last executing test programs: 12m16.6818686s ago: executing program 32 (id=1074): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1, 0x4}, 0x8) 12m10.879207541s ago: executing program 33 (id=1148): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x55d81000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fallocate(0xffffffffffffffff, 0x52, 0x3, 0xe2a3) 11m19.563672757s ago: executing program 34 (id=1978): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0xff}}, {@nodioread_nolock}, {@delalloc}, {@barrier}, {@auto_da_alloc}, {@barrier}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 11m3.546196921s ago: executing program 35 (id=2019): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "000000100100"}}}]}, 0x48}}, 0x0) 9m29.942327311s ago: executing program 36 (id=4899): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a090000400100"/33], 0x4c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) 9m18.663645359s ago: executing program 37 (id=5363): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x100, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101342, 0x105) write$cgroup_int(r0, &(0x7f0000000000)=0x3ff, 0x12) 9m8.700531217s ago: executing program 38 (id=5238): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x44}, 0x1, 0x0, 0x0, 0x2004d821}, 0x24000000) 8m54.692526348s ago: executing program 39 (id=5882): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000180)="4bfec903cf4806027d05780fe007cdd836066a89e1e8a40372225bb95e190da7e364883c27ba167a8423d6b81ffb225dc7c85b26de49624291a76f07e091c7f9501f37711eeb66199d33c908701a18dade747d428bcfe86a611c456ba95394813fab17aa349ce31046efd13f1b12e3f4af38f384df8d08aa", 0x78}], 0x1}, 0x20000000) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) 8m29.475487037s ago: executing program 40 (id=6538): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7m30.43758064s ago: executing program 41 (id=7828): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) msgrcv(0x0, 0x0, 0x0, 0xced6b2bc496a26e6, 0x1800) 7m2.602156231s ago: executing program 42 (id=8704): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 6m38.219889354s ago: executing program 43 (id=8958): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 6m26.473233275s ago: executing program 44 (id=9257): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 6m25.721547851s ago: executing program 45 (id=9265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000) 6m8.873874132s ago: executing program 46 (id=9577): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m22.120609156s ago: executing program 47 (id=10328): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000280)={0x18, 0x2, {0x3, @local}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x0, @local}}, 0x1e) 5m8.045380734s ago: executing program 48 (id=10730): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) socket$unix(0x1, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x24, 0x0, 0x7ffc, 0x41, 0x0, 0x0, 0x5, 0x0, 0x1, 0x5}) close(0x3) 5m0.039453436s ago: executing program 49 (id=10884): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000180)=@base={0x8, 0x4, 0x4, 0xbf26, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0x4}, 0x50) 4m27.154439653s ago: executing program 50 (id=11603): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x8, 0x4, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_config_ext={0xb, 0x6}, 0x14411, 0xc8, 0x200, 0x3, 0xfffffffffffffff7, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 3m26.179429574s ago: executing program 51 (id=13233): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x24, &(0x7f00000004c0)={0x0, 0x3, 0x4, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x20, 0x0}) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$USBDEVFS_REAPURB(r0, 0x4004550d, &(0x7f0000001080)) 3m26.006608693s ago: executing program 8 (id=13241): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 3m25.804213622s ago: executing program 8 (id=13244): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x8, 0x140, 0x100, 0x10024, 0xffffffffffffffff, 0x4cf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xa}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m25.347439669s ago: executing program 8 (id=13251): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x4, 0x6}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) 3m25.200395228s ago: executing program 8 (id=13255): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 3m25.111701808s ago: executing program 8 (id=13259): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3m25.003738887s ago: executing program 8 (id=13263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a1000000002ff000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) 3m24.991901397s ago: executing program 52 (id=13263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a1000000002ff000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) 2m48.853675434s ago: executing program 0 (id=14223): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m48.786867274s ago: executing program 0 (id=14235): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2m48.649510633s ago: executing program 0 (id=14229): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) 2m48.593906612s ago: executing program 0 (id=14233): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}, 0x40, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1) 2m48.531862652s ago: executing program 0 (id=14237): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) syz_usbip_server_init(0x1) 2m47.960985409s ago: executing program 0 (id=14253): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 2m32.170024706s ago: executing program 53 (id=14253): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 2m1.107178173s ago: executing program 5 (id=15322): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x24, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100007800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000880) 2m0.808305271s ago: executing program 5 (id=15336): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) syz_usbip_server_init(0x1) 2m0.286468678s ago: executing program 5 (id=15349): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xff01, 0x8ffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) 2m0.078345597s ago: executing program 5 (id=15361): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2m0.038070687s ago: executing program 54 (id=15361): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1m21.192744758s ago: executing program 1 (id=15931): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x4cc0, 0xb93, 0x0, 0x3, 0x8, 0x20025, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1m21.092307598s ago: executing program 1 (id=15935): mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 1m20.171556032s ago: executing program 1 (id=15937): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x28) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m20.046624131s ago: executing program 1 (id=15941): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@nombcache}, {@delalloc}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$eJzs3M1vVFUbAPDn3s4AL/AyFfEDBK2isfGjpQWVhS40mrjQxEQXuKxtIchADa2JEKLVGFwaEvfGpYl/gStXRl2ZuNW9ISFKTEA3jrkz99LOMFOmMO1A5/dLLpwz98w958k953LmnBkCGFgj2R9JxPaI+DUiKo1sc4GRxl9XL5+b/vvyuekkarU3/0jq5a5cPjddFC3ety3PjKYR6adJXkmz+TNnT0xVq7On8/z4wsn3xufPnH36+MmpY7PHZk9NHj586ODEc89OPtOTOLM2Xdnz4dze3a++feH16SMX3vnxm6y99+5rnF8eRze2d1FmJAv8z1pd67nHVlPZHeDf2lKcSanfraFbQxGR3a5yffxXYiiWbl4lXvmkr40D1lT2zN7c+fRiDdjAkuh3C4D+KP6hzz7/Fsc6TT1uC5debHwAyuK+mh+NM6VI8zLlNax/JCKOLP7zZXZEyzpErc26AQDArfoum/88df38r7430ijywra8bCUihiPirojYGRF3R8SuiLgnL3tfRNy/yvpbt4aun3+mF282tm5k87/n872t5vlfMfuL4aE89/96/OXk6PHq7IGI2BERo1HenOUn2l28uMTLv3zeqf7l87/syOov5oL5RS6WWhboZqYWpno1Kb30ccSeUrv4k2s7AVlf2B0Re1Z36R1F4vgTX+/tVOjG8a+gB/tMta8iHm/c/8Voib+QrLw/Ob4lqrMHxotecb2ffj7/Rqf6byn+Hsju/9bm/t9SovJXsny/dn71dZz/7bOOnylLN9n/NyVv1fdgN+WvfTC1sHB6ImJT8lo93/T65NJ7i3xRPot/dP9S/BFL439n/p4s/gciIuvE+yLiwYh4KL93D0fEIxGxf4X4f3jp0Xc7nbsd7v9M2+fftf4/3Hz/V58YOvH9t53q7+75d6ieGs1fqT//bqBzc7bkJW62NwMAAMCdJ61/lz1Jx66l03RsrPF9+V2xNa3OzS88eXTu/VMzje+8D0c5LVa6KsvWQyeSxfyKjfxkvlZcnD+Yrxt/MfS/en5seq460+fYYdBt6zD+M78P9bt1wJq70T6a5wBsXK3jP+1TO4D15/faMLiMfxhc3Y7/Q2vcDmD9tRv/H7XkrQHCxmT+D4PL+IfBZfzD4DL+YSDdyu/61ypRWuHX++uWKK/4nwhInI30tmiGRJtEqQeju88PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75LwAA//+MOu7f") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m19.997755811s ago: executing program 1 (id=15945): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x400008, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1m19.563759798s ago: executing program 1 (id=15957): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='f'], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m19.563588008s ago: executing program 55 (id=15957): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='f'], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 41.618012515s ago: executing program 4 (id=16686): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") timer_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 41.037214891s ago: executing program 4 (id=16698): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r1, &(0x7f0000000300)="8c24", 0x2, 0x5, &(0x7f0000000100)={0x2, 0x4e02, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) 40.990053941s ago: executing program 4 (id=16699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x3, 0x40, 0x4}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 40.953335511s ago: executing program 4 (id=16700): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000080)={[{@usrjquota}, {@jqfmt_vfsv1}, {@noinit_itable}, {@nodiscard}, {@noquota}]}, 0x5, 0x476, &(0x7f00000000c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 40.551891888s ago: executing program 4 (id=16705): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x5c, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 40.079123266s ago: executing program 4 (id=16710): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000001380)='./file0\x00', 0x4) acct(&(0x7f0000000100)='./file0\x00') 40.052171246s ago: executing program 56 (id=16710): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000001380)='./file0\x00', 0x4) acct(&(0x7f0000000100)='./file0\x00') 3.059199428s ago: executing program 2 (id=17552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x1) 2.830168677s ago: executing program 2 (id=17563): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x6ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 2.033475452s ago: executing program 3 (id=17590): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x4, @perf_bp={0x0, 0x1}, 0x10c8ec, 0x0, 0x1, 0x3, 0x6, 0x5ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @empty}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.980694261s ago: executing program 7 (id=17581): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x2, 0x2, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20000001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.850445591s ago: executing program 2 (id=17583): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) 1.6964989s ago: executing program 9 (id=17585): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17}, 0x6}], 0x636, 0x40010003, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.607489919s ago: executing program 7 (id=17587): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.607249979s ago: executing program 6 (id=17588): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@nodiscard}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@data_err_ignore}, {@debug}]}, 0xff, 0x45c, &(0x7f0000000d80)="$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") chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x0, 0x8001, 0x3, 0xfffffff9, 0x200800}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001000)=0x2, 0x4) 1.562658719s ago: executing program 9 (id=17589): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0, 0x4000}], 0x2) 1.521083579s ago: executing program 6 (id=17591): syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@grpid}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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") r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 1.437384478s ago: executing program 7 (id=17592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e712870000000000000000000000000000000001"], 0xffdd) 1.238574057s ago: executing program 2 (id=17593): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x8) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 1.133760727s ago: executing program 9 (id=17594): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x6ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1.133598417s ago: executing program 2 (id=17595): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYRESHEX=0x0, @ANYBLOB='Amap=acorn,iocharset=macgaelic,session=0x0000000000000058,mode=0xffffffffffffffff,map=off,check=strict,uid>', @ANYRESDEC=0x0, @ANYBLOB=',cont%|t=user_u,\b'], 0xfa, 0x6c8, &(0x7f0000000900)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) 1.118248036s ago: executing program 3 (id=17596): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.086337296s ago: executing program 7 (id=17597): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x5e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x80}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.u'}, 0xfe78) 1.017368876s ago: executing program 6 (id=17598): connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7aba, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.016856586s ago: executing program 3 (id=17599): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x20, 0x4, [0x0, 0x4, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 963.707366ms ago: executing program 3 (id=17600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d90491c3248040000c32700b7afd3e04fb862b3c6e612eed45a725fd2acfd39963879fe80", 0x41}, {&(0x7f0000000080)="b0", 0x1}], 0x2) 937.372856ms ago: executing program 6 (id=17601): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x1, 0x3) 848.531595ms ago: executing program 6 (id=17602): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 846.904035ms ago: executing program 3 (id=17603): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e23, 0x800e5, @ipv4={'\x00', '\xff\xff', @local}, 0xffefffff}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffefffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 806.748115ms ago: executing program 7 (id=17604): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x8) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 806.611525ms ago: executing program 3 (id=17605): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 260.988122ms ago: executing program 2 (id=17606): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="cfed", 0x2}, {0x0, 0x4000}], 