last executing test programs: 1m21.242263642s ago: executing program 32 (id=302): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000002c0)={0x8, {{0xa, 0x4e24, 0x103, @mcast2, 0x8}}, {{0xa, 0x4e22, 0x4e14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 1m14.990449544s ago: executing program 33 (id=444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x800}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 1m4.410984906s ago: executing program 0 (id=612): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 1m4.197019363s ago: executing program 0 (id=618): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 1m4.098583646s ago: executing program 0 (id=623): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002380)={0xa, 0x1, 0x0, &(0x7f0000002280)=[{0x0}, {&(0x7f0000000400)=""/191, 0xbf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000af6000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m4.043858248s ago: executing program 0 (id=625): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x27, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000700)=0x8) 1m3.99129276s ago: executing program 0 (id=627): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m3.890683253s ago: executing program 0 (id=629): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000080)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) 54.09082757s ago: executing program 3 (id=787): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/181, 0xb5}, 0x9d91}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 54.009015863s ago: executing program 3 (id=789): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x141d6, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121c, &(0x7f0000003680)="$eJzs3M+LG2UYB/Bn19ptd90faq22IL7oRS9Ddw9e9LLIFqQBpe0KrSBM3VkNOyYhExYiYvXk1b9DBBHEiyDe9LIX/wPB2148VhBHNtG2kVTJdruB8vlc8sA73zfPJJnAhPfN/quff7CzXWXbeS9mZ2ZithORbqVIMRv/+CReeuXHn569cu36pfVGY+NyShfXr66+nFJaeu77tz/68vkfegtvfbP03Vzsrbyz/9var3tn987t/3n1/WaVmlVqtXspTzfa7V5+oyzSVrPayVJ6syzyqkjNVlV0R8a3y3an0095a2txvtMtqirlrX7aKfqp1069bj/l7+XNVsqyLC3OB5M7cbva/OJWXdcRdf1onIy6ruvTMR8L8VgsxlIsx0o8Hk/Ek3Emnoqz8XQ8E1//8lX/IAEAAAAAAAAAAAAAAAAAAAAcnUn3/58bHDXtrgEAAAAAAAAAAAAAAAAAAODhcuXa9UvrjcbG5ZRORZSf7W7ubg4fh+Pr29GMMoq4EMvxRwx2/w8N64uvNzYupIGV+LS8+Xf+5u7mI6P51cHfCYzNrw7zaTQ/F/N359diOc6Mz6+NzZ+KF1+4K5/Fcvz8brSjjK04yN7Jf7ya0mtvNP6VPz84DgAAAB4GWbpt7P17lt1rfJif4PeBkfvrg+z5E1M9dSKi6n+4k5dl0T3iImaG8x/9zP9dLMTxPddxFyen28bvdV1P/0U4VHE6Iu7z83zPK2UuIg4988x9N/b/xSEv8yl/MXEs7rzp0+4EAAAAAAAAAACASTyQJYffji77nfY5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqwAAAP//JVDLZg==") io_setup(0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x42042, 0xdea1a290e97695ad) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)='~i', 0x2}], 0x1, 0x7ff, 0x7f, 0x5) 53.861685838s ago: executing program 3 (id=790): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_destroy(r0) 53.597699816s ago: executing program 3 (id=796): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800052, &(0x7f0000000080), 0x1, 0x560, &(0x7f0000000b00)="$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") r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x3) 53.230651728s ago: executing program 3 (id=803): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 52.486570612s ago: executing program 3 (id=811): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 52.466015033s ago: executing program 34 (id=811): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 48.84986104s ago: executing program 35 (id=629): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000080)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) 45.011750264s ago: executing program 5 (id=900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a1", 0x28}, {&(0x7f0000000080)="89cca9ad7f6247060000850830779506858a9475090000000018863c1bfb931b", 0x20}], 0x2) 44.877287869s ago: executing program 5 (id=903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 44.801238601s ago: executing program 5 (id=906): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000ac0)='syscall\x00') pread64(r2, &(0x7f0000000240)=""/16, 0x10, 0x7fff) 44.649222606s ago: executing program 5 (id=909): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 44.619452877s ago: executing program 5 (id=911): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) 44.302443887s ago: executing program 5 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') socket$nl_route(0x10, 0x3, 0x0) 44.21742794s ago: executing program 36 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') socket$nl_route(0x10, 0x3, 0x0) 10.806641291s ago: executing program 9 (id=1653): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@nogrpid}, {@dioread_lock}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 10.637302876s ago: executing program 9 (id=1657): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r0) 10.550482199s ago: executing program 9 (id=1660): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10.550139979s ago: executing program 9 (id=1661): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") sync() creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 10.346719556s ago: executing program 9 (id=1662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000240)="c23ee741b8a49a65580000000000", 0xe}], 0x3) 10.140439232s ago: executing program 9 (id=1663): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 10.118006773s ago: executing program 37 (id=1663): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 7.899379445s ago: executing program 4 (id=1702): r0 = io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x2, 0x3, 0x4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000000580)=[{0x0, 0x1, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000006480)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) 6.967495285s ago: executing program 4 (id=1714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, r2}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 6.764525762s ago: executing program 4 (id=1717): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 6.689291844s ago: executing program 4 (id=1720): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") sync() creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 6.440680122s ago: executing program 4 (id=1723): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4820, @broadcast}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000280)={0x2, 0x0, @multicast1, 0x1}, 0x10) 6.025967015s ago: executing program 4 (id=1731): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8) 6.025832515s ago: executing program 38 (id=1731): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r3, 0x2}, 0x8) 3.280579544s ago: executing program 6 (id=1769): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f00000000c0)) ioctl$TCFLSH(r0, 0x540b, 0x1) 1.982781986s ago: executing program 8 (id=1797): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x80) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700)=[{0x0, 0x3}], 0x1, 0x1, 0x0, 0x0, 0x22, 0x5}) 1.744782424s ago: executing program 7 (id=1803): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 1.655057677s ago: executing program 8 (id=1807): r0 = socket(0x40000000015, 0x5, 0x0) pipe2(0x0, 0xc00) r1 = accept$inet6(r0, 0x0, &(0x7f0000000a40)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000a80)={'macvlan0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000cc0)=ANY=[], 0x1, 0x2aa, &(0x7f0000000680)="$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") 1.607689598s ago: executing program 8 (id=1808): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 1.607047658s ago: executing program 7 (id=1810): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) pread64(r0, 0x0, 0x0, 0x10000) 1.5710742s ago: executing program 8 (id=1811): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x3a0}) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x11000, 0x2, 0x2d0}, &(0x7f0000000140), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.341678957s ago: executing program 2 (id=1815): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 1.25416555s ago: executing program 2 (id=1817): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1.253744499s ago: executing program 1 (id=1818): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1a22de3759501a7e, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x75f, 0x4c042) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x78, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @private0, 0x157}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 1.210918521s ago: executing program 2 (id=1819): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xffffffffffffffff, 0xee01) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40b, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x2, 0xe, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.210542271s ago: executing program 6 (id=1820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) 1.188473682s ago: executing program 6 (id=1821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.188096132s ago: executing program 1 (id=1822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) 1.100238225s ago: executing program 2 (id=1823): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 906.767711ms ago: executing program 1 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) setgroups(0x40000000000000e7, &(0x7f0000000000)=[0x0]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 905.561401ms ago: executing program 2 (id=1834): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 745.767176ms ago: executing program 7 (id=1825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0x2000000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 623.10024ms ago: executing program 8 (id=1826): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) fadvise64(0xffffffffffffffff, 0x7f, 0xe4ff, 0x4) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 574.421712ms ago: executing program 7 (id=1827): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x175) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 446.642076ms ago: executing program 7 (id=1828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x3f, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 241.257662ms ago: executing program 6 (id=1829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 240.867852ms ago: executing program 6 (id=1830): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 212.303784ms ago: executing program 1 (id=1831): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 169.233065ms ago: executing program 1 (id=1832): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 168.590885ms ago: executing program 8 (id=1833): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a66000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000056000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) 46.579049ms ago: executing program 1 (id=1835): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x2de, 0x0) 46.339109ms ago: executing program 7 (id=1836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x55, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x70, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x9}, {0x6, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044801}, 0x2) 26.17889ms ago: executing program 2 (id=1837): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=1838): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="190000000400000004"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x327e, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @remote}], 0x1c) io_uring_enter(r0, 0x5b3, 0x7ecd, 0x17, 0x0, 0x0) kernel console output (not intermixed with test programs): r:sysadm_t pid=5891 comm="syz.3.790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc71ace59 code=0x7ffc0000 [ 76.515084][ T5907] loop3: detected capacity change from 0 to 512 [ 76.523676][ T5902] EXT4-fs (loop4): 1 truncate cleaned up [ 76.534853][ T5902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.558066][ T5907] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.569095][ T28] audit: type=1326 audit(1780005600.697:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.3.790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc71ace59 code=0x7ffc0000 [ 76.595305][ T28] audit: type=1326 audit(1780005600.697:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.3.790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdcc71ace59 code=0x7ffc0000 [ 76.600562][ T5907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.624743][ T28] audit: type=1326 audit(1780005600.767:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5891 comm="syz.3.790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdcc71ace59 code=0x7ffc0000 [ 76.689984][ T5916] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 18: comm syz.3.796: lblock 23 mapped to illegal pblock 18 (length 1) [ 76.721771][ T5907] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.796: lblock 8 mapped to illegal pblock 3 (length 26) [ 76.743967][ T28] audit: type=1400 audit(1780005600.887:782): avc: denied { name_bind } for pid=5908 comm="syz.6.798" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 76.764823][ T5902] EXT4-fs (loop4): can't disable delalloc during remount [ 76.781823][ T3310] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 76.794053][ T28] audit: type=1400 audit(1780005600.997:783): avc: denied { shutdown } for pid=5914 comm="syz.6.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.822445][ T5916] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 18: comm syz.3.796: lblock 23 mapped to illegal pblock 18 (length 1) [ 76.839073][ T3310] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 76.860188][ T28] audit: type=1400 audit(1780005600.997:784): avc: denied { read } for pid=5914 comm="syz.6.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.879859][ T28] audit: type=1400 audit(1780005600.997:785): avc: denied { write } for pid=5914 comm="syz.6.800" path="socket:[13399]" dev="sockfs" ino=13399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.907944][ T3310] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 76.959236][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.221460][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.228728][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.287634][ T4475] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 77.309752][ T4475] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.331457][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.342045][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.376032][ T5933] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.415162][ T49] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.424360][ T49] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.433989][ T49] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.472162][ T5938] SELinux: policydb version 12746753 does not match my version range 15-35 [ 77.481853][ T5938] SELinux: failed to load policy [ 77.552632][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.577437][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.651620][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.662305][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.755439][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.765964][ T5954] Set syz1 is full, maxelem 6117 reached [ 77.774949][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.863923][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.880256][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.012800][ T49] bridge_slave_1: left allmulticast mode [ 78.019141][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.019311][ T49] bridge_slave_1: left promiscuous mode [ 78.039872][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.050712][ T49] bridge_slave_0: left allmulticast mode [ 78.056448][ T49] bridge_slave_0: left promiscuous mode [ 78.062565][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.173832][ T5980] loop5: detected capacity change from 0 to 128 [ 78.203667][ T5980] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.216218][ T5980] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.233734][ T49] gretap0 (unregistering): left allmulticast mode [ 78.255924][ T4258] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.369707][ T5996] loop4: detected capacity change from 0 to 512 [ 78.385328][ T5996] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 78.409078][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.420888][ T5996] EXT4-fs (loop4): Remounting filesystem read-only [ 78.428897][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.435365][ C0] EXT4-fs (loop4): initial error at time 1780005602: ext4_mb_generate_buddy:1317 [ 78.438328][ T5996] EXT4-fs (loop4): 1 truncate cleaned up [ 78.444501][ C0] EXT4-fs (loop4): last error at time 1780005602: ext4_mb_generate_buddy:1317 [ 78.479105][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.488469][ T49] bond0 (unregistering): Released all slaves [ 78.499519][ T5996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.561591][ T49] hsr_slave_0: left promiscuous mode [ 78.568825][ T49] hsr_slave_1: left promiscuous mode [ 78.588541][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.613888][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.628977][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.640047][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.674499][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.700512][ T49] veth1_macvtap: left promiscuous mode [ 78.715081][ T49] veth0_macvtap: left promiscuous mode [ 78.799471][ T6012] loop5: detected capacity change from 0 to 8192 [ 78.807131][ T49] team0 (unregistering): Port device team_slave_1 removed [ 78.993311][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.058165][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.069382][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.076592][ T5943] bridge_slave_0: entered allmulticast mode [ 79.083065][ T5943] bridge_slave_0: entered promiscuous mode [ 79.091187][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.098252][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.105394][ T5943] bridge_slave_1: entered allmulticast mode [ 79.111810][ T5943] bridge_slave_1: entered promiscuous mode [ 79.161912][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.191520][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.258470][ T5943] team0: Port device team_slave_0 added [ 79.290062][ T5943] team0: Port device team_slave_1 added [ 79.306031][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.317500][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.370497][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.399662][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.406732][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.459062][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.502405][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 79.509283][ T6046] loop4: detected capacity change from 0 to 8192 [ 79.517405][ T6046] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.646205][ T6046] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 79.655070][ T6046] FAT-fs (loop4): Filesystem has been set read-only [ 79.662097][ T6046] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 79.671063][ T6046] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 79.705688][ T5943] hsr_slave_0: entered promiscuous mode [ 79.726632][ T5943] hsr_slave_1: entered promiscuous mode [ 79.748206][ T5943] debugfs: 'hsr0' already exists in 'hsr' [ 79.768415][ T5943] Cannot create hsr debugfs directory [ 79.771179][ T6054] netlink: 'syz.4.839': attribute type 10 has an invalid length. [ 79.843620][ T6054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.860719][ T6054] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 79.894257][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 79.907901][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.840'. [ 79.919172][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.935062][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.950842][ T6054] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 79.970356][ T6054] bond0 (unregistering): Released all slaves [ 79.990297][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 79.990674][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 80.000570][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.840'. [ 80.044176][ T40] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.060205][ T40] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.124250][ T40] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.149305][ T40] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.222591][ T5943] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 80.237691][ T5943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.259374][ T5943] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 80.274563][ T5943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.296620][ T5943] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 80.314867][ T5943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.336393][ T5943] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 80.355395][ T5943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.395389][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 80.437814][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.464738][ T6103] loop4: detected capacity change from 0 to 128 [ 80.474750][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.501039][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.508117][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.526222][ T6103] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 80.539564][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.546626][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.558953][ T6103] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.669335][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.764664][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.978143][ T5943] veth0_vlan: entered promiscuous mode [ 80.995678][ T5943] veth1_vlan: entered promiscuous mode [ 81.029680][ T5943] veth0_macvtap: entered promiscuous mode [ 81.039142][ T5943] veth1_macvtap: entered promiscuous mode [ 81.059712][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.076948][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.094984][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.109200][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.127133][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.146883][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.227907][ T6136] loop4: detected capacity change from 0 to 512 [ 81.264751][ T6136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.321434][ T3304] bridge0: port 3(syz_tun) entered disabled state [ 81.331155][ T6136] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.353318][ T3304] syz_tun (unregistering): left allmulticast mode [ 81.383017][ T3304] syz_tun (unregistering): left promiscuous mode [ 81.398861][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 81.410567][ T6136] EXT4-fs error (device loop4): ext4_get_first_dir_block:3537: inode #12: comm syz.4.849: Directory hole found for htree leaf block 0 [ 81.426094][ T3304] bridge0: port 3(syz_tun) entered disabled state [ 81.432642][ T28] audit: type=1400 audit(1780005605.707:804): avc: denied { write } for pid=6134 comm="syz.4.849" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.470475][ T28] audit: type=1400 audit(1780005605.717:805): avc: denied { write } for pid=6134 comm="syz.4.849" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.494127][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.518403][ T6157] sg_write: data in/out 402397/290 bytes for SCSI command 0x0-- guessing data in; [ 81.518403][ T6157] program syz.7.856 not setting count and/or reply_len properly [ 81.541715][ T28] audit: type=1400 audit(1780005605.717:806): avc: denied { write } for pid=6134 comm="syz.4.849" name="file7" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.600532][ T28] audit: type=1400 audit(1780005605.717:807): avc: denied { write } for pid=6134 comm="syz.4.849" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.680394][ T28] audit: type=1400 audit(1780005605.727:808): avc: denied { remove_name } for pid=6134 comm="syz.4.849" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.726640][ T28] audit: type=1400 audit(1780005605.727:809): avc: denied { rename } for pid=6134 comm="syz.4.849" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.758212][ T28] audit: type=1400 audit(1780005605.727:810): avc: denied { reparent } for pid=6134 comm="syz.4.849" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.787942][ T28] audit: type=1400 audit(1780005605.727:811): avc: denied { add_name } for pid=6134 comm="syz.4.849" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.868640][ T6142] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.879165][ T6142] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.886303][ T6142] bridge_slave_0: entered allmulticast mode [ 81.894298][ T6142] bridge_slave_0: entered promiscuous mode [ 81.901305][ T6142] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.908643][ T6142] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.916011][ T6142] bridge_slave_1: entered allmulticast mode [ 81.922671][ T6142] bridge_slave_1: entered promiscuous mode [ 81.945217][ T6142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.958407][ T6187] loop6: detected capacity change from 0 to 512 [ 81.966113][ T6142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.975666][ T6187] EXT4-fs: Ignoring removed i_version option [ 81.995489][ T6142] team0: Port device team_slave_0 added [ 82.005107][ T6187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.020893][ T6142] team0: Port device team_slave_1 added [ 82.042452][ T6187] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.066563][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.081062][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.149213][ T28] audit: type=1400 audit(1780005606.447:812): avc: denied { write } for pid=6186 comm="syz.6.863" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.192151][ T6142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.209280][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.210802][ T6142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.228285][ T28] audit: type=1400 audit(1780005606.447:813): avc: denied { create } for pid=6186 comm="syz.6.863" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 82.268922][ T6142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.298996][ T6142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.317346][ T1663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.349032][ T1663] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 82.349755][ T6205] sg_write: data in/out 402397/290 bytes for SCSI command 0x0-- guessing data in; [ 82.349755][ T6205] program syz.5.869 not setting count and/or reply_len properly [ 82.454806][ T1663] bond0: (slave netdevsim2): Releasing backup interface [ 82.478065][ T1663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.504901][ T1663] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 82.543765][ T6142] hsr_slave_0: entered promiscuous mode [ 82.565458][ T6142] hsr_slave_1: entered promiscuous mode [ 82.581930][ T6142] debugfs: 'hsr0' already exists in 'hsr' [ 82.597804][ T6142] Cannot create hsr debugfs directory [ 82.656659][ T1663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.686528][ T1663] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 82.761911][ T1663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.786895][ T1663] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 82.946691][ T6142] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 82.963995][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.971655][ T6230] netlink: 'syz.6.880': attribute type 8 has an invalid length. [ 82.990969][ T6142] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 83.001630][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.880'. [ 83.027714][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.043036][ T6142] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 83.462232][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.884'. [ 83.473261][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.884'. [ 83.681286][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.745806][ T6230] bond0: entered promiscuous mode [ 83.750996][ T6230] bond_slave_0: entered promiscuous mode [ 83.756791][ T6230] bond_slave_1: entered promiscuous mode [ 83.770224][ T6230] batadv0: entered promiscuous mode [ 83.776523][ T6230] team0: entered promiscuous mode [ 83.782046][ T6230] team_slave_0: entered promiscuous mode [ 83.787859][ T6230] team_slave_1: entered promiscuous mode [ 83.794848][ T6230] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 83.805006][ T6230] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 83.815376][ T6230] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 83.825629][ T6230] hsr1: entered promiscuous mode [ 83.831529][ T6230] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.839769][ T6142] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 83.850219][ T6142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.858404][ T6244] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 83.879522][ T1663] bridge_slave_1: left allmulticast mode [ 83.885221][ T1663] bridge_slave_1: left promiscuous mode [ 83.891774][ T1663] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.903698][ T1663] bridge_slave_0: left allmulticast mode [ 83.909779][ T1663] bridge_slave_0: left promiscuous mode [ 83.916989][ T1663] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.095247][ T1663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.273765][ T1663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.286305][ T1663] bond0 (unregistering): Released all slaves [ 84.373118][ T1663] hsr_slave_0: left promiscuous mode [ 84.389013][ T1663] hsr_slave_1: left promiscuous mode [ 84.395036][ T1663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.412490][ T1663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.442973][ T6277] loop5: detected capacity change from 0 to 512 [ 84.455858][ T1663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.470265][ T6277] EXT4-fs: Ignoring removed bh option [ 84.478051][ T1663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.508618][ T6277] EXT4-fs: dax option not supported [ 84.520544][ T1663] veth1_macvtap: left promiscuous mode [ 84.539086][ T1663] veth0_macvtap: left promiscuous mode [ 84.555969][ T1663] veth1_vlan: left promiscuous mode [ 84.569416][ T1663] veth0_vlan: left promiscuous mode [ 84.589075][ T6277] loop5: detected capacity change from 512 to 1 [ 84.721670][ T1663] team0 (unregistering): Port device team_slave_1 removed [ 84.736099][ T1663] team0 (unregistering): Port device team_slave_0 removed [ 85.019478][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 85.050861][ T6142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.111801][ T6142] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.135220][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.142289][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.155240][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.162373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.192889][ T6306] loop7: detected capacity change from 0 to 512 [ 85.206662][ T6307] IPv6: addrconf: prefix option has invalid lifetime [ 85.449310][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 85.459234][ T6142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.671895][ T6142] veth0_vlan: entered promiscuous mode [ 85.687450][ T6142] veth1_vlan: entered promiscuous mode [ 85.718809][ T6142] veth0_macvtap: entered promiscuous mode [ 85.743366][ T6142] veth1_macvtap: entered promiscuous mode [ 85.759839][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.778494][ T6377] loop6: detected capacity change from 0 to 256 [ 85.787037][ T289] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.802575][ T6377] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 85.828946][ T289] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.855244][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 85.886877][ T6142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.910205][ T6386] loop6: detected capacity change from 0 to 512 [ 85.927322][ T289] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.939677][ T6388] loop4: detected capacity change from 0 to 512 [ 85.941669][ T289] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.968823][ T1663] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.984956][ T6386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.987043][ T1663] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.006364][ T6386] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.029653][ T1663] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.048692][ T361] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.062058][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.073091][ T289] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.083716][ T289] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.134724][ T289] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.158088][ T289] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.231058][ T6414] loop8: detected capacity change from 0 to 512 [ 86.243644][ T6414] EXT4-fs: Ignoring removed nobh option [ 86.260197][ T6414] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 86.284027][ T6414] EXT4-fs (loop8): 1 truncate cleaned up [ 86.291858][ T6414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.368703][ T6142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.405416][ T289] bridge_slave_1: left allmulticast mode [ 86.431940][ T289] bridge_slave_1: left promiscuous mode [ 86.446855][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.457373][ T289] bridge_slave_0: left allmulticast mode [ 86.463284][ T289] bridge_slave_0: left promiscuous mode [ 86.469451][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.574955][ T289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.585957][ T289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.598452][ T289] bond0 (unregistering): Released all slaves [ 86.612547][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 86.665835][ T289] hsr_slave_0: left promiscuous mode [ 86.675537][ T289] hsr_slave_1: left promiscuous mode [ 86.689322][ T289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.698087][ T289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.718139][ T289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.752540][ T289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.763312][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 86.763327][ T28] audit: type=1400 audit(1780005611.077:840): avc: denied { write } for pid=6449 comm="syz.6.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.799937][ T28] audit: type=1400 audit(1780005611.107:841): avc: denied { read } for pid=6449 comm="syz.6.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.826756][ T289] veth1_macvtap: left promiscuous mode [ 86.833975][ T289] veth0_macvtap: left promiscuous mode [ 86.848399][ T289] veth1_vlan: left promiscuous mode [ 86.860663][ T289] veth0_vlan: left promiscuous mode [ 86.868855][ T28] audit: type=1400 audit(1780005611.167:842): avc: denied { ioctl } for pid=6449 comm="syz.6.931" path="socket:[15871]" dev="sockfs" ino=15871 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.937597][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.954637][ T28] audit: type=1400 audit(1780005611.197:843): avc: denied { write } for pid=6443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.983413][ T28] audit: type=1400 audit(1780005611.267:844): avc: denied { write } for pid=6468 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.029771][ T289] team0 (unregistering): Port device team_slave_1 removed [ 87.039426][ T289] team0 (unregistering): Port device team_slave_0 removed [ 87.076845][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 87.111638][ T6390] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.118721][ T6390] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.125940][ T6390] bridge_slave_0: entered allmulticast mode [ 87.132698][ T6390] bridge_slave_0: entered promiscuous mode [ 87.140117][ T6390] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.147162][ T6390] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.154290][ T6390] bridge_slave_1: entered allmulticast mode [ 87.161117][ T6390] bridge_slave_1: entered promiscuous mode [ 87.179368][ T6390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.190024][ T6390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.216844][ T6390] team0: Port device team_slave_0 added [ 87.243205][ T6390] team0: Port device team_slave_1 added [ 87.296981][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.311299][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.339983][ T6390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.357707][ T6390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.367573][ T6390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.403109][ T6390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.475228][ T6390] hsr_slave_0: entered promiscuous mode [ 87.483117][ T6390] hsr_slave_1: entered promiscuous mode [ 87.593887][ T28] audit: type=1400 audit(1780005611.907:845): avc: denied { write } for pid=6493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.680110][ T28] audit: type=1400 audit(1780005611.987:846): avc: denied { write } for pid=6512 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.687359][ T6511] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 87.738688][ T6390] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 87.753431][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.761903][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 87.769867][ T6390] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 87.793335][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.821509][ T6390] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 87.836325][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.846370][ T6390] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 87.855008][ T6497] loop6: detected capacity change from 0 to 32768 [ 87.871595][ T6390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.894690][ T28] audit: type=1400 audit(1780005612.207:847): avc: denied { listen } for pid=6527 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.915325][ T6497] loop6: p1 p3 < > [ 87.932405][ T289] Bluetooth: hci1: Frame reassembly failed (-84) [ 87.951816][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.963519][ T6390] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.978150][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.985274][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.994855][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 88.009677][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 88.023811][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.030895][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.100653][ T28] audit: type=1400 audit(1780005612.407:848): avc: denied { write } for pid=6536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.156435][ T28] audit: type=1400 audit(1780005612.467:849): avc: denied { write } for pid=6554 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.194589][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 88.259989][ T6390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.300443][ T6575] veth0_to_team: entered promiscuous mode [ 88.309632][ T6575] veth0_to_team: left promiscuous mode [ 88.373730][ T6591] loop6: detected capacity change from 0 to 512 [ 88.388969][ T6591] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 88.398379][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 88.409681][ T6591] EXT4-fs (loop6): invalid journal inode [ 88.415420][ T6591] EXT4-fs (loop6): can't get journal size [ 88.422159][ T6591] EXT4-fs (loop6): 1 truncate cleaned up [ 88.428303][ T6591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.446664][ T6390] veth0_vlan: entered promiscuous mode [ 88.461589][ T6390] veth1_vlan: entered promiscuous mode [ 88.477535][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.493501][ T6390] veth0_macvtap: entered promiscuous mode [ 88.510833][ T6390] veth1_macvtap: entered promiscuous mode [ 88.521674][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.532694][ T6390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.547872][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.557077][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.566443][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.577785][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.724172][ T6614] loop9: detected capacity change from 0 to 128 [ 88.817967][ T6624] loop4: detected capacity change from 0 to 256 [ 88.824900][ T6624] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.979026][ T6535] Bluetooth: hci0: command 0x1003 tx timeout [ 88.980384][ T5882] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 89.490909][ T6671] loop9: detected capacity change from 0 to 1024 [ 89.500295][ T6671] EXT4-fs: Ignoring removed bh option [ 89.506607][ T6671] EXT4-fs: Ignoring removed orlov option [ 89.533611][ T6671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.555132][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 89.636793][ T6390] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.840734][ T6705] loop4: detected capacity change from 0 to 512 [ 89.853657][ T6705] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.897482][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.995'. [ 89.939007][ T3520] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 90.255019][ T6727] netlink: 'syz.6.1003': attribute type 19 has an invalid length. [ 90.263768][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1003'. [ 90.309831][ T6727] netlink: 'syz.6.1003': attribute type 19 has an invalid length. [ 90.328933][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1003'. [ 90.616969][ T6742] loop6: detected capacity change from 0 to 1024 [ 90.650193][ T6742] EXT4-fs: Ignoring removed bh option [ 90.660549][ T6742] EXT4-fs: Ignoring removed orlov option [ 90.681325][ T6742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.766021][ T6740] loop4: detected capacity change from 0 to 32768 [ 90.777678][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.812086][ T6740] loop4: p1 p3 < > [ 90.905706][ T6756] loop6: detected capacity change from 0 to 512 [ 90.941850][ T6756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.970327][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 90.970641][ T6756] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.991626][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 91.044265][ T6768] netlink: 'syz.8.1020': attribute type 1 has an invalid length. [ 91.062353][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.075756][ T6772] loop9: detected capacity change from 0 to 128 [ 91.089464][ T6768] bond1 (unregistering): Released all slaves [ 91.143124][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.143124][ T6772] loop9: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 91.180594][ T6772] Buffer I/O error on dev loop9, logical block 135, lost async page write [ 91.203419][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.203419][ T6772] loop9: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 91.241233][ T6772] Buffer I/O error on dev loop9, logical block 136, lost async page write [ 91.259130][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.259130][ T6772] loop9: rw=2049, sector=137, nr_sectors = 1 limit=128 [ 91.287581][ T6772] Buffer I/O error on dev loop9, logical block 137, lost async page write [ 91.308140][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.308140][ T6772] loop9: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 91.347082][ T6772] Buffer I/O error on dev loop9, logical block 138, lost async page write [ 91.361640][ T6785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.382761][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.382761][ T6772] loop9: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 91.399016][ T6785] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.411143][ T6772] Buffer I/O error on dev loop9, logical block 139, lost async page write [ 91.429585][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.429585][ T6772] loop9: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 91.463409][ T6785] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.1036: lblock 3 mapped to illegal pblock 3 (length 3) [ 91.513434][ T6772] Buffer I/O error on dev loop9, logical block 140, lost async page write [ 91.530270][ T6785] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 91.566296][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.566296][ T6772] loop9: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 91.587530][ T6790] EXT4-fs: Ignoring removed orlov option [ 91.598971][ T6785] EXT4-fs (loop8): This should not happen!! Data will be lost [ 91.598971][ T6785] [ 91.606378][ T6772] Buffer I/O error on dev loop9, logical block 141, lost async page write [ 91.620108][ T6790] EXT4-fs (loop8): re-mounted 00000000-0000-0006-0000-000000000000. [ 91.631889][ T6785] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #15: block 3: comm syz.8.1036: lblock 3 mapped to illegal pblock 3 (length 1) [ 91.641478][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.641478][ T6772] loop9: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 91.656406][ T6785] EXT4-fs (loop8): Remounting filesystem read-only [ 91.661306][ T6782] loop7: p1 p3 < > [ 91.703150][ T6772] Buffer I/O error on dev loop9, logical block 143, lost async page write [ 91.730271][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.730271][ T6772] loop9: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 91.744509][ T6772] Buffer I/O error on dev loop9, logical block 152, lost async page write [ 91.793874][ T6772] syz.9.1021: attempt to access beyond end of device [ 91.793874][ T6772] loop9: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 91.835266][ T6799] sg_write: data in/out 37854/658 bytes for SCSI command 0x0-- guessing data in; [ 91.835266][ T6799] program syz.7.1030 not setting count and/or reply_len properly [ 91.837354][ T6772] Buffer I/O error on dev loop9, logical block 153, lost async page write [ 91.893291][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 91.904431][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 92.003628][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 92.003640][ T28] audit: type=1400 audit(1780005616.317:880): avc: denied { setopt } for pid=6804 comm="syz.9.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.137002][ T6817] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 92.177751][ T6823] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.217421][ T6823] EXT4-fs (loop4): 1 truncate cleaned up [ 92.232829][ T6823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.282351][ T28] audit: type=1400 audit(1780005616.597:881): avc: denied { write } for pid=6819 comm="syz.4.1042" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.344729][ T6142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 92.473806][ T6844] xt_hashlimit: size too large, truncated to 1048576 [ 92.480592][ T28] audit: type=1400 audit(1780005616.787:882): avc: denied { write } for pid=6830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.538070][ T28] audit: type=1400 audit(1780005616.797:883): avc: denied { write } for pid=6849 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.671873][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.786222][ T28] audit: type=1400 audit(1780005617.097:884): avc: denied { write } for pid=6854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.863349][ T28] audit: type=1400 audit(1780005617.177:885): avc: denied { write } for pid=6878 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.902130][ T28] audit: type=1400 audit(1780005617.207:886): avc: denied { read } for pid=6882 comm="syz.6.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 93.002012][ T3611] Process accounting resumed [ 93.039407][ T28] audit: type=1400 audit(1780005617.347:887): avc: denied { write } for pid=6885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.064873][ T28] audit: type=1400 audit(1780005617.377:888): avc: denied { append } for pid=6899 comm="syz.9.1058" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 93.094074][ T6901] usb usb8: usbfs: process 6901 (syz.9.1058) did not claim interface 0 before use [ 93.134181][ T28] audit: type=1400 audit(1780005617.447:889): avc: denied { write } for pid=6905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.173220][ T6910] ip_vti0: entered promiscuous mode [ 93.188444][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1061'. [ 93.301553][ T6934] set_capacity_and_notify: 3 callbacks suppressed [ 93.301615][ T6934] loop7: detected capacity change from 0 to 136 [ 93.334577][ T6934] Attempt to read inode for relocated directory [ 93.674917][ T6959] loop4: detected capacity change from 0 to 1024 [ 93.687652][ T6959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.716876][ T6964] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1075'. [ 93.720799][ T6959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.726398][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1075'. [ 93.781433][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.851201][ T6973] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 93.992316][ T6989] loop8: detected capacity change from 0 to 512 [ 94.009464][ T6989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.022170][ T6989] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.043411][ T6142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.428947][ T7026] SELinux: failed to load policy [ 94.661452][ T7040] netlink: 'syz.4.1107': attribute type 13 has an invalid length. [ 94.758984][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1108'. [ 94.768020][ T7043] netlink: 'syz.4.1108': attribute type 3 has an invalid length. [ 94.776707][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1108'. [ 94.786263][ T7043] netlink: 'syz.4.1108': attribute type 3 has an invalid length. [ 94.874265][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1110'. [ 96.188894][ T6912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.367076][ T7103] loop6: detected capacity change from 0 to 2048 [ 96.670420][ T7127] netlink: 'syz.6.1143': attribute type 25 has an invalid length. [ 96.678453][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1143'. [ 96.687623][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1142'. [ 96.709102][ T7127] netlink: 'syz.6.1143': attribute type 25 has an invalid length. [ 96.717060][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1143'. [ 96.736813][ T7129] syz_tun: entered promiscuous mode [ 96.748686][ T7129] macvtap1: entered promiscuous mode [ 96.754311][ T7129] macvtap1: entered allmulticast mode [ 96.759835][ T7129] syz_tun: entered allmulticast mode [ 96.991976][ T7143] loop8: detected capacity change from 0 to 128 [ 97.052406][ T7143] bio_check_eod: 22 callbacks suppressed [ 97.052433][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.052433][ T7143] loop8: rw=2049, sector=135, nr_sectors = 1 limit=128 [ 97.073107][ T7143] buffer_io_error: 22 callbacks suppressed [ 97.073133][ T7143] Buffer I/O error on dev loop8, logical block 135, lost async page write [ 97.089212][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.089212][ T7143] loop8: rw=2049, sector=136, nr_sectors = 1 limit=128 [ 97.111173][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 97.111186][ T28] audit: type=1400 audit(1780005621.417:906): avc: denied { name_bind } for pid=7156 comm="syz.6.1155" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 97.150690][ T7143] Buffer I/O error on dev loop8, logical block 136, lost async page write [ 97.159749][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.159749][ T7143] loop8: rw=2049, sector=137, nr_sectors = 1 limit=128 [ 97.166660][ T7164] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.173662][ T7143] Buffer I/O error on dev loop8, logical block 137, lost async page write [ 97.193252][ T7164] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.200370][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.200370][ T7143] loop8: rw=2049, sector=138, nr_sectors = 1 limit=128 [ 97.230648][ T7143] Buffer I/O error on dev loop8, logical block 138, lost async page write [ 97.245167][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.245167][ T7143] loop8: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 97.259153][ T7143] Buffer I/O error on dev loop8, logical block 139, lost async page write [ 97.267918][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.267918][ T7143] loop8: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 97.282110][ T7143] Buffer I/O error on dev loop8, logical block 140, lost async page write [ 97.291198][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.291198][ T7143] loop8: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 97.303990][ T7169] SELinux: failed to load policy [ 97.304882][ T7143] Buffer I/O error on dev loop8, logical block 141, lost async page write [ 97.324775][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.324775][ T7143] loop8: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 97.345504][ T7179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1164'. [ 97.365852][ T7143] Buffer I/O error on dev loop8, logical block 143, lost async page write [ 97.387712][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.387712][ T7143] loop8: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 97.420591][ T7143] Buffer I/O error on dev loop8, logical block 152, lost async page write [ 97.432261][ T7143] syz.8.1150: attempt to access beyond end of device [ 97.432261][ T7143] loop8: rw=2049, sector=153, nr_sectors = 1 limit=128 [ 97.464069][ T7143] Buffer I/O error on dev loop8, logical block 153, lost async page write [ 97.490397][ T7191] loop6: detected capacity change from 0 to 1024 [ 97.524363][ T7191] EXT4-fs: Ignoring removed nobh option [ 97.544963][ T7191] EXT4-fs: Ignoring removed bh option [ 97.579505][ T7191] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 97.590727][ T7199] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 97.616506][ T7191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.630256][ T28] audit: type=1400 audit(1780005621.947:907): avc: denied { write } for pid=7190 comm="syz.6.1170" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.711433][ T7208] loop8: detected capacity change from 0 to 1024 [ 97.771720][ T7208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.807554][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.828965][ T28] audit: type=1400 audit(1780005622.137:908): avc: denied { write } for pid=7207 comm="syz.8.1177" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.831091][ T7208] EXT4-fs (loop8): shut down requested (0) [ 97.853538][ T28] audit: type=1400 audit(1780005622.147:909): avc: denied { write } for pid=7207 comm="syz.8.1177" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.940149][ T6142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.049858][ T7229] loop4: detected capacity change from 0 to 128 [ 98.227238][ T7233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.234488][ T7233] IPv6: NLM_F_CREATE should be set when creating new route [ 98.284757][ T7233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.429971][ T28] audit: type=1400 audit(1780005622.737:910): avc: denied { write } for pid=7231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.470300][ T7258] loop4: detected capacity change from 0 to 128 [ 98.508559][ T7258] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 98.521193][ T28] audit: type=1400 audit(1780005622.807:911): avc: denied { write } for pid=7260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.539878][ T7258] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.606882][ T28] audit: type=1400 audit(1780005622.917:912): avc: denied { write } for pid=7257 comm="syz.4.1194" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.673255][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.773682][ T28] audit: type=1400 audit(1780005623.087:913): avc: denied { write } for pid=7266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.870453][ T28] audit: type=1400 audit(1780005623.147:914): avc: denied { write } for pid=7292 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.955765][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1204'. [ 98.968364][ T7307] netlink: 'syz.8.1204': attribute type 3 has an invalid length. [ 98.976441][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1204'. [ 98.985819][ T7307] netlink: 'syz.8.1204': attribute type 3 has an invalid length. [ 98.992974][ T7309] loop9: detected capacity change from 0 to 1024 [ 99.002230][ T7309] EXT4-fs: Ignoring removed bh option [ 99.034697][ T7310] loop7: detected capacity change from 0 to 4096 [ 99.041658][ T7309] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.061063][ T7310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.075065][ T6390] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.115395][ T28] audit: type=1400 audit(1780005623.417:915): avc: denied { write } for pid=7302 comm="syz.7.1203" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.162893][ T7324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1211'. [ 99.215845][ T7333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61712 sclass=netlink_route_socket pid=7333 comm=syz.9.1214 [ 99.437341][ T7360] loop9: detected capacity change from 0 to 512 [ 99.464844][ T7360] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1226: bad orphan inode 13 [ 99.479578][ T7360] loop9: lost filesystem error report for type 5 error -117 [ 99.479811][ T7360] ext4_test_bit(bit=12, block=4) = 1 [ 99.492414][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 99.492429][ C0] EXT4-fs (loop9): initial error at time 1780005623: ext4_orphan_get:1423 [ 99.492447][ C0] EXT4-fs (loop9): last error at time 1780005623: ext4_orphan_get:1423 [ 99.534199][ T7360] is_bad_inode(inode)=0 [ 99.538515][ T7360] NEXT_ORPHAN(inode)=0 [ 99.577161][ T7360] max_ino=32 [ 99.588849][ T7376] loop8: detected capacity change from 0 to 1024 [ 99.595433][ T7360] i_nlink=1 [ 99.600745][ T7360] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.612736][ T7376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.636909][ T7376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.651668][ T7376] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.656743][ T7360] EXT4-fs warning (device loop9): dx_probe:813: inode #2: comm syz.9.1226: Hash code is SIPHASH, but hash not in dirent [ 99.678698][ T7376] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.1229: lblock 0 mapped to illegal pblock 0 (length 1) [ 99.694929][ T7360] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1226: Corrupt directory, running e2fsck is recommended [ 99.714262][ T7360] EXT4-fs warning (device loop9): dx_probe:813: inode #2: comm syz.9.1226: Hash code is SIPHASH, but hash not in dirent [ 99.727367][ T7376] EXT4-fs (loop8): Remounting filesystem read-only [ 99.734250][ T7360] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1226: Corrupt directory, running e2fsck is recommended [ 99.777521][ T6390] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.796210][ T6142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.796533][ T5943] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.886324][ T7406] loop7: detected capacity change from 0 to 1024 [ 99.926556][ T7406] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.943044][ T7406] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.972915][ T7406] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1234: bg 0: block 112: padding at end of block bitmap is not set [ 100.021706][ T7426] capability: warning: `syz.9.1240' uses deprecated v2 capabilities in a way that may be insecure [ 100.044050][ T7406] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 100.070406][ T7427] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.1234: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.154030][ T5943] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.401972][ T7425] loop8: detected capacity change from 0 to 2048 [ 100.454757][ T7425] loop8: p2 < > p4 [ 100.462023][ T7425] loop8: p4 size 262144 extends beyond EOD, truncated [ 100.491608][ T2981] loop8: p2 < > p4 [ 100.497674][ T2981] loop8: p4 size 262144 extends beyond EOD, truncated [ 100.549459][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 100.560620][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 100.893670][ T7514] __nla_validate_parse: 1 callbacks suppressed [ 100.893685][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1253'. [ 101.366470][ T7537] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 101.470844][ T7549] loop9: detected capacity change from 0 to 512 [ 101.477532][ T7549] EXT4-fs: quotafile must be on filesystem root [ 101.694618][ T7288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 101.757936][ T7558] veth1_to_bond: entered allmulticast mode [ 101.780994][ T7558] veth1_to_bond: entered promiscuous mode [ 101.806824][ T7558] veth1_to_bond: left promiscuous mode [ 101.818957][ T7558] veth1_to_bond: left allmulticast mode [ 101.858226][ T7570] netlink: 'syz.8.1278': attribute type 2 has an invalid length. [ 102.013126][ T7583] loop9: detected capacity change from 0 to 4096 [ 102.020805][ T7583] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.032741][ T7583] EXT4-fs: test_dummy_encryption option not supported [ 102.040525][ T7583] sctp: [Deprecated]: syz.9.1284 (pid 7583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.040525][ T7583] Use struct sctp_sack_info instead [ 102.799450][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 102.799465][ T28] audit: type=1400 audit(1780005627.117:940): avc: denied { sqpoll } for pid=7598 comm="syz.9.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.962348][ T7627] xt_hashlimit: size too large, truncated to 1048576 [ 103.014497][ T7632] pim6reg: entered allmulticast mode [ 103.066971][ T7632] syz_tun (unregistering): left allmulticast mode [ 103.176156][ T28] audit: type=1400 audit(1780005627.487:941): avc: denied { mount } for pid=7641 comm="syz.7.1310" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 103.207375][ T28] audit: type=1400 audit(1780005627.517:942): avc: denied { mounton } for pid=7641 comm="syz.7.1310" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 103.823155][ T28] audit: type=1400 audit(1780005628.137:943): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 103.998276][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.055635][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.102870][ T7667] SELinux: failed to load policy [ 104.156838][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.241229][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.259881][ T7691] loop7: detected capacity change from 0 to 512 [ 104.269551][ T7691] EXT4-fs: Ignoring removed bh option [ 104.293909][ T7691] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 104.312288][ T7691] EXT4-fs (loop7): 1 truncate cleaned up [ 104.329646][ T7691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.373233][ T49] bridge_slave_1: left allmulticast mode [ 104.379040][ T49] bridge_slave_1: left promiscuous mode [ 104.384762][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.386707][ T7691] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1328: bg 0: block 465: padding at end of block bitmap is not set [ 104.398922][ T28] audit: type=1400 audit(1780005628.697:944): avc: denied { write } for pid=7688 comm="syz.7.1328" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.428161][ T28] audit: type=1400 audit(1780005628.727:945): avc: denied { getopt } for pid=7697 comm="syz.4.1332" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.430842][ T7691] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 104.448749][ T49] bridge_slave_0: left allmulticast mode [ 104.466937][ T49] bridge_slave_0: left promiscuous mode [ 104.472758][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.480026][ T7691] EXT4-fs (loop7): This should not happen!! Data will be lost [ 104.480026][ T7691] [ 104.489908][ T7691] EXT4-fs (loop7): Total free blocks count 0 [ 104.496289][ T7691] EXT4-fs (loop7): Free/Dirty block details [ 104.527053][ T7700] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 104.539506][ T28] audit: type=1400 audit(1780005628.837:946): avc: denied { ioctl } for pid=7688 comm="syz.7.1328" path="/88/file1/file1" dev="loop7" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.549581][ T7691] EXT4-fs (loop7): free_blocks=0 [ 104.583489][ T7700] EXT4-fs (loop7): This should not happen!! Data will be lost [ 104.583489][ T7700] [ 104.587118][ T7691] EXT4-fs (loop7): dirty_blocks=2 [ 104.598257][ T7700] EXT4-fs (loop7): Total free blocks count 0 [ 104.623077][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.632922][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.643171][ T5943] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 104.643717][ T49] bond0 (unregistering): Released all slaves [ 104.668715][ T289] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.718035][ T49] hsr_slave_0: left promiscuous mode [ 104.735788][ T49] hsr_slave_1: left promiscuous mode [ 104.745231][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.757167][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.766322][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.774048][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.801266][ T49] veth1_macvtap: left promiscuous mode [ 104.816721][ T49] veth0_macvtap: left promiscuous mode [ 104.822808][ T49] veth1_vlan: left promiscuous mode [ 104.831321][ T49] veth0_vlan: left promiscuous mode [ 104.863645][ T28] audit: type=1400 audit(1780005629.177:947): avc: denied { write } for pid=7710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.913309][ T28] audit: type=1400 audit(1780005629.217:948): avc: denied { write } for pid=7721 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.942104][ T49] pim6reg (unregistering): left allmulticast mode [ 104.998245][ T49] team0 (unregistering): Port device team_slave_1 removed [ 105.008916][ T49] team0 (unregistering): Port device team_slave_0 removed [ 105.042476][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 105.074646][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.081833][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.088943][ T7668] bridge_slave_0: entered allmulticast mode [ 105.097316][ T7668] bridge_slave_0: entered promiscuous mode [ 105.099490][ T28] audit: type=1400 audit(1780005629.407:949): avc: denied { setopt } for pid=7726 comm="syz.6.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.111927][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.129599][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.141610][ T7668] bridge_slave_1: entered allmulticast mode [ 105.149119][ T7668] bridge_slave_1: entered promiscuous mode [ 105.180052][ T7668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.190759][ T7668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.234171][ T7668] team0: Port device team_slave_0 added [ 105.247904][ T7668] team0: Port device team_slave_1 added [ 105.294350][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.302390][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.362292][ T7668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.395348][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.416325][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.481369][ T7668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.496485][ T7747] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1340'. [ 105.512799][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 105.539671][ T7668] hsr_slave_0: entered promiscuous mode [ 105.549508][ T7668] hsr_slave_1: entered promiscuous mode [ 105.788616][ T7747] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1340'. [ 105.894900][ T7668] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 105.910657][ T7668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.918317][ T7668] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 105.932018][ T7668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.945696][ T7668] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 105.956813][ T7812] loop7: detected capacity change from 0 to 1024 [ 105.967498][ T7668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.987686][ T7668] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 106.006145][ T7668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.014643][ T7812] EXT4-fs: Ignoring removed nobh option [ 106.020840][ T7812] EXT4-fs: Ignoring removed bh option [ 106.027585][ T7812] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 106.042790][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.049885][ T7668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.057264][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.064323][ T7668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.080551][ T7812] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.097942][ T7668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.118645][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.132150][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.169095][ T7668] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.187068][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.194148][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.223758][ T5943] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.233729][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.240887][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.309896][ T7844] bridge_slave_0: left allmulticast mode [ 106.315852][ T7844] bridge_slave_0: left promiscuous mode [ 106.330565][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.360253][ T7844] bridge_slave_1: left allmulticast mode [ 106.381203][ T7844] bridge_slave_1: left promiscuous mode [ 106.394159][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.416752][ T7844] bond0: (slave bond_slave_0): Releasing backup interface [ 106.432995][ T7844] bond0: (slave bond_slave_1): Releasing backup interface [ 106.454801][ T7844] team0: Port device team_slave_0 removed [ 106.468317][ T7844] team0: Port device team_slave_1 removed [ 106.485134][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.493148][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.502436][ T7844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.510279][ T7844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.520198][ T7844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 106.649255][ T7668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.739146][ T5882] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.745295][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 106.855637][ T7668] veth0_vlan: entered promiscuous mode [ 106.881818][ T7668] veth1_vlan: entered promiscuous mode [ 106.932302][ T7668] veth0_macvtap: entered promiscuous mode [ 106.950905][ T7668] veth1_macvtap: entered promiscuous mode [ 106.965170][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.981896][ T7668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.004176][ T361] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.013315][ T361] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.031501][ T7898] loop4: detected capacity change from 0 to 8192 [ 107.033445][ T361] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.057131][ T361] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.196685][ T7908] loop9: detected capacity change from 0 to 512 [ 107.222321][ T7908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.234955][ T7908] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.284744][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.362381][ T7921] netlink: 'syz.6.1374': attribute type 29 has an invalid length. [ 107.390114][ T7923] loop9: detected capacity change from 0 to 128 [ 107.391204][ T7921] loop6: detected capacity change from 0 to 128 [ 107.414117][ T7923] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.429617][ T7921] FAT-fs (loop6): bogus sectors per cluster 0 [ 107.438629][ T7923] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.456892][ T7921] FAT-fs (loop6): Can't find a valid FAT filesystem [ 107.487735][ T7921] netlink: 'syz.6.1374': attribute type 29 has an invalid length. [ 107.513859][ T7921] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1374'. [ 107.526380][ T7917] loop4: detected capacity change from 0 to 2048 [ 107.572092][ T7917] loop4: p2 < > p4 [ 107.581307][ T7917] loop4: p4 size 262144 extends beyond EOD, truncated [ 107.590056][ T7668] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.797287][ T7962] loop7: detected capacity change from 0 to 1024 [ 107.821819][ T7962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.836769][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 107.836784][ T28] audit: type=1400 audit(1780005632.147:986): avc: denied { write } for pid=7961 comm="syz.7.1391" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.867128][ T7962] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 107.882503][ T7962] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.894874][ T7962] EXT4-fs (loop7): This should not happen!! Data will be lost [ 107.894874][ T7962] [ 107.904882][ T7962] EXT4-fs (loop7): Total free blocks count 0 [ 107.919938][ T7962] EXT4-fs (loop7): Free/Dirty block details [ 107.925991][ T7962] EXT4-fs (loop7): free_blocks=68451041280 [ 107.932075][ T7962] EXT4-fs (loop7): dirty_blocks=16 [ 107.937220][ T7962] EXT4-fs (loop7): Block reservation details [ 107.943664][ T7962] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 107.950087][ T7965] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 108.422713][ T28] audit: type=1326 audit(1780005632.737:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.8.1393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e1c3ce59 code=0x7ffc0000 [ 108.450344][ T28] audit: type=1326 audit(1780005632.737:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.8.1393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e1c3ce59 code=0x7ffc0000 [ 108.478602][ T28] audit: type=1326 audit(1780005632.757:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.8.1393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e1c3ce59 code=0x7ffc0000 [ 108.504325][ T28] audit: type=1326 audit(1780005632.757:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.8.1393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e1c3ce59 code=0x7ffc0000 [ 108.536237][ T28] audit: type=1326 audit(1780005632.767:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.8.1393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff9e1c3ce59 code=0x7ffc0000 [ 108.562599][ T28] audit: type=1326 audit(1780005632.767:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.8.1393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e1c3ce59 code=0x7ffc0000 [ 108.563806][ T5943] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 108.590942][ T28] audit: type=1326 audit(1780005632.767:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.8.1393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e1c3ce59 code=0x7ffc0000 [ 108.624764][ T28] audit: type=1326 audit(1780005632.767:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.8.1393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff9e1c3ce59 code=0x7ffc0000 [ 108.705890][ T28] audit: type=1400 audit(1780005633.017:995): avc: denied { ioctl } for pid=7972 comm="syz.4.1405" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=20683 ioctlcmd=0x5345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 108.771557][ T7984] loop8: detected capacity change from 0 to 512 [ 108.796091][ T7984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.819778][ T7984] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.893904][ T7975] loop6: detected capacity change from 0 to 2048 [ 108.956949][ T7975] loop6: p2 < > p4 [ 108.968271][ T7975] loop6: p4 size 262144 extends beyond EOD, truncated [ 108.987080][ T6142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.073468][ T3289] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 109.082423][ T3289] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 109.170308][ T8018] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.216929][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1416'. [ 109.305878][ T8028] set_capacity_and_notify: 1 callbacks suppressed [ 109.305893][ T8028] loop7: detected capacity change from 0 to 128 [ 109.530417][ T8041] loop6: detected capacity change from 0 to 512 [ 109.576689][ T8041] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 109.618688][ T8041] EXT4-fs (loop6): 1 truncate cleaned up [ 109.642533][ T8041] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.729590][ T8052] loop4: detected capacity change from 0 to 4096 [ 109.772139][ T8018] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.796932][ T8052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.855244][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.867445][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.945714][ T8066] loop4: detected capacity change from 0 to 512 [ 109.977652][ T8066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.997025][ T8066] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.037289][ T8018] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.038304][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.098036][ T8078] lo: Caught tx_queue_len zero misconfig [ 110.124419][ T8018] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.240683][ T40] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.255898][ T40] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.283487][ T40] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.306118][ T40] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.365695][ T8097] program syz.9.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.383247][ T8099] loop6: detected capacity change from 0 to 128 [ 110.386812][ T8095] syzkaller1: entered allmulticast mode [ 110.415218][ T8099] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 110.515666][ T8107] sctp: [Deprecated]: syz.9.1452 (pid 8107) Use of int in max_burst socket option deprecated. [ 110.515666][ T8107] Use struct sctp_assoc_value instead [ 110.545735][ T8113] loop6: detected capacity change from 0 to 1024 [ 110.574852][ T8113] EXT4-fs: Ignoring removed nobh option [ 110.601188][ T8113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.640924][ T8113] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.746973][ T8128] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1455: bg 0: block 112: padding at end of block bitmap is not set [ 110.789483][ T8128] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49152 with max blocks 5 with error 117 [ 110.803131][ T8128] EXT4-fs (loop6): This should not happen!! Data will be lost [ 110.803131][ T8128] [ 111.049474][ T4819] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 111.100820][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.286055][ T8140] loop7: detected capacity change from 0 to 8192 [ 111.327183][ T8140] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.470508][ T8150] bond1: left promiscuous mode [ 111.657915][ T8150] hsr1: left promiscuous mode [ 111.712495][ T8155] netlink: 'syz.7.1474': attribute type 10 has an invalid length. [ 111.737086][ T8155] team0: Failed to send options change via netlink (err -105) [ 111.754103][ T8155] team0: Port device dummy0 added [ 111.816790][ T8159] loop4: detected capacity change from 0 to 512 [ 111.827625][ T8159] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1476: inode has both inline data and extents flags [ 111.846476][ T8159] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.846601][ T8159] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1476: couldn't read orphan inode 15 (err -117) [ 111.855834][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 111.855864][ C0] EXT4-fs (loop4): initial error at time 1780005636: ext4_orphan_get:1397: inode 15 [ 111.855891][ C0] EXT4-fs (loop4): last error at time 1780005636: ext4_orphan_get:1397: inode 15 [ 111.893480][ T8157] loop7: detected capacity change from 0 to 8192 [ 111.904333][ T8159] loop4: lost filesystem error report for type 5 error -117 [ 111.904774][ T8159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.931933][ T8159] Invalid argument reading file caps for ./file0 [ 111.960903][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.295433][ T8172] loop7: detected capacity change from 0 to 512 [ 112.313721][ T8172] EXT4-fs: Ignoring removed nobh option [ 112.331253][ T8172] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.1481: corrupted in-inode xattr: overlapping e_value [ 112.351912][ T8172] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.352104][ T8172] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1481: couldn't read orphan inode 15 (err -117) [ 112.361332][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 112.361349][ C1] EXT4-fs (loop7): initial error at time 1780005636: ext4_iget_extra_inode:5128: inode 15 [ 112.361382][ C1] EXT4-fs (loop7): last error at time 1780005636: ext4_iget_extra_inode:5128: inode 15 [ 112.400686][ T8172] loop7: lost filesystem error report for type 5 error -117 [ 112.401149][ T8172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.464169][ T5943] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.658389][ T8194] geneve2: entered promiscuous mode [ 112.664096][ T8194] geneve2: entered allmulticast mode [ 113.046101][ T8233] syz_tun: entered allmulticast mode [ 113.051982][ T8232] syz_tun: left allmulticast mode [ 113.672309][ T8252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.704923][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.793425][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 113.793440][ T28] audit: type=1400 audit(1780005638.107:1015): avc: denied { watch watch_reads } for pid=8268 comm="syz.8.1522" path="/91/file1" dev="tmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 113.894290][ T8275] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1526'. [ 113.920768][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 113.978791][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1530'. [ 113.996047][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1530'. [ 114.047734][ T8285] bridge0: port 1(batadv1) entered blocking state [ 114.060892][ T8285] bridge0: port 1(batadv1) entered disabled state [ 114.067973][ T8285] batadv1: entered allmulticast mode [ 114.074786][ T8285] batadv1: entered promiscuous mode [ 114.201491][ T8291] netlink: 'syz.7.1534': attribute type 39 has an invalid length. [ 114.353196][ T8299] set_capacity_and_notify: 1 callbacks suppressed [ 114.353207][ T8299] loop6: detected capacity change from 0 to 1024 [ 114.397554][ T8299] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 114.453953][ T8299] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.487094][ T28] audit: type=1400 audit(1780005638.797:1016): avc: denied { write } for pid=8298 comm="syz.6.1538" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.540033][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 114.540051][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 114.663903][ T8314] loop4: detected capacity change from 0 to 1024 [ 114.671079][ T8314] EXT4-fs: Ignoring removed orlov option [ 114.681705][ T8314] /dev/loop4: Can't open blockdev [ 115.004674][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.266781][ T28] audit: type=1400 audit(1780005639.577:1017): avc: denied { setopt } for pid=8334 comm="syz.4.