last executing test programs: 31.878280189s ago: executing program 0 (id=1972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xaf8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 31.84706565s ago: executing program 0 (id=1973): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[], 0x64}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='yeah', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 31.748017752s ago: executing program 0 (id=1975): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64=0x0], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0x8}, 0x10c0e9, 0x2, 0xfffffffc, 0x8, 0xa, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x189800, 0x207) fchown(r0, 0x0, 0x0) 31.641040905s ago: executing program 0 (id=1978): mkdir(&(0x7f0000000040)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x9a944c, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 31.551767567s ago: executing program 0 (id=1979): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1e, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2d, 0x8, 0x2, 0x3d}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0xe, 0xf8}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_MARK={0x8, 0x10, 0xc}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000800)="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", 0x0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdff00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r5 = socket(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a010102"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r5}, 0x20) 31.43374976s ago: executing program 0 (id=1980): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25210000000a000100777061a363fff40009001f"], 0x2c}}, 0x800) 31.398126351s ago: executing program 32 (id=1980): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25210000000a000100777061a363fff40009001f"], 0x2c}}, 0x800) 14.400523087s ago: executing program 1 (id=2267): alarm(0xfd48) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80500, 0x0) 13.739087183s ago: executing program 4 (id=2281): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1e, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2d, 0x8, 0x2, 0x3d}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0xe, 0xf8}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_MARK={0x8, 0x10, 0xc}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000800)="455ddc5149e1960900490d278f34f1f0d8cc98dacf531cbf21f56ca09837293adbec51224f436d03965fffff6eb97c6db87d4f3892a409000000cb14f58fa703981cc4385a8edbc941476c60b4249f106f95fbbe71c2a8fa453def7b0518e352b977eeb73413acc6759edaf9e2463ea6b2f64f84d50faa50727a9ed25342bbd030328875002983064cd915ce17597842d7cac77b9a89b08370c448eefbfb75ecb0a4c3b36bb159d7a1e86fa17cfe3001d0665366060d3359b4e8b3d4579867b9cae974ed9cb642c32b5e7b0000000000000000b13d64b23fa7cdcafeff83eadaaefb9f70523e95063ef618bf5ddde0bdfcc54107c6b0fbb9fd34153a18acaaf8d5be5025adfb5f37fe020aae48eb19cca1dda967a5316ba1e7c4f324b92949fa705c28f9f63134513fc2b43cc2d9e41dab45ce666bd380f8401e0daa8ae086de8e58a88007be0ef5fe1db87ad73598d26e66b4bbbdd053dbadff5c87d6aaf7a5b1fc7df807ff933a152d9cebe827", 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdff00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r4 = socket(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a010102"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) 13.634924716s ago: executing program 4 (id=2283): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x501800, 0x1b3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB]) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000480)={&(0x7f0000002000)={[{&(0x7f0000000080)}, {0x0, 0x0, 0x2}]}, 0x2, 0x3, 0x2}, 0x1) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, &(0x7f0000000000)) 13.618186886s ago: executing program 1 (id=2284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) 13.539200198s ago: executing program 1 (id=2286): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1e, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2d, 0x8, 0x2, 0x3d}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0xe, 0xf8}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_MARK={0x8, 0x10, 0xc}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000"], 0x4c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000800)="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", 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdff00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r4 = socket(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a010102"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) 13.538994328s ago: executing program 4 (id=2287): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042022eba4"], 0xfdef) 13.437654111s ago: executing program 1 (id=2288): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0/../file0\x00', 0x0) 13.361062083s ago: executing program 4 (id=2289): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 13.207698986s ago: executing program 1 (id=2290): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, r0, 0x0, {0x2, 0x100000004}}, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000e55800000000"}}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d40), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) connect$unix(r5, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) 13.189597367s ago: executing program 4 (id=2291): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x59ac}) close_range(r0, 0xffffffffffffffff, 0x0) 13.029941561s ago: executing program 1 (id=2292): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc2082, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800", @ANYRES16=r1], 0x3c}}, 0x0) 12.986252972s ago: executing program 33 (id=2292): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0xc2082, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800", @ANYRES16=r1], 0x3c}}, 0x0) 12.939948963s ago: executing program 4 (id=2294): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 12.939836393s ago: executing program 34 (id=2294): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4.683370376s ago: executing program 3 (id=2349): socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="143cede28499", @ANYRES64=r0], 0xb2) 4.637336197s ago: executing program 3 (id=2350): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 4.5012682s ago: executing program 3 (id=2351): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x200, 0x7}, 0xd0a42e14fd8a78b9, 0x0, 0xffffffff, 0x0, 0x40000000, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.591497422s ago: executing program 3 (id=2361): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000b40)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@orlov}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.27994114s ago: executing program 3 (id=2365): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x2c754366, 0x10001, 0x9, 0x7, 0x9, "01000000000000c000000000800000e4018780"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000280)=0x9) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 3.099846794s ago: executing program 6 (id=2367): r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, r0, 0x0, {0x2, 0x100000004}}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000e55800000000"}}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) connect$unix(r5, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) 1.857552045s ago: executing program 6 (id=2372): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) epoll_create1(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 1.764055067s ago: executing program 7 (id=2373): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x16a, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 1.762419847s ago: executing program 7 (id=2374): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) 1.740912097s ago: executing program 3 (id=2375): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x800004) 1.736352608s ago: executing program 6 (id=2376): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, r0, 0x0, {0x2, 0x100000004}}, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000e55800000000"}}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) connect$unix(r5, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) 1.690830899s ago: executing program 35 (id=2375): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x800004) 1.63109284s ago: executing program 7 (id=2378): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0xfe, 0x1244, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) 1.292074238s ago: executing program 2 (id=2381): syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x1c}}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1.280253249s ago: executing program 7 (id=2382): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, r0, 0x0, {0x2, 0x100000004}}, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000e55800000000"}}}}}}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) connect$unix(r5, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) 990.945246ms ago: executing program 2 (id=2383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 971.966316ms ago: executing program 5 (id=2384): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) 867.833649ms ago: executing program 2 (id=2385): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 864.522599ms ago: executing program 5 (id=2386): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, 0x0, 0x0) symlink(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 638.798324ms ago: executing program 6 (id=2387): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/244, 0xf4) 561.959347ms ago: executing program 6 (id=2388): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3c, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r0 = socket(0x400000010, 0x3, 0x0) write(r0, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) 351.580031ms ago: executing program 6 (id=2389): socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='mem\x00', 0x3) 305.087552ms ago: executing program 5 (id=2390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01000000 2000000000 0 0 0 krb5 x00000000ffffffff00000', 0x38) 281.053264ms ago: executing program 2 (id=2391): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r0, 0x0, 0x0) read(r0, &(0x7f0000000100), 0x14) openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) 266.303773ms ago: executing program 5 (id=2392): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r1, 0x0, 0x0) 231.890765ms ago: executing program 5 (id=2393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 231.540135ms ago: executing program 2 (id=2394): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) 139.946687ms ago: executing program 2 (id=2395): sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x14, 0x0, 0x731, 0x100000, 0x8000, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 130.109837ms ago: executing program 7 (id=2396): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x89a0, &(0x7f0000000080)={'bridge0\x00', @ifru_ivalue}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000000000008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000000a000200001122334455000008000300000000000800040001000000"], 0x7c}}, 0x0) 59.520529ms ago: executing program 7 (id=2397): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCSABS20(r2, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 5 (id=2398): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x6) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x0, 0x10001, 0x1fd3, 0x4f, "0d418107009188b791e15b1b6f6ff88c6b00", 0x9, 0x140220}) writev(r0, &(0x7f0000001880)=[{&(0x7f0000000140)="1c5605", 0x3}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000002440)=0xd) kernel console output (not intermixed with test programs): [ 127.782553][ T362] [ 127.792464][ T362] EXT4-fs (loop4): Total free blocks count 0 [ 127.799165][ T362] EXT4-fs (loop4): Free/Dirty block details [ 127.805392][ T362] EXT4-fs (loop4): free_blocks=0 [ 127.810658][ T362] EXT4-fs (loop4): dirty_blocks=5892 [ 127.816111][ T362] EXT4-fs (loop4): Block reservation details [ 127.822309][ T362] EXT4-fs (loop4): i_reserved_data_blocks=5892 [ 127.837511][ T362] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 127.856871][ T3301] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 128.113064][ T7371] tap0: tun_chr_ioctl cmd 2147767521 [ 128.335419][ T28] audit: type=1400 audit(1786262771.487:555): avc: denied { setopt } for pid=7381 comm="syz.4.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.601405][ T28] audit: type=1400 audit(1786262771.757:556): avc: denied { read } for pid=7394 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.667397][ T28] audit: type=1400 audit(1786262771.817:557): avc: denied { write } for pid=7394 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.715366][ T7403] netlink: 'syz.1.1427': attribute type 1 has an invalid length. [ 128.733480][ T28] audit: type=1400 audit(1786262771.887:558): avc: denied { setopt } for pid=7394 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.879843][ T7411] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 129.794574][ T7433] program syz.3.1438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.389753][ T7462] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 130.401123][ T7462] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1448'. [ 130.510635][ T7471] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 130.540804][ T7471] syzkaller1: linktype set to 825 [ 130.558610][ T7474] MTRR 1 not used [ 130.606002][ T7480] set_capacity_and_notify: 3 callbacks suppressed [ 130.606020][ T7480] loop3: detected capacity change from 0 to 128 [ 130.640812][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.667822][ T7480] FAT-fs (loop3): Filesystem has been set read-only [ 130.674623][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.685382][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.700837][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.722168][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.742671][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.763250][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.785457][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.806002][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 130.829848][ T7480] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 131.017433][ T7491] ipvlan2: entered allmulticast mode [ 131.027346][ T7491] ip6gretap0: entered allmulticast mode [ 131.057297][ T7491] batman_adv: batadv0: Adding interface: ipvlan2 [ 131.071751][ T7491] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.113086][ T7491] batman_adv: batadv0: Interface activated: ipvlan2 [ 131.201482][ T7495] loop4: detected capacity change from 0 to 512 [ 131.226679][ T7495] EXT4-fs: Ignoring removed orlov option [ 131.557260][ T7526] loop3: detected capacity change from 0 to 164 [ 131.742152][ T7531] rdma_rxe: rxe_newlink: failed to add lo [ 132.003439][ T7544] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 133.317405][ T7580] loop2: detected capacity