0x2) 260.809362ms ago: executing program 7 (id=17607): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x48}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x41) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc2}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0xd0e0, 0xffffffffffffffff, 0x0, 0x10613d}, {0xffffffff, 0xfffffffc, 0x9, 0xa}]}) 168.167901ms ago: executing program 9 (id=17608): r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 107.65181ms ago: executing program 9 (id=17609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000000000000001042088be"], 0xfdef) 65.93556ms ago: executing program 9 (id=17610): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2d, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x4800) 0s ago: executing program 6 (id=17611): socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{}, {0x6, 0x3, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x1000, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered disabled state [ 718.797738][T14067] netlink: 'syz.3.15772': attribute type 1 has an invalid length. [ 718.806117][T14067] netlink: 'syz.3.15772': attribute type 2 has an invalid length. [ 718.849144][T14074] loop4: detected capacity change from 0 to 256 [ 718.911818][T14054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.923706][T14054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.993693][T31431] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.002605][T31431] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.023811][T31431] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.044604][T31431] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.714799][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 719.714836][ T28] audit: type=1400 audit(1784499363.100:17033): avc: denied { ioctl } for pid=14165 comm="syz.4.15774" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 719.953597][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15779'. [ 719.965391][T14176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.986773][T14176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.452723][T14189] loop4: detected capacity change from 0 to 128 [ 720.465189][ T28] audit: type=1326 audit(1784499363.840:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14190 comm="syz.3.15784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71a6fbde99 code=0x0 [ 720.515072][T14189] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 720.533787][T14189] ext4 filesystem being mounted at /290/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 720.562255][T10119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 720.959163][T14227] batadv_slave_1: entered promiscuous mode [ 720.968973][T14226] batadv_slave_1: left promiscuous mode [ 721.107332][T14241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15803'. [ 721.118342][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15803'. [ 721.235749][ T28] audit: type=1400 audit(1784499364.620:17035): avc: denied { relabelfrom } for pid=14244 comm="syz.4.15805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 721.257453][ T28] audit: type=1400 audit(1784499364.620:17036): avc: denied { relabelto } for pid=14244 comm="syz.4.15805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 721.313695][T14250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.321924][T14250] bridge0: port 3(bond1) entered blocking state [ 721.328359][T14250] bridge0: port 3(bond1) entered disabled state [ 721.334917][T14250] bond1: entered allmulticast mode [ 721.341863][T14250] bond1: entered promiscuous mode [ 721.648065][ T28] audit: type=1400 audit(1784499365.030:17037): avc: denied { setattr } for pid=14265 comm="syz.4.15813" name="RAW" dev="sockfs" ino=139917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 721.705854][ T28] audit: type=1400 audit(1784499365.050:17038): avc: denied { mmap_zero } for pid=14267 comm="syz.9.15815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 721.749604][ T28] audit: type=1400 audit(1784499365.090:17039): avc: denied { mounton } for pid=14253 comm="syz.3.15808" path="/proc/1230/task" dev="proc" ino=139889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 723.010740][ T28] audit: type=1400 audit(1784499366.390:17040): avc: denied { ioctl } for pid=14305 comm="syz.9.15830" path="socket:[139979]" dev="sockfs" ino=139979 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 723.134732][T14314] netlink: 148 bytes leftover after parsing attributes in process `syz.1.15833'. [ 723.167501][T14314] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 723.697455][ T30] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 723.706778][T14341] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 724.072625][T14349] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15850'. [ 724.289333][ T28] audit: type=1400 audit(1784499367.670:17041): avc: denied { attach_queue } for pid=14352 comm="syz.4.15852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 724.718633][T14362] 9pnet: p9_errstr2errno: server reported unknown error p [ 724.772001][T14367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15858'. [ 724.919712][ T28] audit: type=1400 audit(1784499368.300:17042): avc: denied { write } for pid=14380 comm="syz.3.15863" path="socket:[140110]" dev="sockfs" ino=140110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 725.763013][ T28] audit: type=1400 audit(1784499369.140:17043): avc: denied { read } for pid=14427 comm="syz.9.15885" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.786654][ T28] audit: type=1400 audit(1784499369.140:17044): avc: denied { read open } for pid=14427 comm="syz.9.15885" path="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.894359][T14434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 725.902276][T14434] bridge0: port 3(bond1) entered blocking state [ 725.910171][T14434] bridge0: port 3(bond1) entered disabled state [ 725.916987][T14434] bond1: entered allmulticast mode [ 725.923430][T14434] bond1: entered promiscuous mode [ 726.036199][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15891'. [ 726.296607][T14455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15896'. [ 726.407360][ T30] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.416731][ T30] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.430211][ T30] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.445997][ T30] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.542146][T14471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15900'. [ 726.664433][ T28] audit: type=1400 audit(1784499370.050:17045): avc: denied { listen } for pid=14472 comm="syz.3.15903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 726.684835][ T28] audit: type=1400 audit(1784499370.050:17046): avc: denied { accept } for pid=14472 comm="syz.3.15903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.795103][T14487] loop4: detected capacity change from 0 to 256 [ 727.864023][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 728.189489][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15919'. [ 728.418809][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15924'. [ 728.434264][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15924'. [ 728.457746][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15924'. [ 728.463350][ T30] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.475488][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15924'. [ 728.516966][ T28] audit: type=1400 audit(1784499371.890:17047): avc: denied { write } for pid=14523 comm="syz.1.15925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 728.539715][ T30] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.549217][ T28] audit: type=1400 audit(1784499371.900:17048): avc: denied { connect } for pid=14526 comm="syz.3.15926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 728.578327][ T28] audit: type=1400 audit(1784499371.960:17049): avc: denied { ioctl } for pid=14523 comm="syz.1.15925" path="socket:[140396]" dev="sockfs" ino=140396 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 728.629373][ T30] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 728.659870][ T30] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 730.075484][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15949'. [ 730.110093][T14583] bond2: entered promiscuous mode [ 730.128008][T14583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.154605][T14592] loop4: detected capacity change from 0 to 512 [ 730.185131][T14590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 730.198619][T14592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.216761][T14590] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 730.227399][T14592] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 730.239061][T14590] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 730.256508][ T28] audit: type=1400 audit(1784499373.630:17050): avc: denied { write } for pid=14591 comm="syz.4.15951" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 730.290224][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.300240][ T8711] syz_tun (unregistering): left allmulticast mode [ 730.307515][ T28] audit: type=1400 audit(1784499373.630:17051): avc: denied { ioctl } for pid=14591 comm="syz.4.15951" path="/317/file1/file1" dev="loop4" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 730.523297][T14614] loop4: detected capacity change from 0 to 512 [ 730.540003][T14614] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 730.563710][T14614] EXT4-fs (loop4): 1 truncate cleaned up [ 730.575971][T14614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.639705][T14624] netlink: 'syz.2.15963': attribute type 4 has an invalid length. [ 730.666734][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15965'. [ 730.687183][T14630] netlink: 'syz.3.15965': attribute type 10 has an invalid length. [ 730.698433][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.736963][T14630] geneve2: entered promiscuous mode [ 730.755780][T14630] geneve2: entered allmulticast mode [ 730.786003][ T28] audit: type=1400 audit(1784499374.170:17052): avc: denied { append } for pid=14637 comm="syz.4.15969" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 730.816484][T14638] loop9: detected capacity change from 0 to 8 [ 730.893450][ T28] audit: type=1400 audit(1784499374.270:17053): avc: denied { append } for pid=14643 comm="syz.4.15971" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 730.949337][ T28] audit: type=1400 audit(1784499374.280:17054): avc: denied { append } for pid=14643 comm="syz.4.15971" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 731.029700][T14615] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.038293][T14615] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.045603][T14615] bridge_slave_0: entered allmulticast mode [ 731.052391][T14615] bridge_slave_0: entered promiscuous mode [ 731.059771][T14615] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.068385][T14615] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.075827][T14615] bridge_slave_1: entered allmulticast mode [ 731.082621][T14615] bridge_slave_1: entered promiscuous mode [ 731.115069][T14615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.127203][T14615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.152143][T14615] team0: Port device team_slave_0 added [ 731.183749][T14615] team0: Port device team_slave_1 added [ 731.201727][T14615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.211510][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.247543][T14615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.261087][T14615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.272077][T14615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.299643][T14615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.335058][T14615] hsr_slave_0: entered promiscuous mode [ 731.341196][T14615] hsr_slave_1: entered promiscuous mode [ 731.350157][T14615] debugfs: 'hsr0' already exists in 'hsr' [ 731.357463][T14615] Cannot create hsr debugfs directory [ 731.401457][T14663] netlink: 'syz.4.15977': attribute type 10 has an invalid length. [ 731.410476][T14663] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.419340][T14663] bond0: (slave team0): Enslaving as an active interface with an up link [ 731.706584][ T28] audit: type=1400 audit(1784499375.080:17055): avc: denied { write } for pid=14670 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.789460][ T28] audit: type=1400 audit(1784499375.140:17056): avc: denied { write } for pid=14691 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.860939][ T28] audit: type=1400 audit(1784499375.200:17057): avc: denied { getopt } for pid=14692 comm="syz.3.15986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 731.955654][T14615] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 731.975530][T14615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.988132][T14615] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 732.008824][T14615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.037397][ T28] audit: type=1400 audit(1784499375.420:17058): avc: denied { write } for pid=14701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.039010][T14615] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 732.091545][ T28] audit: type=1400 audit(1784499375.470:17059): avc: denied { write } for pid=14718 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.134548][T14615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.154043][T14615] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 732.182456][T14615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 732.239319][T14615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.251757][T14615] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.261723][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.268982][T13725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.282322][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.289466][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.573601][T14615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.839098][T14615] veth0_vlan: entered promiscuous mode [ 732.857640][T14615] veth1_vlan: entered promiscuous mode [ 732.880322][T14615] veth0_macvtap: entered promiscuous mode [ 732.888812][T14615] veth1_macvtap: entered promiscuous mode [ 732.929208][T14615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.951900][T14615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.985464][T31429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.001340][T31429] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.023980][T31429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.032984][T31429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.098553][T14815] __nla_validate_parse: 1 callbacks suppressed [ 733.098574][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15997'. [ 