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 115.407198][ T1663] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.187883][ T8386] loop4: detected capacity change from 0 to 128 [ 116.448927][ T8387] loop7: detected capacity change from 0 to 32768 [ 116.510416][ T8409] loop9: detected capacity change from 0 to 512 [ 116.520634][ T8387] loop7: p1 p3 < > [ 116.526474][ T8409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.562830][ T8409] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.613861][ T8409] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.644255][ T28] audit: type=1400 audit(1780005640.957:1018): avc: denied { bind } for pid=8418 comm="syz.7.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.677818][ T8409] EXT4-fs error (device loop9): __ext4_new_inode:1285: comm syz.9.1586: failed to insert inode 16: doubly allocated? [ 116.697946][ T28] audit: type=1400 audit(1780005640.987:1019): avc: denied { write } for pid=8408 comm="syz.9.1586" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.731568][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.759363][ T8425] loop7: detected capacity change from 0 to 4096 [ 116.798326][ T8425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.827646][ T28] audit: type=1400 audit(1780005641.137:1020): avc: denied { write } for pid=8424 comm="syz.7.1593" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.890691][ T28] audit: type=1400 audit(1780005641.167:1021): avc: denied { mounton } for pid=8424 comm="syz.7.1593" path="/163/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.963254][ T8442] loop6: detected capacity change from 0 to 256 [ 116.972408][ T28] audit: type=1400 audit(1780005641.287:1022): avc: denied { write } for pid=5943 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.000592][ T5943] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.011452][ T28] audit: type=1400 audit(1780005641.287:1023): avc: denied { write } for pid=5943 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.049129][ T28] audit: type=1400 audit(1780005641.287:1024): avc: denied { write } for pid=5943 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.460022][ T5882] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 117.466245][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 118.102064][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1614'. [ 118.111968][ T8475] netlink: 'syz.8.1614': attribute type 26 has an invalid length. [ 118.120112][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1614'. [ 118.129394][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1614'. [ 118.174092][ T8475] netlink: 'syz.8.1614': attribute type 26 has an invalid length. [ 118.199623][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1614'. [ 118.434512][ T8502] loop9: detected capacity change from 0 to 1024 [ 118.451569][ T8502] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.466159][ T8502] EXT4-fs (loop9): shut down requested (0) [ 118.482449][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.556557][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1627'. [ 118.848168][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 118.848183][ T28] audit: type=1400 audit(1780005643.157:1047): avc: denied { ioctl } for pid=8524 comm="syz.8.1635" path="socket:[21901]" dev="sockfs" ino=21901 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.186431][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.196738][ T28] audit: type=1400 audit(1780005643.517:1048): avc: denied { mount } for pid=8556 comm="syz.4.1651" name="/" dev="autofs" ino=22008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 119.219735][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.252982][ T8563] loop9: detected capacity change from 0 to 128 [ 119.270903][ T8563] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.293597][ T8563] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.338438][ T28] audit: type=1400 audit(1780005643.647:1049): avc: denied { write } for pid=8561 comm="syz.9.1653" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.418142][ T7668] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.515734][ T8581] loop9: detected capacity change from 0 to 1024 [ 119.531330][ T8581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.596407][ T28] audit: type=1400 audit(1780005643.907:1050): avc: denied { write } for pid=8580 comm="syz.9.1661" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.665087][ T7668] EXT4-fs error (device loop9): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /55/file0/lost+found: bad entry in directory: directory entry overrun - offset=792, inode=0, rec_len=1024, size=1024 fake=0 [ 119.687024][ T7668] VFS: Lookup of '.' in ext4 loop9 would have caused loop [ 119.694477][ T7668] VFS: Lookup of '.' in ext4 loop9 would have caused loop [ 119.890987][ T12] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.901631][ T7668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.950605][ T12] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.002044][ T12] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.046180][ T8592] sctp: [Deprecated]: syz.8.1666 (pid 8592) Use of int in max_burst socket option. [ 120.046180][ T8592] Use struct sctp_assoc_value instead [ 120.070989][ T12] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.093447][ T8598] loop8: detected capacity change from 0 to 128 [ 120.113629][ T8598] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.127069][ T8598] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.140718][ T28] audit: type=1400 audit(1780005644.457:1051): avc: denied { write } for pid=8597 comm="syz.8.1667" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.166426][ T8604] loop4: detected capacity change from 0 to 2048 [ 120.181570][ T8604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.205689][ T28] audit: type=1400 audit(1780005644.517:1052): avc: denied { write } for pid=8601 comm="syz.4.1668" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.215051][ T8604] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.240021][ T6142] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.242367][ T8604] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 120.263802][ T8604] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.263802][ T8604] [ 120.273672][ T8604] EXT4-fs (loop4): Total free blocks count 0 [ 120.274832][ T8607] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.279727][ T8604] EXT4-fs (loop4): Free/Dirty block details [ 120.297788][ T8604] EXT4-fs (loop4): free_blocks=2415919104 [ 120.303710][ T8607] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.303710][ T8607] [ 120.305871][ T8604] EXT4-fs (loop4): dirty_blocks=64 [ 120.330180][ T8604] EXT4-fs (loop4): Block reservation details [ 120.340698][ T8611] netlink: 'syz.8.1669': attribute type 3 has an invalid length. [ 120.353798][ T12] bridge_slave_1: left allmulticast mode [ 120.364257][ T12] bridge_slave_1: left promiscuous mode [ 120.367240][ T8611] netlink: 'syz.8.1669': attribute type 4 has an invalid length. [ 120.370359][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.401640][ T12] bridge_slave_0: left allmulticast mode [ 120.405993][ T8611] netlink: 9067 bytes leftover after parsing attributes in process `syz.8.1669'. [ 120.409496][ T12] bridge_slave_0: left promiscuous mode [ 120.422239][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.460522][ T8622] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1671'. [ 120.478017][ T28] audit: type=1400 audit(1780005644.787:1053): avc: denied { write } for pid=8613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.518418][ T28] audit: type=1400 audit(1780005644.787:1054): avc: denied { write } for pid=8628 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.560259][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1671'. [ 120.593425][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.613142][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.623069][ T12] bond0 (unregistering): Released all slaves [ 120.633149][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 120.664562][ T8638] loop4: detected capacity change from 0 to 8192 [ 120.685676][ T12] hsr_slave_0: left promiscuous mode [ 120.706582][ T12] hsr_slave_1: left promiscuous mode [ 120.712357][ T8646] loop7: detected capacity change from 0 to 512 [ 120.717297][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.735921][ T8646] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 120.742747][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.755976][ T8646] EXT4-fs (loop7): 1 truncate cleaned up [ 120.763650][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.765061][ T8646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.787904][ T28] audit: type=1400 audit(1780005645.097:1055): avc: denied { write } for pid=8643 comm="syz.7.1677" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.789050][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.823195][ T12] veth1_macvtap: left promiscuous mode [ 120.828718][ T12] veth0_macvtap: left promiscuous mode [ 120.834802][ T12] veth1_vlan: left promiscuous mode [ 120.843130][ T12] veth0_vlan: left promiscuous mode [ 120.872949][ T28] audit: type=1400 audit(1780005645.187:1056): avc: denied { write } for pid=8645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.919001][ T5943] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.992847][ T12] team0 (unregistering): Port device team_slave_1 removed [ 121.013271][ T12] team0 (unregistering): Port device team_slave_0 removed [ 121.054351][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 121.127386][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.142237][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.157634][ T8589] bridge_slave_0: entered allmulticast mode [ 121.165815][ T8589] bridge_slave_0: entered promiscuous mode [ 121.212912][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.256992][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.273354][ T8589] bridge_slave_1: entered allmulticast mode [ 121.287378][ T8589] bridge_slave_1: entered promiscuous mode [ 121.348654][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 121.362010][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.387099][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.439006][ T8589] team0: Port device team_slave_0 added [ 121.461960][ T8589] team0: Port device team_slave_1 added [ 121.477588][ T8694] netdevsim netdevsim8 netdevsim0: IPsec offload requires 128 bit authentication [ 121.531203][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.564790][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.599172][ T8589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.629741][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.639480][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.675017][ T8589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.688175][ T8708] pim6reg1: entered promiscuous mode [ 121.702532][ T8708] pim6reg1: entered allmulticast mode [ 121.731952][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 121.746547][ T8589] hsr_slave_0: entered promiscuous mode [ 121.752852][ T8589] hsr_slave_1: entered promiscuous mode [ 121.827338][ T8728] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 122.125898][ T8768] loop8: detected capacity change from 0 to 512 [ 122.141429][ T8768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.157130][ T8768] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.210657][ T6142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.250819][ T8790] loop8: detected capacity change from 0 to 128 [ 122.302431][ T8790] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.321247][ T8589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 122.338533][ T8589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.349822][ T8790] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.355439][ T8589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 122.404523][ T8589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.426857][ T8589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 122.441290][ T8589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.461000][ T8589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 122.481322][ T8589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.492597][ T6142] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.586082][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.605186][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1708'. [ 122.620118][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.648892][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.656015][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.684814][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.691902][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.717364][ T8834] loop6: detected capacity change from 0 to 512 [ 122.746747][ T8834] EXT4-fs: Ignoring removed oldalloc option [ 122.801311][ T8834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.853219][ T8834] ext4 filesystem being mounted at /215/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.994812][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.171286][ T8876] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 123.198199][ T8828] loop8: detected capacity change from 0 to 32768 [ 123.246457][ T8891] syzkaller1: entered promiscuous mode [ 123.258467][ T8891] syzkaller1: entered allmulticast mode [ 123.268507][ T8589] veth0_vlan: entered promiscuous mode [ 123.281588][ T8828] loop8: p1 p3 < > [ 123.302474][ T8589] veth1_vlan: entered promiscuous mode [ 123.348100][ T8589] veth0_macvtap: entered promiscuous mode [ 123.383849][ T8589] veth1_macvtap: entered promiscuous mode [ 123.402218][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1718'. [ 123.414279][ T8906] loop4: detected capacity change from 0 to 1024 [ 123.427211][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.461390][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.494872][ T361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.512412][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 123.523992][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 123.542823][ T361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.593551][ T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.614709][ T3303] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /412/file0/lost+found: bad entry in directory: directory entry overrun - offset=792, inode=0, rec_len=1024, size=1024 fake=0 [ 123.616011][ T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.670909][ T3303] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 123.694275][ T3303] VFS: Lookup of '.' in ext4 loop4 would have caused loop [ 123.871129][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 123.871142][ T28] audit: type=1400 audit(1780005648.187:1090): avc: denied { write } for pid=8932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.951851][ T28] audit: type=1400 audit(1780005648.257:1091): avc: denied { write } for pid=8956 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.069394][ T8969] netlink: 'syz.7.1733': attribute type 6 has an invalid length. [ 124.092272][ T8969] netlink: 'syz.7.1733': attribute type 1 has an invalid length. [ 124.112578][ T8969] netlink: 199820 bytes leftover after parsing attributes in process `syz.7.1733'. [ 124.179322][ T28] audit: type=1400 audit(1780005648.487:1092): avc: denied { write } for pid=8962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.252428][ T8994] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1738'. [ 124.253407][ T28] audit: type=1400 audit(1780005648.537:1093): avc: denied { write } for pid=8987 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.404829][ T28] audit: type=1400 audit(1780005648.717:1094): avc: denied { bind } for pid=9006 comm="syz.2.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.436171][ T9012] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 124.473119][ T9015] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1743'. [ 124.482638][ T9012] EXT4-fs (loop8): 1 truncate cleaned up [ 124.515408][ T28] audit: type=1400 audit(1780005648.817:1095): avc: denied { write } for pid=9010 comm="syz.8.1740" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.564867][ T9023] set_capacity_and_notify: 1 callbacks suppressed [ 124.564883][ T9023] loop7: detected capacity change from 0 to 128 [ 124.618902][ T28] audit: type=1400 audit(1780005648.907:1096): avc: denied { write } for pid=8996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.692225][ T9023] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.813671][ T28] audit: type=1400 audit(1780005649.127:1097): avc: denied { write } for pid=9029 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.125420][ T28] audit: type=1400 audit(1780005649.427:1098): avc: denied { write } for pid=9035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.161978][ T9057] loop7: detected capacity change from 0 to 128 [ 125.173439][ T9057] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.187451][ T28] audit: type=1400 audit(1780005649.497:1099): avc: denied { write } for pid=9056 comm="syz.7.1748" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.196083][ T8973] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.282897][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.295835][ T8973] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.313016][ T8973] bridge_slave_0: entered allmulticast mode [ 125.326594][ T8973] bridge_slave_0: entered promiscuous mode [ 125.346556][ T8973] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.359384][ T8973] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.380222][ T8973] bridge_slave_1: entered allmulticast mode [ 125.387425][ T8973] bridge_slave_1: entered promiscuous mode [ 125.415177][ T9085] syzkaller1: entered promiscuous mode [ 125.426771][ T9085] syzkaller1: entered allmulticast mode [ 125.466949][ T8973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.491574][ T8973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.513383][ T8973] team0: Port device team_slave_0 added [ 125.520462][ T8973] team0: Port device team_slave_1 added [ 125.540785][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.540888][ T9103] netlink: 'syz.8.1757': attribute type 1 has an invalid length. [ 125.547852][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.583316][ T8973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.594659][ T8973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.601781][ T8973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.631145][ T8973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.648686][ T9103] bond1: entered promiscuous mode [ 125.654133][ T9103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.666007][ T9104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.673378][ T9104] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 125.684216][ T9104] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 125.697866][ T9104] bond1: (slave ip6gre1): making interface the new active one [ 125.705576][ T9104] ip6gre1: entered promiscuous mode [ 125.712797][ T9104] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 125.759335][ T8973] hsr_slave_0: entered promiscuous mode [ 125.765320][ T8973] hsr_slave_1: entered promiscuous mode [ 125.771538][ T8973] debugfs: 'hsr0' already exists in 'hsr' [ 125.777676][ T8973] Cannot create hsr debugfs directory [ 125.796906][ T9110] loop8: detected capacity change from 0 to 1024 [ 125.811621][ T9110] EXT4-fs: inline encryption not supported [ 125.826493][ T9110] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 126.078791][ T8973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.087483][ T8973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 126.095461][ T8973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.104584][ T8973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 126.114299][ T8973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.123314][ T8973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 126.132456][ T8973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.142118][ T8973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 126.194797][ T8973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.209079][ T8973] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.228345][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.235654][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.251131][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.258204][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.286392][ T9183] netlink: 'syz.6.1765': attribute type 39 has an invalid length. [ 126.410804][ T8973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.422107][ T9207] loop6: detected capacity change from 0 to 512 [ 126.449720][ T9207] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 126.477951][ T9207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 126.488666][ T9207] System zones: 1-12 [ 126.500089][ T9207] EXT4-fs (loop6): 1 truncate cleaned up [ 126.532655][ T8973] veth0_vlan: entered promiscuous mode [ 126.548289][ T8973] veth1_vlan: entered promiscuous mode [ 126.571976][ T8973] veth0_macvtap: entered promiscuous mode [ 126.587730][ T8973] veth1_macvtap: entered promiscuous mode [ 126.605630][ T6920] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 126.610087][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.626532][ T6920] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.632312][ T8973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.652430][ T9234] loop6: detected capacity change from 0 to 4096 [ 126.664268][ T9234] EXT4-fs: test_dummy_encryption option not supported [ 126.681189][ T361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.704916][ T361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.742807][ T361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.758498][ T361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.804818][ T9251] loop8: detected capacity change from 0 to 512 [ 126.812516][ T361] Bluetooth: hci1: Frame reassembly failed (-84) [ 127.051873][ T9298] loop2: detected capacity change from 0 to 512 [ 127.299111][ T5882] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.299577][ T6535] Bluetooth: hci0: command 0x1003 tx timeout [ 127.363689][ T9343] loop2: detected capacity change from 0 to 8192 [ 127.441918][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1794'. [ 128.017249][ T9402] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 128.187888][ T9409] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1799'. [ 128.319595][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1803'. [ 128.334753][ T9418] team1: entered promiscuous mode [ 128.339939][ T9418] team1: entered allmulticast mode [ 128.350353][ T9418] 8021q: adding VLAN 0 to HW filter on device team1 [ 128.407465][ T9426] loop8: detected capacity change from 0 to 128 [ 128.819265][ T5882] Bluetooth: hci1: command 0x1003 tx timeout [ 128.825521][ T3520] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 129.486579][ T9480] loop7: detected capacity change from 0 to 128 [ 129.504820][ T9480] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 129.530092][ T9480] EXT4-fs mount: 14 callbacks suppressed [ 129.530119][ T9480] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.550033][ T9480] ext2 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.563637][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 129.563650][ T28] audit: type=1400 audit(1780005653.877:1135): avc: denied { write } for pid=9479 comm="syz.7.1827" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.605916][ T28] audit: type=1400 audit(1780005653.907:1136): avc: denied { write } for pid=9479 comm="syz.7.1827" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.631120][ T28] audit: type=1400 audit(1780005653.907:1137): avc: denied { write } for pid=9479 comm="syz.7.1827" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.653189][ T28] audit: type=1400 audit(1780005653.907:1138): avc: denied { write } for pid=9479 comm="syz.7.1827" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.675200][ T28] audit: type=1400 audit(1780005653.907:1139): avc: denied { write } for pid=9479 comm="syz.7.1827" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.697153][ T28] audit: type=1400 audit(1780005653.907:1140): avc: denied { write } for pid=9479 comm="syz.7.1827" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.720220][ T28] audit: type=1400 audit(1780005653.907:1141): avc: denied { rename } for pid=9479 comm="syz.7.1827" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.773822][ T5943] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.803642][ T9481] bridge0: port 3(batadv1) entered blocking state [ 129.818162][ T9481] bridge0: port 3(batadv1) entered disabled state [ 129.825215][ T9481] batadv1: entered allmulticast mode [ 129.850804][ T9481] batadv1: entered promiscuous mode [ 129.872645][ T9489] loop6: detected capacity change from 0 to 4096 [ 129.910619][ T9489] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.928213][ T28] audit: type=1400 audit(1780005654.237:1142): avc: denied { write } for pid=9488 comm="syz.6.1830" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.013590][ T9500] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1836'. [ 130.055371][ T4819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.074343][ T4819] ================================================================== [ 130.082431][ T4819] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 130.090191][ T4819] [ 130.092508][ T4819] write to 0xffff888237d266e8 of 1 bytes by task 9493 on cpu 1: [ 130.100126][ T4819] folios_put_refs+0x28f/0x2d0 [ 130.104884][ T4819] folio_batch_move_lru+0x263/0x290 [ 130.110082][ T4819] folio_add_lru+0x14f/0x1f0 [ 130.114666][ T4819] shmem_get_folio_gfp+0x7b0/0xd60 [ 130.119763][ T4819] shmem_fault+0xf6/0x250 [ 130.124079][ T4819] handle_mm_fault+0x16cd/0x2e70 [ 130.129007][ T4819] __get_user_pages+0x1290/0x1f10 [ 130.134022][ T4819] __mm_populate+0x242/0x390 [ 130.138599][ T4819] vm_mmap_pgoff+0x23b/0x2d0 [ 130.143180][ T4819] ksys_mmap_pgoff+0xc1/0x310 [ 130.147841][ T4819] x64_sys_call+0x14df/0x3020 [ 130.152507][ T4819] do_syscall_64+0x12c/0x3b0 [ 130.157089][ T4819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.162971][ T4819] [ 130.165278][ T4819] read to 0xffff888237d266e8 of 1 bytes by task 4819 on cpu 0: [ 130.172804][ T4819] __lru_add_drain_all+0x17e/0x450 [ 130.177900][ T4819] lru_add_drain_all+0x10/0x20 [ 130.182653][ T4819] invalidate_bdev+0x47/0x70 [ 130.187234][ T4819] ext4_put_super+0x610/0x7b0 [ 130.191901][ T4819] generic_shutdown_super+0xee/0x220 [ 130.197179][ T4819] kill_block_super+0x2a/0x70 [ 130.201849][ T4819] ext4_kill_sb+0x42/0x80 [ 130.206163][ T4819] deactivate_locked_super+0x75/0x1c0 [ 130.211521][ T4819] deactivate_super+0x97/0xa0 [ 130.216187][ T4819] cleanup_mnt+0x2bb/0x330 [ 130.220587][ T4819] __cleanup_mnt+0x19/0x20 [ 130.224992][ T4819] task_work_run+0x130/0x1a0 [ 130.229564][ T4819] exit_to_user_mode_loop+0x211/0x820 [ 130.234927][ T4819] do_syscall_64+0x232/0x3b0 [ 130.239508][ T4819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.245391][ T4819] [ 130.247697][ T4819] value changed: 0x1f -> 0x02 [ 130.252351][ T4819] [ 130.254656][ T4819] Reported by Kernel Concurrency Sanitizer on: [ 130.260801][ T4819] CPU: 0 UID: 0 PID: 4819 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 130.270246][ T4819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 130.280283][ T4819] ================================================================== [ 130.307309][ T40] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 130.316555][ T40] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 132.332990][ T28] audit: type=1400 audit(1780005656.647:1143): avc: denied { write } for pid=9510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.357340][ T28] audit: type=1400 audit(1780005656.647:1144): avc: denied { write } for pid=9521 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1