change from 0 to 128 [ 133.332312][ T7580] EXT4-fs mount: 4 callbacks suppressed [ 133.332331][ T7580] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.363867][ T7580] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.418090][ T7590] loop3: detected capacity change from 0 to 128 [ 133.461665][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 133.461686][ T28] audit: type=1400 audit(1786262776.587:588): avc: denied { write } for pid=7579 comm="syz.2.1494" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.495233][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.577303][ T7592] loop4: detected capacity change from 0 to 8192 [ 133.604755][ T7603] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1499'. [ 133.653516][ T7606] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 133.891027][ T7624] program syz.0.1510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.204270][ T7655] loop3: detected capacity change from 0 to 512 [ 134.215410][ T7655] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1523: iget: bad i_size value: 38620345925642 [ 134.235048][ T7655] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.235293][ T7655] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1523: couldn't read orphan inode 15 (err -117) [ 134.244707][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 134.244726][ C0] EXT4-fs (loop3): initial error at time 1786262777: ext4_orphan_get:1399: inode 15 [ 134.244769][ C0] EXT4-fs (loop3): last error at time 1786262777: ext4_orphan_get:1399: inode 15 [ 134.290805][ T7655] loop3: lost filesystem error report for type 5 error -117 [ 134.291604][ T7655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.327026][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.378533][ T7662] loop1: detected capacity change from 0 to 512 [ 134.402955][ T7664] loop3: detected capacity change from 0 to 128 [ 134.429751][ T7662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 134.442421][ T7662] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.524001][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 134.620581][ T7674] loop2: detected capacity change from 0 to 256 [ 134.643429][ T7674] syz.2.1531: attempt to access beyond end of device [ 134.643429][ T7674] loop2: rw=2049, sector=1800, nr_sectors = 4 limit=256 [ 134.702935][ T7678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.731496][ T116] kworker/u8:5: attempt to access beyond end of device [ 134.731496][ T116] loop2: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 134.823797][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.009444][ T7708] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1539'. [ 136.342596][ T28] audit: type=1326 audit(1786262779.497:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.385954][ T7717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1543'. [ 136.388548][ T28] audit: type=1326 audit(1786262779.497:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.421754][ T28] audit: type=1326 audit(1786262779.497:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.453185][ T28] audit: type=1326 audit(1786262779.497:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.497270][ T28] audit: type=1326 audit(1786262779.527:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.523341][ T28] audit: type=1326 audit(1786262779.527:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.549012][ T28] audit: type=1326 audit(1786262779.527:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.576775][ T28] audit: type=1326 audit(1786262779.527:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.667183][ T28] audit: type=1326 audit(1786262779.607:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7714 comm="syz.2.1542" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 136.823128][ T7743] size and base must be multiples of 4 kiB [ 136.829700][ T7743] CPU: 1 UID: 0 PID: 7743 Comm: syz.3.1555 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.829736][ T7743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.829761][ T7743] Call Trace: [ 136.829768][ T7743] [ 136.829775][ T7743] __dump_stack+0x1d/0x30 [ 136.829845][ T7743] dump_stack_lvl+0x95/0xd0 [ 136.829864][ T7743] dump_stack+0x15/0x1b [ 136.829881][ T7743] mtrr_del+0xbf/0xd0 [ 136.829955][ T7743] mtrr_ioctl+0xb62/0xfb0 [ 136.829981][ T7743] ? __pfx_mtrr_ioctl+0x10/0x10 [ 136.830002][ T7743] ? proc_reg_poll+0xc1/0x1a0 [ 136.830025][ T7743] proc_reg_unlocked_ioctl+0x123/0x1b0 [ 136.830077][ T7743] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 136.830102][ T7743] __se_sys_ioctl+0xce/0x140 [ 136.830123][ T7743] __x64_sys_ioctl+0x43/0x50 [ 136.830140][ T7743] x64_sys_call+0x1563/0x3020 [ 136.830212][ T7743] do_syscall_64+0x136/0x3c0 [ 136.830266][ T7743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.830286][ T7743] RIP: 0033:0x7f985297e0d9 [ 136.830304][ T7743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.830320][ T7743] RSP: 002b:00007f98513d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.830338][ T7743] RAX: ffffffffffffffda RBX: 00007f9852c05fa0 RCX: 00007f985297e0d9 [ 136.830412][ T7743] RDX: 0000200000000040 RSI: 0000000040104d04 RDI: 0000000000000003 [ 136.830424][ T7743] RBP: 00007f9852a15024 R08: 0000000000000000 R09: 0000000000000000 [ 136.830435][ T7743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.830465][ T7743] R13: 00007f9852c06038 R14: 00007f9852c05fa0 R15: 00007ffc251b5b38 [ 136.830484][ T7743] [ 137.023771][ T7746] set_capacity_and_notify: 1 callbacks suppressed [ 137.023785][ T7746] loop3: detected capacity change from 0 to 512 [ 137.037399][ T7746] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.049944][ T7746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.062907][ T7746] ext4 filesystem being mounted at /342/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.087439][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.531927][ T7763] xt_hashlimit: size too large, truncated to 1048576 [ 137.586959][ T7770] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 137.594786][ T7770] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.608807][ T7772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1563'. [ 137.622888][ T7770] vhci_hcd vhci_hcd.4: default hub control req: 230f v0004 i0000 l3 [ 137.654902][ T7774] loop1: detected capacity change from 0 to 256 [ 137.670817][ T7774] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.699728][ T7774] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.274733][ T7813] loop3: detected capacity change from 0 to 512 [ 138.290857][ T7813] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 138.300043][ T7813] EXT4-fs (loop3): 1 truncate cleaned up [ 138.306290][ T7813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.332814][ T7813] EXT4-fs (loop3): shut down requested (2) [ 138.351425][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.404527][ T7824] No such timeout policy "syz1" [ 138.433891][ T7826] tun0: tun_chr_ioctl cmd 1074025681 [ 138.560233][ T23] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 138.570608][ T23] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.607683][ T7836] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1592'. [ 139.000054][ T7847] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1596'. [ 139.510149][ T7861] loop2: detected capacity change from 0 to 512 [ 139.608842][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 139.608923][ T28] audit: type=1400 audit(1786262782.767:607): avc: denied { write } for pid=7864 comm="syz.3.1602" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 139.638436][ T7861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.669893][ T7861] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.707912][ T28] audit: type=1400 audit(1786262782.767:608): avc: denied { open } for pid=7864 comm="syz.3.1602" path="/354/tracing/events/msr/read_msr/enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 139.734301][ T28] audit: type=1400 audit(1786262782.887:609): avc: denied { write } for pid=7860 comm="syz.2.1599" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.829528][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.895802][ T7886] lo speed is unknown, defaulting to 1000 [ 139.936545][ T7891] loop2: detected capacity change from 0 to 512 [ 139.958093][ T7891] EXT4-fs: Ignoring removed bh option [ 139.982047][ T7891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.007139][ T7891] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.025614][ T7898] xt_hashlimit: size too large, truncated to 1048576 [ 140.038077][ T7891] EXT4-fs warning (device loop2): ext4_empty_dir:3094: inode #12: comm syz.2.1608: directory missing '.' [ 140.051163][ T28] audit: type=1400 audit(1786262783.187:610): avc: denied { write } for pid=7889 comm="syz.2.1608" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.145526][ T28] audit: type=1400 audit(1786262783.197:611): avc: denied { write } for pid=7889 comm="syz.2.1608" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.180287][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.230289][ T7904] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 140.230289][ T7904] program syz.2.1614 not setting count and/or reply_len properly [ 140.241406][ T28] audit: type=1400 audit(1786262783.197:612): avc: denied { remove_name } for pid=7889 comm="syz.2.1608" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.312457][ T28] audit: type=1400 audit(1786262783.197:613): avc: denied { rmdir } for pid=7889 comm="syz.2.1608" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.618899][ T7918] can0: slcan on ttyS3. [ 140.632961][ T28] audit: type=1400 audit(1786262783.787:614): avc: denied { read } for pid=3021 comm="dhcpcd" name="n27" dev="tmpfs" ino=7325 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.697148][ T28] audit: type=1400 audit(1786262783.787:615): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=7325 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.720184][ T7918] can0 (unregistered): slcan off ttyS3. [ 140.745801][ T28] audit: type=1400 audit(1786262783.787:616): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n27" dev="tmpfs" ino=7325 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.869488][ T7940] program syz.0.1627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.949114][ T7921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.976708][ T7921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.098900][ T7965] loop3: detected capacity change from 0 to 2048 [ 141.151942][ T7965] loop3: p1 < > p3 [ 141.173770][ T7965] loop3: p3 size 134217728 extends beyond EOD, truncated [ 141.183231][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1639'. [ 141.284655][ T7987] netlink: 'syz.0.1640': attribute type 10 has an invalid length. [ 141.302106][ T7989] loop3: detected capacity change from 0 to 128 [ 141.302476][ T7987] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1640'. [ 142.235676][ T8025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.223584][ T8056] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1665'. [ 143.575793][ T8068] loop1: detected capacity change from 0 to 256 [ 143.635836][ T8070] loop2: detected capacity change from 0 to 128 [ 143.646052][ T8070] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.659503][ T8070] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.683957][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.148362][ T8109] program syz.3.1686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.165464][ T8111] block device autoloading is deprecated and will be removed. [ 144.375555][ T8118] loop1: detected capacity change from 0 to 1024 [ 144.521920][ T8118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.604911][ T8125] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 144.656809][ T8118] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.735084][ T8127] loop2: detected capacity change from 0 to 256 [ 144.736216][ T8129] loop0: detected capacity change from 0 to 256 [ 144.748312][ T8129] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.763070][ T8129] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.774833][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 144.774850][ T28] audit: type=1400 audit(1786262787.927:675): avc: denied { write } for pid=8114 comm="syz.1.1689" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.812582][ T8118] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1689: bg 0: block 112: padding at end of block bitmap is not set [ 144.830180][ T8131] loop3: detected capacity change from 0 to 1024 [ 144.840762][ T8131] EXT4-fs: inline encryption not supported [ 144.847328][ T8118] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 144.866428][ T8118] EXT4-fs (loop1): This should not happen!! Data will be lost [ 144.866428][ T8118] [ 144.883690][ T8118] EXT4-fs (loop1): Total free blocks count 0 [ 144.890225][ T8131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.890539][ T8118] EXT4-fs (loop1): Free/Dirty block details [ 144.890558][ T8118] EXT4-fs (loop1): free_blocks=0 [ 144.890576][ T8118] EXT4-fs (loop1): dirty_blocks=16 [ 144.890594][ T8118] EXT4-fs (loop1): Block reservation details [ 144.890610][ T8118] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 144.896259][ T28] audit: type=1400 audit(1786262788.047:676): avc: denied { write } for pid=8130 comm="syz.3.1695" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.940153][ T3299] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 144.940765][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.954840][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.111445][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 145.165422][ T28] audit: type=1400 audit(1786262788.317:677): avc: denied { write } for pid=8149 comm="syz.3.1699" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 145.204901][ T8153] syz.2.1703 uses obsolete (PF_INET,SOCK_PACKET) [ 145.234664][ T28] audit: type=1400 audit(1786262788.387:678): avc: denied { bind } for pid=8154 comm="syz.4.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 145.422963][ T8172] loop1: detected capacity change from 0 to 1024 [ 145.519175][ T8172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.652836][ T28] audit: type=1400 audit(1786262788.797:679): avc: denied { write } for pid=8171 comm="syz.1.1712" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.702073][ T28] audit: type=1400 audit(1786262788.847:680): avc: denied { read } for pid=8179 comm="syz.4.1714" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.755027][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.776132][ T28] audit: type=1400 audit(1786262788.847:681): avc: denied { open } for pid=8179 comm="syz.4.1714" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.781276][ T8182] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in; [ 145.781276][ T8182] program syz.2.1715 not setting count and/or reply_len properly [ 145.828176][ T28] audit: type=1400 audit(1786262788.857:682): avc: denied { ioctl } for pid=8179 comm="syz.4.1714" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 145.927208][ T279] logitech-hidpp-device 0005:046D:B012.