733.120753][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15997'. [ 733.136853][T14815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15997'. [ 733.169068][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15997'. [ 733.518941][T14744] loop4: detected capacity change from 0 to 2048 [ 733.824439][T14744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 733.848075][T14744] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.039273][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.269103][T14912] netlink: 'syz.4.16019': attribute type 10 has an invalid length. [ 734.283264][T14912] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 734.497758][T14947] loop7: detected capacity change from 0 to 16384 [ 734.500492][T14950] loop6: detected capacity change from 0 to 128 [ 734.574750][T14950] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 734.610707][T14953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.618197][T14950] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.715477][T14957] loop7: detected capacity change from 16384 to 0 [ 734.722264][T14615] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 734.725391][ C0] I/O error, dev loop7, sector 9728 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 734.795023][T14953] veth1_macvtap: left promiscuous mode [ 734.831053][T14953] veth0_macvtap: left promiscuous mode [ 734.838053][T14953] veth0_macvtap: entered promiscuous mode [ 734.846217][T14953] veth1_macvtap: entered promiscuous mode [ 734.854192][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16036'. [ 734.866146][T14953] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 734.968848][T13725] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.979360][T13725] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.031048][ T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.057283][ T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.428450][T15032] netlink: 14 bytes leftover after parsing attributes in process `syz.6.16054'. [ 735.430662][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 735.430753][ T28] audit: type=1400 audit(1784499378.810:17083): avc: denied { write } for pid=15010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.526594][ T28] audit: type=1400 audit(1784499378.910:17084): avc: denied { write } for pid=15041 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.783967][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 735.867395][ T28] audit: type=1400 audit(1784499379.250:17085): avc: denied { write } for pid=15049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.955020][ T28] audit: type=1400 audit(1784499379.310:17086): avc: denied { write } for pid=15070 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.030649][ T28] audit: type=1400 audit(1784499379.330:17087): avc: denied { read } for pid=15072 comm="syz.2.16064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 736.126290][ T28] audit: type=1400 audit(1784499379.470:17088): avc: denied { write } for pid=15074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.228143][ T28] audit: type=1400 audit(1784499379.500:17089): avc: denied { write } for pid=15087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.805324][T12177] syz_tun (unregistering): left allmulticast mode [ 736.996396][T15128] loop4: detected capacity change from 0 to 512 [ 737.030499][T15128] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 737.087543][T15128] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 737.121701][T15128] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 737.132952][T15128] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 737.144084][T31429] bond1: left allmulticast mode [ 737.150228][T15128] System zones: 0-2, 18-18, 34-35 [ 737.156356][T31429] bond1: left promiscuous mode [ 737.167723][T31429] bridge0: port 3(bond1) entered disabled state [ 737.175924][T15128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.194450][ T28] audit: type=1326 audit(1784499380.570:17090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="syz.4.16092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694e89de99 code=0x7ffc0000 [ 737.239103][ T28] audit: type=1326 audit(1784499380.580:17091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="syz.4.16092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694e89de99 code=0x7ffc0000 [ 737.240714][T31429] bridge_slave_1: left allmulticast mode [ 737.265094][ T28] audit: type=1326 audit(1784499380.580:17092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15127 comm="syz.4.16092" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694e89de99 code=0x7ffc0000 [ 737.296511][T31429] bridge_slave_1: left promiscuous mode [ 737.302354][T31429] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.316709][T31429] bridge_slave_0: left allmulticast mode [ 737.325431][T31429] bridge_slave_0: left promiscuous mode [ 737.336774][T31429] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.352754][T31429] ip6tnl0: left allmulticast mode [ 737.422228][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.473566][T31429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.509623][T31429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.541987][T31429] bond0 (unregistering): Released all slaves [ 737.568606][T31429] bond1 (unregistering): Released all slaves [ 737.614922][T31429] bond2 (unregistering): Released all slaves [ 737.631552][ T850] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 737.645070][ T850] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 737.842144][T31429] hsr_slave_0: left promiscuous mode [ 737.878317][T31429] hsr_slave_1: left promiscuous mode [ 737.887038][T31429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.919041][T31429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.942173][T31429] batman_adv: batadv0: Removing interface: macsec1 [ 738.098380][T31429] team0 (unregistering): Port device team_slave_1 removed [ 738.116096][T31429] team0 (unregistering): Port device team_slave_0 removed [ 738.264643][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 738.471972][T15158] loop6: detected capacity change from 0 to 2048 [ 738.533578][T15129] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.551661][T15129] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.559347][T15129] bridge_slave_0: entered allmulticast mode [ 738.568412][T15129] bridge_slave_0: entered promiscuous mode [ 738.580092][T15129] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.595286][T15129] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.629798][T15129] bridge_slave_1: entered allmulticast mode [ 738.638046][T15129] bridge_slave_1: entered promiscuous mode [ 738.656865][T31429] IPVS: stop unused estimator thread 0... [ 738.663336][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 738.702019][T15158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.712458][T15129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.726600][T15129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.748021][T15158] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 738.765651][T15129] team0: Port device team_slave_0 added [ 738.780025][T15129] team0: Port device team_slave_1 added [ 738.812338][T15129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.819443][T15129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.865838][T15129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.894681][T15129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.902061][T15129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.949019][T15129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.998321][T31429] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 345: padding at end of block bitmap is not set [ 739.023199][T31429] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 739.058419][T31429] EXT4-fs (loop6): This should not happen!! Data will be lost [ 739.058419][T31429] [ 739.086795][ T49] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 14 with error 28 [ 739.087422][T15129] hsr_slave_0: entered promiscuous mode [ 739.101606][ T49] EXT4-fs (loop6): This should not happen!! Data will be lost [ 739.101606][ T49] [ 739.107884][T15129] hsr_slave_1: entered promiscuous mode [ 739.122586][T15129] debugfs: 'hsr0' already exists in 'hsr' [ 739.129024][T15129] Cannot create hsr debugfs directory [ 739.143434][ T49] EXT4-fs (loop6): Total free blocks count 0 [ 739.176999][ T49] EXT4-fs (loop6): Free/Dirty block details [ 739.193938][ T49] EXT4-fs (loop6): free_blocks=0 [ 739.204192][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 739.216073][ T49] EXT4-fs (loop6): dirty_blocks=16 [ 739.223596][ T49] EXT4-fs (loop6): Block reservation details [ 739.232507][T14615] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 739.301054][T15262] loop6: detected capacity change from 0 to 512 [ 739.342976][T15262] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 739.354469][T15262] System zones: 0-2, 18-18, 34-35 [ 739.361861][T15262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.386088][T15262] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.425861][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.473425][T15282] loop4: detected capacity change from 0 to 1024 [ 739.496933][T15282] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 739.510227][T15282] System zones: 0-1, 3-12 [ 739.535955][T15282] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.588558][T15282] EXT4-fs (loop4): shut down requested (2) [ 739.598014][T15129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 739.608416][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.618077][T15129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 739.629929][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.637555][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 739.667109][T15129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 739.676922][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.685728][T15129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 739.694870][T15129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 739.750198][T15129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.765479][T15129] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.778249][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.785449][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.799096][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.806253][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.947281][T15129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.035897][T15129] veth0_vlan: entered promiscuous mode [ 740.044707][T15129] veth1_vlan: entered promiscuous mode [ 740.063732][T15129] veth0_macvtap: entered promiscuous mode [ 740.071985][T15129] veth1_macvtap: entered promiscuous mode [ 740.097692][T15129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.110109][T15129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.123758][T31429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.134245][T31429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.143374][T31429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.154687][T31429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.297470][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16121'. [ 740.316982][T15382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16121'. [ 741.187004][T15398] netlink: 'syz.9.16135': attribute type 1 has an invalid length. [ 741.202024][T15396] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16126'. [ 741.236235][T15399] loop6: detected capacity change from 0 to 256 [ 741.245824][T15398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 741.421921][T15417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16137'. [ 741.486558][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16127'. [ 741.567449][T15429] xt_l2tp: invalid flags combination: 8 [ 741.656975][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 741.657008][ T28] audit: type=1400 audit(1784499385.040:17159): avc: denied { create } for pid=15442 comm="syz.4.16148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 741.687302][ T28] audit: type=1400 audit(1784499385.070:17160): avc: denied { setopt } for pid=15442 comm="syz.4.16148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 741.836466][T15455] ip6_vti0: entered promiscuous mode [ 741.842299][T15455] batadv_slave_1: entered promiscuous mode [ 741.875580][T15454] batadv_slave_1: left promiscuous mode [ 741.881590][T15454] ip6_vti0: left promiscuous mode [ 742.120575][ T28] audit: type=1326 audit(1784499385.500:17161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15473 comm="syz.4.16162" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f694e89de99 code=0x0 [ 742.341704][T15480] loop6: detected capacity change from 0 to 512 [ 742.383473][T15480] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 742.419002][T22021] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 742.429169][T22021] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 742.457651][T15480] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 742.490584][T15480] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 742.505746][T15480] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 742.520150][T15480] System zones: 0-2, 18-18, 34-35 [ 742.537779][T15480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.576641][ T28] audit: type=1326 audit(1784499385.960:17162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.6.16165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac06d6de99 code=0x7ffc0000 [ 742.655129][ T28] audit: type=1326 audit(1784499385.960:17163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.6.16165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac06d6de99 code=0x7ffc0000 [ 742.687977][ T28] audit: type=1326 audit(1784499385.960:17164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.6.16165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac06d6de99 code=0x7ffc0000 [ 742.714293][ T28] audit: type=1326 audit(1784499385.960:17165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.6.16165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fac06d6de99 code=0x7ffc0000 [ 742.756418][ T28] audit: type=1326 audit(1784499385.980:17166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.6.16165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac06d6de99 code=0x7ffc0000 [ 742.811589][ T28] audit: type=1326 audit(1784499385.990:17167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.6.16165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac06d6de99 code=0x7ffc0000 [ 742.841047][ T28] audit: type=1326 audit(1784499385.990:17168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15477 comm="syz.6.16165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac06d6de99 code=0x7ffc0000 [ 