 error -117 [ 168.525030][T10316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.546986][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 168.547003][ T28] audit: type=1400 audit(1779505473.958:1388): avc: denied { write } for pid=10314 comm="syz.6.2010" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.613916][T10327] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2010: bg 0: block 5: invalid block bitmap [ 168.629243][T10327] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 168.657819][T10327] EXT4-fs (loop6): This should not happen!! Data will be lost [ 168.657819][T10327] [ 168.692765][T10327] EXT4-fs (loop6): Total free blocks count 0 [ 168.714741][ T28] audit: type=1400 audit(1779505474.118:1389): avc: denied { bind } for pid=10334 comm="syz.9.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 168.737531][T10327] EXT4-fs (loop6): Free/Dirty block details [ 168.743876][T10327] EXT4-fs (loop6): free_blocks=0 [ 168.749261][T10327] EXT4-fs (loop6): dirty_blocks=1160 [ 168.761259][T10327] EXT4-fs (loop6): Block reservation details [ 168.769125][ T28] audit: type=1400 audit(1779505474.168:1390): avc: denied { map } for pid=10314 comm="syz.6.2010" path="/334/bus/cpuset.effective_mems" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 168.777079][T10327] EXT4-fs (loop6): i_reserved_data_blocks=1160 [ 168.824909][ T3676] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1152 with error 28 [ 169.880227][T10352] kexec: Could not allocate control_code_buffer [ 170.217197][ T28] audit: type=1400 audit(1779505475.628:1391): avc: denied { unmount } for pid=4902 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 170.678668][T10408] loop5: detected capacity change from 0 to 8192 [ 170.725294][T10412] loop6: detected capacity change from 0 to 164 [ 170.772109][ T28] audit: type=1400 audit(1779505476.178:1392): avc: denied { mount } for pid=10411 comm="syz.6.2045" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 170.854348][ T28] audit: type=1400 audit(1779505476.258:1393): avc: denied { unmount } for pid=4911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 170.979013][T10422] netlink: 'syz.8.2049': attribute type 2 has an invalid length. [ 170.987371][T10422] __nla_validate_parse: 1 callbacks suppressed [ 170.987406][T10422] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2049'. [ 171.086321][ T28] audit: type=1400 audit(1779505476.498:1394): avc: denied { mounton } for pid=10427 comm="syz.8.2052" path="/156/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 171.650290][T10439] loop8: detected capacity change from 0 to 2048 [ 171.674602][T10439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.704981][ T28] audit: type=1400 audit(1779505477.118:1395): avc: denied { write } for pid=10437 comm="syz.8.2066" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.731146][T10439] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 171.751253][T10439] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 171.763866][T10439] EXT4-fs (loop8): This should not happen!! Data will be lost [ 171.763866][T10439] [ 171.774171][T10439] EXT4-fs (loop8): Total free blocks count 0 [ 171.781702][T10439] EXT4-fs (loop8): Free/Dirty block details [ 171.785136][ T28] audit: type=1400 audit(1779505477.188:1396): avc: denied { remount } for pid=10437 comm="syz.8.2066" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 171.796470][T10439] EXT4-fs (loop8): free_blocks=2415919504 [ 171.813495][T10439] EXT4-fs (loop8): dirty_blocks=48 [ 171.831744][T10439] EXT4-fs (loop8): Block reservation details [ 171.837984][T10439] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 171.853808][T10446] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 171.923880][ T7693] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 172.072128][ T28] audit: type=1400 audit(1779505477.478:1397): avc: denied { name_bind } for pid=10454 comm="syz.3.2061" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 172.117398][T10458] loop9: detected capacity change from 0 to 2048 [ 172.125174][T10458] EXT4-fs: test_dummy_encryption option not supported [ 172.223223][T10462] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2063'. [ 172.262117][T10462] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2063'. [ 172.380942][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2070'. [ 172.410498][T10476] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2071'. [ 172.519348][T10484] loop9: detected capacity change from 0 to 1024 [ 172.538656][T10484] EXT4-fs: Ignoring removed bh option [ 172.573163][T10484] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.665376][T10490] netlink: 'syz.8.2077': attribute type 6 has an invalid length. [ 173.771967][ T9069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.102067][T10543] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2098'. [ 174.247748][T10549] loop5: detected capacity change from 0 to 2048 [ 174.288689][T10549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.310502][T10551] loop9: detected capacity change from 0 to 8192 [ 174.320875][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 174.320906][ T28] audit: type=1400 audit(1779505479.738:1443): avc: denied { write } for pid=10548 comm="syz.5.2110" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.351109][ T28] audit: type=1400 audit(1779505479.768:1444): avc: denied { write } for pid=10548 comm="syz.5.2110" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 174.387470][ T28] audit: type=1400 audit(1779505479.798:1445): avc: denied { write } for pid=10548 comm="syz.5.2110" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 174.420732][ T28] audit: type=1400 audit(1779505479.798:1446): avc: denied { write } for pid=10548 comm="syz.5.2110" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 174.454923][ T28] audit: type=1400 audit(1779505479.798:1447): avc: denied { write } for pid=10548 comm="syz.5.2110" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 174.492516][ T28] audit: type=1400 audit(1779505479.828:1448): avc: denied { remove_name } for pid=10548 comm="syz.5.2110" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 174.548225][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.568788][ T28] audit: type=1400 audit(1779505479.828:1449): avc: denied { rename } for pid=10548 comm="syz.5.2110" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 174.647712][ T28] audit: type=1400 audit(1779505479.828:1450): avc: denied { rmdir } for pid=10548 comm="syz.5.2110" name="file0" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 175.042026][T10584] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2116'. [ 175.090825][T10579] loop6: detected capacity change from 0 to 512 [ 175.131103][T10579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.149945][T10579] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.180012][ T28] audit: type=1400 audit(1779505480.588:1451): avc: denied { write } for pid=10578 comm="syz.6.2113" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.216468][T10579] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.2113: corrupted inode contents [ 175.230665][T10579] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #2: comm syz.6.2113: mark_inode_dirty error [ 175.244153][T10579] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #2: comm syz.6.2113: corrupted inode contents [ 175.260107][T10579] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2113: mark_inode_dirty error [ 175.308338][ T4911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.456104][ T28] audit: type=1400 audit(1779505480.868:1452): avc: denied { ioctl } for pid=10601 comm="syz.3.2124" path="socket:[32327]" dev="sockfs" ino=32327 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 176.253758][T10633] xt_hashlimit: size too large, truncated to 1048576 [ 176.547492][T10638] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2135'. [ 176.824068][T10643] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.851900][T10643] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.863369][T10645] netlink: 'syz.6.2138': attribute type 1 has an invalid length. [ 176.910720][T10645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.200123][T10658] loop9: detected capacity change from 0 to 128 [ 177.296314][T10651] bond4: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 177.346264][T10643] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.376579][T10643] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.428174][T10664] netlink: 'syz.8.2144': attribute type 1 has an invalid length. [ 177.446759][T10643] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.468793][T10643] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.491379][T10664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.514668][T10664] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 177.540601][T10643] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.561958][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2146'. [ 177.571907][T10643] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.672194][ T36] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.694546][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.719256][ T36] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.728143][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.756150][T10680] netlink: 'syz.9.2151': attribute type 1 has an invalid length. [ 177.788878][ T3671] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.804776][T10680] netlink: 'syz.9.2151': attribute type 4 has an invalid length. [ 177.812608][ T3671] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.827654][T10680] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2151'. [ 177.837002][ T3671] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.847782][ T3671] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.001565][T10698] tmpfs: Bad value for 'mpol' [ 178.143100][T10719] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.239206][T10725] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.252147][T10725] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.286002][T10719] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.339428][T10725] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.354323][T10725] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.382800][T10733] veth1_macvtap: left promiscuous mode [ 178.388831][T10733] macsec0: entered allmulticast mode [ 178.411096][T10719] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.459212][T10733] veth1_macvtap: entered promiscuous mode [ 178.469594][T10733] veth1_macvtap: entered allmulticast mode [ 178.477407][T10733] macsec0: left allmulticast mode [ 178.482572][T10733] veth1_macvtap: left allmulticast mode [ 178.512661][T10725] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.530454][T10725] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.575746][T10719] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.614758][T10725] team0: Port device netdevsim0 removed [ 178.632845][T10725] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.639420][T10739] loop8: detected capacity change from 0 to 512 [ 178.652856][T10725] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.677184][T10747] netlink: 'syz.3.2182': attribute type 1 has an invalid length. [ 178.692399][T10739] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 178.723656][T10747] bond2: entered promiscuous mode [ 178.733150][T10747] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.741292][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 178.758775][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'. [ 178.762081][T10739] EXT4-fs (loop8): failed to open journal device unknown-block(0,0) -6 [ 178.799660][ T3671] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.816918][ T3671] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.846703][ T3671] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.871101][T10747] bond2: (slave bridge3): making interface the new active one [ 178.880186][T10747] bridge3: entered promiscuous mode [ 178.888147][T10747] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 178.897484][ T3671] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.906180][ T3671] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.918405][ T3665] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.002324][ T3671] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.012988][ T3671] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.089110][ T3665] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.105002][ T3665] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.126906][ T3665] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.146446][ T3665] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.202225][T10772] loop6: detected capacity change from 0 to 128 [ 179.215914][T10772] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.257608][T10772] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.391076][T10777] loop6: detected capacity change from 0 to 1024 [ 179.416651][T10777] EXT4-fs: Ignoring removed bh option [ 179.447720][T10777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.606175][ T4911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.651678][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 179.651770][ T28] audit: type=1326 audit(1779505485.058:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.8.2196" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd434dce59 code=0x0 [ 179.883278][T10803] loop5: detected capacity change from 0 to 128 [ 179.896928][T10803] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.923023][T10803] ext4 filesystem being mounted at /342/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.988548][ T28] audit: type=1400 audit(1779505485.398:1458): avc: denied { write } for pid=10802 comm="syz.5.2203" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.046023][ T28] audit: type=1400 audit(1779505485.438:1459): avc: denied { write } for pid=10802 comm="syz.5.2203" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.069427][ T28] audit: type=1400 audit(1779505485.438:1460): avc: denied { write } for pid=10802 comm="syz.5.2203" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.092133][ T28] audit: type=1400 audit(1779505485.438:1461): avc: denied { write } for pid=10802 comm="syz.5.2203" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.118276][ T4902] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.128274][ T28] audit: type=1400 audit(1779505485.438:1462): avc: denied { link } for pid=10802 comm="syz.5.2203" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.207639][T10816] loop9: detected capacity change from 0 to 1024 [ 180.238277][T10816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.331235][ T9069] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.486443][ T28] audit: type=1400 audit(1779505485.898:1463): avc: denied { ioctl } for pid=10834 comm="syz.9.2217" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 181.186539][T10855] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.243063][T10855] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.319365][T10855] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.369060][T10855] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.462592][ T49] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.493967][ T49] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.521910][ T49] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.551421][ T49] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.637807][ T28] audit: type=1326 audit(1779505487.048:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.9.2228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d8ace59 code=0x7ffc0000 [ 181.678561][ T28] audit: type=1326 audit(1779505487.048:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.9.2228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d8ace59 code=0x7ffc0000 [ 181.726016][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2233'. [ 181.737852][ T28] audit: type=1326 audit(1779505487.048:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10863 comm="syz.9.2228" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06d8ace59 code=0x7ffc0000 [ 182.011438][T10889] loop8: detected capacity change from 0 to 128 [ 182.302004][T10896] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2242'. [ 182.479177][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2247'. [ 183.026505][ T3675] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.076736][ T3675] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.147438][ T3675] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.231233][ T3675] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.376700][ T3675] bridge_slave_1: left allmulticast mode [ 183.392219][ T3675] bridge_slave_1: left promiscuous mode [ 183.407578][ T3675] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.436134][ T3675] bridge_slave_0: left allmulticast mode [ 183.447771][ T3675] bridge_slave_0: left promiscuous mode [ 183.462334][ T3675] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.653034][T10944] loop6: detected capacity change from 0 to 8192 [ 183.687250][ T3675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.730590][ T3675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.754531][ T3675] bond0 (unregistering): Released all slaves [ 183.781296][ T3675] bond1 (unregistering): (slave veth3): Releasing active interface [ 183.794415][ T3675] bond1 (unregistering): (slave dummy0): Releasing active interface [ 183.813176][ T3675] bond1 (unregistering): Released all slaves [ 184.294673][ T3675] hsr_slave_0: left promiscuous mode [ 184.307071][ T3675] hsr_slave_1: left promiscuous mode [ 184.320384][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.335716][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.353494][ T3675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.368738][ T3675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.385770][ T3675] veth1_macvtap: left promiscuous mode [ 184.393375][ T3675] veth1_vlan: left promiscuous mode [ 184.403103][ T3675] veth0_vlan: left promiscuous mode [ 184.817840][ T3675] team0 (unregistering): Port device team_slave_1 removed [ 184.846242][ T3675] team0 (unregistering): Port device team_slave_0 removed [ 185.242433][T10986] netlink: 'syz.5.2273': attribute type 1 has an invalid length. [ 185.277715][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 185.277736][ T28] audit: type=1400 audit(1779505490.688:1495): avc: denied { write } for pid=10973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.393307][T10986] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.407915][ T28] audit: type=1400 audit(1779505490.818:1496): avc: denied { write } for pid=10992 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.442994][T10986] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 185.489177][T10986] bond4: (slave vxcan3): making interface the new active one [ 185.515646][T10986] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 185.572862][T10994] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 185.621163][T10994] bond4: (slave vxcan5): Enslaving as a backup interface with an up link [ 185.631019][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 185.725057][T11012] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2277'. [ 185.739656][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 185.760603][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.788758][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.804642][T10946] bridge_slave_0: entered allmulticast mode [ 185.814663][T10946] bridge_slave_0: entered promiscuous mode [ 185.830680][T11019] netlink: 'syz.3.2278': attribute type 10 has an invalid length. [ 185.849598][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.868325][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.890682][T10946] bridge_slave_1: entered allmulticast mode [ 185.902330][T10946] bridge_slave_1: entered promiscuous mode [ 185.991413][T10946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.017676][T10946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.056148][T11031] bond5: entered promiscuous mode [ 186.119336][T11031] ip6gre1: entered promiscuous mode [ 186.143822][T11031] ip6gre1: entered allmulticast mode [ 186.157199][T11031] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 186.168878][T11031] bond5: (slave ip6gre1): Error -95 calling set_mac_address [ 186.180473][ T28] audit: type=1400 audit(1779505491.588:1497): avc: denied { write } for pid=11029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.233941][T10946] team0: Port device team_slave_0 added [ 186.256056][T10946] team0: Port device team_slave_1 added [ 186.267164][ T28] audit: type=1400 audit(1779505491.678:1498): avc: denied { write } for pid=11046 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.327413][T10946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.347071][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.386529][T10946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.415826][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 186.429315][T10946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.436659][T10946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.448403][T11052] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2287'. [ 186.480948][T10946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.555984][T10946] hsr_slave_0: entered promiscuous mode [ 186.563973][T10946] hsr_slave_1: entered promiscuous mode [ 186.570888][T10946] debugfs: 'hsr0' already exists in 'hsr' [ 186.576723][T10946] Cannot create hsr debugfs directory [ 186.693666][ T28] audit: type=1400 audit(1779505492.098:1499): avc: denied { write } for pid=11056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.741161][ T28] audit: type=1400 audit(1779505492.148:1500): avc: denied { write } for pid=11068 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.780710][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 186.906783][T10946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.921877][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.929746][ T28] audit: type=1400 audit(1779505492.338:1501): avc: denied { write } for pid=11071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.938096][T10946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.977904][ T28] audit: type=1400 audit(1779505492.388:1502): avc: denied { write } for pid=11082 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.002507][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.012107][T10946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.028071][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.036872][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 187.047611][T10946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.057422][T10946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.153969][ T28] audit: type=1400 audit(1779505492.558:1503): avc: denied { write } for pid=11089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.161723][T10946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.204453][ T28] audit: type=1400 audit(1779505492.608:1504): avc: denied { write } for pid=11102 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.236854][T10946] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.250490][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.257751][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.270664][ T3675] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.277795][ T3675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.425861][T10946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.573977][T10946] veth0_vlan: entered promiscuous mode [ 187.582942][T10946] veth1_vlan: entered promiscuous mode [ 187.604722][T10946] veth0_macvtap: entered promiscuous mode [ 187.613632][T10946] veth1_macvtap: entered promiscuous mode [ 187.628089][T10946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.642305][T10946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.656412][ T3675] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.677048][ T3675] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.702051][ T3675] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.713954][ T3675] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.526678][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2324'. [ 189.558997][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2324'. [ 189.778475][T11369] ref_ctr_offset mismatch. inode: 0x3a offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 189.870929][T11377] geneve2: entered promiscuous mode [ 189.876705][T11375] loop4: detected capacity change from 0 to 512 [ 189.886615][T11377] geneve2: entered allmulticast mode [ 189.896361][T11375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.923904][T11375] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.936239][T11375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.266913][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2338'. [ 190.332816][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 190.332836][ T28] audit: type=1400 audit(1779505495.738:1529): avc: denied { getopt } for pid=11393 comm="syz.8.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 190.452673][T11404] loop8: detected capacity change from 0 to 512 [ 190.494994][T11404] EXT4-fs: Ignoring removed orlov option [ 190.528549][T11404] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.550798][T11406] loop6: detected capacity change from 0 to 512 [ 190.608515][T11406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.659380][T11406] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.696088][ T4911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.811763][ T7693] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.352506][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2352'. [ 191.606163][T11453] netlink: 'syz.8.2359': attribute type 1 has an invalid length. [ 191.684812][T11453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.726636][T11458] vlan2: entered allmulticast mode [ 191.784032][T11458] bond2: entered allmulticast mode [ 191.837219][T11453] bond2: (slave geneve2): making interface the new active one [ 191.854258][T11453] geneve2: entered allmulticast mode [ 191.876965][T11453] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 191.965970][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 192.423399][T11471] loop6: detected capacity change from 0 to 128 [ 192.511353][T11475] syz.6.2366: attempt to access beyond end of device [ 192.511353][T11475] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 192.537598][T11475] syz.6.2366: attempt to access beyond end of device [ 192.537598][T11475] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 192.552182][T11475] syz.6.2366: attempt to access beyond end of device [ 192.552182][T11475] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 192.567456][T11475] syz.6.2366: attempt to access beyond end of device [ 192.567456][T11475] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 192.590946][T11475] syz.6.2366: attempt to access beyond end of device [ 192.590946][T11475] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 192.606619][T11475] syz.6.2366: attempt to access beyond end of device [ 192.606619][T11475] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 192.624256][T11475] syz.6.2366: attempt to access beyond end of device [ 192.624256][T11475] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 192.639594][T11475] syz.6.2366: attempt to access beyond end of device [ 192.639594][T11475] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 192.653433][T11475] syz.6.2366: attempt to access beyond end of device [ 192.653433][T11475] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 192.667624][T11475] syz.6.2366: attempt to access beyond end of device [ 192.667624][T11475] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 192.727176][ T28] audit: type=1400 audit(1779505498.138:1530): avc: denied { setopt } for pid=11478 comm="syz.4.2370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.794186][T11485] loop5: detected capacity change from 0 to 512 [ 192.830335][T11485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.846741][T11485] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.885539][T11489] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.910971][T11489] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.986913][T11489] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.015384][T11489] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.098004][T11489] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.108832][T11489] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.178801][T11489] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.215030][T11489] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.260676][ T28] audit: type=1400 audit(1779505498.668:1531): avc: denied { write } for pid=11484 comm="syz.5.2371" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.334701][ T3665] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.357795][ T3665] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.392884][ T3665] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.417517][ T3665] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.439103][ T3665] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.455188][ T3665] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.478730][ T49] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.490322][ T49] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.739093][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.837138][T11506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2381'. [ 193.856905][T11508] batadv_slave_0: entered promiscuous mode [ 193.873239][T11507] batadv_slave_0: left promiscuous mode [ 193.905810][T11506] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.963032][T11506] bond5: (slave wireguard0): refused to change device type [ 194.189412][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2386'. [ 194.203550][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2386'. [ 194.215730][T11528] loop6: detected capacity change from 0 to 512 [ 194.238162][T11528] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 194.253915][T11528] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 194.288520][T11528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002] [ 194.302709][T11528] System zones: 1-12 [ 194.309333][T11528] EXT4-fs (loop6): orphan cleanup on readonly fs [ 194.316810][T11528] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2387: Block bitmap for bg 0 marked uninitialized [ 194.333377][T11528] loop6: lost filesystem error report for type 5 error -117 [ 194.333669][T11528] EXT4-fs (loop6): Remounting filesystem read-only [ 194.341047][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 194.341076][ C0] EXT4-fs (loop6): initial error at time 1779505499: ext4_read_block_bitmap_nowait:517 [ 194.341109][ C0] EXT4-fs (loop6): last error at time 1779505499: ext4_read_block_bitmap_nowait:517 [ 194.375906][T11528] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 194.389229][T11528] EXT4-fs (loop6): 1 truncate cleaned up [ 194.395834][T11528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.456485][ T4911] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.652535][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2398'. [ 194.671261][T11557] netlink: 'syz.5.2398': attribute type 7 has an invalid length. [ 194.692076][T11557] netlink: 'syz.5.2398': attribute type 8 has an invalid length. [ 194.707390][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2398'. [ 195.921930][T11608] loop4: detected capacity change from 0 to 256 [ 195.933861][ T28] audit: type=1400 audit(1779505501.348:1532): avc: denied { bind } for pid=11609 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 195.956111][T11610] vlan0: entered promiscuous mode [ 195.974906][T11608] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.987749][T11610] vlan0: entered allmulticast mode [ 195.994020][T11610] veth0_vlan: entered allmulticast mode [ 196.146902][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2422'. [ 196.275555][ T28] audit: type=1400 audit(1779505501.688:1533): avc: denied { execute } for pid=11620 comm="syz.5.2423" path="/file0" dev="ramfs" ino=35739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 196.464816][ T28] audit: type=1400 audit(1779505501.868:1534): avc: denied { watch watch_reads } for pid=11632 comm="syz.3.2428" path="/" dev="ramfs" ino=35769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 196.773899][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2425'. [ 197.244732][T11654] team0: Port device vlan2 added [ 197.600289][T11649] loop8: detected capacity change from 0 to 512 [ 197.718188][T11649] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 197.747598][T11649] EXT4-fs (loop8): bad block size 32768 [ 197.922273][T11649] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2434'. [ 198.265232][T11667] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.272874][T11667] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.404426][T11667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.421941][T11667] batadv_slave_1: left promiscuous mode [ 198.436753][ T28] audit: type=1400 audit(1779505503.848:1535): avc: denied { ioctl } for pid=11673 comm="syz.3.2442" path="socket:[36433]" dev="sockfs" ino=36433 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 198.532053][T11667] bond3: left allmulticast mode [ 198.571959][T11672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.620282][T11675] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 198.665736][ T3675] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.674638][ T3665] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.682654][ T3675] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.702951][ T3675] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.711588][ T3675] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.725910][ T3675] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.739582][ T3675] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.753694][ T3675] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.769808][ T3675] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.805176][ T3665] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.927577][T11663] Process accounting resumed [ 199.043096][T11683] loop8: detected capacity change from 0 to 1024 [ 199.066299][T11683] EXT4-fs: Ignoring removed bh option [ 199.088881][T11683] EXT4-fs: Ignoring removed oldalloc option [ 199.104509][T11683] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 199.157691][T11683] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.212167][ T28] audit: type=1400 audit(1779505504.618:1536): avc: denied { write } for pid=11682 comm="syz.8.2446" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.264564][ T28] audit: type=1400 audit(1779505504.618:1537): avc: denied { mounton } for pid=11682 comm="syz.8.2446" path="/241/file1/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 199.370803][ T28] audit: type=1400 audit(1779505504.778:1538): avc: denied { write } for pid=11686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.446708][ T28] audit: type=1400 audit(1779505504.858:1539): avc: denied { write } for pid=11706 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.497332][T11703] loop4: detected capacity change from 0 to 8192 [ 199.637245][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.657789][T11703] loop4: p1 < > p2 p4 < p5 > [ 199.669802][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.680961][T11683] loop8: detected capacity change from 1024 to 0 [ 199.689409][T11703] loop4: partition table partially beyond EOD, truncated [ 199.697280][T11700] EXT4-fs error (device loop8): ext4_wait_block_bitmap:584: comm syz.8.2446: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 199.713223][T11703] loop4: p1 start 134217728 is beyond EOD, truncated [ 199.718699][T11700] buffer_io_error: 52854 callbacks suppressed [ 199.718750][T11700] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 199.722610][T11703] loop4: p2 size 591360 extends beyond EOD, truncated [ 199.745186][T11700] EXT4-fs (loop8): I/O error while writing superblock [ 199.752933][T11700] EXT4-fs error (device loop8): ext4_wait_block_bitmap:584: comm syz.8.2446: Cannot read block bitmap - block_group = 0, block_bitmap = 3 [ 199.767447][T11703] loop4: p5 size 591360 extends beyond EOD, truncated [ 199.776107][ T28] audit: type=1400 audit(1779505505.178:1540): avc: denied { write } for pid=11711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.800685][T11700] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 199.826045][T11700] EXT4-fs (loop8): I/O error while writing superblock [ 199.842506][T11700] EXT4-fs error (device loop8): ext4_check_bdev_write_error:227: comm syz.8.2446: Error while async write back metadata [ 199.868788][T11700] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 199.879417][T11700] EXT4-fs (loop8): I/O error while writing superblock [ 199.886934][T11700] EXT4-fs error (device loop8): ext4_check_bdev_write_error:227: comm syz.8.2446: Error while async write back metadata [ 199.901786][T11700] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 199.911397][ T28] audit: type=1400 audit(1779505505.308:1541): avc: denied { write } for pid=11728 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.934761][T11700] EXT4-fs (loop8): I/O error while writing superblock [ 199.941892][T11700] EXT4-fs error (device loop8): ext4_check_bdev_write_error:227: comm syz.8.2446: Error while async write back metadata [ 199.965512][T11700] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 199.984568][T11700] EXT4-fs (loop8): I/O error while writing superblock [ 199.998849][T11700] EXT4-fs error (device loop8): ext4_check_bdev_write_error:227: comm syz.8.2446: Error while async write back metadata [ 200.010060][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 200.013198][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 200.032678][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 200.044256][T11700] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 200.053738][T11700] EXT4-fs (loop8): I/O error while writing superblock [ 200.179357][ T7693] EXT4-fs error (device loop8): ext4_get_inode_loc:5023: inode #2: block 5: comm syz-executor: unable to read itable block [ 200.213010][ T7693] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 200.234661][ T7693] EXT4-fs (loop8): I/O error while writing superblock [ 200.253262][ T7693] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: IO failure [ 200.265255][ T7693] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 200.292615][ T7693] EXT4-fs (loop8): I/O error while writing superblock [ 200.311192][ T7693] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #2: comm syz-executor: mark_inode_dirty error [ 200.324305][T11740] loop4: detected capacity change from 0 to 1024 [ 200.337044][ T7693] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 200.350399][T11740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 200.351705][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2457'. [ 200.371093][T11740] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 200.375339][ T7693] EXT4-fs (loop8): I/O error while writing superblock [ 200.396759][ T3665] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:17: unable to read itable block [ 200.416142][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2457'. [ 200.443872][ T3665] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 200.457018][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2456'. [ 200.496203][ T7693] bond1: (slave syz_tun): Removing an active aggregator [ 200.519582][ T7693] bond1: (slave syz_tun): Releasing backup interface [ 200.591154][ T3665] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.649898][ T3665] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.717589][ T3665] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.781627][ T3665] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.951053][ T3665] bridge_slave_1: left allmulticast mode [ 200.965277][ T3665] bridge_slave_1: left promiscuous mode [ 200.976128][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.984332][ T3665] bridge_slave_0: left allmulticast mode [ 200.997719][ T3665] bridge_slave_0: left promiscuous mode [ 201.005964][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.122240][ T3665] bond2 (unregistering): (slave geneve2): Releasing active interface [ 201.147197][ T3665] geneve2 (unregistering): left allmulticast mode [ 201.268277][ T3665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.289825][ T3665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.312019][ T3665] bond0 (unregistering): Released all slaves [ 201.332735][ T3665] bond1 (unregistering): Released all slaves [ 201.341924][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2462'. [ 201.368916][ T3665] bond2 (unregistering): Released all slaves [ 201.462266][ T3665] hsr_slave_0: left promiscuous mode [ 201.475484][ T3665] hsr_slave_1: left promiscuous mode [ 201.488150][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.511221][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.542760][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.560935][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.631282][ T3665] veth1_macvtap: left promiscuous mode [ 201.640310][ T3665] veth1_vlan: left promiscuous mode [ 201.648469][ T3665] veth0_vlan: left promiscuous mode [ 202.274266][ T3665] team0 (unregistering): Port device team_slave_1 removed [ 202.312058][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 202.312075][ T28] audit: type=1400 audit(1779505507.718:1544): avc: denied { mounton } for pid=11787 comm="syz.3.2469" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.355544][ T3665] team0 (unregistering): Port device team_slave_0 removed [ 202.422258][T11790] vlan0: entered promiscuous mode [ 202.434016][T11790] vlan0: entered allmulticast mode [ 202.441599][T11790] veth0_vlan: entered allmulticast mode [ 202.542206][T11803] loop5: detected capacity change from 0 to 128 [ 202.632729][T11813] bio_check_eod: 15 callbacks suppressed [ 202.632776][T11813] syz.5.2472: attempt to access beyond end of device [ 202.632776][T11813] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 202.680837][T11813] syz.5.2472: attempt to access beyond end of device [ 202.680837][T11813] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 202.698127][T11813] syz.5.2472: attempt to access beyond end of device [ 202.698127][T11813] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 202.747689][T11813] syz.5.2472: attempt to access beyond end of device [ 202.747689][T11813] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 202.813377][T11813] syz.5.2472: attempt to access beyond end of device [ 202.813377][T11813] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 202.823745][T11812] loop6: detected capacity change from 0 to 8192 [ 202.834558][ T28] audit: type=1400 audit(1779505508.248:1545): avc: denied { write } for pid=11806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.881587][T11813] syz.5.2472: attempt to access beyond end of device [ 202.881587][T11813] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 202.917570][T11813] syz.5.2472: attempt to access beyond end of device [ 202.917570][T11813] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 202.946370][T11812] loop6: p1 < > p2 p4 < p5 > [ 202.980872][ T28] audit: type=1400 audit(1779505508.388:1546): avc: denied { write } for pid=11829 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.010868][T11813] syz.5.2472: attempt to access beyond end of device [ 203.010868][T11813] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 203.024519][T11812] loop6: partition table partially beyond EOD, truncated [ 203.051081][T11813] syz.5.2472: attempt to access beyond end of device [ 203.051081][T11813] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 203.070742][T11812] loop6: p1 start 134217728 is beyond EOD, truncated [ 203.085136][T11812] loop6: p2 size 591360 extends beyond EOD, truncated [ 203.090974][T11813] syz.5.2472: attempt to access beyond end of device [ 203.090974][T11813] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 203.107668][T11812] loop6: p5 size 591360 extends beyond EOD, truncated [ 203.131073][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 203.212989][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.260192][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.305887][T11775] bridge_slave_0: entered allmulticast mode [ 203.334239][T11775] bridge_slave_0: entered promiscuous mode [ 203.363172][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.383283][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.406316][T11775] bridge_slave_1: entered allmulticast mode [ 203.430976][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 203.433218][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 203.451544][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 203.464108][T11775] bridge_slave_1: entered promiscuous mode [ 203.512741][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.538067][ T28] audit: type=1400 audit(1779505508.948:1547): avc: denied { write } for pid=11839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.547610][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.612146][ T28] audit: type=1400 audit(1779505509.018:1548): avc: denied { write } for pid=11854 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.666193][T11775] team0: Port device team_slave_0 added [ 203.676940][T11775] team0: Port device team_slave_1 added [ 203.726464][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.745931][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.794478][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.815657][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.834428][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.884533][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.898627][T11827] kexec: Could not allocate control_code_buffer [ 203.952992][T11775] hsr_slave_0: entered promiscuous mode [ 203.959370][T11775] hsr_slave_1: entered promiscuous mode [ 203.965523][T11775] debugfs: 'hsr0' already exists in 'hsr' [ 203.974237][T11860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11860 comm=syz.6.2488 [ 203.987026][T11775] Cannot create hsr debugfs directory [ 204.006432][T11860] netlink: 'syz.6.2488': attribute type 1 has an invalid length. [ 204.061060][T11860] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.125641][T11868] bond6: (slave vlan4): Opening slave failed [ 204.198612][ T28] audit: type=1400 audit(1779505509.608:1549): avc: denied { write } for pid=11858 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.232342][T11869] sit0: left promiscuous mode [ 204.273373][T11879] loop6: detected capacity change from 0 to 256 [ 204.295137][T11879] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.321488][ T28] audit: type=1400 audit(1779505509.728:1550): avc: denied { write } for pid=11880 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.509282][T11869] vlan0: left promiscuous mode [ 204.514266][T11869] vlan0: left allmulticast mode [ 204.546927][T11869] veth0_vlan: left allmulticast mode [ 204.630074][T11869] bond2: left promiscuous mode [ 204.641457][T11869] bridge3: left promiscuous mode [ 204.697577][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 204.713432][ T3655] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.735290][ T3655] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.746840][ T3655] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.774539][ T3655] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.024064][T11911] loop4: detected capacity change from 0 to 128 [ 205.108080][T11775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.116354][ T28] audit: type=1400 audit(1779505510.528:1551): avc: denied { mounton } for pid=11910 comm="syz.4.2487" path="/52/file0/bus" dev="loop4" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 205.143611][T11775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.152836][T11775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.174177][T11775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.183401][T11920] loop4: detected capacity change from 128 to 0 [ 205.184960][ T28] audit: type=1400 audit(1779505510.558:1552): avc: denied { write } for pid=11900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.201242][T11775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.234752][T11911] buffer_io_error: 2 callbacks suppressed [ 205.234770][T11911] Buffer I/O error on dev loop4, logical block 32, lost sync page write [ 205.277560][ T28] audit: type=1400 audit(1779505510.678:1553): avc: denied { write } for pid=11922 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.293262][T11911] FAT-fs (loop4): FAT read failed (blocknr 32) [ 205.321425][T11775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.339575][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 205.348867][T11775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.357902][T11911] Buffer I/O error on dev loop4, logical block 33, lost sync page write [ 205.374560][T11775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.452272][T10946] FAT-fs (loop4): Directory bread(block 33) failed [ 205.497917][T10946] FAT-fs (loop4): Directory bread(block 40) failed [ 205.517671][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.534014][T10946] FAT-fs (loop4): Directory bread(block 33) failed [ 205.560766][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.567743][T10946] FAT-fs (loop4): Directory bread(block 33) failed [ 205.582049][T10946] Buffer I/O error on dev loop4, logical block 34, lost sync page write [ 205.603903][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.611051][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.649462][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.656700][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.773938][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 205.928109][ T36] FAT-fs (loop4): unable to read inode block for updating (i_pos 531) [ 205.948881][ T3655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.963146][ T36] FAT-fs (loop4): bread failed in fat_clusters_flush [ 205.984810][T10946] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 205.999572][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.040115][ T3655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.131837][ T3655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.210903][ T3655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.335782][T11775] veth0_vlan: entered promiscuous mode [ 206.363825][T11775] veth1_vlan: entered promiscuous mode [ 206.431853][ T3655] bridge_slave_1: left allmulticast mode [ 206.447154][ T3655] bridge_slave_1: left promiscuous mode [ 206.457429][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.472763][ T3655] bridge_slave_0: left allmulticast mode [ 206.480174][ T3655] bridge_slave_0: left promiscuous mode [ 206.487685][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.600016][ T3655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.617289][ T3655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.635079][ T3655] bond0 (unregistering): Released all slaves [ 206.646633][T12005] loop5: detected capacity change from 0 to 512 [ 206.672549][T12005] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 206.701256][T12005] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 206.715367][T11775] veth0_macvtap: entered promiscuous mode [ 206.726626][T12005] EXT4-fs (loop5): 1 truncate cleaned up [ 206.726661][ T3655] hsr_slave_0: left promiscuous mode [ 206.737890][ T3655] hsr_slave_1: left promiscuous mode [ 206.739199][T12005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.747178][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.763319][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.772841][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.786314][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.808299][ T3655] veth1_macvtap: left promiscuous mode [ 206.820243][ T3655] veth0_macvtap: left promiscuous mode [ 206.831762][ T3655] veth1_vlan: left promiscuous mode [ 206.960249][ T3655] team0 (unregistering): Port device team_slave_1 removed [ 206.979691][ T3655] team0 (unregistering): Port device team_slave_0 removed [ 207.055082][T11775] veth1_macvtap: entered promiscuous mode [ 207.121153][T11775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.158903][T11775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.198413][ T3675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.219615][ T3675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.256661][ T3675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.292805][ T3675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.355108][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 207.355162][ T28] audit: type=1400 audit(1779505512.768:1558): avc: denied { write } for pid=12014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.389826][ T4902] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 207.401038][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 207.401080][ T4902] Tainted: [W]=WARN [ 207.401089][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 207.401163][ T4902] Call Trace: [ 207.401174][ T4902] [ 207.401184][ T4902] __dump_stack+0x1d/0x30 [ 207.401217][ T4902] dump_stack_lvl+0x95/0xd0 [ 207.401237][ T4902] dump_stack+0x15/0x1b [ 207.401310][ T4902] dump_header+0x80/0x240 [ 207.401334][ T4902] oom_kill_process+0x295/0x350 [ 207.401374][ T4902] out_of_memory+0x97d/0xb80 [ 207.401415][ T4902] try_charge_memcg+0x62f/0xa10 [ 207.401568][ T4902] ? radix_tree_lookup+0xfa/0x140 [ 207.401608][ T4902] charge_memcg+0x6d/0x120 [ 207.401668][ T4902] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 207.401707][ T4902] __swap_cache_prepare_and_add+0x69/0x4a0 [ 207.401851][ T4902] ? alloc_pages_mpol+0x217/0x260 [ 207.401892][ T4902] swap_cache_alloc_folio+0xa2/0x120 [ 207.401988][ T4902] swap_cluster_readahead+0x35c/0x3c0 [ 207.402029][ T4902] swapin_readahead+0xde/0x840 [ 207.402059][ T4902] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 207.402087][ T4902] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 207.402123][ T4902] ? __rcu_read_unlock+0x4e/0x70 [ 207.402199][ T4902] ? swap_cache_get_folio+0x1e0/0x1f0 [ 207.402223][ T4902] do_swap_page+0x31e/0x2180 [ 207.402255][ T4902] ? __schedule+0x951/0xd40 [ 207.402282][ T4902] ? __rcu_read_lock+0x36/0x50 [ 207.402341][ T4902] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 207.402364][ T4902] handle_mm_fault+0xb30/0x2e70 [ 207.402397][ T4902] ? vma_start_read+0x1c7/0x2c0 [ 207.402445][ T4902] do_user_addr_fault+0x62f/0x1050 [ 207.402500][ T4902] ? trace_page_fault_user+0x1f/0xa0 [ 207.402550][ T4902] exc_page_fault+0x62/0xa0 [ 207.402579][ T4902] asm_exc_page_fault+0x26/0x30 [ 207.402601][ T4902] RIP: 0033:0x7f81ea1d7fd7 [ 207.402624][ T4902] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 207.402654][ T4902] RSP: 002b:00007ffc58c54c60 EFLAGS: 00010202 [ 207.402674][ T4902] RAX: 0000000000000000 RBX: 000055556cea1500 RCX: 00007f81ea1d7fd7 [ 207.402688][ T4902] RDX: 00007ffc58c54ca0 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.402711][ T4902] RBP: 00007ffc58c54d0c R08: 0000000000000000 R09: 0000000000000000 [ 207.402724][ T4902] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 207.402736][ T4902] R13: 00000000000927c0 R14: 0000000000032987 R15: 00007ffc58c54d60 [ 207.402758][ T4902] [ 207.402825][ T4902] memory: usage 307200kB, limit 307200kB, failcnt 464 [ 207.618126][ T28] audit: type=1400 audit(1779505513.028:1559): avc: denied { write } for pid=12030 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.783032][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 207.869401][ T4902] memory+swap: usage 240892kB, limit 9007199254740988kB, failcnt 0 [ 207.880231][ T4902] kmem: usage 235940kB, limit 9007199254740988kB, failcnt 0 [ 207.888240][ T4902] Memory cgroup stats for /syz5: [ 207.888486][ T4902] cache 2686976 [ 207.897057][ T4902] rss 192512 [ 207.900328][ T4902] shmem 0 [ 207.903344][ T4902] mapped_file 2027520 [ 207.907631][ T4902] dirty 0 [ 207.910733][ T4902] writeback 0 [ 207.914070][ T4902] workingset_refault_anon 178 [ 207.919723][ T4902] workingset_refault_file 542 [ 207.924690][ T4902] swap 245760 [ 207.928197][ T4902] swapcached 10571776 [ 207.932360][ T4902] pgpgin 84454 [ 207.935902][ T4902] pgpgout 83750 [ 207.937684][T11978] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.939715][ T4902] pgfault 120591 [ 207.950398][ T4902] pgmajfault 2940 [ 207.954163][ T4902] inactive_anon 0 [ 207.958031][ T4902] active_anon 8192 [ 207.961894][ T4902] inactive_file 12288 [ 207.966165][ T4902] active_file 647168 [ 207.982112][ T4902] unevictable 2215936 [ 207.989322][ T4902] hierarchical_memory_limit 314572800 [ 208.004496][T11978] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.027707][ T4902] hierarchical_memsw_limit 9223372036854771712 [ 208.044188][T11978] bridge_slave_0: entered allmulticast mode [ 208.063072][ T4902] total_cache 2686976 [ 208.070596][T11978] bridge_slave_0: entered promiscuous mode [ 208.089586][ T4902] total_rss 192512 [ 208.100775][T11978] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.111078][ T4902] total_shmem 0 [ 208.131763][T11978] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.137606][ T4902] total_mapped_file 2027520 [ 208.165677][T11978] bridge_slave_1: entered allmulticast mode [ 208.173308][ T4902] total_dirty 0 [ 208.191102][T11978] bridge_slave_1: entered promiscuous mode [ 208.205439][ T4902] total_writeback 0 [ 208.232156][ T4902] total_workingset_refault_anon 178 [ 208.252872][ T28] audit: type=1400 audit(1779505513.658:1560): avc: denied { write } for pid=12044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.288839][ T4902] total_workingset_refault_file 542 [ 208.291076][T11978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.319074][ T4902] total_swap 245760 [ 208.338533][ T4902] total_swapcached 10571776 [ 208.352634][T11978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.365307][ T28] audit: type=1400 audit(1779505513.778:1561): avc: denied { write } for pid=12062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.378087][ T4902] total_pgpgin 84454 [ 208.390092][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2510'. [ 208.450815][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 208.472241][ T4902] total_pgpgout 83750 [ 208.488202][T11978] team0: Port device team_slave_0 added [ 208.504458][ T4902] total_pgfault 120591 [ 208.510076][T11978] team0: Port device team_slave_1 added [ 208.518017][ T4902] total_pgmajfault 2940 [ 208.551141][ T4902] total_inactive_anon 0 [ 208.563417][T11978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.566063][T12068] loop0: detected capacity change from 0 to 512 [ 208.580600][ T4902] total_active_anon 8192 [ 208.580617][ T4902] total_inactive_file 12288 [ 208.580628][ T4902] total_active_file 647168 [ 208.580640][ T4902] total_unevictable 2215936 [ 208.580652][ T4902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2505,pid=12004,uid=0 [ 208.580788][ T4902] Memory cgroup out of memory: Killed process 12005 (syz.5.2505) total-vm:96348kB, anon-rss:1424kB, file-rss:57044kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:1000 [ 208.590082][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.665116][T12068] EXT4-fs: Mount option(s) incompatible with ext2 [ 208.706160][T11978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.728111][T11978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.762399][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.813731][ T28] audit: type=1400 audit(1779505514.218:1562): avc: denied { cmd } for pid=12074 comm="syz.3.2514" path="socket:[39414]" dev="sockfs" ino=39414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 208.851354][T11978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.032541][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.108312][ T28] audit: type=1400 audit(1779505514.518:1563): avc: denied { write } for pid=12081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.189617][ T28] audit: type=1400 audit(1779505514.598:1564): avc: denied { write } for pid=12096 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.264884][ T28] audit: type=1400 audit(1779505514.658:1565): avc: denied { shutdown } for pid=12098 comm="syz.5.2518" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.455214][T12108] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2522'. [ 209.504906][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 209.523805][T12108] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.531190][T12108] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.545111][T12109] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2522'. [ 209.569182][T11978] hsr_slave_0: entered promiscuous mode [ 209.587963][T11978] hsr_slave_1: entered promiscuous mode [ 209.597447][T11978] debugfs: 'hsr0' already exists in 'hsr' [ 209.603256][T11978] Cannot create hsr debugfs directory [ 209.611846][T12109] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.618972][T12109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.626324][T12109] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.633442][T12109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.643891][T12109] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2522'. [ 209.663109][T12109] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.670286][T12109] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.805032][T12117] loop5: detected capacity change from 0 to 2048 [ 209.825209][T12117] journal_path: Lookup failure for './bus' [ 209.842164][T12117] EXT4-fs: error: could not find journal device path [ 209.907621][T12120] loop0: detected capacity change from 0 to 512 [ 210.063810][ T28] audit: type=1400 audit(1779505515.468:1566): avc: denied { write } for pid=12119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.141770][ T28] audit: type=1400 audit(1779505515.548:1567): avc: denied { write } for pid=12137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.222191][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 210.384244][T11978] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.418284][T11978] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.445285][T11978] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.471167][T11978] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 210.491696][T11978] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.518852][T11978] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 210.538966][T11978] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.568485][T11978] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.579506][T12155] loop5: detected capacity change from 0 to 8192 [ 210.697186][T11978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.749942][T11978] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.786688][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.793845][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.840845][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.848002][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.259348][T12142] kexec: Could not allocate control_code_buffer [ 211.284049][T11978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.563060][T11978] veth0_vlan: entered promiscuous mode [ 211.597217][T11978] veth1_vlan: entered promiscuous mode [ 211.646013][T11978] veth0_macvtap: entered promiscuous mode [ 211.671066][T11978] veth1_macvtap: entered promiscuous mode [ 211.704815][T11978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.730578][T11978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.760412][ T3655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.786408][ T3655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.812612][ T3655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.846013][ T3655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.076426][T12246] loop2: detected capacity change from 0 to 256 [ 212.127186][T12246] FAT-fs (loop2): IO charset cp1250 not found [ 212.154228][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 212.431765][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 212.431785][ T28] audit: type=1400 audit(1779505517.838:1579): avc: denied { write } for pid=12250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.521513][ T28] audit: type=1400 audit(1779505517.928:1580): avc: denied { write } for pid=12274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.842206][ T28] audit: type=1400 audit(1779505518.248:1581): avc: denied { write } for pid=12280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.925956][ T28] audit: type=1400 audit(1779505518.328:1582): avc: denied { write } for pid=12297 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.992635][T12306] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2542'. [ 213.062839][T12306] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.070030][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.109421][ T28] audit: type=1326 audit(1779505518.518:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12313 comm="syz.5.2545" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81ea21ce59 code=0x0 [ 213.157743][T12306] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2542'. [ 213.198087][T12306] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.205258][T12306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.212679][T12306] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.219820][T12306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.230234][T12306] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2542'. [ 213.235691][ T28] audit: type=1400 audit(1779505518.648:1584): avc: denied { write } for pid=12302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.253698][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.269645][T12276] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.277311][T12276] bridge_slave_0: entered allmulticast mode [ 213.284127][T12276] bridge_slave_0: entered promiscuous mode [ 213.301670][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.315933][T12276] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.327287][T12276] bridge_slave_1: entered allmulticast mode [ 213.342856][ T28] audit: type=1400 audit(1779505518.728:1585): avc: denied { write } for pid=12328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.346817][T12276] bridge_slave_1: entered promiscuous mode [ 213.379493][T12306] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.386691][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.465712][T12276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.491571][T12276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.526533][T12337] vlan0: entered promiscuous mode [ 213.539765][T12337] vlan0: entered allmulticast mode [ 213.547248][T12337] veth0_vlan: entered allmulticast mode [ 213.598581][T12276] team0: Port device team_slave_0 added [ 213.629337][T12276] team0: Port device team_slave_1 added [ 213.651542][ T28] audit: type=1400 audit(1779505519.058:1586): avc: denied { write } for pid=12330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.694145][T12276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.709372][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.748087][ T28] audit: type=1400 audit(1779505519.158:1587): avc: denied { write } for pid=12349 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.784781][T12276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.817454][T12276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.842568][T12276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.899499][T12276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.032404][T12276] hsr_slave_0: entered promiscuous mode [ 214.055642][T12276] hsr_slave_1: entered promiscuous mode [ 214.073360][T12276] debugfs: 'hsr0' already exists in 'hsr' [ 214.092503][T12276] Cannot create hsr debugfs directory [ 214.152493][ T28] audit: type=1400 audit(1779505519.558:1588): avc: denied { write } for pid=12356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.155776][T12372] loop5: detected capacity change from 0 to 2048 [ 214.243194][T12372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.283116][T12372] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.447279][T12390] syz_tun: entered allmulticast mode [ 214.500064][T12390] syz_tun (unregistering): left allmulticast mode [ 214.748516][T12276] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.768136][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.785141][T12276] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.808057][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.827120][T12276] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.847964][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.867032][T12276] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 214.894856][T12276] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.913433][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.047475][T12276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.078066][T12276] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.102465][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.109819][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.128296][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.135541][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.190460][T12432] batadv_slave_0: entered promiscuous mode [ 215.214772][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2559'. [ 215.227643][T12432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.263533][T12432] batadv_slave_0 (unregistering): left promiscuous mode [ 215.282508][T12432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.347251][ T9] kernel read not supported for file /usbmon0 (pid: 9 comm: kworker/0:0) [ 215.420770][T12276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.498048][T12457] loop2: detected capacity change from 0 to 1024 [ 215.509489][T12457] EXT4-fs: Mount option(s) incompatible with ext3 [ 215.616595][T12276] veth0_vlan: entered promiscuous mode [ 215.625325][T12276] veth1_vlan: entered promiscuous mode [ 215.648879][T12276] veth0_macvtap: entered promiscuous mode [ 215.659546][T12276] veth1_macvtap: entered promiscuous mode [ 215.673232][T12276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.687856][T12276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.701382][ T3665] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.929587][T12482] sctp: [Deprecated]: syz.3.2570 (pid 12482) Use of int in max_burst socket option. [ 215.929587][T12482] Use struct sctp_assoc_value instead [ 216.137992][T12490] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.2573'. [ 216.147723][T12490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2573'. [ 218.669886][ T3665] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.688332][ T3665] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.700129][ T3665] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.902213][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 218.902234][ T28] audit: type=1400 audit(1779505524.308:1598): avc: denied { write } for pid=12497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.957339][T12525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2579'. [ 218.977425][ T28] audit: type=1400 audit(1779505524.388:1599): avc: denied { write } for pid=12524 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.141183][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2583'. [ 219.303560][ T28] audit: type=1400 audit(1779505524.708:1600): avc: denied { write } for pid=12532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.339480][T12553] bridge_slave_0: left allmulticast mode [ 219.345732][T12553] bridge_slave_0: left promiscuous mode [ 219.352065][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.365580][T12553] bridge_slave_1: left allmulticast mode [ 219.377977][T12553] bridge_slave_1: left promiscuous mode [ 219.384564][ T28] audit: type=1400 audit(1779505524.788:1601): avc: denied { write } for pid=12564 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.410918][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.435182][T12553] bond0: (slave bond_slave_0): Releasing backup interface [ 219.455809][T12553] bond0: (slave bond_slave_1): Releasing backup interface [ 219.491068][T12553] team0: Port device team_slave_0 removed [ 219.509311][T12553] team0: Port device team_slave_1 removed [ 219.518438][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.538180][T12553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.547940][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.557762][T12553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.577851][T12553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.756785][ T28] audit: type=1400 audit(1779505525.168:1602): avc: denied { read } for pid=12586 comm="syz.5.2595" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 219.882492][ T28] audit: type=1400 audit(1779505525.288:1603): avc: denied { write } for pid=12578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.975691][ T28] audit: type=1400 audit(1779505525.378:1604): avc: denied { write } for pid=12601 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.009266][T12520] kexec: Could not allocate control_code_buffer [ 220.028113][T12605] loop5: detected capacity change from 0 to 256 [ 220.052250][T12605] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.180527][ T28] audit: type=1400 audit(1779505525.568:1605): avc: denied { execute } for pid=12604 comm="syz.5.2598" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=41327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 220.268079][ T28] audit: type=1326 audit(1779505525.648:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12615 comm="syz.6.2601" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea1628ce59 code=0x0 [ 220.381130][ T28] audit: type=1400 audit(1779505525.788:1607): avc: denied { write } for pid=12607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.639479][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2607'. [ 220.737244][T12646] ip6gretap0: entered promiscuous mode [ 220.745798][T12646] ip6gretap0: entered allmulticast mode [ 220.820993][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2611'. [ 221.088140][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2616'. [ 221.122520][T12673] gretap0: entered promiscuous mode [ 221.136995][T12673] macvlan2: entered allmulticast mode [ 221.150169][T12673] gretap0: entered allmulticast mode [ 221.477313][T12697] syzkaller0: entered promiscuous mode [ 221.484352][T12697] syzkaller0: entered allmulticast mode [ 221.674711][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2625'. [ 222.012564][T12712] loop5: detected capacity change from 0 to 512 [ 222.040813][T12712] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.087875][T12712] EXT4-fs (loop5): 1 truncate cleaned up [ 222.117317][T12712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.535226][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.639503][T12731] geneve2: entered promiscuous mode [ 222.652233][T12731] geneve2: entered allmulticast mode [ 222.673699][ T9] team_slave_0: entered promiscuous mode [ 222.679489][ T9] team_slave_1: entered promiscuous mode [ 222.729494][ T9] team_slave_0: left promiscuous mode [ 222.734979][ T9] team_slave_1: left promiscuous mode [ 223.094596][T12755] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2644'. [ 223.143404][T12755] ip6gre1: entered promiscuous mode [ 223.165762][T12755] ip6gre1: entered allmulticast mode [ 223.226654][T12755] netlink: 'syz.3.2644': attribute type 6 has an invalid length. [ 223.243587][T12755] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2644'. [ 223.401216][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 223.424999][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 224.021776][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 224.021804][ T28] audit: type=1400 audit(1779505529.428:1615): avc: denied { name_bind 0x1000000 } for pid=12792 comm="syz.5.2660" path="socket:[40801]" dev="sockfs" ino=40801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.281603][T12808] netlink: 'syz.6.2665': attribute type 4 has an invalid length. [ 224.512514][T12820] loop6: detected capacity change from 0 to 256 [ 224.533104][T12820] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.678864][T12836] loop6: detected capacity change from 0 to 512 [ 224.691855][T12836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.709127][T12836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.737277][T12836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.763844][T12836] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.815238][T12836] EXT4-fs (loop6): shut down requested (0) [ 224.821608][ T28] audit: type=1400 audit(1779505530.228:1616): avc: denied { accept } for pid=12835 comm="syz.6.2676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 224.958682][T12856] loop5: detected capacity change from 0 to 512 [ 225.001837][T12836] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 225.023553][T12836] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 225.026072][ T28] audit: type=1400 audit(1779505530.428:1617): avc: denied { write } for pid=12835 comm="syz.6.2676" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.103076][T12276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.112210][ T28] audit: type=1400 audit(1779505530.438:1618): avc: denied { link } for pid=12835 comm="syz.6.2676" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 225.135493][T12856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.148175][T12856] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.186011][ T28] audit: type=1400 audit(1779505530.598:1619): avc: denied { write } for pid=12853 comm="syz.5.2681" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.260477][ T28] audit: type=1400 audit(1779505530.668:1620): avc: denied { write } for pid=12853 comm="syz.5.2681" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.294294][ T28] audit: type=1400 audit(1779505530.698:1621): avc: denied { write } for pid=12853 comm="syz.5.2681" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.381033][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.415947][ T28] audit: type=1400 audit(1779505530.828:1622): avc: denied { write } for pid=12866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.497359][ T28] audit: type=1400 audit(1779505530.908:1623): avc: denied { write } for pid=12889 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.740485][T12914] loop5: detected capacity change from 0 to 512 [ 225.760428][T12916] bond1 (unregistering): Released all slaves [ 225.773789][T12914] EXT4-fs: dax option not supported [ 225.810164][ T28] audit: type=1400 audit(1779505531.218:1624): avc: denied { write } for pid=12904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.048793][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 226.072192][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 226.144176][T12937] syzkaller0: entered promiscuous mode [ 226.151068][T12937] syzkaller0: entered allmulticast mode [ 226.245764][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2703'. [ 226.348422][T12944] bond1 (unregistering): Released all slaves [ 227.274238][T13001] loop5: detected capacity change from 0 to 512 [ 227.427264][T13003] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2714'. [ 227.602540][T13013] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2717'. [ 227.621832][T13013] netlink: 'syz.6.2717': attribute type 7 has an invalid length. [ 227.654564][T13013] netlink: 'syz.6.2717': attribute type 8 has an invalid length. [ 227.684548][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2717'. [ 227.706767][T13021] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2721'. [ 228.469054][T13048] loop2: detected capacity change from 0 to 512 [ 228.517725][T13048] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2730: bad orphan inode 13 [ 228.587215][T13048] loop2: lost filesystem error report for type 5 error -117 [ 228.587850][T13048] ext4_test_bit(bit=12, block=4) = 1 [ 228.595259][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 228.595280][ C0] EXT4-fs (loop2): initial error at time 1779505533: ext4_orphan_get:1423 [ 228.595317][ C0] EXT4-fs (loop2): last error at time 1779505533: ext4_orphan_get:1423 [ 228.625724][T13048] is_bad_inode(inode)=0 [ 228.629947][T13048] NEXT_ORPHAN(inode)=0 [ 228.634081][T13048] max_ino=32 [ 228.638189][T13048] i_nlink=1 [ 228.644697][T13048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.688087][T11978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.689762][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2732'. [ 228.737317][T13060] loop2: detected capacity change from 0 to 1024 [ 228.744240][T13060] EXT4-fs: inline encryption not supported [ 228.750731][T13060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.762223][T13060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 228.773019][T13060] System zones: 0-1, 3-36 [ 228.784952][T13060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.809655][T13060] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2733: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 228.916573][T11978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.093526][T13078] ref_ctr increment failed for inode: 0x981 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888115185100 [ 229.109857][T13077] uprobe: syz.3.2741:13077 failed to unregister, leaking uprobe [ 229.410447][T13052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.478671][T13090] netlink: 'syz.3.2744': attribute type 4 has an invalid length. [ 229.512689][T13090] netlink: 'syz.3.2744': attribute type 4 has an invalid length. [ 229.580199][T13094] loop5: detected capacity change from 0 to 256 [ 229.596858][T13094] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.709633][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2752'. [ 229.723781][ T3671] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.732875][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2752'. [ 229.739603][ T3671] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.752927][ T3671] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.762577][ T3671] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.872137][T13113] tipc: Started in network mode [ 229.894295][T13113] tipc: Node identity 8a3daba877aa, cluster identity 4711 [ 229.923520][T13113] tipc: Enabled bearer , priority 0 [ 229.997466][T13129] loop0: detected capacity change from 0 to 128 [ 230.035723][T13125] syzkaller0: entered promiscuous mode [ 230.043445][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.053981][T13125] syzkaller0: entered allmulticast mode [ 230.061456][T13125] tipc: Resetting bearer [ 230.067894][T13129] FAT-fs (loop0): Filesystem has been set read-only [ 230.075539][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.095461][T13112] tipc: Resetting bearer [ 230.104735][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.141390][T13112] tipc: Disabling bearer [ 230.153004][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.183538][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.201644][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.230250][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.250721][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.272924][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.306065][T13129] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 230.649696][T13162] bond1 (unregistering): Released all slaves [ 230.671163][T13167] loop5: detected capacity change from 0 to 256 [ 230.685773][T13167] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.777869][ T3655] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 230.795980][ T3655] FAT-fs (loop5): Filesystem has been set read-only [ 230.893343][T13173] netlink: 'syz.3.2778': attribute type 21 has an invalid length. [ 231.061637][T13179] bridge0: port 3(gretap0) entered blocking state [ 231.136129][T13179] bridge0: port 3(gretap0) entered disabled state [ 231.175957][T13179] gretap0: entered allmulticast mode [ 231.214424][T13179] gretap0: entered promiscuous mode [ 231.447194][T13166] FAT-fs (loop5): error, invalid FAT chain (i_pos 196, last_block 8200) [ 232.081128][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 232.081148][ T28] audit: type=1400 audit(1779505537.488:1637): avc: denied { write } for pid=13220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.131451][ T28] audit: type=1400 audit(1779505537.538:1638): avc: denied { write } for pid=13231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.498430][T13244] __nla_validate_parse: 1 callbacks suppressed [ 232.498450][T13244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'. [ 232.601598][T13252] loop0: detected capacity change from 0 to 256 [ 232.618678][T13252] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 233.090018][T13264] loop0: detected capacity change from 0 to 1024 [ 233.119641][T13264] EXT4-fs: inline encryption not supported [ 233.141673][T13264] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 233.184794][T13264] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.2804: lblock 2 mapped to illegal pblock 2 (length 1) [ 233.204068][ T28] audit: type=1400 audit(1779505538.608:1639): avc: denied { write } for pid=13262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.214009][T13264] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.229877][T13264] EXT4-fs (loop0): Remounting filesystem read-only [ 233.239431][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 233.239632][ C0] EXT4-fs (loop0): initial error at time 1779505538: ext4_map_blocks:791: inode 3: block 2 [ 233.239796][ C0] EXT4-fs (loop0): last error at time 1779505538: ext4_map_blocks:791: inode 3: block 2 [ 233.273954][T13264] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 233.283040][T13264] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 233.292489][T13264] EXT4-fs (loop0): 1 orphan inode deleted [ 233.302943][T13264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.339208][T11775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.368270][ T28] audit: type=1400 audit(1779505538.768:1640): avc: denied { write } for pid=13277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.401114][T13280] loop2: detected capacity change from 0 to 164 [ 233.424653][T13280] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 233.447298][ T28] audit: type=1326 audit(1779505538.858:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13281 comm="syz.0.2805" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa60a29ce59 code=0x0 [ 233.481399][T13280] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 233.713174][T13294] netlink: 'syz.5.2814': attribute type 1 has an invalid length. [ 233.730372][T13294] 8021q: adding VLAN 0 to HW filter on device bond7 [ 233.761373][T13294] bond7: (slave geneve2): making interface the new active one [ 233.770484][T13294] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 234.978273][T13346] bond3 (unregistering): Released all slaves [ 235.032649][T13354] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2838'. [ 235.048119][T13354] syzkaller1: entered promiscuous mode [ 235.053805][T13354] syzkaller1: entered allmulticast mode [ 235.262208][T13366] loop5: detected capacity change from 0 to 512 [ 235.331542][T13366] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2844: bad orphan inode 13 [ 235.340704][T13369] netlink: 'syz.6.2845': attribute type 4 has an invalid length. [ 235.350948][T13366] loop5: lost filesystem error report for type 5 error -117 [ 235.354384][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 235.368266][ C0] EXT4-fs (loop5): initial error at time 1779505540: ext4_orphan_get:1423 [ 235.376831][ C0] EXT4-fs (loop5): last error at