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 145.983968][ T8191] loop1: detected capacity change from 0 to 128 [ 145.996199][ T8189] fido_id[8189]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 146.030573][ T8191] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.048154][ T8197] loop2: detected capacity change from 0 to 128 [ 146.056729][ T8191] ext4 filesystem being mounted at /373/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.083483][ T8191] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.1719: bg 0: bad block bitmap checksum [ 146.114077][ T28] audit: type=1400 audit(1786262789.237:683): avc: denied { write } for pid=8190 comm="syz.1.1719" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.199844][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.222734][ T8199] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1722'. [ 146.258425][ T8201] loop4: detected capacity change from 0 to 128 [ 146.293743][ T8201] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.311360][ T8201] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.347433][ T28] audit: type=1400 audit(1786262789.497:684): avc: denied { write } for pid=8200 comm="syz.4.1724" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.399793][ T8205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.414672][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.434697][ T8205] EXT4-fs (loop2): shut down requested (1) [ 146.507624][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.658151][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 146.679345][ T8224] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.706784][ T8224] ext4 filesystem being mounted at /335/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.752224][ T3294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.814006][ T8229] FAT-fs (loop3): error, corrupted file size (i_pos 53, 8960) [ 147.022685][ T8229] FAT-fs (loop3): error, corrupted file size (i_pos 53, 8960) [ 147.537375][ T8246] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.568104][ T8246] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.632304][ T8252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.700574][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.713683][ T3294] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.887068][ T8268] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.896343][ T8268] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.970730][ T8268] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1747: Failed to acquire dquot type 1 [ 147.982171][ T8268] loop2: lost filesystem error report for type 5 error -117 [ 147.982740][ T8268] EXT4-fs (loop2): 1 truncate cleaned up [ 147.990098][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 147.990118][ C0] EXT4-fs (loop2): last error at time 1786262791: ext4_acquire_dquot:7041 [ 148.014218][ T8268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 148.031695][ T8268] EXT4-fs (loop2): shut down requested (0) [ 148.235163][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 148.898681][ T8293] set_capacity_and_notify: 7 callbacks suppressed [ 148.898716][ T8293] loop3: detected capacity change from 0 to 128 [ 148.962357][ T8293] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 148.994481][ T8293] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.037954][ T8293] ext2 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.252514][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.514300][ T8313] loop3: detected capacity change from 0 to 512 [ 149.616278][ T8313] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.1761: invalid block [ 149.638561][ T8313] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 149.646002][ T8313] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1761: couldn't read orphan inode 11 (err -117) [ 149.655631][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 149.655659][ C1] EXT4-fs (loop3): initial error at time 1786262792: __ext4_iget:5533: inode 11: block 1 [ 149.655838][ C1] EXT4-fs (loop3): last error at time 1786262792: __ext4_iget:5533: inode 11: block 1 [ 149.697361][ T8313] loop3: lost filesystem error report for type 5 error -117 [ 149.727770][ T8313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.791183][ T8313] netlink: 560 bytes leftover after parsing attributes in process `syz.3.1761'. [ 149.845111][ T8342] loop4: detected capacity change from 0 to 128 [ 149.859013][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 149.859155][ T28] audit: type=1400 audit(1786262793.017:707): avc: denied { create } for pid=8343 comm="syz.0.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 149.906057][ T28] audit: type=1400 audit(1786262793.027:708): avc: denied { write } for pid=8341 comm="syz.4.1773" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 149.929953][ T28] audit: type=1400 audit(1786262793.047:709): avc: denied { write } for pid=8343 comm="syz.0.1774" path="socket:[19711]" dev="sockfs" ino=19711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 149.982592][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.307941][ T8374] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 150.806783][ T8387] loop2: detected capacity change from 0 to 4096 [ 150.899582][ T8387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.916537][ T8390] syzkaller1: entered promiscuous mode [ 150.922218][ T8390] syzkaller1: entered allmulticast mode [ 150.958377][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.984851][ T8392] loop2: detected capacity change from 0 to 512 [ 150.998040][ T8392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 151.013508][ T8392] EXT4-fs (loop2): 1 truncate cleaned up [ 151.019939][ T8392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.036073][ T28] audit: type=1400 audit(1786262794.187:710): avc: denied { write } for pid=8391 comm="syz.2.1795" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.090215][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.315225][ T8401] loop2: detected capacity change from 0 to 8192 [ 151.437271][ T8415] netlink: 'syz.0.1806': attribute type 6 has an invalid length. [ 152.116269][ T8431] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 152.394399][ T279] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 152.406196][ T279] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.461650][ T8457] fido_id[8457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 153.270529][ T28] audit: type=1400 audit(1786262796.417:711): avc: denied { create } for pid=8488 comm="syz.3.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 153.313680][ T28] audit: type=1400 audit(1786262796.457:712): avc: denied { sys_admin } for pid=8488 comm="syz.3.1832" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 153.395795][ T28] audit: type=1326 audit(1786262796.537:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1835" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 153.437884][ T28] audit: type=1326 audit(1786262796.547:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1835" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 153.477063][ T28] audit: type=1326 audit(1786262796.547:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1835" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 153.503150][ T28] audit: type=1326 audit(1786262796.547:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8494 comm="syz.2.1835" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c494e0d9 code=0x7ffc0000 [ 153.667439][ T8512] syzkaller1: entered promiscuous mode [ 153.689278][ T8512] syzkaller1: entered allmulticast mode [ 153.769115][ T8513] pim6reg: entered allmulticast mode [ 153.784733][ T8508] pim6reg: left allmulticast mode [ 153.854004][ T8518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.861329][ T8518] IPv6: NLM_F_CREATE should be set when creating new route [ 153.868620][ T8518] IPv6: NLM_F_CREATE should be set when creating new route [ 153.875861][ T8518] IPv6: NLM_F_CREATE should be set when creating new route [ 153.910781][ T8518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.074808][ T8531] loop0: detected capacity change from 0 to 256 [ 154.207634][ T8533] loop2: detected capacity change from 0 to 8192 [ 154.220153][ T8540] loop1: detected capacity change from 0 to 512 [ 154.233755][ T8540] EXT4-fs: Ignoring removed i_version option [ 154.388473][ T8546] syzkaller1: entered promiscuous mode [ 154.394567][ T8546] syzkaller1: entered allmulticast mode [ 154.401218][ T8540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.456755][ T8540] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.936122][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.097702][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 155.111427][ T28] audit: type=1400 audit(1786262798.247:721): avc: denied { write } for pid=8569 comm="syz.3.1864" name="kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 155.162677][ T28] audit: type=1400 audit(1786262798.247:722): avc: denied { open } for pid=8569 comm="syz.3.1864" path="/407/dev/kmsg" dev="proc" ino=4026532043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 155.225026][ T8574] loop0: detected capacity change from 0 to 2048 [ 155.245929][ T8574] EXT4-fs: Ignoring removed nobh option [ 155.288037][ T8580] Invalid argument reading file caps for ./file0 [ 155.294807][ T28] audit: type=1400 audit(1786262798.437:723): avc: denied { execute } for pid=8579 comm="syz.4.1869" name="file0" dev="tmpfs" ino=1824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.319049][ T8574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.345076][ T8574] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 155.375468][ T28] audit: type=1400 audit(1786262798.447:724): avc: denied { execute_no_trans } for pid=8579 comm="syz.4.1869" path="/342/file0" dev="tmpfs" ino=1824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.407828][ T8574] EXT4-fs (loop0): Remounting filesystem read-only [ 155.453682][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.635752][ T28] audit: type=1400 audit(1786262798.787:725): avc: denied { mounton } for pid=8604 comm="syz.4.1878" path="/347/file0" dev="tmpfs" ino=1851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.753927][ T8608] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1877'. [ 156.211162][ T8613] loop1: detected capacity change from 0 to 512 [ 156.389435][ T8613] EXT4-fs: Ignoring removed nobh option [ 156.461022][ T8613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.491078][ T8613] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.596641][ T28] audit: type=1400 audit(1786262799.737:726): avc: denied { write } for pid=8612 comm="syz.1.1881" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.648306][ T8639] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1892'. [ 156.687691][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.746067][ T28] audit: type=1400 audit(1786262799.897:727): avc: denied { setopt } for pid=8649 comm="syz.3.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.834594][ T8661] loop0: detected capacity change from 0 to 256 [ 156.945739][ T28] audit: type=1400 audit(1786262800.097:728): avc: denied { append } for pid=8666 comm="syz.0.1902" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 157.114202][ T8683] loop2: detected capacity change from 0 to 256 [ 157.175690][ T8685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.184614][ T8685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.273587][ T8691] loop2: detected capacity change from 0 to 512 [ 157.280396][ T8691] EXT4-fs: test_dummy_encryption option not supported [ 157.329459][ T28] audit: type=1400 audit(1786262800.487:729): avc: denied { listen } for pid=8695 comm="syz.2.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.726157][ T28] audit: type=1400 audit(1786262800.877:730): avc: denied { connect } for pid=8709 comm="syz.3.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.567377][ T8763] lo speed is unknown, defaulting to 1000 [ 159.587276][ T116] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.606542][ T8766] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.664410][ T8769] loop0: detected capacity change from 0 to 2048 [ 159.681846][ T8769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.736159][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.754430][ T8780] loop3: detected capacity change from 0 to 512 [ 159.810214][ T8780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.833770][ T8780] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.1949: iget: checksum invalid [ 159.847565][ T8780] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 159.903245][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.934777][ T8783] loop0: detected capacity change from 0 to 8192 [ 160.001651][ T3294] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 160.011057][ T3294] FAT-fs (loop0): Filesystem has been set read-only [ 160.187460][ T8800] loop3: detected capacity change from 0 to 512 [ 160.198370][ T8800] EXT4-fs: inline encryption not supported [ 160.216551][ T8800] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.237285][ T8800] EXT4-fs (loop3): 1 truncate cleaned up [ 160.244813][ T8800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.259985][ T8800] EXT4-fs error (device loop3): ext4_nfs_get_inode:1578: inode #11: comm syz.3.1957: iget: bad extra_isize 62 (inode size 256) [ 160.273939][ T8800] EXT4-fs (loop3): Remounting filesystem read-only [ 160.290753][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.331650][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 160.331669][ T28] audit: type=1400 audit(1786262803.487:734): avc: denied { mount } for pid=8806 comm="syz.3.1959" name="/" dev="ramfs" ino=20983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 160.533691][ T8819] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1966'. [ 160.578419][ T8826] No such timeout policy "syz1" [ 161.069572][ T8844] loop0: detected capacity change from 0 to 256 [ 161.587781][ T4179] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.746905][ T362] bridge_slave_1: left allmulticast mode [ 161.750312][ T8864] random: crng reseeded on system resumption [ 161.758775][ T28] audit: type=1400 audit(1786262804.907:735): avc: denied { write } for pid=8863 comm="syz.1.1983" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 161.763201][ T362] bridge_slave_1: left promiscuous mode [ 161.809476][ T28] audit: type=1400 audit(1786262804.947:736): avc: denied { open } for pid=8863 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.829197][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.857974][ T362] bridge_slave_0: left allmulticast mode [ 161.862372][ T28] audit: type=1400 audit(1786262804.947:737): avc: denied { kernel } for pid=8863 comm="syz.1.