742.871129][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.187886][T15526] loop6: detected capacity change from 0 to 512 [ 743.195780][T15526] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 743.219357][T15526] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 743.233821][T15526] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.16183: Failed to acquire dquot type 1 [ 743.245240][T15526] loop6: lost filesystem error report for type 5 error -28 [ 743.246273][T15526] EXT4-fs (loop6): 1 truncate cleaned up [ 743.259265][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 743.259308][ C1] EXT4-fs (loop6): initial error at time 1784499386: ext4_mb_generate_buddy:1317 [ 743.259339][ C1] EXT4-fs (loop6): last error at time 1784499386: ext4_acquire_dquot:7041 [ 743.284110][T15526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.298248][T15526] EXT4-fs error (device loop6): __ext4_remount:6844: comm syz.6.16183: Abort forced by user [ 743.308710][T15526] EXT4-fs (loop6): Remounting filesystem read-only [ 743.315355][T15526] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 743.364158][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.395306][T15522] loop4: detected capacity change from 0 to 2048 [ 744.777173][T15522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 744.795324][T15522] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.987960][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.259865][T15570] netlink: 'syz.4.16199': attribute type 6 has an invalid length. [ 745.681004][T15597] loop4: detected capacity change from 0 to 128 [ 745.737855][T15597] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 745.751879][T15597] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.818724][T10119] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 745.971172][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16222'. [ 746.006631][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16221'. [ 746.399720][T15677] futex_wake_op: syz.3.16232 tries to shift op by -1; fix this program [ 746.680069][T22005] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 746.695620][T22005] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 746.722644][T15695] loop6: detected capacity change from 0 to 512 [ 746.741244][T15695] EXT4-fs: Ignoring removed i_version option [ 746.762578][T15695] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 746.790700][T15695] EXT4-fs (loop6): 1 truncate cleaned up [ 746.797746][T15695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 746.821484][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 746.821534][ T28] audit: type=1400 audit(1784499390.200:17212): avc: denied { write } for pid=15694 comm="syz.6.16254" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 746.855617][ T28] audit: type=1400 audit(1784499390.240:17213): avc: denied { map } for pid=15694 comm="syz.6.16254" path="/53/bus/cpuset.effective_mems" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 746.906259][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.951077][T15707] loop6: detected capacity change from 0 to 512 [ 746.978809][T15707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 746.991475][T15707] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.007121][ T28] audit: type=1400 audit(1784499390.390:17214): avc: denied { write } for pid=15706 comm="syz.6.16259" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.041039][ T28] audit: type=1400 audit(1784499390.410:17215): avc: denied { write } for pid=15706 comm="syz.6.16259" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.065670][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.652454][T22021] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 747.662150][T22021] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 748.179392][ T28] audit: type=1400 audit(1784499391.560:17216): avc: denied { mount } for pid=15770 comm="syz.6.16285" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 748.605046][T15809] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 748.614992][ T3452] bond0: (slave bond_slave_0): interface is now down [ 748.621764][ T3452] bond0: (slave bond_slave_1): interface is now down [ 748.644026][ T3452] bond0: (slave bond_slave_0): interface is now down [ 748.651936][ T3452] bond0: (slave bond_slave_1): interface is now down [ 748.659321][ T3452] bond0: now running without any active interface! [ 748.987684][T15809] infiniband syz1: set down [ 748.998904][T15809] infiniband syz1: added bond0 [ 749.012943][T15809] RDS/IB: syz1: added [ 749.025436][T15809] smc: adding ib device syz1 with port count 1 [ 749.036052][T15809] smc: ib device syz1 port 1 has no pnetid [ 749.059369][ T28] audit: type=1400 audit(1784499392.440:17217): avc: denied { relabelto } for pid=15817 comm="syz.4.16305" name="399" dev="tmpfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 749.110016][ T28] audit: type=1400 audit(1784499392.440:17218): avc: denied { associate } for pid=15817 comm="syz.4.16305" name="399" dev="tmpfs" ino=2071 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 749.138159][ T28] audit: type=1400 audit(1784499392.440:17219): avc: denied { write } for pid=15817 comm="syz.4.16305" name="399" dev="tmpfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 749.166177][ T28] audit: type=1400 audit(1784499392.440:17220): avc: denied { add_name } for pid=15817 comm="syz.4.16305" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 749.191229][ T28] audit: type=1400 audit(1784499392.440:17221): avc: denied { associate } for pid=15817 comm="syz.4.16305" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 749.566838][T15845] veth3: entered promiscuous mode [ 749.571948][T15845] veth3: entered allmulticast mode [ 749.795592][T15859] loop6: detected capacity change from 0 to 512 [ 749.812541][T15859] EXT4-fs: Ignoring removed bh option [ 749.833419][T15859] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 749.846575][T15859] EXT4-fs (loop6): 1 truncate cleaned up [ 749.852814][T15859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.976430][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.107706][T15893] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15893 comm=syz.2.16332 [ 750.278842][T15916] netlink: 'syz.9.16339': attribute type 1 has an invalid length. [ 750.310288][T15916] bond3: entered promiscuous mode [ 750.321693][T15916] bond3: entered allmulticast mode [ 750.336001][T15916] 8021q: adding VLAN 0 to HW filter on device bond3 [ 750.507020][T15907] loop6: detected capacity change from 0 to 2048 [ 750.791683][T15907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.833951][T15907] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.901606][T15960] loop4: detected capacity change from 0 to 8192 [ 750.925426][T15970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16348'. [ 751.172720][ T3452] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 751.226510][ T3452] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 21 with error 117 [ 751.253709][ T3452] EXT4-fs (loop6): This should not happen!! Data will be lost [ 751.253709][ T3452] [ 751.282576][T14615] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 751.303672][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.210036][T16095] loop4: detected capacity change from 0 to 512 [ 752.241840][T16095] __quota_error: 11 callbacks suppressed [ 752.241857][T16095] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 752.277314][T16095] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 752.288263][T16095] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.16376: Failed to acquire dquot type 1 [ 752.298442][T16029] loop6: detected capacity change from 0 to 2048 [ 752.300173][T16095] loop4: lost filesystem error report for type 5 error -117 [ 752.300422][T16095] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 752.306904][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 752.306925][ C1] EXT4-fs (loop4): last error at time 1784499395: ext4_acquire_dquot:7041 [ 752.340329][T16095] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 752.350481][T16095] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.16376: Failed to acquire dquot type 1 [ 752.362189][T16095] loop4: lost filesystem error report for type 5 error -117 [ 752.363745][T16095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.16376: bg 0: block 248: padding at end of block bitmap is not set [ 752.399686][T16095] loop4: lost filesystem error report for type 5 error -117 [ 752.401714][T16095] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 752.418660][T16095] loop4: lost filesystem error report for type 5 error -117 [ 752.420149][T16095] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 752.428061][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 752.461892][T16095] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 752.472538][T16095] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.16376: Failed to acquire dquot type 1 [ 752.504063][T16095] loop4: lost filesystem error report for type 5 error -117 [ 752.505301][T16095] EXT4-fs (loop4): 1 orphan inode deleted [ 752.549382][T16095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.562155][T16095] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.576722][T16029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.605168][T16095] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.16376: deleted inode referenced: 12 [ 752.606064][T16029] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.683869][ T28] audit: type=1400 audit(1784499396.060:17233): avc: denied { write } for pid=16028 comm="syz.6.16362" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 752.734192][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.817244][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16387'. [ 752.889636][ T30] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 752.905854][ T30] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 24 with error 117 [ 752.918414][ T30] EXT4-fs (loop6): This should not happen!! Data will be lost [ 752.918414][ T30] [ 752.929471][T14615] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 752.929617][T16145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16397'. [ 752.942301][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.980762][ T28] audit: type=1400 audit(1784499396.360:17234): avc: denied { read } for pid=16147 comm="syz.6.16398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 753.027929][T16153] geneve2: left promiscuous mode [ 753.045988][T31431] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.054577][T31431] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.068299][T31431] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.091172][T31431] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.169129][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16405'. [ 753.278844][T16178] netlink: 'syz.2.16410': attribute type 21 has an invalid length. [ 753.287926][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16410'. [ 753.297250][T16178] netlink: 'syz.2.16410': attribute type 21 has an invalid length. [ 753.305517][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16410'. [ 753.837022][T16195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16418'. [ 753.897204][T16201] loop6: detected capacity change from 0 to 512 [ 753.906942][T16201] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 753.917092][T16201] EXT4-fs (loop6): group descriptors corrupted! [ 753.965392][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16425'. [ 753.977347][T22018] IPVS: starting estimator thread 0... [ 753.993288][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16425'. [ 754.084769][T16209] IPVS: using max 2160 ests per chain, 108000 per kthread [ 754.372745][ T28] audit: type=1400 audit(1784499397.750:17235): avc: denied { getopt } for pid=16243 comm="syz.4.16440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 754.431366][T16249] netlink: 'syz.2.16442': attribute type 3 has an invalid length. [ 755.273069][T16284] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16458'. [ 755.452218][T16292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16462'. [ 755.697688][T22016] Process accounting resumed [ 755.751059][T16266] loop4: detected capacity change from 0 to 2048 [ 755.863469][T16307] netlink: 'syz.9.16468': attribute type 1 has an invalid length. [ 755.906711][T16307] bond4: entered promiscuous mode [ 755.929558][T16307] 8021q: adding VLAN 0 to HW filter on device bond4 [ 755.958784][T16309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 755.991751][T16309] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 756.003218][T16309] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 756.016804][T16309] bond4: (slave ip6gre2): making interface the new active one [ 756.025320][T16309] ip6gre2: entered promiscuous mode [ 756.032656][T16309] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 756.082050][T16266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.112190][T16266] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.116155][T16318] 9p: Bad value for 'rfdno' [ 756.140483][ T28] audit: type=1400 audit(1784499399.520:17236): avc: denied { write } for pid=16265 comm="syz.4.16450" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 756.328304][T31431] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 345: padding at end of block bitmap is not set [ 756.354158][T31431] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 123 with error 117 [ 756.370042][T31431] EXT4-fs (loop4): This should not happen!! Data will be lost [ 756.370042][T31431] [ 756.407750][T10119] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 756.430617][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.833987][T16404] __nla_validate_parse: 1 callbacks suppressed [ 757.834008][T16404] netlink: 64 bytes leftover after parsing attributes in process `syz.6.16507'. [ 758.337835][T16436] netlink: 'syz.6.16522': attribute type 12 has an invalid length. [ 758.356350][T16432] loop4: detected capacity change from 0 to 512 [ 758.465807][T16432] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.16520: inode has both inline data and extents flags [ 758.515433][T16432] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 758.518174][T16432] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.16520: couldn't read orphan inode 15 (err -117) [ 758.527815][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 758.528274][ C0] EXT4-fs (loop4): initial error at time 1784499401: ext4_orphan_get:1399: inode 15 [ 758.528443][ C0] EXT4-fs (loop4): last error at time 1784499401: ext4_orphan_get:1399: inode 15 [ 758.612128][T16432] loop4: lost filesystem error report for type 5 error -117 [ 758.639769][T16432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.691348][ T28] audit: type=1400 audit(1784499402.070:17237): avc: denied { write } for pid=16431 comm="syz.4.16520" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 758.774713][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.948800][T16464] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16532'. [ 759.965254][T16505] loop4: detected capacity change from 0 to 4096 [ 759.980308][T16505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.003721][ T28] audit: type=1400 audit(1784499403.380:17238): avc: denied { write } for pid=16504 comm="syz.4.16549" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 760.034994][ T28] audit: type=1400 audit(1784499403.410:17239): avc: denied { create } for pid=16504 comm="syz.4.16549" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 760.078662][ T28] audit: type=1400 audit(1784499403.450:17240): avc: denied { read } for pid=16504 comm="syz.4.16549" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 760.193615][T16495] veth3: left promiscuous mode [ 760.208011][T10119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.229120][ T30] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.284021][ T30] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.314020][ T30] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.330005][ T30] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.915432][T16549] xt_hashlimit: size too large, truncated to 1048576 [ 762.034876][T16541] loop6: detected capacity change from 0 to 164 [ 762.130805][T16541] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 762.195446][ T28] audit: type=1400 audit(1784499405.560:17241): avc: denied { mount } for pid=16540 comm="syz.6.16559" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 762.289433][T16541] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 762.303764][T16541] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 762.325313][ T28] audit: type=1400 audit(1784499405.710:17242): avc: denied { unmount } for pid=14615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 762.731170][T16518] loop4: detected capacity change from 0 to 8192 [ 762.844227][T16620] loop6: detected capacity change from 0 to 512 [ 762.852169][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16580'. [ 762.898956][T16518] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 762.922210][T16620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.937415][T16620] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.963654][ T28] audit: type=1400 audit(1784499406.340:17243): avc: denied { write } for pid=16618 comm="syz.6.16572" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 763.031569][T16633] bridge_slave_0: left allmulticast mode [ 763.052404][T16633] bridge_slave_0: left promiscuous mode [ 763.114230][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.153076][T16633] bridge_slave_1: left allmulticast mode [ 763.171997][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.189017][T16633] bridge_slave_1: left promiscuous mode [ 763.239318][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.273583][T16633] bond0: (slave bond_slave_0): Releasing backup interface [ 763.300510][T16633] bond0: (slave bond_slave_1): Releasing backup interface [ 763.337272][T16633] team0: Port device team_slave_0 removed [ 763.361765][T16633] team0: Port device team_slave_1 removed [ 763.378608][T16633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.391061][T16633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.410899][T16633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 763.448960][T16636] bridge0: port 1(team0) entered blocking state [ 763.461544][T16636] bridge0: port 1(team0) entered disabled state [ 763.469509][T16636] team0: entered allmulticast mode [ 763.476202][T16636] team0: entered promiscuous mode [ 763.516857][T16655] veth0: entered promiscuous mode [ 763.534747][T16655] veth0: left promiscuous mode [ 763.545668][ T312] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 763.789756][T16677] netlink: 6392 bytes leftover after parsing attributes in process `syz.9.16592'. [ 763.810039][T16677] netlink: 6392 bytes leftover after parsing attributes in process `syz.9.16592'. [ 764.053797][ T28] audit: type=1400 audit(1784499407.430:17244): avc: denied { ioctl } for pid=16694 comm="syz.3.16600" path="socket:[146834]" dev="sockfs" ino=146834 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 764.252214][ T28] audit: type=1400 audit(1784499407.620:17245): avc: denied { create } for pid=16700 comm="syz.9.16603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 764.340961][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16609'. [ 764.350234][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16609'. [ 764.364197][T16711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16609'. [ 764.373579][T31431] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.386609][T31431] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.395527][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16609'. [ 764.405018][T31431] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.414277][T31431] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.434740][T16716] bond0: (slave bridge0): Releasing backup interface [ 764.443785][T16716] bridge_slave_0: left allmulticast mode [ 764.449881][T16716] bridge_slave_0: left promiscuous mode [ 764.461204][T16716] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.472749][T16716] bridge_slave_1: left allmulticast mode [ 764.482326][T16716] bridge_slave_1: left promiscuous mode [ 764.488308][T16716] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.497488][T16716] bond0: (slave bond_slave_0): Releasing backup interface [ 764.507821][T16716] bond0: (slave bond_slave_1): Releasing backup interface [ 764.517018][T16716] team0: Port device team_slave_0 removed [ 764.525265][T16716] team0: Port device team_slave_1 removed [ 764.531990][T16716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 764.847956][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.855198][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.998865][T16739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.020889][T16739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.163568][T31431] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.173330][T31431] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.196215][T31431] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.217175][T31431] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.295478][T16761] bridge_slave_0: left allmulticast mode [ 765.301307][T16761] bridge_slave_0: left promiscuous mode [ 765.307957][T16761] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.317177][T16761] bridge_slave_1: left allmulticast mode [ 765.322874][T16761] bridge_slave_1: left promiscuous mode [ 765.330624][T16761] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.339890][T16761] bond0: (slave bond_slave_0): Releasing backup interface [ 765.348356][T16761] bond0: (slave bond_slave_1): Releasing backup interface [ 765.358272][T16761] team0: Port device team_slave_0 removed [ 765.365050][T16761] team0: Port device team_slave_1 removed [ 765.371279][T16761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.379368][ T28] audit: type=1326 audit(1784499408.760:17246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.2.16629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e122de99 code=0x7ffc0000 [ 765.386154][T16761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.411570][ T28] audit: type=1326 audit(1784499408.760:17247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.2.16629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e122de99 code=0x7ffc0000 [ 765.439390][ T28] audit: type=1326 audit(1784499408.790:17248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.2.16629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff1e122de99 code=0x7ffc0000 [ 765.465460][ T28] audit: type=1326 audit(1784499408.820:17249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.2.16629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e122de99 code=0x7ffc0000 [ 765.466270][T16761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.491399][ T28] audit: type=1326 audit(1784499408.820:17250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.2.16629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e122de99 code=0x7ffc0000 [ 765.491474][ T28] audit: type=1326 audit(1784499408.820:17251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.2.16629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e122de99 code=0x7ffc0000 [ 765.491523][ T28] audit: type=1326 audit(1784499408.820:17252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.2.16629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e122de99 code=0x7ffc0000 [ 765.491556][ T28] audit: type=1326 audit(1784499408.820:17253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16769 comm="syz.2.16629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e122de99 code=0x7ffc0000 [ 765.615981][T16768] bridge0: port 1(team0) entered blocking state [ 765.622603][T16768] bridge0: port 1(team0) entered disabled state [ 765.631248][T16768] team0: entered allmulticast mode [ 765.638165][T16768] team0: entered promiscuous mode [ 766.171812][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.179177][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.251861][T16786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 766.281620][T16786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.171252][ T312] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.199856][ T312] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.209571][ T312] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.218747][ T312] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.306392][T16825] xt_hashlimit: size too large, truncated to 1048576 [ 767.370175][ T312] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.400435][ T312] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.419849][ T312] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.440790][ T312] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.582347][T16846] bond3: left promiscuous mode [ 767.594426][T16846] bond4: left promiscuous mode [ 767.613478][T16846] ip6gre2: left promiscuous mode [ 767.947717][T16871] loop4: detected capacity change from 0 to 164 [ 768.009647][T16871] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 768.047346][T16871] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 768.060849][T16871] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 768.156935][T16895] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16680'. [ 768.318163][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16682'. [ 768.410818][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16682'. [ 768.472870][T16911] loop4: detected capacity change from 0 to 164 [ 768.687569][T16911] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 768.780761][T16911] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 768.814014][T16911] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 769.072523][T16943] loop4: detected capacity change from 0 to 512 [ 769.109252][T16943] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 769.135597][T16943] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 769.144630][T16943] EXT4-fs (loop4): orphan cleanup on readonly fs [ 769.218600][T16943] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.16700: Block bitmap for bg 0 marked uninitialized [ 769.264402][T16943] loop4: lost filesystem error report for type 5 error -117 [ 769.264685][T16943] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 769.280790][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 769.280816][ C0] EXT4-fs (loop4): initial error at time 1784499412: ext4_read_block_bitmap_nowait:517 [ 769.280842][ C0] EXT4-fs (loop4): last error at time 1784499412: ext4_read_block_bitmap_nowait:517 [ 769.335324][T16943] loop4: lost filesystem error report for type 5 error -117 [ 769.335542][T16943] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.16700: Block bitmap for bg 0 marked uninitialized [ 769.357168][T16943] loop4: lost filesystem error report for type 5 error -117 [ 769.357398][T16943] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 769.373734][T16943] loop4: lost filesystem error report for type 5 error -117 [ 769.374065][T16943] EXT4-fs (loop4): 1 orphan inode deleted [ 769.392762][T16943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 769.459323][T10119] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /472/file1: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 769.491133][T10119] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 769.547944][T10119] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 769.642918][T16962] bridge_slave_0: left allmulticast mode [ 769.655536][T16962] bridge_slave_0: left promiscuous mode [ 769.661383][T16962] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.669926][T16962] bridge_slave_1: left allmulticast mode [ 769.670636][T13977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.675740][T16962] bridge_slave_1: left promiscuous mode [ 769.675870][T16962] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.718986][T16962] bond0: (slave bond_slave_0): Releasing backup interface [ 769.729074][ T3398] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 769.738092][ T3398] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 769.749867][T16962] bond0: (slave bond_slave_1): Releasing backup interface [ 769.773938][T16962] team0: Port device team_slave_0 removed [ 769.785325][T16962] team0: Port device team_slave_1 removed [ 769.795530][T16962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.824302][T16962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.838859][T16962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 769.861274][T16963] bridge0: port 1(team0) entered blocking state [ 769.868003][T16963] bridge0: port 1(team0) entered disabled state [ 769.874675][T16963] team0: entered allmulticast mode [ 769.881872][T16963] team0: entered promiscuous mode [ 769.941714][T16968] netlink: 'syz.2.16709': attribute type 1 has an invalid length. [ 769.976207][T16968] bond2: entered promiscuous mode [ 769.991220][T16968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 770.026698][T16968] 8021q: adding VLAN 0 to HW filter on device bond3 [ 770.064807][T16968] bond2: (slave bond3): making interface the new active one [ 770.075733][T16968] bond3: entered promiscuous mode [ 770.081794][T16968] bond2: (slave bond3): Enslaving as an active interface with an up link [ 770.099374][T16981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=16981 comm=syz.9.16714 [ 770.199174][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16718'. [ 770.208253][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 770.208275][ T28] audit: type=1400 audit(1784499413.580:17265): avc: denied { accept } for pid=16989 comm="syz.2.16716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 770.256238][T16999] loop6: detected capacity change from 0 to 512 [ 770.273735][T16999] EXT4-fs: Ignoring removed bh option [ 770.288309][T16999] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 770.318182][T16999] EXT4-fs (loop6): 1 truncate cleaned up [ 770.326810][T16999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.398177][ T28] audit: type=1400 audit(1784499413.780:17266): avc: denied { write } for pid=16998 comm="syz.6.16719" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.434169][ T28] audit: type=1400 audit(1784499413.780:17267): avc: denied { setattr } for pid=16998 comm="syz.6.16719" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 770.477770][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.756420][T17042] loop6: detected capacity change from 0 to 128 [ 770.786281][T17042] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 770.809654][T17042] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 770.818548][T16975] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.856611][T16975] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.864636][T16975] bridge_slave_0: entered allmulticast mode [ 770.869478][ T28] audit: type=1400 audit(1784499414.250:17268): avc: denied { write } for pid=17041 comm="syz.6.16737" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.885622][T16975] bridge_slave_0: entered promiscuous mode [ 770.899977][T17042] Invalid argument reading file caps for ./file0 [ 770.908022][T16975] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.915300][T16975] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.926450][ T28] audit: type=1400 audit(1784499414.250:17269): avc: denied { setattr } for pid=17041 comm="syz.6.16737" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 770.948835][ T28] audit: type=1400 audit(1784499414.280:17270): avc: denied { execute } for pid=17041 comm="syz.6.16737" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 770.967270][T16975] bridge_slave_1: entered allmulticast mode [ 770.991794][T16975] bridge_slave_1: entered promiscuous mode [ 771.006702][ T28] audit: type=1400 audit(1784499414.280:17271): avc: denied { execute_no_trans } for pid=17041 comm="syz.6.16737" path="/139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 771.071835][T16975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.089409][T16975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.118531][T16975] team0: Port device team_slave_0 added [ 771.132580][T16975] team0: Port device team_slave_1 added [ 771.164856][T16975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.180103][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.206979][T16975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.227191][T16975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.252006][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.278810][T16975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.335609][T16975] hsr_slave_0: entered promiscuous mode [ 771.345845][T16975] hsr_slave_1: entered promiscuous mode [ 771.352018][T16975] debugfs: 'hsr0' already exists in 'hsr' [ 771.358722][T16975] Cannot create hsr debugfs directory [ 771.745658][T14615] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 771.779245][T16975] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.873308][T16975] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.905853][T17140] loop6: detected capacity change from 0 to 128 [ 771.956128][T16975] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.040631][T16975] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.055249][ T28] audit: type=1400 audit(1784499415.430:17272): avc: denied { ioctl } for pid=17147 comm="syz.3.16751" path="socket:[147375]" dev="sockfs" ino=147375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 772.173559][T16975] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 772.186255][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.197602][T16975] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 772.215302][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.246063][T16975] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 772.259472][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.279598][T16975] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 772.310117][T16975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.406338][T16975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.420132][T16975] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.448122][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.455285][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.498397][T17181] process '/newroot/304/file0' started with executable stack [ 772.508488][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.515679][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.629583][T17196] loop6: detected capacity change from 0 to 128 [ 772.649037][T17196] batadv_slave_1: entered promiscuous mode [ 772.684307][T17195] batadv_slave_1: left promiscuous mode [ 772.801107][T16975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.812084][T17219] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16773'. [ 772.850771][T17219] ip6gre1: entered promiscuous mode [ 772.857043][T17219] ip6gre1: entered allmulticast mode [ 772.930253][ T28] audit: type=1400 audit(1784499416.310:17273): avc: denied { shutdown } for pid=17234 comm="syz.3.16778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 773.026573][T16975] veth0_vlan: entered promiscuous mode [ 773.033723][ T28] audit: type=1326 audit(1784499416.410:17274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17247 comm="syz.3.16781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86e6b1de99 code=0x0 [ 773.037531][T16975] veth1_vlan: entered promiscuous mode [ 773.074875][T16975] veth0_macvtap: entered promiscuous mode [ 773.082701][T16975] veth1_macvtap: entered promiscuous mode [ 773.094445][T16975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.106780][T16975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.118268][T13732] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.127190][T13732] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.136816][T31431] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.145741][T31431] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.512797][T17284] sg_write: data in/out 479232/136 bytes for SCSI command 0x0-- guessing data in; [ 773.512797][T17284] program syz.7.16795 not setting count and/or reply_len properly [ 775.137996][T17366] bridge1: entered promiscuous mode [ 775.170341][T17366] bridge1: entered allmulticast mode [ 775.366443][T17393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16841'. [ 775.499906][ T28] audit: type=1400 audit(1784499418.880:17275): avc: denied { getopt } for pid=17404 comm="syz.9.16846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 776.487963][T17466] loop6: detected capacity change from 0 to 512 [ 776.517878][ T28] audit: type=1400 audit(1784499419.890:17276): avc: denied { mounton } for pid=17465 comm="syz.6.16872" path="/166/file0" dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 776.569108][T17466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.588571][T17466] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.036045][T17493] bridge1: entered promiscuous mode [ 777.056120][T17493] bridge1: entered allmulticast mode [ 777.396482][ T28] audit: type=1400 audit(1784499420.760:17277): avc: denied { firmware_load } for pid=17494 comm="syz.6.16881" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 777.507128][ T28] audit: type=1400 audit(1784499420.870:17278): avc: denied { mounton } for pid=17509 comm="syz.3.16889" path="/proc/346/cgroup" dev="proc" ino=148960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 777.748337][T17528] bridge1: entered promiscuous mode [ 777.764684][T17528] bridge1: entered allmulticast mode [ 778.083797][ T28] audit: type=1400 audit(1784499421.460:17279): avc: denied { associate } for pid=17542 comm="syz.3.16903" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 778.753190][T17558] loop7: detected capacity change from 0 to 512 [ 778.811605][T17558] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.16909: inode has both inline data and extents flags [ 778.841454][T17558] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 778.842866][T17558] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.16909: couldn't read orphan inode 15 (err -117) [ 778.852178][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 778.852223][ C1] EXT4-fs (loop7): initial error at time 1784499422: ext4_orphan_get:1399: inode 15 [ 778.852253][ C1] EXT4-fs (loop7): last error at time 1784499422: ext4_orphan_get:1399: inode 15 [ 778.890634][T17558] loop7: lost filesystem error report for type 5 error -117 [ 778.891563][T17558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.913883][ T28] audit: type=1400 audit(1784499422.290:17280): avc: denied { write } for pid=17556 comm="syz.7.16909" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 778.955286][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.476259][ T28] audit: type=1400 audit(1784499422.860:17281): avc: denied { watch_reads } for pid=17599 comm="syz.6.16927" path="/180" dev="tmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 779.987813][T17604] loop6: detected capacity change from 0 to 512 [ 780.041248][T17604] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.16929: bg 0: block 104: invalid block bitmap [ 780.081216][T17604] loop6: lost filesystem error report for type 5 error -117 [ 780.083807][T17604] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 780.084016][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 780.088140][ T28] audit: type=1400 audit(1784499423.460:17282): avc: denied { setopt } for pid=17624 comm="syz.2.16937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 780.091868][ C0] EXT4-fs (loop6): initial error at time 1784499423: ext4_validate_block_bitmap:432 [ 780.138880][ C0] EXT4-fs (loop6): last error at time 1784499423: ext4_validate_block_bitmap:432 [ 780.168152][T17604] loop6: lost filesystem error report for type 5 error -117 [ 780.171528][T17604] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.16929: invalid indirect mapped block 1 (level 1) [ 780.211674][T17604] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 780.220205][T17604] EXT4-fs (loop6): 1 truncate cleaned up [ 780.281499][T17604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.355593][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.571149][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16950'. [ 782.651788][T17750] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16990'. [ 782.658694][T17748] tmpfs: Bad value for 'mpol' [ 782.824913][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17000'. [ 782.955757][T17791] netlink: 168 bytes leftover after parsing attributes in process `syz.7.17008'. [ 783.090778][T17807] macsec0: entered promiscuous mode [ 783.096827][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17017'. [ 783.106172][T17809] loop7: detected capacity change from 0 to 512 [ 783.113610][T17807] macsec0 (unregistering): left promiscuous mode [ 783.123387][T17809] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.17016: invalid indirect mapped block 4294967295 (level 1) [ 783.145200][T17809] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 783.145386][T17809] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.17016: invalid indirect mapped block 4294967295 (level 1) [ 783.154617][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 783.154641][ C0] EXT4-fs (loop7): initial error at time 1784499426: ext4_free_branches:1023: inode 11 [ 783.154675][ C0] EXT4-fs (loop7): last error at time 1784499426: ext4_free_branches:1023: inode 11 [ 783.160827][ T28] audit: type=1400 audit(1784499426.540:17283): avc: denied { accept } for pid=17804 comm="syz.2.17017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 783.171299][T17809] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 783.215522][T17809] EXT4-fs (loop7): 2 truncates cleaned up [ 783.231505][T17809] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.270619][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.304735][ T28] audit: type=1400 audit(1784499426.690:17284): avc: denied { setopt } for pid=17818 comm="syz.7.17021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 783.344744][ T28] audit: type=1400 audit(1784499426.690:17285): avc: denied { write } for pid=17818 comm="syz.7.17021" path="socket:[149823]" dev="sockfs" ino=149823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 783.419207][T17827] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17025'. [ 783.429470][T17827] netlink: 'syz.7.17025': attribute type 7 has an invalid length. [ 783.439430][T17827] netlink: 'syz.7.17025': attribute type 8 has an invalid length. [ 783.448511][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17025'. [ 784.125767][T17868] loop7: detected capacity change from 0 to 256 [ 784.789173][ T28] audit: type=1400 audit(1784499428.170:17286): avc: denied { ioctl } for pid=17913 comm="syz.3.17056" path="socket:[149976]" dev="sockfs" ino=149976 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 784.902920][T17922] netlink: 48 bytes leftover after parsing attributes in process `syz.3.17065'. [ 785.109419][T17933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.120029][T17933] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.132785][T17933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.159721][T17933] bridge_slave_0: entered promiscuous mode [ 785.188977][T17933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 785.211630][T17933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.238178][T17933] veth1_vlan: left promiscuous mode [ 785.247211][T17933] veth0_vlan: left promiscuous mode [ 785.255844][T17933] veth0_vlan: entered promiscuous mode [ 785.262074][T17933] veth1_vlan: entered promiscuous mode [ 785.282017][T17933] veth1_macvtap: left promiscuous mode [ 785.289351][T17933] veth0_macvtap: left promiscuous mode [ 785.296221][T17933] veth0_macvtap: entered promiscuous mode [ 785.303294][T17933] veth1_macvtap: entered promiscuous mode [ 785.338694][T17933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 785.371592][T17933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 785.410424][T17933] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.420053][T17933] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.485174][T17960] loop6: detected capacity change from 0 to 128 [ 