time 1779505540: ext4_orphan_get:1423 [ 235.385317][T13366] ext4_test_bit(bit=12, block=4) = 1 [ 235.397105][T13366] is_bad_inode(inode)=0 [ 235.414546][T13366] NEXT_ORPHAN(inode)=0 [ 235.420371][T13371] netlink: 'syz.6.2845': attribute type 4 has an invalid length. [ 235.433378][T13366] max_ino=32 [ 235.438852][T13366] i_nlink=1 [ 235.450810][T13366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.095009][ T4902] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.267562][T13381] loop2: detected capacity change from 0 to 1024 [ 236.289040][T13381] EXT4-fs: inline encryption not supported [ 236.301917][T13383] netlink: 'syz.6.2849': attribute type 2 has an invalid length. [ 236.322099][T13381] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 236.364834][T13383] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2849'. [ 236.403009][T13381] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.2850: lblock 2 mapped to illegal pblock 2 (length 1) [ 236.432856][T13381] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 236.434452][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 236.450039][ C1] EXT4-fs (loop2): initial error at time 1779505541: ext4_map_blocks:791: inode 3: block 2 [ 236.460133][ C1] EXT4-fs (loop2): last error at time 1779505541: ext4_map_blocks:791: inode 3: block 2 [ 236.470429][T13381] EXT4-fs (loop2): Remounting filesystem read-only [ 236.477977][T13381] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 236.486627][T13381] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 236.496054][T13381] EXT4-fs (loop2): 1 orphan inode deleted [ 236.522914][T13381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.358498][T13395] bond8 (unregistering): Released all slaves [ 237.365980][T11978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.850997][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2868'. [ 237.924504][T13426] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.007277][T13432] veth9: entered promiscuous mode [ 238.030365][T13432] bond8: (slave veth9): Enslaving as an active interface with an up link [ 238.055698][T13436] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2872'. [ 238.074688][T13436] netlink: 'syz.3.2872': attribute type 22 has an invalid length. [ 238.503759][T13467] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 238.916641][T13489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2893'. [ 239.146344][T13497] loop2: detected capacity change from 0 to 8192 [ 239.197836][T13497] loop2: p1 p2 p3 p4 [ 239.205685][T13497] loop2: p1 size 51456 extends beyond EOD, truncated [ 239.221267][T13497] loop2: p2 size 815620 extends beyond EOD, truncated [ 239.231652][T13497] loop2: p3 start 36132 is beyond EOD, truncated [ 239.238920][T13497] loop2: p4 start 167772160 is beyond EOD, truncated [ 239.670414][T13504] loop2: detected capacity change from 0 to 764 [ 239.733918][T13504] Symlink component flag not implemented [ 239.749727][T13504] Symlink component flag not implemented (116) [ 240.073295][T13514] loop2: detected capacity change from 0 to 128 [ 240.096541][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.107669][T13514] FAT-fs (loop2): Filesystem has been set read-only [ 240.115234][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.125827][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.136521][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.147028][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.159562][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.170175][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.206762][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.223154][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.234198][T13514] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 240.243330][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2905'. [ 240.257697][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2905'. [ 240.267905][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2905'. [ 240.280555][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2905'. [ 240.325683][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2908'. [ 240.343237][T13528] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2908'. [ 240.671578][T13555] loop0: detected capacity change from 0 to 512 [ 240.688712][T13555] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2921: bg 0: block 169: padding at end of block bitmap is not set [ 240.713358][T13555] loop0: lost filesystem error report for type 5 error -117 [ 240.713629][T13555] Quota error (device loop0): write_blk: dquota write failed [ 240.721055][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 240.721073][ C0] EXT4-fs (loop0): initial error at time 1779505546: ext4_validate_block_bitmap:441 [ 240.721094][ C0] EXT4-fs (loop0): last error at time 1779505546: ext4_validate_block_bitmap:441 [ 240.755051][T13555] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 240.766045][T13555] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2921: Failed to acquire dquot type 0 [ 240.786611][T13555] loop0: lost filesystem error report for type 5 error -117 [ 240.787822][T13555] EXT4-fs (loop0): 1 truncate cleaned up [ 240.813023][T13555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.839512][T13555] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.866573][ T28] audit: type=1400 audit(1779505546.278:1642): avc: denied { write } for pid=13554 comm="syz.0.2921" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.889011][T13555] Quota error (device loop0): write_blk: dquota write failed [ 240.906461][T13555] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 240.923040][T13555] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2921: Failed to acquire dquot type 0 [ 240.962191][T11775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.083814][T13576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2929'. [ 241.267133][T13586] loop2: detected capacity change from 0 to 512 [ 241.291663][T13586] EXT4-fs: Ignoring removed bh option [ 241.313121][T13586] ext3: Unknown parameter 'noacl' [ 241.417799][T13594] bond3: entered promiscuous mode [ 241.430229][T13594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.472856][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88811a6e4600: rx timeout, send abort [ 241.484116][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811a6e4600: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.532287][T13594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 241.564236][T13594] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 241.580529][T13594] bond3: (slave sit1): Error -95 calling set_mac_address [ 241.623455][T13602] bond1: entered allmulticast mode [ 241.642846][T13606] macvlan2: entered promiscuous mode [ 241.648296][T13606] macvlan2: entered allmulticast mode [ 241.655527][T13606] bond1: (slave macvlan2): Opening slave failed [ 242.877425][T13665] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 242.892934][T13665] team0 (unregistering): Port device team_slave_0 removed [ 242.907979][T13665] team0 (unregistering): Failed to send options change via netlink (err -105) [ 242.918182][T13665] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 242.946714][T13665] team0 (unregistering): Port device team_slave_1 removed [ 242.960053][T13669] IPv6: sit1: Disabled Multicast RS [ 242.967090][T13669] sit1: entered allmulticast mode [ 243.498418][T13692] netlink: 'syz.6.2976': attribute type 49 has an invalid length. [ 244.813168][T13721] loop0: detected capacity change from 0 to 512 [ 244.838870][T13721] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 244.848940][T13721] EXT4-fs (loop0): orphan cleanup on readonly fs [ 244.856947][T13721] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 244.866503][T13721] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 244.881490][T13721] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 244.890477][T13721] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2988: bg 0: block 64: padding at end of block bitmap is not set [ 244.905043][T13721] loop0: lost filesystem error report for type 5 error -117 [ 244.905582][T13721] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 244.923041][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 244.923091][ C0] EXT4-fs (loop0): initial error at time 1779505550: ext4_validate_block_bitmap:441 [ 244.923141][ C0] EXT4-fs (loop0): last error at time 1779505550: ext4_validate_block_bitmap:441 [ 244.949489][T13721] loop0: lost filesystem error report for type 5 error -117 [ 244.951398][T13721] EXT4-fs (loop0): 1 truncate cleaned up [ 244.967128][T13721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.991082][T11775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.354315][T13638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.409322][T13739] loop2: detected capacity change from 0 to 512 [ 245.431727][T13739] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2993: inode has both inline data and extents flags [ 245.446178][T13739] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 245.446303][T13739] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2993: couldn't read orphan inode 15 (err -117) [ 245.454955][T13745] loop0: detected capacity change from 0 to 256 [ 245.455603][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 245.455629][ C0] EXT4-fs (loop2): initial error at time 1779505550: ext4_orphan_get:1397: inode 15 [ 245.455654][ C0] EXT4-fs (loop2): last error at time 1779505550: ext4_orphan_get:1397: inode 15 [ 245.499815][T13739] loop2: lost filesystem error report for type 5 error -117 [ 245.500310][T13739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.627221][T11978] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.771121][T13772] netem: change failed [ 245.854251][T13775] tipc: Started in network mode [ 245.863834][T13775] tipc: Node identity 4, cluster identity 4711 [ 245.873915][T13775] tipc: Node number set to 4 [ 247.269284][T13842] loop2: detected capacity change from 0 to 256 [ 247.287688][T13842] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.668794][ T28] audit: type=1326 audit(1779505553.078:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13866 comm="syz.0.3026" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa60a29ce59 code=0x0 [ 248.554286][T13913] bond1: entered promiscuous mode [ 248.615118][ T28] audit: type=1400 audit(1779505554.028:1644): avc: denied { watch } for pid=13922 comm="syz.5.3046" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 248.741708][T13930] ipvlan2: entered promiscuous mode [ 248.915189][T13939] __nla_validate_parse: 2 callbacks suppressed [ 248.915212][T13939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3053'. [ 248.989048][T13939] team1: entered promiscuous mode [ 248.996403][T13939] team1: entered allmulticast mode [ 249.005492][T13939] 8021q: adding VLAN 0 to HW filter on device team1 [ 249.513258][T13948] ================================================================== [ 249.521523][T13948] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 249.530164][T13948] [ 249.532518][T13948] write to 0xffff88810da518e0 of 8 bytes by task 13949 on cpu 0: [ 249.540269][T13948] shmem_file_splice_read+0x40e/0x5a0 [ 249.545704][T13948] splice_direct_to_actor+0x26e/0x670 [ 249.551147][T13948] do_splice_direct+0x119/0x1a0 [ 249.556050][T13948] do_sendfile+0x382/0x650 [ 249.560510][T13948] __x64_sys_sendfile64+0x105/0x150 [ 249.565743][T13948] x64_sys_call+0x2dc4/0x3020 [ 249.570460][T13948] do_syscall_64+0x12c/0x3b0 [ 249.575094][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.581020][T13948] [ 249.583372][T13948] write to 0xffff88810da518e0 of 8 bytes by task 13948 on cpu 1: [ 249.591122][T13948] shmem_file_splice_read+0x40e/0x5a0 [ 249.596537][T13948] splice_direct_to_actor+0x26e/0x670 [ 249.601966][T13948] do_splice_direct+0x119/0x1a0 [ 249.606869][T13948] do_sendfile+0x382/0x650 [ 249.611328][T13948] __x64_sys_sendfile64+0x105/0x150 [ 249.616568][T13948] x64_sys_call+0x2dc4/0x3020 [ 249.621287][T13948] do_syscall_64+0x12c/0x3b0 [ 249.625915][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.631848][T13948] [ 249.634194][T13948] value changed: 0x0000000000007120 -> 0x0000000000007129 [ 249.641321][T13948] [ 249.643670][T13948] Reported by Kernel Concurrency Sanitizer on: [ 249.649853][T13948] CPU: 1 UID: 0 PID: 13948 Comm: syz.6.3054 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.660825][T13948] Tainted: [W]=WARN [ 249.664655][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.674748][T13948] ==================================================================