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 161.863986][ T362] bridge_slave_0: left promiscuous mode [ 161.931015][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.051447][ T362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.067000][ T28] audit: type=1400 audit(1786262805.217:738): avc: denied { read } for pid=8872 comm="syz.2.1987" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.113555][ T362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.134356][ T362] bond0 (unregistering): Released all slaves [ 162.172951][ T8852] lo speed is unknown, defaulting to 1000 [ 162.233329][ T8883] loop1: detected capacity change from 0 to 512 [ 162.251693][ T8883] EXT4-fs: Ignoring removed oldalloc option [ 162.268267][ T8883] EXT4-fs: Ignoring removed i_version option [ 162.299314][ T8883] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.324712][ T8883] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1989: invalid block [ 162.340149][ T8883] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.340316][ T8883] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1989: invalid indirect mapped block 4294967295 (level 1) [ 162.349662][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 162.349701][ C1] EXT4-fs (loop1): initial error at time 1786262805: ext4_get_branch:178: inode 11: block 4294967295 [ 162.349752][ C1] EXT4-fs (loop1): last error at time 1786262805: ext4_get_branch:178: inode 11: block 4294967295 [ 162.392441][ T8883] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.393852][ T8883] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1989: invalid indirect mapped block 4294967295 (level 1) [ 162.418426][ T8883] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.418769][ T8883] EXT4-fs (loop1): 2 truncates cleaned up [ 162.469293][ T28] audit: type=1400 audit(1786262805.627:739): avc: denied { write } for pid=8878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.470576][ T8883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.522387][ T362] hsr_slave_0: left promiscuous mode [ 162.539931][ T362] hsr_slave_1: left promiscuous mode [ 162.545200][ T8883] EXT4-fs (loop1): shut down requested (1) [ 162.546338][ T362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.569752][ T8883] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 162.581748][ T362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.588668][ T28] audit: type=1400 audit(1786262805.737:740): avc: denied { write } for pid=8892 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.611423][ T8883] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 162.648407][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.689825][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 162.703887][ T23] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.746834][ T362] team0 (unregistering): Port device team_slave_1 removed [ 162.781814][ T362] team0 (unregistering): Port device team_slave_0 removed [ 162.840352][ T116] smc: removing ib device sz1 [ 162.886169][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 163.177217][ T28] audit: type=1400 audit(1786262806.327:741): avc: denied { tracepoint } for pid=8916 comm="syz.4.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 163.346702][ T28] audit: type=1400 audit(1786262806.367:742): avc: denied { write } for pid=8916 comm="syz.4.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.411247][ T8927] loop2: detected capacity change from 0 to 512 [ 163.450456][ T8927] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.531202][ T8927] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1998: invalid indirect mapped block 4294967295 (level 0) [ 163.561557][ T8927] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.561730][ T8927] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1998: invalid indirect mapped block 4294967295 (level 1) [ 163.571074][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 163.571099][ C1] EXT4-fs (loop2): initial error at time 1786262806: ext4_free_branches:1023: inode 16 [ 163.571143][ C1] EXT4-fs (loop2): last error at time 1786262806: ext4_free_branches:1023: inode 16 [ 163.701708][ T8927] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.704070][ T8927] EXT4-fs (loop2): 1 orphan inode deleted [ 163.719825][ T28] audit: type=1400 audit(1786262806.847:743): avc: denied { write } for pid=8914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.758135][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.772628][ T8927] EXT4-fs (loop2): 1 truncate cleaned up [ 163.781670][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.793883][ T8927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.810298][ T8852] bridge_slave_0: entered allmulticast mode [ 163.816927][ T8852] bridge_slave_0: entered promiscuous mode [ 163.834770][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.842092][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.849572][ T8852] bridge_slave_1: entered allmulticast mode [ 163.856333][ T8852] bridge_slave_1: entered promiscuous mode [ 163.876162][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 163.940348][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.983344][ T8852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.021469][ T8852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.131921][ T8852] team0: Port device team_slave_0 added [ 164.160569][ T8852] team0: Port device team_slave_1 added [ 164.201657][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.229477][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.260081][ T8963] device-mapper: ioctl: Invalid ioctl structure: name myp, dev fc00 [ 164.332756][ T8852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.344529][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.354470][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.381477][ T8852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.428700][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.429785][ T8852] hsr_slave_0: entered promiscuous mode [ 164.451978][ T8852] hsr_slave_1: entered promiscuous mode [ 164.464465][ T8852] debugfs: 'hsr0' already exists in 'hsr' [ 164.475759][ T8852] Cannot create hsr debugfs directory [ 164.511475][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 164.674796][ T8852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.697694][ T8852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.714670][ T8852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.736746][ T8852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.756152][ T8852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.766833][ T8852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.774950][ T8852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.786959][ T8852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.898966][ T9011] loop1: detected capacity change from 0 to 128 [ 164.964052][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 165.022816][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.040862][ T8852] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.082547][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.089742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.384722][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.391963][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.567587][ T8852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.581530][ T9050] loop1: detected capacity change from 0 to 512 [ 165.592483][ T9050] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2021: inode has both inline data and extents flags [ 165.606206][ T9050] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.606906][ T9050] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2021: couldn't read orphan inode 15 (err -117) [ 165.616229][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 165.616261][ C1] EXT4-fs (loop1): initial error at time 1786262808: ext4_orphan_get:1399: inode 15 [ 165.616286][ C1] EXT4-fs (loop1): last error at time 1786262808: ext4_orphan_get:1399: inode 15 [ 165.654534][ T9050] loop1: lost filesystem error report for type 5 error -117 [ 165.655270][ T9050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.682106][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 165.682157][ T28] audit: type=1400 audit(1786262808.837:749): avc: denied { write } for pid=9048 comm="syz.1.2021" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.711071][ T28] audit: type=1400 audit(1786262808.847:750): avc: denied { write } for pid=9048 comm="syz.1.2021" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 165.742373][ T28] audit: type=1400 audit(1786262808.847:751): avc: denied { add_name } for pid=9048 comm="syz.1.2021" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 165.831537][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.847697][ T9064] loop4: detected capacity change from 0 to 512 [ 165.863640][ T9064] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2022: Unrecognised inode hash code 255 [ 165.877519][ T9064] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2022: Corrupt directory, running e2fsck is recommended [ 165.909007][ T9064] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 165.917271][ T9064] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2022: corrupted in-inode xattr: invalid ea_ino [ 165.931330][ T9064] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 165.931595][ T9064] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2022: couldn't read orphan inode 15 (err -117) [ 165.941014][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 165.941042][ C0] EXT4-fs (loop4): initial error at time 1786262809: ext4_iget_extra_inode:5180: inode 15 [ 165.941079][ C0] EXT4-fs (loop4): last error at time 1786262809: ext4_iget_extra_inode:5180: inode 15 [ 165.959614][ T8852] veth0_vlan: entered promiscuous mode [ 165.971699][ T9064] loop4: lost filesystem error report for type 5 error -117 [ 165.986708][ T9064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.025405][ T9064] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2022: Unrecognised inode hash code 255 [ 166.031315][ T28] audit: type=1400 audit(1786262809.177:752): avc: denied { write } for pid=9057 comm="syz.4.2022" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.037334][ T9064] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2022: Corrupt directory, running e2fsck is recommended [ 166.070015][ T8852] veth1_vlan: entered promiscuous mode [ 166.093054][ T8852] veth0_macvtap: entered promiscuous mode [ 166.122554][ T8852] veth1_macvtap: entered promiscuous mode [ 166.141682][ T9064] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.2022: Unrecognised inode hash code 255 [ 166.153822][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.164866][ T9064] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.2022: Corrupt directory, running e2fsck is recommended [ 166.184818][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.216004][ T28] audit: type=1400 audit(1786262809.367:753): avc: denied { mounton } for pid=8852 comm="syz-executor" path="/root/syzkaller.UtZ9WO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 166.225274][ T9064] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 4: comm syz.4.2022: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 166.248610][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.282191][ T9079] loop1: detected capacity change from 0 to 128 [ 166.289069][ T9079] msdos: Bad value for 'gid' [ 166.298516][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.317981][ T28] audit: type=1400 audit(1786262809.437:754): avc: denied { mount } for pid=8852 comm="syz-executor" name="/" dev="gadgetfs" ino=3812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 166.349416][ T9079] msdos: Bad value for 'gid' [ 166.358122][ T116] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.367243][ T116] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.384528][ T9079] type: 2229836882 invalid [ 166.450970][ T9089] loop1: detected capacity change from 0 to 512 [ 166.464403][ T9089] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.468949][ T8767] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.480648][ T4179] Bluetooth: hci0: command 0x1003 tx timeout [ 166.489994][ T9089] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2030: invalid indirect mapped block 4294967295 (level 0) [ 166.496319][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.505770][ T9089] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 166.513363][ T9089] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2030: invalid indirect mapped block 4294967295 (level 1) [ 166.522570][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 166.522591][ C1] EXT4-fs (loop1): initial error at time 1786262809: ext4_free_branches:1023: inode 16 [ 166.522628][ C1] EXT4-fs (loop1): last error at time 1786262809: ext4_free_branches:1023: inode 16 [ 166.563096][ T9089] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 166.566048][ T9089] EXT4-fs (loop1): 1 orphan inode deleted [ 166.584430][ T9089] EXT4-fs (loop1): 1 truncate cleaned up [ 166.590674][ T9089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.608634][ T9089] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.2030: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 166.630964][ T9089] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.2030: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 166.669555][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.689885][ T9096] device-mapper: ioctl: device name cannot contain '/' [ 166.784326][ T9108] loop2: detected capacity change from 0 to 1024 [ 166.813914][ T9108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.837164][ T9100] loop3: detected capacity change from 0 to 8192 [ 166.843724][ T9114] loop5: detected capacity change from 0 to 128 [ 166.856529][ T9100] syz.3.2037: attempt to access beyond end of device [ 166.856529][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.873386][ T28] audit: type=1400 audit(1786262810.037:755): avc: denied { write } for pid=9107 comm="syz.2.2041" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.884931][ T9114] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.908657][ T9114] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.927186][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 166.938202][ T28] audit: type=1400 audit(1786262810.067:756): avc: denied { write } for pid=9107 comm="syz.2.2041" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.961661][ T9100] syz.3.2037: attempt to access beyond end of device [ 166.961661][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 166.981839][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.992097][ T362] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.001627][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.010101][ T9100] syz.3.2037: attempt to access beyond end of device [ 167.010101][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 167.032075][ T28] audit: type=1400 audit(1786262810.187:757): avc: denied { ioctl } for pid=9117 comm="syz.1.2043" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 167.043843][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.106631][ T9100] syz.3.2037: attempt to access beyond end of device [ 167.106631][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 