785.533712][T31431] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.543366][T31431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.570735][T31431] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.591199][T31431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.618620][T31431] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.629737][T31431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.645941][T31431] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 785.666205][T31431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.171102][T17976] sit1: entered allmulticast mode [ 786.189519][T17980] loop6: detected capacity change from 0 to 128 [ 786.202953][T17980] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 786.223053][T17980] ext4 filesystem being mounted at /207/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 786.304892][ T28] audit: type=1400 audit(1784499429.680:17287): avc: denied { write } for pid=17979 comm="syz.6.17091" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 786.327740][ T28] audit: type=1400 audit(1784499429.690:17288): avc: denied { write } for pid=17979 comm="syz.6.17091" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 786.350379][ T28] audit: type=1400 audit(1784499429.690:17289): avc: denied { write } for pid=17979 comm="syz.6.17091" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 786.381225][ T28] audit: type=1400 audit(1784499429.690:17290): avc: denied { create } for pid=17979 comm="syz.6.17091" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 786.424747][ T28] audit: type=1400 audit(1784499429.690:17291): avc: denied { write } for pid=17979 comm="syz.6.17091" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 786.446919][ T28] audit: type=1400 audit(1784499429.690:17292): avc: denied { write } for pid=17979 comm="syz.6.17091" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 786.470964][T14615] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.664411][T18015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17106'. [ 786.881371][T18033] GUP no longer grows the stack in syz.6.17115 (18033): 200000004000-20000000a000 (200000002000) [ 786.892786][T18033] CPU: 0 UID: 0 PID: 18033 Comm: syz.6.17115 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 786.892834][T18033] Tainted: [W]=WARN [ 786.892843][T18033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 786.892861][T18033] Call Trace: [ 786.892868][T18033] [ 786.892876][T18033] __dump_stack+0x1d/0x30 [ 786.892953][T18033] dump_stack_lvl+0x95/0xd0 [ 786.892996][T18033] dump_stack+0x15/0x1b [ 786.893021][T18033] __get_user_pages+0x1b27/0x1f10 [ 786.893064][T18033] ? __list_add_valid_or_report+0x38/0xe0 [ 786.893140][T18033] ? __rcu_read_unlock+0x4e/0x70 [ 786.893170][T18033] get_user_pages_remote+0x1d5/0x6b0 [ 786.893219][T18033] __access_remote_vm+0x156/0x4d0 [ 786.893316][T18033] access_remote_vm+0x32/0x40 [ 786.893360][T18033] proc_pid_cmdline_read+0x334/0x710 [ 786.893419][T18033] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 786.893538][T18033] vfs_readv+0x417/0x6d0 [ 786.893578][T18033] __x64_sys_preadv+0xfd/0x1c0 [ 786.893604][T18033] x64_sys_call+0x2915/0x3020 [ 786.893638][T18033] do_syscall_64+0x136/0x3c0 [ 786.893707][T18033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.893730][T18033] RIP: 0033:0x7fac06d6de99 [ 786.893747][T18033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.893826][T18033] RSP: 002b:00007fac057c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 786.893855][T18033] RAX: ffffffffffffffda RBX: 00007fac06ff5fa0 RCX: 00007fac06d6de99 [ 786.893876][T18033] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 786.893960][T18033] RBP: 00007fac06e03eaf R08: 00000000fffffff9 R09: 0000000000000000 [ 786.893992][T18033] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 786.894005][T18033] R13: 00007fac06ff6038 R14: 00007fac06ff5fa0 R15: 00007ffce67f64c8 [ 786.894029][T18033] [ 787.216224][T18047] bridge_slave_0: entered allmulticast mode [ 787.222585][T18046] bridge_slave_0: left allmulticast mode [ 787.704974][T15932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.829941][T18080] loop7: detected capacity change from 0 to 4096 [ 787.840556][T18080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.882096][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.744988][T15932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.853510][T18135] team0: left allmulticast mode [ 788.858593][T18135] team0: left promiscuous mode [ 788.863650][T18135] bridge0: port 1(team0) entered disabled state [ 788.886548][T18135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 788.930860][T18141] team0: Mode changed to "broadcast" [ 789.189326][T18152] netlink: 204 bytes leftover after parsing attributes in process `syz.7.17163'. [ 789.201124][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 789.201143][ T28] audit: type=1400 audit(1784499432.580:17319): avc: denied { name_bind } for pid=18153 comm="syz.3.17162" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 789.230906][T18152] netlink: 84 bytes leftover after parsing attributes in process `syz.7.17163'. [ 789.541519][T18163] netlink: 48 bytes leftover after parsing attributes in process `syz.6.17166'. [ 789.542005][T18166] dummy0: entered allmulticast mode [ 789.639278][T18172] loop6: detected capacity change from 0 to 512 [ 789.678167][T18172] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.17170: corrupted in-inode xattr: e_value out of bounds [ 789.680546][T18166] dummy0: left allmulticast mode [ 789.695510][T18172] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 789.704063][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 789.704254][ C1] EXT4-fs (loop6): initial error at time 1784499433: ext4_iget_extra_inode:5180: inode 15 [ 789.704531][ C1] EXT4-fs (loop6): last error at time 1784499433: ext4_iget_extra_inode:5180: inode 15 [ 789.814048][T15932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.824762][T18172] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.17170: couldn't read orphan inode 15 (err -117) [ 789.839271][T18172] loop6: lost filesystem error report for type 5 error -117 [ 789.845777][T18172] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.928815][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.106293][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.452082][T18224] netlink: 'syz.6.17193': attribute type 21 has an invalid length. [ 790.469162][T18224] netlink: 132 bytes leftover after parsing attributes in process `syz.6.17193'. [ 790.662208][ T28] audit: type=1400 audit(1784499434.040:17320): avc: denied { read } for pid=18233 comm="syz.6.17197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 790.825867][T22015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.942476][ T28] audit: type=1400 audit(1784499434.320:17321): avc: denied { bind } for pid=18246 comm="syz.7.17201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 791.010078][T18253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.024043][T18253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.065470][T18253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.081476][T18253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.156176][T18271] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17210'. [ 791.166959][T18271] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17210'. [ 791.255666][T18278] loop6: detected capacity change from 0 to 128 [ 791.270642][T18278] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 791.306642][T18278] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.351726][ T28] audit: type=1400 audit(1784499434.730:17322): avc: denied { write } for pid=18277 comm="syz.6.17213" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 791.393894][ T28] audit: type=1400 audit(1784499434.760:17323): avc: denied { ioctl } for pid=18277 comm="syz.6.17213" path="socket:[151108]" dev="sockfs" ino=151108 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 791.431430][T14615] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 791.471234][T18284] loop7: detected capacity change from 0 to 512 [ 791.478947][T18284] EXT4-fs: Ignoring removed bh option [ 791.490323][T18284] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 791.507535][T18284] EXT4-fs (loop7): 1 truncate cleaned up [ 791.514078][T18284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.530692][ T28] audit: type=1400 audit(1784499434.910:17324): avc: denied { write } for pid=18283 comm="syz.7.17215" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 791.554026][ T28] audit: type=1400 audit(1784499434.910:17325): avc: denied { append } for pid=18283 comm="syz.7.17215" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 791.582608][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.929560][T18308] netlink: 'syz.6.17225': attribute type 8 has an invalid length. [ 791.943735][T18308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17225'. [ 791.965653][T18306] loop7: detected capacity change from 0 to 4096 [ 791.975975][T18308] bond0: entered promiscuous mode [ 791.984527][T18308] gretap0: entered promiscuous mode [ 791.995347][T18308] bond0: left promiscuous mode [ 792.023506][T18308] gretap0: left promiscuous mode [ 792.039801][T18306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.060888][ T28] audit: type=1400 audit(1784499435.440:17326): avc: denied { write } for pid=18305 comm="syz.7.17224" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 792.150269][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.267276][T18326] dummy0: entered allmulticast mode [ 792.292203][T18326] dummy0: left allmulticast mode [ 792.719146][T31431] bond0 (unregistering): (slave team0): Releasing backup interface [ 792.746392][T31431] bond0 (unregistering): Released all slaves [ 792.824165][ T28] audit: type=1400 audit(1784499436.200:17327): avc: denied { write } for pid=18350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.904941][T22014] net_ratelimit: 9 callbacks suppressed [ 792.904963][T22014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.961657][ T28] audit: type=1400 audit(1784499436.320:17328): avc: denied { write } for pid=18365 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 793.007823][T31431] hsr_slave_0: left promiscuous mode [ 793.023208][T31431] hsr_slave_1: left promiscuous mode [ 793.152225][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.203090][T18375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.211421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.246815][T18375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.256560][T13732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.267266][T18377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.278620][T13732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.286750][T13732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.295744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.304572][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 793.427629][T18384] dummy0: entered allmulticast mode [ 793.489169][T18384] dummy0: left allmulticast mode [ 793.559759][T31431] IPVS: stop unused estimator thread 0... [ 793.698546][T18413] loop7: detected capacity change from 0 to 512 [ 793.738006][T18413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.757459][T18413] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.805963][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 793.830182][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.283445][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 794.538109][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 794.538125][ T28] audit: type=1400 audit(1784499437.920:17341): avc: denied { write } for pid=18486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.675915][ T28] audit: type=1400 audit(1784499438.060:17342): avc: denied { write } for pid=18507 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.762188][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 795.397087][T18533] bridge_slave_0: default FDB implementation only supports local addresses [ 795.651343][T31435] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 795.674636][T18564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17301'. [ 795.753511][ T28] audit: type=1400 audit(1784499439.130:17343): avc: denied { write } for pid=18574 comm="syz.3.17306" path="socket:[152103]" dev="sockfs" ino=152103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 796.015013][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.027380][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.043658][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.081145][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.450167][T18622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.477132][T18622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.956278][T31429] Bluetooth: hci0: Frame reassembly failed (-84) [ 796.969414][ T28] audit: type=1400 audit(1784499440.350:17344): avc: denied { ioctl } for pid=18649 comm="syz.6.17334" path="socket:[152770]" dev="sockfs" ino=152770 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 798.424434][ T3412] net_ratelimit: 35 callbacks suppressed [ 798.424452][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.586500][T18679] dummy0: entered allmulticast mode [ 798.610161][T18679] dummy0: left allmulticast mode [ 798.983917][ T3796] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 799.047107][T18745] dummy0: entered allmulticast mode [ 799.066103][T18745] dummy0: left allmulticast mode [ 799.085897][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.099813][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.127321][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.159322][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.199107][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.213391][T18761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=18761 comm=syz.2.17367 [ 799.227611][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.236745][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.257370][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.266328][T22005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.368289][T18767] 9pnet: p9_errstr2errno: server reported unknown error e_0 [ 799.404072][T18781] bridge2: entered promiscuous mode [ 799.409891][T18781] bridge2: entered allmulticast mode [ 799.432108][T18786] xt_hashlimit: size too large, truncated to 1048576 [ 799.979527][T18848] sg_write: data in/out 491520/136 bytes for SCSI command 0x0-- guessing data in; [ 799.979527][T18848] program syz.7.17383 not setting count and/or reply_len properly [ 800.140503][ T28] audit: type=1400 audit(1784499443.520:17345): avc: denied { write } for pid=18862 comm="syz.7.17390" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 800.181736][ T28] audit: type=1400 audit(1784499443.550:17346): avc: denied { ioctl } for pid=18862 comm="syz.7.17390" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 800.533888][T18882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17397'. [ 