167.128407][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.141547][ T9129] loop2: detected capacity change from 0 to 512 [ 167.148050][ T9100] syz.3.2037: attempt to access beyond end of device [ 167.148050][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 167.172462][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.182864][ T9129] EXT4-fs (loop2): 1 orphan inode deleted [ 167.198469][ T12] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 167.198518][ T9100] syz.3.2037: attempt to access beyond end of device [ 167.198518][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 167.213866][ T9129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.223144][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.243706][ T9100] syz.3.2037: attempt to access beyond end of device [ 167.243706][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 167.255899][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 167.258169][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.277910][ T9100] syz.3.2037: attempt to access beyond end of device [ 167.277910][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 167.292343][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.301139][ T9100] syz.3.2037: attempt to access beyond end of device [ 167.301139][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 167.303138][ T9133] loop5: detected capacity change from 0 to 512 [ 167.315880][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.322521][ T12] loop2: lost filesystem error report for type 5 error -117 [ 167.330343][ T9129] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.330815][ T9120] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 167.358537][ T9120] FAT-fs (loop3): Filesystem has been set read-only [ 167.366189][ T9100] syz.3.2037: attempt to access beyond end of device [ 167.366189][ T9100] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 167.395886][ T9133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.412166][ T9120] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 167.418958][ T9133] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.424031][ T9100] Buffer I/O error on dev loop3, logical block 57847, async page read [ 167.442308][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.511782][ T9133] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.056826][ T9172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.064185][ T9172] IPv6: NLM_F_CREATE should be set when creating new route [ 168.117073][ T9174] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 168.159361][ T9172] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.166649][ T9172] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.284525][ T9172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.295856][ T9172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.337789][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.347558][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.378505][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.390151][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.815666][ T9228] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 168.826374][ T9228] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.844759][ T9228] ext2 filesystem being mounted at /389/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.902536][ T9231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.916138][ T9231] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.933799][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.949983][ T9231] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2090: bg 0: block 3: invalid block bitmap [ 168.964186][ T9231] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 168.977093][ T9235] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.989696][ T9231] EXT4-fs (loop3): This should not happen!! Data will be lost [ 168.989696][ T9231] [ 168.999867][ T9231] EXT4-fs (loop3): Total free blocks count 0 [ 169.007782][ T9231] EXT4-fs (loop3): Free/Dirty block details [ 169.013864][ T9231] EXT4-fs (loop3): free_blocks=0 [ 169.019019][ T9231] EXT4-fs (loop3): dirty_blocks=64 [ 169.024264][ T9231] EXT4-fs (loop3): Block reservation details [ 169.030443][ T9231] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 169.061642][ T9238] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.080894][ T3302] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 169.092821][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 169.102916][ T9238] ext4 filesystem being mounted at /390/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 169.354812][ T3295] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.482394][ T9265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.499810][ T9271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 169.509217][ T9265] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.527099][ T9275] device-mapper: ioctl: Invalid ioctl structure: uuid ÿ, name , dev f3 [ 169.545582][ T9271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.562019][ T9271] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.604629][ T9279] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2105'. [ 169.640708][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.653892][ T9279] bond0 (unregistering): Released all slaves [ 169.684734][ T8852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.724367][ T9286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.753761][ T9286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.849711][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.963332][ T9312] set_capacity_and_notify: 9 callbacks suppressed [ 169.963352][ T9312] loop5: detected capacity change from 0 to 2048 [ 169.989423][ T9312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.054546][ T8852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.111596][ T9329] No such timeout policy "syz1" [ 170.556919][ T9369] Invalid argument reading file caps for ./file0 [ 170.643934][ T9374] loop3: detected capacity change from 0 to 512 [ 170.677016][ T9374] EXT4-fs (loop3): 1 truncate cleaned up [ 170.693431][ T9374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.708373][ T9374] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2120: bg 0: block 465: padding at end of block bitmap is not set [ 170.723158][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 170.723213][ T28] audit: type=1400 audit(1786262813.867:825): avc: denied { write } for pid=9372 comm="syz.3.2120" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 170.764396][ T9374] EXT4-fs (loop3): Remounting filesystem read-only [ 170.793353][ T9379] loop2: detected capacity change from 0 to 512 [ 170.799971][ T9374] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 170.823959][ T9379] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.922354][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.970863][ T9395] loop1: detected capacity change from 0 to 128 [ 170.982728][ T28] audit: type=1400 audit(1786262814.137:826): avc: denied { write } for pid=9380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.079665][ T9404] loop4: detected capacity change from 0 to 512 [ 171.091287][ T28] audit: type=1400 audit(1786262814.247:827): avc: denied { write } for pid=9401 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.123264][ T9404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.225418][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.423039][ T9424] Invalid argument reading file caps for ./file0 [ 171.707590][ T9432] loop4: detected capacity change from 0 to 512 [ 171.840523][ T9432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2134: missing EA_INODE flag [ 171.861772][ T9432] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 171.863021][ T9432] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2134: error while reading EA inode 12 err=-117 [ 171.872412][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 171.872429][ C1] EXT4-fs (loop4): initial error at time 1786262815: ext4_xattr_inode_iget:441: inode 12 [ 171.872479][ C1] EXT4-fs (loop4): last error at time 1786262815: ext4_xattr_inode_iget:441: inode 12 [ 171.946867][ T9432] loop4: lost filesystem error report for type 5 error -117 [ 171.947183][ T9432] EXT4-fs (loop4): 1 orphan inode deleted [ 171.965717][ T9432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.985049][ T28] audit: type=1400 audit(1786262815.137:828): avc: denied { write } for pid=9431 comm="syz.4.2134" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.040178][ T9440] Need at least one configuration in g1. [ 172.049154][ T28] audit: type=1400 audit(1786262815.197:829): avc: denied { write } for pid=9439 comm="syz.2.2137" name="UDC" dev="configfs" ino=22436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 172.055162][ T9440] udc usbip-vudc.0: failed to start g1: -22 [ 172.078082][ T9440] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 172.091678][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.129543][ T28] audit: type=1400 audit(1786262815.197:830): avc: denied { open } for pid=9439 comm="syz.2.2137" path="/400/config/usb_gadget/g1/UDC" dev="configfs" ino=22436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 172.168262][ T9440] UDC core: g1: couldn't find an available UDC or it's busy [ 172.344756][ T9457] loop3: detected capacity change from 0 to 128 [ 172.439485][ T9467] loop3: detected capacity change from 0 to 512 [ 172.456490][ T28] audit: type=1400 audit(1786262815.607:831): avc: denied { read } for pid=9460 comm="syz.1.2146" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.481609][ T28] audit: type=1400 audit(1786262815.637:832): avc: denied { load_policy } for pid=9464 comm="syz.4.2149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 172.481620][ T9470] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 172.516104][ T9470] SELinux: failed to load policy [ 172.519664][ T9467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.571302][ T9467] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.595973][ T28] audit: type=1400 audit(1786262815.747:833): avc: denied { write } for pid=9466 comm="syz.3.2150" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.631487][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.769568][ T9483] loop3: detected capacity change from 0 to 256 [ 172.908237][ T11] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 172.919065][ T11] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 173.321563][ T9499] syzkaller1: entered promiscuous mode [ 173.331065][ T9499] syzkaller1: entered allmulticast mode [ 173.412766][ T9503] loop1: detected capacity change from 0 to 512 [ 173.444065][ T9503] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 173.462413][ T9503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 173.487918][ T9503] System zones: 1-12 [ 173.502900][ T9503] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2162: bad orphan inode 131072 [ 173.525918][ T9503] loop1: lost filesystem error report for type 5 error -117 [ 173.526561][ T9503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.580026][ T9508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.653261][ T28] audit: type=1400 audit(1786262816.807:834): avc: denied { write } for pid=9502 comm="syz.1.2162" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 173.732662][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.744537][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.817846][ T9523] /dev/loop2: Can't open blockdev [ 173.901107][ T9526] EXT4-fs (loop3): 1 orphan inode deleted [ 173.908156][ T9526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.921910][ T9527] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2171'. [ 173.931153][ T3598] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 173.944015][ T9526] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.955601][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2173'. [ 174.032687][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.241334][ T9544] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.343137][ T9544] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.766920][ T9591] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.2198: Unrecognised inode hash code 255 [ 174.779296][ T9591] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2198: Corrupt directory, running e2fsck is recommended [ 174.812198][ T9596] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2200'. [ 174.867645][ T9591] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 174.882457][ T9591] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2198: corrupted in-inode xattr: invalid ea_ino [ 174.905380][ T9591] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 174.905789][ T9591] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2198: couldn't read orphan inode 15 (err -117) [ 174.915210][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 174.915247][ C0] EXT4-fs (loop1): initial error at time 1786262818: ext4_iget_extra_inode:5180: inode 15 [ 174.915293][ C0] EXT4-fs (loop1): last error at time 1786262818: ext4_iget_extra_inode:5180: inode 15 [ 174.954580][ T9591] loop1: lost filesystem error report for type 5 error -117 [ 174.955245][ T9591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.994366][ T9591] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.2198: Unrecognised inode hash code 255 [ 175.006423][ T9591] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2198: Corrupt directory, running e2fsck is recommended [ 175.039118][ T9591] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.2198: Unrecognised inode hash code 255 [ 175.050978][ T9591] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2198: Corrupt directory, running e2fsck is recommended [ 175.065608][ T9591] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 4: comm syz.1.2198: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 175.139938][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.223917][ T9617] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2208'. [ 175.280641][ T9624] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2212'. [ 175.339427][ T9626] set_capacity_and_notify: 7 callbacks suppressed [ 175.339446][ T9626] loop5: detected capacity change from 0 to 2048 [ 175.384022][ T9626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 175.414945][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2215'. [ 175.478045][ T9626] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.495994][ T11] logitech-hidpp-device 0005:046D:B012.000E: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 175.510050][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 175.535356][ T9626] EXT4-fs (loop5): Remounting filesystem read-only [ 175.557097][ T9636] fido_id[9636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.650786][ T9626] syz.5.2213 (9626) used greatest stack depth: 9616 bytes left [ 175.676797][ T8852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 175.754180][ T9646] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 175.797800][ T9650] loop2: detected capacity change from 0 to 128 [ 175.918792][ T9657] loop5: detected capacity change from 0 to 256 [ 175.927813][ T9657] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.979229][ T9657] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.045333][ T9669] netlink: 'syz.1.2229': attribute type 1 has an invalid length. [ 176.105493][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 176.105513][ T28] audit: type=1400 audit(1786262819.257:846): avc: denied { write } for pid=9656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.207364][ T9686] loop5: detected capacity change from 0 to 512 [ 176.227333][ T9686] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.256460][ T28] audit: type=1400 audit(1786262819.377:847): avc: denied { write } for pid=9682 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.422495][ T9692] loop2: detected capacity change from 0 to 8192 [ 176.435807][ T9692] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.471616][ T9705] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2240'. [ 176.531404][ T23] IPVS: starting estimator thread 0... [ 176.621897][ T9721] loop1: detected capacity change from 0 to 512 [ 176.628483][ T9712] IPVS: using max 1824 ests per chain, 91200 per kthread [ 176.648876][ T9718] WARNING! power/level is deprecated; use power/control instead [ 176.653726][ T9721] EXT4-fs: Ignoring removed bh option [ 176.695920][ T9721] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.2244: corrupted in-inode xattr: e_value size too large [ 176.721419][ T9721] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.721739][ T9721] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2244: couldn't read orphan inode 15 (err -117) [ 176.728805][ T28] audit: type=1400 audit(1786262819.877:848): avc: denied { write } for pid=9706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.731045][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 176.731063][ C0] EXT4-fs (loop1): initial error at time 1786262819: ext4_iget_extra_inode:5180: inode 15 [ 176.783273][ C0] EXT4-fs (loop1): last error at time 1786262819: ext4_iget_extra_inode:5180: inode 15 [ 176.817373][ T9721] loop1: lost filesystem error report for type 5 error -117 [ 176.845520][ T9721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.879580][ T28] audit: type=1400 audit(1786262820.027:849): avc: denied { write } for pid=9729 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.950495][ T28] audit: type=1400 audit(1786262820.077:850): avc: denied { write } for pid=9719 comm="syz.1.2244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.995805][ T28] audit: type=1400 audit(1786262820.077:851): avc: denied { write } for pid=9719 comm="syz.1.2244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.997276][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.039853][ T28] audit: type=1400 audit(1786262820.077:852): avc: denied { write } for pid=9719 comm="syz.1.2244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.097462][ T9743] netlink: 2244 bytes leftover after parsing attributes in process `syz.1.2249'. [ 177.126097][ T28] audit: type=1400 audit(1786262820.087:853): avc: denied { write } for pid=9719 comm="syz.1.2244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.377228][ T28] audit: type=1400 audit(1786262820.527:854): avc: denied { write } for pid=9741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.470111][ T28] audit: type=1400 audit(1786262820.567:855): avc: denied { write } for pid=9763 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.334243][ T9794] tipc: Started in network mode [ 178.342544][ T9794] tipc: Node identity ac14142f, cluster identity 4711 [ 178.350145][ T9794] tipc: New replicast peer: 127.0.0.1 [ 178.379467][ T9794] tipc: Enabled bearer , priority 10 [ 178.400450][ T9802] tipc: New replicast peer: 172.20.20.11 [ 178.677452][ T9828] loop5: detected capacity change from 0 to 8192 [ 178.689367][ T9828] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.865413][ T9842] GUP no longer grows the stack in syz.5.2279 (9842): 200000004000-20000000a000 (200000002000) [ 178.876190][ T9842] CPU: 0 UID: 0 PID: 9842 Comm: syz.5.2279 Not tainted syzkaller #0 PREEMPT(lazy) [ 178.876251][ T9842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.876266][ T9842] Call Trace: [ 178.876273][ T9842] [ 178.876282][ T9842] __dump_stack+0x1d/0x30 [ 178.876312][ T9842] dump_stack_lvl+0x95/0xd0 [ 178.876378][ T9842] dump_stack+0x15/0x1b [ 178.876407][ T9842] __get_user_pages+0x1b27/0x1f10 [ 178.876557][ T9842] ? __rcu_read_unlock+0x4e/0x70 [ 178.876646][ T9842] get_user_pages_remote+0x1d5/0x6b0 [ 178.876687][ T9842] __access_remote_vm+0x156/0x4d0 [ 178.876790][ T9842] access_remote_vm+0x32/0x40 [ 178.876908][ T9842] proc_pid_cmdline_read+0x334/0x710 [ 178.876930][ T9842] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 178.876954][ T9842] vfs_readv+0x417/0x6d0 [ 178.877062][ T9842] __x64_sys_preadv+0xfd/0x1c0 [ 178.877131][ T9842] x64_sys_call+0x2915/0x3020 [ 178.877157][ T9842] do_syscall_64+0x136/0x3c0 [ 178.877195][ T9842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.877281][ T9842] RIP: 0033:0x7f673516e0d9 [ 178.877315][ T9842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.877343][ T9842] RSP: 002b:00007f6733bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 178.877363][ T9842] RAX: ffffffffffffffda RBX: 00007f67353f5fa0 RCX: 00007f673516e0d9 [ 178.877378][ T9842] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 178.877396][ T9842] RBP: 00007f6735205024 R08: 00000000fffffff9 R09: 0000000000000000 [ 178.877413][ T9842] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 178.877427][ T9842] R13: 00007f67353f6038 R14: 00007f67353f5fa0 R15: 00007fff824ed7b8 [ 178.877519][ T9842] [ 179.170053][ T9851] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2282'. [ 179.422688][ T9870] loop1: detected capacity change from 0 to 256 [ 179.467785][ T11] tipc: Node number set to 2886997039 [ 179.523575][ T9873] loop4: detected capacity change from 0 to 128 [ 179.543135][ T9873] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.569505][ T9873] ext4 filesystem being mounted at /418/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.591701][ T3299] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 179.614806][ T3299] FAT-fs (loop1): Filesystem has been set read-only [ 179.643000][ T3299] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 179.750036][ T7004] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.008756][ T9884] loop5: detected capacity change from 0 to 512 [ 180.041234][ T9884] EXT4-fs: inline encryption not supported [ 180.081296][ T9884] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.110471][ T9884] EXT4-fs (loop5): 1 truncate cleaned up [ 180.124800][ T12] bridge_slave_1: left allmulticast mode [ 180.134522][ T12] bridge_slave_1: left promiscuous mode [ 180.145242][ T9884] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.147491][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.183965][ T12] bridge_slave_0: left allmulticast mode [ 180.194784][ T12] bridge_slave_0: left promiscuous mode [ 180.200720][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.229839][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 180.268320][ T9897] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz.5.2296: invalid fast symlink length 39 [ 180.305270][ T9897] EXT4-fs (loop5): Remounting filesystem read-only [ 180.350240][ T8852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.359649][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.377434][ T12] bond_slave_0: left promiscuous mode [ 180.388578][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.415969][ T12] bond_slave_1: left promiscuous mode [ 180.428004][ T12] bond0 (unregistering): Released all slaves [ 180.441753][ T9913] loop5: detected capacity change from 0 to 1024 [ 180.453098][ T12] bond1 (unregistering): Released all slaves [ 180.463877][ T9913] EXT4-fs: Ignoring removed nobh option [ 180.482737][ T9913] EXT4-fs: Ignoring removed bh option [ 180.500509][ T9913] EXT4-fs: Ignoring removed nobh option [ 180.521422][ T9913] EXT4-fs (loop5): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 180.543169][ T9913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.185300][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 181.268896][ T8852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.287835][ T12] tipc: Disabling bearer [ 181.320099][ T12] tipc: Left network mode [ 181.358330][T10034] netlink: 'syz.5.2300': attribute type 1 has an invalid length. [ 181.405668][ T12] hsr_slave_0: left promiscuous mode [ 181.412034][ T12] hsr_slave_1: left promiscuous mode [ 181.420691][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.428636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.484967][ T12] team0 (unregistering): Port device team_slave_1 removed [ 181.503487][ T12] team0 (unregistering): Port device team_slave_0 removed [ 181.520231][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 181.520328][ T28] audit: type=1400 audit(1786262824.677:867): avc: denied { write } for pid=10029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.715946][ T28] audit: type=1400 audit(1786262824.807:868): avc: denied { write } for pid=10048 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.796096][T10034] bond1: entered promiscuous mode [ 181.801893][T10034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.943371][T10041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.964214][T10041] bond1: (slave bond2): making interface the new active one [ 181.972396][T10041] bond2: entered promiscuous mode [ 181.979722][T10041] bond1: (slave bond2): Enslaving as an active interface with an up link [ 182.046928][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 182.296414][T10078] option changes via remount are deprecated (pid=10077 comm=syz.3.2306) [ 182.349481][ T28] audit: type=1400 audit(1786262825.497:869): avc: denied { write } for pid=10068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.406111][ T28] audit: type=1400 audit(1786262825.557:870): avc: denied { write } for pid=10092 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.432349][ T12] IPVS: stop unused estimator thread 0... [ 182.475399][ T9881] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.496617][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.508468][ T9881] bridge_slave_0: entered allmulticast mode [ 182.518869][ T9881] bridge_slave_0: entered promiscuous mode [ 182.526037][ T9881] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.533169][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.540846][ T9881] bridge_slave_1: entered allmulticast mode [ 182.547395][ T9881] bridge_slave_1: entered promiscuous mode [ 182.562360][T10104] loop3: detected capacity change from 0 to 512 [ 182.566433][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 182.579834][T10104] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2310: iget: bad i_size value: 38620345925642 [ 182.593521][T10104] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.595225][T10104] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2310: couldn't read orphan inode 15 (err -117) [ 182.604459][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 182.604480][ C1] EXT4-fs (loop3): initial error at time 1786262825: ext4_orphan_get:1399: inode 15 [ 182.604505][ C1] EXT4-fs (loop3): last error at time 1786262825: ext4_orphan_get:1399: inode 15 [ 182.641868][T10104] loop3: lost filesystem error report for type 5 error -117 [ 182.642666][T10104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.666310][ T28] audit: type=1400 audit(1786262825.827:871): avc: denied { write } for pid=10103 comm="syz.3.2310" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.673804][ T9881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.706907][ T9881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.716283][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.723449][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.730868][ T9879] bridge_slave_0: entered allmulticast mode [ 182.737436][ T9879] bridge_slave_0: entered promiscuous mode [ 182.744481][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.752446][T10108] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2310: bg 0: block 5: invalid block bitmap [ 182.764997][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.772331][T10108] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 504 with error 28 [ 182.784970][ T9879] bridge_slave_1: entered allmulticast mode [ 182.792271][ T9879] bridge_slave_1: entered promiscuous mode [ 182.804953][T10108] EXT4-fs (loop3): This should not happen!! Data will be lost [ 182.804953][T10108] [ 182.827988][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.843896][T10108] EXT4-fs (loop3): Total free blocks count 0 [ 182.852518][T10108] EXT4-fs (loop3): Free/Dirty block details [ 182.858665][T10108] EXT4-fs (loop3): free_blocks=0 [ 182.863670][T10108] EXT4-fs (loop3): dirty_blocks=524 [ 182.869921][ T9881] team0: Port device team_slave_0 added [ 182.871517][T10108] EXT4-fs (loop3): Block reservation details [ 182.879179][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.882777][T10108] EXT4-fs (loop3): i_reserved_data_blocks=524 [ 182.900385][ T9881] team0: Port device team_slave_1 added [ 182.927366][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.944292][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.970392][ T9881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.983151][ T9879] team0: Port device team_slave_0 added [ 182.989522][ T3302] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 183.006048][ T9881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.014065][ T9881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.022668][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.049834][ T9881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.078935][ T9879] team0: Port device team_slave_1 added [ 183.122536][T10121] loop3: detected capacity change from 0 to 128 [ 183.150015][T10121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 183.150107][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.150124][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.158184][T10121] System zones: 1-3, 19-19, 35-36 [ 183.198064][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.199160][T10121] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 183.216728][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.228156][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.254399][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.267947][T10121] ext4 filesystem being mounted at /512/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.318402][ T9881] hsr_slave_0: entered promiscuous mode [ 183.337196][ T9881] hsr_slave_1: entered promiscuous mode [ 183.355769][ T9881] debugfs: 'hsr0' already exists in 'hsr' [ 183.361648][ T9881] Cannot create hsr debugfs directory [ 183.390069][T10121] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 743309315 (only 1 groups) [ 183.412848][ T28] audit: type=1400 audit(1786262826.567:872): avc: denied { write } for pid=10117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.458442][ T9879] hsr_slave_0: entered promiscuous mode [ 183.464905][ T9879] hsr_slave_1: entered promiscuous mode [ 183.471622][ T9879] debugfs: 'hsr0' already exists in 'hsr' [ 183.477516][ T9879] Cannot create hsr debugfs directory [ 183.492509][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.511850][ T28] audit: type=1400 audit(1786262826.667:873): avc: denied { write } for pid=10141 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.544263][ T12] bridge_slave_1: left allmulticast mode [ 183.557102][ T12] bridge_slave_1: left promiscuous mode [ 183.570426][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.578410][T10147] loop3: detected capacity change from 0 to 512 [ 183.585673][ T12] bridge_slave_0: left allmulticast mode [ 183.589722][T10147] EXT4-fs: Ignoring removed oldalloc option [ 183.603041][ T12] bridge_slave_0: left promiscuous mode [ 183.608993][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.611311][T10147] EXT4-fs: Ignoring removed oldalloc option [ 183.623618][T10147] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2318: corrupted in-inode xattr: invalid ea_ino [ 183.637032][T10147] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 183.637326][T10147] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2318: couldn't read orphan inode 15 (err -117) [ 183.646604][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 183.646629][ C1] EXT4-fs (loop3): initial error at time 1786262826: ext4_iget_extra_inode:5180: inode 15 [ 183.646664][ C1] EXT4-fs (loop3): last error at time 1786262826: ext4_iget_extra_inode:5180: inode 15 [ 183.686723][T10147] loop3: lost filesystem error report for type 5 error -117 [ 183.687454][T10147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.710919][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.711519][ T28] audit: type=1400 audit(1786262826.867:874): avc: denied { write } for pid=10146 comm="syz.3.2318" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.742746][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.751697][ T28] audit: type=1400 audit(1786262826.907:875): avc: denied { write } for pid=10146 comm="syz.3.2318" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.768918][ T12] bond0 (unregistering): Released all slaves [ 183.774967][ T28] audit: type=1400 audit(1786262826.907:876): avc: denied { write } for pid=10146 comm="syz.3.2318" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 183.783628][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.824380][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 183.878492][ T12] hsr_slave_0: left promiscuous mode [ 183.884285][ T12] hsr_slave_1: left promiscuous mode [ 183.890279][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.899247][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.946296][ T12] team0 (unregistering): Port device team_slave_1 removed [ 183.957363][ T12] team0 (unregistering): Port device team_slave_0 removed [ 184.045187][ T9881] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.057804][ T9881] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.065657][ T9881] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.074706][ T9881] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.093853][ T9881] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.102843][ T9881] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.111199][ T9881] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.126568][ T9881] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.218583][ T9879] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 184.232741][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.244359][ T9879] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 184.255931][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.276436][ T9879] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 184.294946][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.340089][ T9881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.381936][T10183] loop2: detected capacity change from 0 to 512 [ 184.409740][T10183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.422480][T10183] ext4 filesystem being mounted at /440/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.437168][T10183] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.2324: corrupted inode contents [ 184.449480][T10183] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #2: comm syz.2.2324: mark_inode_dirty error [ 184.461640][T10183] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.2324: corrupted inode contents [ 184.474032][T10183] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.2324: mark_inode_dirty error [ 184.488475][T10183] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.2324: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 184.488475][T10183] [ 184.510107][T10183] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.2324: corrupted inode contents [ 184.522517][T10183] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.2324: mark_inode_dirty error [ 184.533810][T10183] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 184.545309][T10183] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #2: comm syz.2.2324: corrupted inode contents [ 184.557862][T10183] EXT4-fs error (device loop2): add_dirent_to_buf:2151: inode #2: comm syz.2.2324: mark_inode_dirty error [ 184.745379][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.749000][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 184.761641][ T9879] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 184.787655][ T9879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.799894][ T9881] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.815387][T10018] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.822642][T10018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.856504][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.863652][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.872266][ T12] IPVS: stop unused estimator thread 0... [ 184.970482][ T9879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.980169][T10204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2327'. [ 184.993737][T10205] loop2: detected capacity change from 0 to 512 [ 184.999089][ T9879] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.031520][T10023] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.039016][T10023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.064305][T10211] loop5: detected capacity change from 0 to 512 [ 185.082304][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.089594][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.104839][T10211] EXT4-fs: Ignoring removed i_version option [ 185.118264][T10211] ext2: Unknown parameter 'obj_user' [ 185.238611][ T9881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.420051][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.429839][T10251] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2332'. [ 185.442421][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 186.075305][ T9881] veth0_vlan: entered promiscuous mode [ 186.093109][ T9881] veth1_vlan: entered promiscuous mode [ 186.125264][ T9881] veth0_macvtap: entered promiscuous mode [ 186.134093][ T9881] veth1_macvtap: entered promiscuous mode [ 186.145955][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.155795][ T9881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.206487][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 186.242853][T10289] loop2: detected capacity change from 0 to 512 [ 186.265467][T10289] FAT-fs (loop2): data area starts beyond volume (199892 > 45184) [ 186.279460][T10289] FAT-fs (loop2): Can't find a valid FAT filesystem [ 186.299067][T10018] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.331056][T10018] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.347438][T10300] loop2: detected capacity change from 0 to 128 [ 186.368351][ T9879] veth0_vlan: entered promiscuous mode [ 186.378939][ T9879] veth1_vlan: entered promiscuous mode [ 186.408158][ T362] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.417294][T10300] bio_check_eod: 4001 callbacks suppressed [ 186.417316][T10300] syz.2.2337: attempt to access beyond end of device [ 186.417316][T10300] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 186.438897][T10303] No such timeout policy "syz1" [ 186.439185][ T362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.453477][T10300] syz.2.2337: attempt to access beyond end of device [ 186.453477][T10300] loop2: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 186.471396][ T9879] veth0_macvtap: entered promiscuous mode [ 186.486676][ T9879] veth1_macvtap: entered promiscuous mode [ 186.515614][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.525036][T10300] buffer_io_error: 4000 callbacks suppressed [ 186.525057][T10300] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 186.543931][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.562215][T10300] syz.2.2337: attempt to access beyond end of device [ 186.562215][T10300] loop2: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 186.598070][T10300] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 186.611701][T10300] syz.2.2337: attempt to access beyond end of device [ 186.611701][T10300] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 186.666262][ T362] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.675796][T10300] syz.2.2337: attempt to access beyond end of device [ 186.675796][T10300] loop2: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 186.678304][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.691646][T10300] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 186.707438][T10300] syz.2.2337: attempt to access beyond end of device [ 186.707438][T10300] loop2: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 186.721549][T10300] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 186.757818][T10300] syz.2.2337: attempt to access beyond end of device [ 186.757818][T10300] loop2: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 186.761956][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.799671][T10300] syz.2.2337: attempt to access beyond end of device [ 186.799671][T10300] loop2: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 186.841452][ T362] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.844293][T10300] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 186.893850][T10300] syz.2.2337: attempt to access beyond end of device [ 186.893850][T10300] loop2: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 186.935800][T10300] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 186.963828][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 186.963847][ T28] audit: type=1400 audit(1786262830.117:888): avc: denied { write } for pid=10307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.017155][T10300] syz.2.2337: attempt to access beyond end of device [ 187.017155][T10300] loop2: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 187.072285][T10300] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 187.081197][T10300] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 187.104450][ T28] audit: type=1400 audit(1786262830.257:889): avc: denied { write } for pid=10327 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.135136][T10300] Buffer I/O error on dev loop2, logical block 119, lost async page write [ 187.143886][T10300] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 187.186293][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 187.218012][ T28] audit: type=1400 audit(1786262830.367:890): avc: denied { create } for pid=10330 comm="syz.6.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 187.288083][ T28] audit: type=1400 audit(1786262830.447:891): avc: denied { read } for pid=10333 comm="syz.6.2341" path="socket:[26892]" dev="sockfs" ino=26892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.376319][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2342'. [ 187.391783][T10338] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 187.414163][T10338] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2342'. [ 187.503610][T10344] loop2: detected capacity change from 0 to 2048 [ 187.535485][T10344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.552507][T10344] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.639309][ T28] audit: type=1400 audit(1786262830.797:892): avc: denied { write } for pid=10343 comm="syz.2.2344" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.702103][ T3295] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.714612][ T28] audit: type=1400 audit(1786262830.827:893): avc: denied { setattr } for pid=10343 comm="syz.2.2344" path="/448/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 187.785150][ T3375] kernel write not supported for file /146/attr/prev (pid: 3375 comm: kworker/1:3) [ 187.833346][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.843856][T10351] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2345'. [ 187.886691][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.169088][T10361] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 188.169088][T10361] program syz.3.2349 not setting count and/or reply_len properly [ 188.412097][ T3374] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 188.420013][ T3374] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.522250][T10371] loop5: detected capacity change from 0 to 512 [ 188.532838][T10371] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 188.550512][T10371] EXT4-fs (loop5): 1 truncate cleaned up [ 188.560091][T10371] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.2352: corrupted in-inode xattr: e_value out of bounds [ 188.574587][T10371] EXT4-fs (loop5): Remounting filesystem read-only [ 189.228079][T10399] loop3: detected capacity change from 0 to 512 [ 189.236688][T10399] EXT4-fs: Ignoring removed orlov option [ 189.250235][T10399] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.258298][T10399] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2361: corrupted in-inode xattr: e_value size too large [ 189.273538][T10399] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.273774][T10399] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2361: couldn't read orphan inode 15 (err -117) [ 189.283563][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 189.283581][ C1] EXT4-fs (loop3): initial error at time 1786262832: ext4_iget_extra_inode:5180: inode 15 [ 189.283606][ C1] EXT4-fs (loop3): last error at time 1786262832: ext4_iget_extra_inode:5180: inode 15 [ 189.322838][T10399] loop3: lost filesystem error report for type 5 error -117 [ 189.327263][ T28] audit: type=1400 audit(1786262832.477:894): avc: denied { write } for pid=10398 comm="syz.3.2361" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 189.356943][ T28] audit: type=1400 audit(1786262832.497:895): avc: denied { mounton } for pid=10398 comm="syz.3.2361" path="/527/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 189.427892][ T8767] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.429294][ T4179] Bluetooth: hci0: command 0x1003 tx timeout [ 189.447812][T10399] loop3: detected capacity change from 512 to 0 [ 189.459115][ C0] I/O error, dev loop3, sector 26 op 0x0:(READ) flags 0x803000 phys_seg 1 prio class 2 [ 189.469117][T10402] EXT4-fs error (device loop3): __ext4_find_entry:1615: inode #2: comm syz.3.2361: reading directory lblock 0 [ 189.501213][T10402] EXT4-fs (loop3): I/O error while writing superblock [ 189.543459][ T3302] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 189.559152][ T3302] EXT4-fs error (device loop3): ext4_get_inode_loc:5024: inode #2: block 5: comm syz-executor: unable to read itable block [ 189.573324][ T3302] EXT4-fs (loop3): I/O error while writing superblock [ 189.580377][ T3302] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: IO failure [ 189.589925][ T3302] EXT4-fs (loop3): I/O error while writing superblock [ 189.596800][ T3302] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 189.609395][ T3302] EXT4-fs (loop3): I/O error while writing superblock [ 190.837095][T10422] loop2: detected capacity change from 0 to 256 [ 190.854208][T10422] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.009916][T10023] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:5009: inode #2: block 5: comm kworker/u8:11: unable to read itable block [ 191.026526][T10023] EXT4-fs (loop3): I/O error while writing superblock [ 191.028254][T10425] 9p: Bad value for 'rfdno' [ 191.038359][ T4899] EXT4-fs (loop3): I/O error while writing superblock [ 191.061865][T10430] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 8200) [ 191.070439][T10430] FAT-fs (loop2): Filesystem has been set read-only [ 191.119613][ T28] audit: type=1400 audit(1786262834.277:896): avc: denied { setattr } for pid=10433 comm="syz.7.2374" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 191.334521][T10442] loop7: detected capacity change from 0 to 8192 [ 191.582903][T10023] bridge_slave_1: left allmulticast mode [ 191.589003][T10023] bridge_slave_1: left promiscuous mode [ 191.636800][T10023] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.705964][T10023] bridge_slave_0: left allmulticast mode [ 191.732027][ T28] audit: type=1326 audit(1786262834.877:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10423 comm="syz.5.2370" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f673516e0d9 code=0x7fc00000 [ 191.875489][T10023] bridge_slave_0: left promiscuous mode [ 191.897193][T10023] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.957307][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2385'. [ 192.218539][T10023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.254653][T10023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.296709][T10023] bond0 (unregistering): Released all slaves [ 192.334291][T10475] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2388'. [ 192.348483][T10469] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 192.432129][T10023] hsr_slave_0: left promiscuous mode [ 192.484677][T10023] hsr_slave_1: left promiscuous mode [ 192.518618][T10023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.526610][T10477] PM: suspend entry (deep) [ 192.534844][T10023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.639967][T10023] team0 (unregistering): Port device team_slave_1 removed [ 192.652769][T10023] team0 (unregistering): Port device team_slave_0 removed [ 192.760051][ T36] Filesystems sync: 0.226 seconds [ 192.829787][T10477] Freezing user space processes [ 192.847210][T10477] Freezing user space processes completed (elapsed 0.003 seconds) [ 192.855385][T10477] OOM killer disabled. [ 192.859548][T10477] Freezing remaining freezable tasks [ 192.866423][T10477] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 192.874900][T10477] printk: Suspending console(s) (use no_console_suspend to debug) [ 192.919808][T10477] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 192.919966][T10477] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 192.920020][T10477] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 192.920064][T10477] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 192.920213][T10477] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 192.920256][T10477] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 192.920381][T10477] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 192.920419][T10477] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 192.920581][T10477] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 192.920612][T10477] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 192.920679][T10477] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 192.920772][T10477] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 192.920846][T10477] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 192.928330][T10477] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 192.928514][T10477] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 192.928573][T10477] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 192.988801][T10518] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 193.673940][T10477] ACPI: PM: Preparing to enter system sleep state S3 [ 193.674095][T10477] ACPI: PM: Saving platform NVS memory [ 193.674154][T10477] Disabling non-boot CPUs ... [ 193.682904][T10477] smpboot: CPU 1 is now offline [ 193.688285][T10477] ACPI: PM: Low-level resume complete [ 193.688359][T10477] ACPI: PM: Restoring platform NVS memory [ 193.708042][T10477] Enabling non-boot CPUs ... [ 193.708274][T10477] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 193.712926][T10477] CPU1 is up [ 193.713178][T10477] ACPI: PM: Waking up from system sleep state S3 [ 193.714594][T10517] ================================================================== [ 193.714629][T10517] BUG: KCSAN: data-race in acpi_ut_trace / acpi_ut_track_stack_ptr [ 193.714674][T10517] [ 193.714680][T10517] read to 0xffffffff89409638 of 4 bytes by task 10018 on cpu 0: [ 193.714695][T10517] acpi_ut_track_stack_ptr+0x5f/0xd0 [ 193.714724][T10517] acpi_get_handle+0x40/0x180 [ 193.714748][T10517] acpi_has_method+0x46/0x80 [ 193.714769][T10517] acpi_pci_set_power_state+0x5d/0x190 [ 193.714792][T10517] pci_power_up+0x40/0x3b0 [ 193.714818][T10517] pci_pm_power_up_and_verify_state+0x29/0x130 [ 193.714843][T10517] pci_pm_resume_noirq+0xcb/0x320 [ 193.714864][T10517] dpm_run_callback+0x53/0x2f0 [ 193.714888][T10517] device_resume_noirq+0x851/0x880 [ 193.714917][T10517] async_resume_noirq+0x2c/0x40 [ 193.714946][T10517] async_run_entry_fn+0x52/0x180 [ 193.714976][T10517] process_scheduled_works+0x4d4/0x9a0 [ 193.715008][T10517] worker_thread+0x569/0x750 [ 193.715038][T10517] kthread+0x221/0x270 [ 193.715055][T10517] ret_from_fork+0x146/0x330 [ 193.715081][T10517] ret_from_fork_asm+0x1a/0x30 [ 193.715105][T10517] [ 193.715111][T10517] read-write to 0xffffffff89409638 of 4 bytes by task 10517 on cpu 1: [ 193.715126][T10517] acpi_ut_trace+0x44/0x180 [ 193.715153][T10517] acpi_ns_search_and_enter+0x69/0x860 [ 193.715176][T10517] acpi_ns_lookup+0xbd8/0x1070 [ 193.715210][T10517] acpi_ns_get_node_unlocked+0x143/0x2d0 [ 193.715236][T10517] acpi_ns_get_node+0x76/0xc0 [ 193.715260][T10517] acpi_get_handle+0xfd/0x180 [ 193.715285][T10517] acpi_has_method+0x46/0x80 [ 193.715306][T10517] acpi_pci_set_power_state+0x5d/0x190 [ 193.715331][T10517] pci_power_up+0x40/0x3b0 [ 193.715359][T10517] pci_pm_power_up_and_verify_state+0x29/0x130 [ 193.715382][T10517] pci_pm_resume_noirq+0xcb/0x320 [ 193.715404][T10517] dpm_run_callback+0x53/0x2f0 [ 193.715428][T10517] device_resume_noirq+0x851/0x880 [ 193.715452][T10517] async_resume_noirq+0x2c/0x40 [ 193.715475][T10517] async_run_entry_fn+0x52/0x180 [ 193.715503][T10517] process_scheduled_works+0x4d4/0x9a0 [ 193.715528][T10517] worker_thread+0x569/0x750 [ 193.715554][T10517] kthread+0x221/0x270 [ 193.715569][T10517] ret_from_fork+0x146/0x330 [ 193.715595][T10517] ret_from_fork_asm+0x1a/0x30 [ 193.715616][T10517] [ 193.715621][T10517] value changed: 0x00000003 -> 0x00000004 [ 193.715631][T10517] [ 193.715635][T10517] Reported by Kernel Concurrency Sanitizer on: [ 193.715646][T10517] CPU: 1 UID: 0 PID: 10517 Comm: kworker/u8:20 Not tainted syzkaller #0 PREEMPT(lazy) [ 193.715668][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.715682][T10517] Workqueue: async async_run_entry_fn [ 193.715712][T10517] ================================================================== [ 193.773129][T10517] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 194.035305][T10477] OOM killer enabled. [ 194.035994][T10477] Restarting tasks: Starting [ 194.061023][ T28] audit: type=1400 audit(1786262837.215:898): avc: denied { write } for pid=10491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.106015][T10477] Restarting tasks: Done [ 194.107191][T10477] random: crng reseeded on system resumption [ 194.127424][T10477] PM: suspend exit [ 194.145034][ T28] audit: type=1400 audit(1786262837.305:899): avc: denied { write } for pid=10649 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.174918][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 194.197184][T10438] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.198491][T10438] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.200116][T10438] bridge_slave_0: entered allmulticast mode [ 194.202886][T10438] bridge_slave_0: entered promiscuous mode [ 194.214382][T10438] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.215751][T10438] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.217446][T10438] bridge_slave_1: entered allmulticast mode [ 194.219834][T10438] bridge_slave_1: entered promiscuous mode [ 194.238815][T10438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.242655][T10438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.256722][T10438] team0: Port device team_slave_0 added [ 194.259133][T10438] team0: Port device team_slave_1 added [ 194.275655][T10438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.277048][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.283850][T10438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.286794][T10438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.288359][T10438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.293068][T10438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.315372][T10438] hsr_slave_0: entered promiscuous mode [ 194.317151][T10438] hsr_slave_1: entered promiscuous mode [ 194.318744][T10438] debugfs: 'hsr0' already exists in 'hsr' [ 194.320453][T10438] Cannot create hsr debugfs directory [ 194.407529][T10438] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 194.411161][T10438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.417498][T10438] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 194.421215][T10438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.423509][T10438] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 194.427322][T10438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.430289][T10438] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 194.435516][T10438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.438194][ T28] audit: type=1400 audit(1786262837.595:900): avc: denied { write } for pid=10664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.468325][ T28] audit: type=1400 audit(1786262837.625:901): avc: denied { write } for pid=10681 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.486512][T10438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.495553][T10438] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.498270][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 194.502561][T10614] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.503929][T10614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.511840][T10614] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.513287][T10614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.558068][ T28] audit: type=1400 audit(1786262837.715:902): avc: denied { sys_module } for pid=10438 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 194.612566][ T28] audit: type=1400 audit(1786262837.775:903): avc: denied { write } for pid=10684 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.640022][ T28] audit: type=1400 audit(1786262837.795:904): avc: denied { write } for pid=10702 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.664551][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 194.669528][T10438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.771400][ T28] audit: type=1400 audit(1786262837.935:905): avc: denied { write } for pid=10711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.798657][ T28] audit: type=1400 audit(1786262837.955:906): avc: denied { write } for pid=10729 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.819076][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 194.833751][T10438] veth0_vlan: entered promiscuous mode [ 194.838120][T10438] veth1_vlan: entered promiscuous mode [ 194.852838][T10438] veth0_macvtap: entered promiscuous mode [ 194.856020][T10438] veth1_macvtap: entered promiscuous mode [ 194.864126][T10438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.872219][T10438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.890035][T10614] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.892827][T10614] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.919789][T10614] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.922724][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.254501][ T28] audit: type=1400 audit(1786262839.415:907): avc: denied { write } for pid=10741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.107602][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 199.107685][ T28] audit: type=1400 audit(1786262842.265:913): avc: denied { write } for pid=10783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.131356][ T28] audit: type=1400 audit(1786262842.295:914): avc: denied { write } for pid=10794 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.249516][ T28] audit: type=1400 audit(1786262842.405:915): avc: denied { write } for pid=10797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.272812][ T28] audit: type=1400 audit(1786262842.435:916): avc: denied { write } for pid=10808 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.429020][ T28] audit: type=1400 audit(1786262842.585:917): avc: denied { write } for pid=10811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.451760][ T28] audit: type=1400 audit(1786262842.615:918): avc: denied { write } for pid=10822 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.546759][ T28] audit: type=1400 audit(1786262842.705:919): avc: denied { write } for pid=10825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.571254][ T28] audit: type=1400 audit(1786262842.735:920): avc: denied { write } for pid=10836 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.665567][ T28] audit: type=1400 audit(1786262842.825:921): avc: denied { write } for pid=10839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.688258][ T28] audit: type=1400 audit(1786262842.845:922): avc: denied { write } for pid=10850 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1