800.617187][T18888] netlink: 27 bytes leftover after parsing attributes in process `syz.3.17399'. [ 801.815726][ T28] audit: type=1400 audit(1784499445.200:17347): avc: denied { write } for pid=18945 comm="syz.2.17423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 802.022838][T18960] loop7: detected capacity change from 0 to 128 [ 802.038340][T18962] loop6: detected capacity change from 0 to 128 [ 802.063682][T18962] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 802.099026][T18962] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 802.449040][T18972] netlink: 'syz.3.17436': attribute type 4 has an invalid length. [ 802.504592][T18976] netlink: 'syz.3.17436': attribute type 4 has an invalid length. [ 802.930109][T13732] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 803.343214][T19016] bond0: entered promiscuous mode [ 803.369437][T19024] bond0: left promiscuous mode [ 803.443774][T19080] netlink: 'syz.9.17445': attribute type 39 has an invalid length. [ 803.474867][T22000] net_ratelimit: 254 callbacks suppressed [ 803.474954][T22000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.547264][T19097] loop7: detected capacity change from 0 to 512 [ 803.566614][T19091] xt_hashlimit: size too large, truncated to 1048576 [ 803.579047][T19097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.596671][ T28] audit: type=1400 audit(1784499446.980:17348): avc: denied { write } for pid=19096 comm="syz.7.17453" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.623156][ T28] audit: type=1400 audit(1784499447.000:17349): avc: denied { write } for pid=19096 comm="syz.7.17453" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 803.646683][T22014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.688562][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.732142][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17459'. [ 803.776235][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17459'. [ 803.908814][T19130] loop7: detected capacity change from 0 to 256 [ 803.930881][ T28] audit: type=1400 audit(1784499447.310:17350): avc: denied { write } for pid=22015 comm="kworker/1:10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=153289 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 804.032415][ T28] audit: type=1400 audit(1784499447.410:17351): avc: denied { ioctl } for pid=19134 comm="syz.6.17467" path="socket:[153307]" dev="sockfs" ino=153307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 804.168445][ T28] audit: type=1400 audit(1784499447.550:17352): avc: denied { listen } for pid=19152 comm="syz.6.17475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 804.235326][T22015] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 804.254340][T22015] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 804.446081][ T28] audit: type=1400 audit(1784499447.830:17353): avc: denied { write } for pid=19164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.450727][T19167] loop6: detected capacity change from 0 to 512 [ 804.527204][ T28] audit: type=1400 audit(1784499447.910:17354): avc: denied { write } for pid=19178 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.616612][T19167] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 804.647680][T19190] xt_hashlimit: size too large, truncated to 1048576 [ 804.666315][T22015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.670059][T19167] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.17480: corrupted in-inode xattr: e_value size too large [ 804.733200][T19167] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 804.734261][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 804.751268][ C0] EXT4-fs (loop6): initial error at time 1784499448: ext4_iget_extra_inode:5180: inode 15 [ 804.761878][ C0] EXT4-fs (loop6): last error at time 1784499448: ext4_iget_extra_inode:5180: inode 15 [ 804.812777][T19167] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.17480: couldn't read orphan inode 15 (err -117) [ 804.828576][T19167] loop6: lost filesystem error report for type 5 error -117 [ 804.862431][T19167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.082882][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.124388][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17494'. [ 805.145722][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 805.145749][ T28] audit: type=1400 audit(1784499448.530:17356): avc: denied { accept } for pid=19211 comm="syz.6.17490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 805.345056][T19244] netlink: 'syz.3.17503': attribute type 39 has an invalid length. [ 805.411404][ T28] audit: type=1400 audit(1784499448.790:17357): avc: denied { write } for pid=19221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.462327][ T28] audit: type=1400 audit(1784499448.840:17358): avc: denied { write } for pid=19253 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.625514][T19269] sg_write: data in/out 463004/136 bytes for SCSI command 0x0-- guessing data in; [ 805.625514][T19269] program syz.3.17511 not setting count and/or reply_len properly [ 805.704049][T22014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.842693][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17520'. [ 805.900784][ T28] audit: type=1400 audit(1784499449.280:17359): avc: denied { write } for pid=19289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.998304][ T28] audit: type=1400 audit(1784499449.320:17360): avc: denied { write } for pid=19307 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.130471][ T28] audit: type=1400 audit(1784499449.510:17361): avc: denied { write } for pid=19315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.175392][ T28] audit: type=1400 audit(1784499449.560:17362): avc: denied { write } for pid=19334 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.277650][T19342] sg_write: data in/out 463004/136 bytes for SCSI command 0x0-- guessing data in; [ 806.277650][T19342] program syz.7.17528 not setting count and/or reply_len properly [ 806.332119][T19352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.340479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.349458][T19351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.358340][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.367240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.504966][T22000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.922010][T19392] loop7: detected capacity change from 0 to 512 [ 806.937824][T19392] EXT4-fs: Ignoring removed bh option [ 806.950648][T19392] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 806.979737][T19392] EXT4-fs (loop7): 1 truncate cleaned up [ 806.987543][ T28] audit: type=1400 audit(1784499706.356:17363): avc: denied { wake_alarm } for pid=19399 comm="syz.2.17552" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 807.012037][T19392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.038101][ T28] audit: type=1400 audit(1784499706.416:17364): avc: denied { getopt } for pid=19404 comm="syz.6.17555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 807.096306][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.327146][ T28] audit: type=1400 audit(1784499706.706:17365): avc: denied { compute_member } for pid=19438 comm="syz.6.17570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 807.346558][T19429] loop7: detected capacity change from 0 to 512 [ 807.469323][T19454] loop6: detected capacity change from 0 to 512 [ 807.496372][T19429] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 807.496913][T19454] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 807.525988][T19429] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.17564: corrupted in-inode xattr: e_value size too large [ 807.549566][T19454] EXT4-fs (loop6): 1 truncate cleaned up [ 807.557292][T19454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.579460][T19429] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 807.583886][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 807.599539][ C1] EXT4-fs (loop7): initial error at time 1784499706: ext4_iget_extra_inode:5180: inode 15 [ 807.609512][ C1] EXT4-fs (loop7): last error at time 1784499706: ext4_iget_extra_inode:5180: inode 15 [ 807.636163][T19429] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.17564: couldn't read orphan inode 15 (err -117) [ 807.670341][T19429] loop7: lost filesystem error report for type 5 error -117 [ 807.838322][T19429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.920810][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.036280][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.397064][T19484] loop6: detected capacity change from 0 to 512 [ 808.423003][T19484] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 808.438576][T19484] System zones: 1-12 [ 808.454614][T19484] EXT4-fs (loop6): 1 truncate cleaned up [ 808.460805][T19484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.487991][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.533353][T19490] loop6: detected capacity change from 0 to 512 [ 808.556434][T19490] EXT4-fs: Ignoring removed mblk_io_submit option [ 808.586661][T19490] EXT4-fs (loop6): orphan cleanup on readonly fs [ 808.601413][T19490] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 808.628939][T19490] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.17591: attempt to clear invalid blocks 2 len 1 [ 808.657928][T19492] syzkaller0: entered promiscuous mode [ 808.668893][T19490] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 808.669049][T19492] syzkaller0: entered allmulticast mode [ 808.673012][T19490] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, [ 808.678916][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 808.678943][ C0] EXT4-fs (loop6): initial error at time 1784499708: ext4_clear_blocks:876: inode 13 [ 808.678979][ C0] EXT4-fs (loop6): last error at time 1784499708: ext4_clear_blocks:876: inode 13 [ 808.718792][T19490] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 808.743081][T19490] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.17591: invalid indirect mapped block 1819239214 (level 0) [ 808.786228][T19490] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 808.786411][T19490] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.17591: invalid indirect mapped block 1819239214 (level 1) [ 808.811478][T19490] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 808.811983][T19490] EXT4-fs (loop6): 1 truncate cleaned up [ 808.826031][ T3412] net_ratelimit: 2 callbacks suppressed [ 808.826068][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.834738][T19490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 808.971272][T14615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.384857][T22000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.549491][T22000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.758009][T19528] loop7: detected capacity change from 0 to 512 [ 809.785475][T19528] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.17607: bad orphan inode 15 [ 809.795906][T19528] loop7: lost filesystem error report for type 5 error -117 [ 809.797565][T19528] ext4_test_bit(bit=14, block=5) = 0 [ 809.804947][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 809.804968][ C1] EXT4-fs (loop7): initial error at time 1784499709: ext4_orphan_get:1425 [ 809.804990][ C1] EXT4-fs (loop7): last error at time 1784499709: ext4_orphan_get:1425 [ 809.865327][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.882540][T19528] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.921173][T19528] EXT4-fs error (device loop7): __ext4_new_inode:1081: comm syz.7.17607: reserved inode found cleared - inode=1 [ 809.954948][T19528] EXT4-fs (loop7): shut down requested (1) [ 810.013149][ T2981] ================================================================== [ 810.021310][ T2981] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 810.029371][ T2981] [ 810.031727][ T2981] write to 0xffff888105b07f30 of 8 bytes by task 10168 on cpu 0: [ 810.039481][ T2981] dentry_unlink_inode+0x65/0x260 [ 810.044570][ T2981] d_delete+0x164/0x180 [ 810.048771][ T2981] d_delete_notify+0x32/0x100 [ 810.053482][ T2981] vfs_unlink+0x287/0x490 [ 810.057848][ T2981] filename_unlinkat+0x1dc/0x410 [ 810.062830][ T2981] __se_sys_unlink+0x2b/0xe0 [ 810.067456][ T2981] __x64_sys_unlink+0x1f/0x30 [ 810.072175][ T2981] x64_sys_call+0x2eb6/0x3020 [ 810.076888][ T2981] do_syscall_64+0x136/0x3c0 [ 810.081515][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.087453][ T2981] [ 810.089811][ T2981] read to 0xffff888105b07f30 of 8 bytes by task 2981 on cpu 1: [ 810.097385][ T2981] step_into_slowpath+0x12c/0x4c0 [ 810.102487][ T2981] path_lookupat+0x2eb/0x4c0 [ 810.107129][ T2981] filename_lookup+0x18f/0x390 [ 810.111936][ T2981] do_readlinkat+0x74/0x2f0 [ 810.116485][ T2981] __x64_sys_readlink+0x47/0x60 [ 810.121380][ T2981] x64_sys_call+0x2b51/0x3020 [ 810.126106][ T2981] do_syscall_64+0x136/0x3c0 [ 810.130735][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.136681][ T2981] [ 810.139024][ T2981] value changed: 0xffff8881232398f8 -> 0x0000000000000000 [ 810.146157][ T2981] [ 810.148509][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 810.154721][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 810.165189][ T2981] Tainted: [W]=WARN [ 810.169024][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.179114][ T2981] ================================================================== [ 810.189289][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.216422][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 810.216442][ T28] audit: type=1326 audit(1784499709.596:17372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19540 comm="syz.6.17611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac06d6de99 code=0x0 [ 810.278432][T16975] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.302109][T19547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.310973][T19547] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 810.664749][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.904554][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.944095][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.025144][ T3412] net_ratelimit: 3 callbacks suppressed [ 814.025163][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.064011][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.104811][ T3412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.744620][T22000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.144131][T22014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.183983][T22014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.224781][T22014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.624250][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.784406][T22000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog