last executing test programs: 1m56.44046332s ago: executing program 32 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 'syzkaller0\x00'}) 1m39.940586418s ago: executing program 1 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 1m39.855762249s ago: executing program 1 (id=879): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x400000000000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48085}, 0x10) 1m39.604225865s ago: executing program 1 (id=881): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m39.604078805s ago: executing program 33 (id=881): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m12.031087482s ago: executing program 5 (id=1602): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003e40), 0x403) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x20000000}) 1m11.960773193s ago: executing program 5 (id=1603): unshare(0x60000600) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m11.599504231s ago: executing program 5 (id=1614): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 1m11.558409043s ago: executing program 5 (id=1619): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000440)={[{@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@nodots}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@fat=@sys_immutable}, {@fat=@nfs}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1m11.424445006s ago: executing program 5 (id=1623): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @remote}, 0x10) 1m10.920465878s ago: executing program 5 (id=1644): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0x80000ff, 0x0, 0x0, 0x8000000000008, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0xfffffffffffffffe, 0x100000000, 0x3, 0x0, 0x8aca, 0x0, 0x100}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m10.920270868s ago: executing program 34 (id=1644): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0x80000ff, 0x0, 0x0, 0x8000000000008, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0xfffffffffffffffe, 0x100000000, 0x3, 0x0, 0x8aca, 0x0, 0x100}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m8.419620986s ago: executing program 3 (id=1691): r0 = fsopen(&(0x7f0000000400)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) unshare(0x20000400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfffffffa, r1, 0x4, 0x7}, 0x38) 1m8.339036598s ago: executing program 3 (id=1692): symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 1m8.24968103s ago: executing program 3 (id=1695): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m7.316287742s ago: executing program 3 (id=1714): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1204040, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x2b05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m7.230388844s ago: executing program 3 (id=1716): setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e21, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1m7.042465029s ago: executing program 3 (id=1722): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000008b, 0x0, 0x0, 0x0, 0x0) 1m7.031715959s ago: executing program 35 (id=1722): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000008b, 0x0, 0x0, 0x0, 0x0) 1m0.819681314s ago: executing program 7 (id=1886): sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) 1m0.773314225s ago: executing program 7 (id=1888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24000810) 1m0.712365877s ago: executing program 7 (id=1889): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x6}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={r1, 0x6}, 0x8) 1m0.668745278s ago: executing program 7 (id=1891): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m0.656126738s ago: executing program 7 (id=1892): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f00000004c0)={0x3, 0x1}, &(0x7f00000004c0)) 1m0.120896301s ago: executing program 7 (id=1899): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8007}, 0x1c) listen(r0, 0x10) 1m0.072606312s ago: executing program 36 (id=1899): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8007}, 0x1c) listen(r0, 0x10) 18.440975528s ago: executing program 9 (id=2986): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x2, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000ff8800135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.37950546s ago: executing program 9 (id=2995): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010"], 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15.289551731s ago: executing program 9 (id=2997): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, &(0x7f0000000040)) 15.288956571s ago: executing program 9 (id=2999): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0xf5) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8000, 0x7fff, 0x18) 15.155097695s ago: executing program 9 (id=3001): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) 14.797185993s ago: executing program 9 (id=3019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000012800"], 0xfdef) 14.758597424s ago: executing program 37 (id=3019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000012800"], 0xfdef) 3.337509502s ago: executing program 0 (id=3304): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = io_uring_setup(0x462, &(0x7f0000000180)={0x0, 0xaefa, 0x2, 0x40, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/5, 0x5) 3.236495724s ago: executing program 0 (id=3317): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000008b80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="cfab", 0x2}], 0x1}}], 0x1, 0x240408d1) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000001c0)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, 0x84) 2.55017107s ago: executing program 0 (id=3319): dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000001700030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140000000000000000014000000110001"], 0xa4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) 2.518948961s ago: executing program 0 (id=3311): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a8f480, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x82, 0x10}, 0x18) 2.458245442s ago: executing program 0 (id=3315): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) 2.184249569s ago: executing program 0 (id=3326): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 2.184079349s ago: executing program 38 (id=3326): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 1.341958909s ago: executing program 8 (id=3337): ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f00000003c0)={&(0x7f0000000200)=[{0x7, 0x10001, 0x8, 0x8000000000000001, 0x7f}, {0x1d97, 0xe87a, 0x401, 0x101, 0x2}, {0x7, 0x6, 0x80000001, 0x0, 0x842b}, {0x1000, 0x1, 0xecd, 0x156a, 0x7}, {0x5, 0x40, 0x7fff, 0x1, 0xe}, {0x7, 0x1, 0x4, 0x80, 0x5c}, {0x9, 0x100000000, 0x5, 0x6, 0x6}], 0x7, 0x28, 0x100, 0x4325}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106, 0x2}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.29745668s ago: executing program 8 (id=3338): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) 1.234683911s ago: executing program 8 (id=3340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1, 0x81000009, 0x10401) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.092303404s ago: executing program 2 (id=3341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r2}, 0x20) 1.042670365s ago: executing program 2 (id=3343): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 935.497538ms ago: executing program 8 (id=3346): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 879.195309ms ago: executing program 2 (id=3348): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000001f80)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1, 0x81, 0x9) 874.2941ms ago: executing program 8 (id=3349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="25ee", 0x2, 0x48899, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 829.74309ms ago: executing program 2 (id=3351): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)={0x14, r1, 0x303, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40008081}, 0x20008840) 602.901016ms ago: executing program 2 (id=3353): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1100, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) 466.479349ms ago: executing program 2 (id=3354): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x7ff, 0x200007}) 423.63776ms ago: executing program 4 (id=3356): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 352.468222ms ago: executing program 4 (id=3359): r0 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x801, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3121, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x50}}, 0x400c040) 333.021482ms ago: executing program 6 (id=3360): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e25, @multicast1}, 0x10) 302.633533ms ago: executing program 6 (id=3361): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 266.094224ms ago: executing program 4 (id=3364): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) 264.143254ms ago: executing program 6 (id=3374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) socket$nl_netfilter(0x10, 0x3, 0xc) 159.419426ms ago: executing program 1 (id=3327): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={r2, 0x6, 0x1, "a4"}, 0x9) 158.443176ms ago: executing program 6 (id=3376): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2800}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 156.873736ms ago: executing program 4 (id=3377): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 95.879678ms ago: executing program 1 (id=3366): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1100, &(0x7f0000000100)={0x5, 0x8, 0x100000}, 0x20) 95.642647ms ago: executing program 6 (id=3367): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[], 0x20) 73.782868ms ago: executing program 4 (id=3368): syz_open_dev$usbfs(&(0x7f0000000240), 0x8000002, 0x141800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0x5]}, 0x0, &(0x7f0000000140), 0x8) 43.087899ms ago: executing program 1 (id=3369): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x22eb, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$unix(0x1, 0x1, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 12.18408ms ago: executing program 6 (id=3370): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000000)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 438.89µs ago: executing program 8 (id=3371): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 0s ago: executing program 4 (id=3372): rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kernel console output (not intermixed with test programs): pe 2 family 0 port 6081 - 0 [ 104.249509][ T40] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.337316][ T40] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.468791][ T40] bridge_slave_1: left allmulticast mode [ 104.477418][ T40] bridge_slave_1: left promiscuous mode [ 104.490157][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.498283][ T40] bridge_slave_0: left allmulticast mode [ 104.504220][ T40] bridge_slave_0: left promiscuous mode [ 104.510211][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.583123][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.593362][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.604396][ T40] bond0 (unregistering): Released all slaves [ 104.678352][ T40] hsr_slave_0: left promiscuous mode [ 104.698331][ T40] hsr_slave_1: left promiscuous mode [ 104.707523][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.715381][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.723288][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.731483][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.742609][ T40] veth1_macvtap: left promiscuous mode [ 104.748161][ T40] veth0_macvtap: left promiscuous mode [ 104.754354][ T40] veth1_vlan: left promiscuous mode [ 104.759707][ T40] veth0_vlan: left promiscuous mode [ 104.839519][ T40] team0 (unregistering): Port device team_slave_1 removed [ 104.853562][ T40] team0 (unregistering): Port device team_slave_0 removed [ 104.887448][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 105.032971][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 105.058519][ T8788] loop2: detected capacity change from 0 to 128 [ 105.065211][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.066410][ T8788] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 105.077865][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.082950][ T8788] FAT-fs (loop2): data area starts beyond volume (36 > 6) [ 105.096183][ T8788] FAT-fs (loop2): Can't find a valid FAT filesystem [ 105.103324][ T8707] bridge_slave_0: entered allmulticast mode [ 105.110103][ T8707] bridge_slave_0: entered promiscuous mode [ 105.117174][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.125650][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.132915][ T8707] bridge_slave_1: entered allmulticast mode [ 105.139427][ T8707] bridge_slave_1: entered promiscuous mode [ 105.162244][ T8707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.175360][ T8707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.200720][ T8707] team0: Port device team_slave_0 added [ 105.207948][ T8707] team0: Port device team_slave_1 added [ 105.224377][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.231513][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.261558][ T8707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.275528][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.282918][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.318369][ T8707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.337341][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 105.337354][ T28] audit: type=1400 audit(1784254081.307:1474): avc: denied { write } for pid=8807 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.362177][ T8707] hsr_slave_0: entered promiscuous mode [ 105.383569][ T8707] hsr_slave_1: entered promiscuous mode [ 105.401003][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 105.586137][ T8707] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 105.625122][ T8707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.661824][ T8707] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 105.680171][ T28] audit: type=1400 audit(1784254081.647:1475): avc: denied { write } for pid=8825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.739045][ T28] audit: type=1400 audit(1784254081.707:1476): avc: denied { write } for pid=8848 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.762664][ T8707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.772070][ T8707] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 105.792377][ T8707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.802416][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 105.830075][ T8707] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 105.871841][ T8707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.018909][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.216745][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.228767][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.235847][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.270416][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.270451][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.412889][ T28] audit: type=1400 audit(1784254082.387:1477): avc: denied { write } for pid=8892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.480851][ T28] audit: type=1400 audit(1784254082.407:1478): avc: denied { write } for pid=8918 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.581769][ T8707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.736982][ T8707] veth0_vlan: entered promiscuous mode [ 106.764479][ T8707] veth1_vlan: entered promiscuous mode [ 106.804028][ T8707] veth0_macvtap: entered promiscuous mode [ 106.825163][ T8707] veth1_macvtap: entered promiscuous mode [ 106.871619][ T8967] team0: No ports can be present during mode change [ 106.879731][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.908571][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.927918][ T8969] loop4: detected capacity change from 0 to 512 [ 106.940844][ T361] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.967916][ T361] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.990352][ T8969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.022084][ T361] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.031176][ T361] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.040375][ T8969] ext4 filesystem being mounted at /371/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.081982][ T28] audit: type=1400 audit(1784254083.057:1479): avc: denied { write } for pid=8968 comm="syz.4.1964" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.122977][ T28] audit: type=1400 audit(1784254083.057:1480): avc: denied { write } for pid=8968 comm="syz.4.1964" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.163121][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.177188][ T8986] loop9: detected capacity change from 0 to 256 [ 107.266061][ T28] audit: type=1400 audit(1784254083.237:1481): avc: denied { bind } for pid=8993 comm="syz.8.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.293321][ T8998] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 107.315621][ T28] audit: type=1400 audit(1784254083.237:1482): avc: denied { write } for pid=8989 comm="syz.4.1968" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.339264][ T9004] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1976'. [ 107.409140][ T28] audit: type=1400 audit(1784254083.377:1483): avc: denied { write } for pid=8981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.479348][ T9024] loop9: detected capacity change from 0 to 512 [ 107.500768][ T9024] EXT4-fs (loop9): unable to read superblock [ 108.043862][ T9072] loop6: detected capacity change from 0 to 512 [ 108.085444][ T9072] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 108.104521][ T9072] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1988: corrupted in-inode xattr: e_value size too large [ 108.123491][ T9072] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.123637][ T9072] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1988: couldn't read orphan inode 15 (err -117) [ 108.132841][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 108.132875][ C0] EXT4-fs (loop6): initial error at time 1784254084: ext4_iget_extra_inode:5180: inode 15 [ 108.132901][ C0] EXT4-fs (loop6): last error at time 1784254084: ext4_iget_extra_inode:5180: inode 15 [ 108.171215][ T9072] loop6: lost filesystem error report for type 5 error -117 [ 108.171941][ T9072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.208545][ T5780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.960614][ T9124] loop9: detected capacity change from 0 to 512 [ 108.991936][ T9124] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 109.013844][ T9124] EXT4-fs (loop9): 1 truncate cleaned up [ 109.020147][ T9124] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.068565][ T8707] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.399920][ T3810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.424555][ T9143] loop8: detected capacity change from 0 to 128 [ 109.441044][ T9143] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.473679][ T9143] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.623388][ T8165] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.636144][ T9154] loop6: detected capacity change from 0 to 1024 [ 109.643538][ T9154] EXT4-fs: Ignoring removed bh option [ 109.663549][ T9154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.699908][ T5780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.719969][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.760635][ T9162] netlink: 'syz.4.2022': attribute type 1 has an invalid length. [ 109.823762][ T9162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.068915][ T9174] loop8: detected capacity change from 0 to 2048 [ 110.095680][ T9185] loop4: detected capacity change from 0 to 512 [ 110.132791][ T9174] Alternate GPT is invalid, using primary GPT. [ 110.143498][ T9185] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.150298][ T9174] loop8: p2 p3 p7 [ 110.175491][ T9185] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 110.209832][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 110.216314][ C1] EXT4-fs (loop4): initial error at time 1784254086: ext4_mb_generate_buddy:1317 [ 110.225462][ C1] EXT4-fs (loop4): last error at time 1784254086: ext4_mb_generate_buddy:1317 [ 110.266959][ T9185] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2031: Failed to acquire dquot type 1 [ 110.280571][ T9185] loop4: lost filesystem error report for type 5 error -28 [ 110.289041][ T9185] EXT4-fs (loop4): 1 truncate cleaned up [ 110.313834][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 110.321573][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 110.324872][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 110.359890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.372398][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2034'. [ 110.377380][ T9185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.453604][ T9185] EXT4-fs (loop4): shut down requested (2) [ 110.462239][ T9209] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 110.470501][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 110.470515][ T28] audit: type=1400 audit(1784254086.447:1500): avc: denied { remount } for pid=9183 comm="syz.4.2031" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.565758][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.639582][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2043'. [ 110.648579][ T28] audit: type=1400 audit(1784254086.617:1501): avc: denied { shutdown } for pid=9219 comm="syz.4.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.690886][ T9222] netlink: 'syz.8.2043': attribute type 30 has an invalid length. [ 110.733316][ T9222] vxlan0: entered promiscuous mode [ 110.736927][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2043'. [ 110.754161][ T9222] vxlan0: entered allmulticast mode [ 110.765285][ T9226] netlink: 'syz.8.2043': attribute type 30 has an invalid length. [ 110.778949][ T3476] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.801162][ T3476] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.845766][ T9226] vxlan1: entered promiscuous mode [ 110.860002][ T9226] vxlan1: entered allmulticast mode [ 110.878194][ T9234] netlink: 'syz.4.2048': attribute type 29 has an invalid length. [ 110.897637][ T3476] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.925916][ T3476] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.972182][ T9242] loop8: detected capacity change from 0 to 512 [ 111.014649][ T9242] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 111.029487][ T9242] System zones: 0-2, 18-18, 34-35 [ 111.058578][ T9242] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.097214][ T9242] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.102979][ T9251] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.189621][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.334829][ T9251] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16385) [ 111.361232][ T9251] FAT-fs (loop9): Filesystem has been set read-only [ 111.378890][ T9251] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16385) [ 111.393475][ T9251] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16385) [ 111.429152][ T9251] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16385) [ 111.476656][ T9251] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16385) [ 111.504637][ T9251] FAT-fs (loop9): error, corrupted file size (i_pos 196, 16385) [ 111.505394][ T28] audit: type=1400 audit(1784254087.477:1502): avc: denied { write } for pid=9264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.606245][ T28] audit: type=1400 audit(1784254087.557:1503): avc: denied { write } for pid=9294 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.683687][ T9309] blkio.reset_stats is deprecated [ 111.735877][ T9314] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2076: corrupted in-inode xattr: invalid ea_ino [ 111.774559][ T28] audit: type=1326 audit(1784254087.737:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.9.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140d5de59 code=0x7ffc0000 [ 111.801888][ T9314] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.802082][ T9314] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2076: couldn't read orphan inode 15 (err -117) [ 111.811247][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 111.811267][ C0] EXT4-fs (loop2): initial error at time 1784254087: ext4_iget_extra_inode:5180: inode 15 [ 111.811296][ C0] EXT4-fs (loop2): last error at time 1784254087: ext4_iget_extra_inode:5180: inode 15 [ 111.854221][ T28] audit: type=1326 audit(1784254087.737:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.9.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140d5de59 code=0x7ffc0000 [ 111.887138][ T9314] loop2: lost filesystem error report for type 5 error -117 [ 111.888083][ T9314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.912474][ T28] audit: type=1326 audit(1784254087.737:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.9.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140d5de59 code=0x7ffc0000 [ 111.943009][ T28] audit: type=1326 audit(1784254087.737:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.9.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140d5de59 code=0x7ffc0000 [ 111.969366][ T28] audit: type=1326 audit(1784254087.737:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.9.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb140d5de59 code=0x7ffc0000 [ 111.995590][ T28] audit: type=1326 audit(1784254087.737:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9318 comm="syz.9.2077" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb140d5de59 code=0x7ffc0000 [ 112.002719][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.146904][ T9337] netlink: 'syz.2.2084': attribute type 1 has an invalid length. [ 112.158967][ T9337] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2084'. [ 112.280199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.663052][ T9393] set_capacity_and_notify: 3 callbacks suppressed [ 112.663069][ T9393] loop2: detected capacity change from 0 to 512 [ 112.677627][ T9393] EXT4-fs: Ignoring removed orlov option [ 112.704556][ T9393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.736972][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.857600][ T9410] loop2: detected capacity change from 0 to 256 [ 112.933288][ T9414] syzkaller1: entered allmulticast mode [ 113.487014][ T9460] loop9: detected capacity change from 0 to 256 [ 113.720595][ T4417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.736216][ T9476] loop9: detected capacity change from 0 to 4096 [ 113.743669][ T9476] EXT4-fs: dax option not supported [ 114.154402][ T9499] loop9: detected capacity change from 0 to 512 [ 114.163252][ T9499] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.262873][ T9509] loop4: detected capacity change from 0 to 1024 [ 114.276749][ T9507] bond2: ARP target 9.0.0.0 is already present [ 114.290668][ T9509] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 114.308353][ T9507] bond2: option arp_ip_target: invalid value (9) [ 114.329037][ T9507] bond2 (unregistering): Released all slaves [ 114.344142][ T9511] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2142'. [ 114.353933][ T9505] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2142'. [ 114.398850][ T9513] loop6: detected capacity change from 0 to 8192 [ 114.430805][ T9517] netlink: 'syz.2.2147': attribute type 29 has an invalid length. [ 114.474509][ T9513] loop6: p1 p3 p4 [ 114.484105][ T9513] loop6: p3 start 117772289 is beyond EOD, truncated [ 114.488142][ T9527] loop9: detected capacity change from 0 to 512 [ 114.505696][ T9527] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #2: comm syz.9.2152: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 114.519981][ T9513] loop6: p4 size 4281074432 extends beyond EOD, [ 114.525192][ T9527] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 114.529638][ T9513] truncated [ 114.544491][ T9527] EXT4-fs (loop9): get root inode failed [ 114.550148][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 114.550185][ C1] EXT4-fs (loop9): last error at time 1784254090: ext4_ext_check_inode:521: inode 2 [ 114.570319][ T9527] EXT4-fs (loop9): mount failed [ 114.586126][ T9527] loop9: detected capacity change from 0 to 512 [ 114.622226][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 114.624290][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 114.692694][ T9537] loop2: detected capacity change from 0 to 512 [ 114.716545][ T9537] EXT4-fs: Ignoring removed nobh option [ 114.724551][ T9537] ext4: Unknown parameter 'nodelalloc..' [ 114.767053][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 114.778811][ T9547] netlink: 'syz.2.2161': attribute type 10 has an invalid length. [ 114.789205][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2161'. [ 114.808468][ T9547] geneve4: entered promiscuous mode [ 114.813991][ T9547] geneve4: entered allmulticast mode [ 114.834216][ T9552] netlink: 'syz.9.2162': attribute type 29 has an invalid length. [ 115.099907][ T9580] netlink: 'syz.6.2175': attribute type 29 has an invalid length. [ 115.590736][ T9603] msdos: Bad value for 'time_offset' [ 115.694393][ T9613] syzkaller1: entered promiscuous mode [ 115.699991][ T9613] syzkaller1: entered allmulticast mode [ 115.771571][ T9619] netlink: 'syz.8.2193': attribute type 3 has an invalid length. [ 115.783315][ T9619] netlink: 'syz.8.2193': attribute type 2 has an invalid length. [ 115.792711][ T9619] netlink: 'syz.8.2193': attribute type 9 has an invalid length. [ 115.809957][ T9619] netlink: 'syz.8.2193': attribute type 7 has an invalid length. [ 115.823742][ T9619] netlink: 198664 bytes leftover after parsing attributes in process `syz.8.2193'. [ 116.202449][ T9635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.220991][ T9635] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.256010][ T3476] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.267527][ T28] kauditd_printk_skb: 359 callbacks suppressed [ 116.267544][ T28] audit: type=1400 audit(1784254092.237:1869): avc: denied { create } for pid=9639 comm="syz.6.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.306319][ T28] audit: type=1400 audit(1784254092.267:1870): avc: denied { write } for pid=9634 comm="syz.4.2197" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.330066][ T28] audit: type=1400 audit(1784254092.267:1871): avc: denied { write } for pid=9634 comm="syz.4.2197" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.352286][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.361555][ T28] audit: type=1400 audit(1784254092.277:1872): avc: denied { ioctl } for pid=9639 comm="syz.6.2201" path="socket:[25936]" dev="sockfs" ino=25936 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.432500][ T28] audit: type=1400 audit(1784254092.407:1873): avc: denied { connect } for pid=9647 comm="syz.4.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.483374][ T28] audit: type=1400 audit(1784254092.437:1874): avc: denied { bind } for pid=9647 comm="syz.4.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 116.534642][ T28] audit: type=1400 audit(1784254092.487:1875): avc: denied { execute } for pid=9649 comm="syz.4.2205" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 116.567949][ T9652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.864621][ T9665] geneve0: entered promiscuous mode [ 116.878283][ T9665] batadv0: entered promiscuous mode [ 116.890132][ T9665] debugfs: 'hsr1' already exists in 'hsr' [ 116.896577][ T9665] Cannot create hsr debugfs directory [ 117.094612][ T9679] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.105723][ T9679] EXT4-fs (loop2): 1 truncate cleaned up [ 117.112141][ T9679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.139651][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.255150][ T9691] bridge1: entered promiscuous mode [ 117.417460][ T28] audit: type=1326 audit(1784254093.387:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.8.2227" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48aa4bde59 code=0x0 [ 117.495851][ T28] audit: type=1400 audit(1784254093.467:1877): avc: denied { write } for pid=9701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.538370][ T28] audit: type=1400 audit(1784254093.507:1878): avc: denied { write } for pid=9720 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.006755][ T9766] raw_sendmsg: syz.9.2236 forgot to set AF_INET. Fix it! [ 118.089228][ T9772] set_capacity_and_notify: 4 callbacks suppressed [ 118.089322][ T9772] loop2: detected capacity change from 0 to 2048 [ 118.141910][ T9772] Alternate GPT is invalid, using primary GPT. [ 118.149695][ T9772] loop2: p2 p3 p7 [ 118.223599][ T9785] netlink: 'syz.2.2245': attribute type 26 has an invalid length. [ 118.280043][ T3810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.449105][ T9816] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2259'. [ 118.462078][ T9816] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2259'. [ 118.480136][ T9818] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9818 comm=syz.2.2260 [ 118.923245][ T9872] ipvlan0: entered promiscuous mode [ 118.928913][ T9872] ipvlan0: entered allmulticast mode [ 118.934939][ T9872] gretap0: entered allmulticast mode [ 118.953273][ T9872] team0: Device ipvlan0 failed to register rx_handler [ 119.152318][ T3398] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 119.160277][ T3398] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.614421][ T9916] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2297'. [ 119.683030][ T9927] loop2: detected capacity change from 0 to 256 [ 119.722414][ T9923] loop9: detected capacity change from 0 to 4096 [ 119.745730][ T9923] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.760871][ T9923] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 119.773483][ T9923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.783458][ T9923] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 119.807125][ T8707] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.825614][ T9938] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 119.878499][ T11] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.897075][ T11] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.262398][ T9962] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.636095][ T9962] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.734215][ T9962] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.796903][ T9962] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.889621][ T49] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.904434][ T49] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.920124][ T49] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.932533][ T49] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.997104][ T9992] loop2: detected capacity change from 0 to 512 [ 121.033078][ T9992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.051224][ T9992] ext4 filesystem being mounted at /498/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.092428][ T9999] SELinux: syz.6.2330 (9999) wrote to user. This is no longer supported. [ 121.117293][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.320918][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 121.320982][ T28] audit: type=1400 audit(1784254097.207:1908): avc: denied { write } for pid=10014 comm="syz.2.2336" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 122.119684][T10046] syzkaller1: entered promiscuous mode [ 122.143114][T10046] syzkaller1: entered allmulticast mode [ 122.294541][T10062] dummy0: entered allmulticast mode [ 122.300247][T10062] dummy0: left allmulticast mode [ 122.325024][T10065] program syz.4.2359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.365597][T10070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10070 comm=syz.4.2360 [ 122.384708][ T28] audit: type=1326 audit(1784254098.357:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10057 comm="syz.8.2356" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48aa4bde59 code=0x0 [ 122.641460][T10096] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2370'. [ 122.832995][T10112] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 122.852873][T10116] loop2: detected capacity change from 0 to 512 [ 123.119734][ T28] audit: type=1400 audit(1784254099.087:1910): avc: denied { map } for pid=10124 comm="syz.2.2382" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.163692][T10129] loop8: detected capacity change from 0 to 512 [ 123.175942][T10129] EXT4-fs: Ignoring removed nobh option [ 123.197552][T10129] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #3: comm syz.8.2384: corrupted inode contents [ 123.216304][T10129] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.216635][T10129] EXT4-fs (loop8): Remounting filesystem read-only [ 123.225715][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 123.225731][ C0] EXT4-fs (loop8): initial error at time 1784254099: ext4_do_update_inode:5742: inode 3 [ 123.225756][ C0] EXT4-fs (loop8): last error at time 1784254099: ext4_do_update_inode:5742: inode 3 [ 123.298737][ T28] audit: type=1400 audit(1784254099.267:1911): avc: denied { connect } for pid=10140 comm="syz.2.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.321706][T10129] Quota error (device loop8): write_blk: dquota write failed [ 123.353217][T10129] Quota error (device loop8): qtree_write_dquot: Error -30 occurred while creating quota [ 123.392566][T10129] EXT4-fs (loop8): 1 truncate cleaned up [ 123.401128][T10129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.417626][T10129] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.447113][T10158] netlink: 'syz.2.2396': attribute type 1 has an invalid length. [ 123.467666][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.485130][T10158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.809765][T10203] loop6: detected capacity change from 0 to 512 [ 123.859012][T10203] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.874272][T10203] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.893365][ T5780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.228538][T10224] loop9: detected capacity change from 0 to 512 [ 124.304669][ T6261] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 124.310271][T10232] loop6: detected capacity change from 0 to 512 [ 124.314617][ T6261] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.339132][T10232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.364517][T10232] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.378533][ T28] audit: type=1400 audit(1784254100.357:1912): avc: denied { write } for pid=10231 comm="syz.6.2427" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.410825][ T28] audit: type=1400 audit(1784254100.377:1913): avc: denied { write } for pid=10231 comm="syz.6.2427" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.445107][ T5780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.503390][ T28] audit: type=1400 audit(1784254100.477:1914): avc: denied { bind } for pid=10240 comm="syz.6.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.574310][T10247] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 124.574310][T10247] program syz.8.2432 not setting count and/or reply_len properly [ 124.864905][T10278] loop8: detected capacity change from 0 to 256 [ 124.880525][T10278] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.993652][T10278] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16385) [ 125.001493][T10278] FAT-fs (loop8): Filesystem has been set read-only [ 125.019572][T10278] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16385) [ 125.027675][T10278] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16385) [ 125.035370][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881182ef000: rx timeout, send abort [ 125.044028][T10278] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16385) [ 125.051984][T10278] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16385) [ 125.060216][T10278] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16385) [ 125.196757][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 125.246446][T10303] loop8: detected capacity change from 0 to 512 [ 125.254740][T10303] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2458: error while reading EA inode 32 err=-116 [ 125.284304][T10303] loop8: lost filesystem error report for type 5 error -117 [ 125.284569][T10303] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2458: error while reading EA inode 32 err=-116 [ 125.291953][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 125.291973][ C0] EXT4-fs (loop8): initial error at time 1784254101: ext4_xattr_inode_iget:446 [ 125.291996][ C0] EXT4-fs (loop8): last error at time 1784254101: ext4_xattr_inode_iget:446 [ 125.332602][T10303] loop8: lost filesystem error report for type 5 error -117 [ 125.332793][T10303] EXT4-fs (loop8): 1 orphan inode deleted [ 125.361400][T10303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.390412][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.480031][ T3810] Bluetooth: hci0: command 0x1003 tx timeout [ 125.481244][ T4417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 125.532427][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ab16800: rx timeout, send abort [ 125.540791][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881182ef000: abort rx timeout. Force session deactivation [ 125.668493][T10338] loop6: detected capacity change from 0 to 256 [ 125.698154][T10338] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.749519][ T28] audit: type=1400 audit(1784254101.717:1915): avc: denied { listen } for pid=10348 comm="syz.8.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 125.789992][T10350] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16385) [ 125.797721][T10350] FAT-fs (loop6): Filesystem has been set read-only [ 125.804695][T10350] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16385) [ 125.812541][T10350] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16385) [ 125.820466][T10350] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16385) [ 125.848746][T10350] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16385) [ 125.863537][T10350] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16385) [ 125.927757][T10362] loop8: detected capacity change from 0 to 4096 [ 125.971498][T10362] EXT4-fs error (device loop8): ext4_get_first_dir_block:3557: inode #12: block 80: comm syz.8.2481: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 126.004174][T10362] EXT4-fs error (device loop8): ext4_get_first_dir_block:3560: inode #12: comm syz.8.2481: directory missing '..' [ 126.040759][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811ab16800: abort rx timeout. Force session deactivation [ 127.421828][T10507] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2508'. [ 127.451724][T10499] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2508'. [ 127.468072][T10510] loop8: detected capacity change from 0 to 8192 [ 127.513218][T10510] loop8: p1 p3 p4 [ 127.520570][T10510] loop8: p3 start 117772289 is beyond EOD, truncated [ 127.528810][T10510] loop8: p4 size 4281074432 extends beyond EOD, truncated [ 127.575094][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 127.575110][ T28] audit: type=1400 audit(1784254103.547:1923): avc: denied { read write } for pid=10509 comm="syz.8.2513" name="loop8p4" dev="devtmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.610810][ T28] audit: type=1400 audit(1784254103.547:1924): avc: denied { open } for pid=10509 comm="syz.8.2513" path="/dev/loop8p4" dev="devtmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.665353][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 127.679728][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 127.710180][T10538] loop6: detected capacity change from 0 to 256 [ 127.718932][ T28] audit: type=1400 audit(1784254103.657:1925): avc: denied { read } for pid=10533 comm="syz.9.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.739063][T10538] msdos: Bad value for 'time_offset' [ 127.743521][T10540] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.890928][T10559] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2530'. [ 127.901304][T10549] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2530'. [ 127.968830][ T28] audit: type=1400 audit(1784254103.937:1926): avc: denied { read } for pid=10563 comm="syz.6.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 128.042006][ T28] audit: type=1400 audit(1784254104.007:1927): avc: denied { ioctl } for pid=10563 comm="syz.6.2535" path="socket:[27286]" dev="sockfs" ino=27286 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 128.135677][T10574] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.196603][T10578] set_capacity_and_notify: 2 callbacks suppressed [ 128.196698][T10578] loop6: detected capacity change from 0 to 512 [ 128.402329][T10584] loop2: detected capacity change from 0 to 256 [ 128.409270][T10584] msdos: Bad value for 'time_offset' [ 128.452912][T10586] loop6: detected capacity change from 0 to 128 [ 128.472118][T10586] EXT4-fs mount: 2 callbacks suppressed [ 128.472134][T10586] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 128.520130][T10586] ext4 filesystem being mounted at /319/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.594183][ T28] audit: type=1400 audit(1784254104.567:1928): avc: denied { write } for pid=10585 comm="syz.6.2543" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.662057][ T5780] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.664529][ T28] audit: type=1400 audit(1784254104.567:1929): avc: denied { write } for pid=10585 comm="syz.6.2543" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.760996][ T28] audit: type=1400 audit(1784254104.597:1930): avc: denied { write } for pid=10585 comm="syz.6.2543" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.806741][ T28] audit: type=1400 audit(1784254104.597:1931): avc: denied { write } for pid=10585 comm="syz.6.2543" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.842428][T10603] loop2: detected capacity change from 0 to 512 [ 128.863166][T10603] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.887641][ T28] audit: type=1400 audit(1784254104.597:1932): avc: denied { write } for pid=10585 comm="syz.6.2543" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.045801][T10606] loop2: detected capacity change from 0 to 8192 [ 129.100795][T10606] loop2: p1 p3 p4 [ 129.108444][T10606] loop2: p3 start 117772289 is beyond EOD, truncated [ 129.129136][T10606] loop2: p4 size 4281074432 extends beyond EOD, truncated [ 129.221561][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 129.253245][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 129.674796][T10641] loop4: detected capacity change from 0 to 512 [ 129.684613][T10641] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.743346][T10645] loop4: detected capacity change from 0 to 256 [ 129.751697][T10645] msdos: Bad value for 'time_offset' [ 129.968521][T10663] loop8: detected capacity change from 0 to 512 [ 129.998301][T10663] EXT4-fs: Ignoring removed i_version option [ 130.034656][T10663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.061101][T10663] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.108551][T10674] bridge1: entered promiscuous mode [ 130.259841][T10682] netlink: 'syz.9.2584': attribute type 3 has an invalid length. [ 130.305556][T10686] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.530099][T10697] loop9: detected capacity change from 0 to 8192 [ 130.538038][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.565018][T10697] loop9: p1 p3 p4 [ 130.578953][T10697] loop9: p3 start 117772289 is beyond EOD, truncated [ 130.602345][T10697] loop9: p4 size 4281074432 extends beyond EOD, truncated [ 130.644222][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 130.645457][ T3279] udevd[3279]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 130.916161][T10728] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2601'. [ 131.353833][T10748] loop6: detected capacity change from 0 to 128 [ 131.361831][T10748] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.388947][T10748] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.407571][T10752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5135 sclass=netlink_audit_socket pid=10752 comm=syz.9.2614 [ 131.445220][ T310] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.463629][T10746] loop4: p1 p3 p4 [ 131.471835][T10757] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2626'. [ 131.485325][T10746] loop4: p3 start 117772289 is beyond EOD, truncated [ 131.496168][T10746] loop4: p4 size 4281074432 extends beyond EOD, truncated [ 131.613016][T10768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10768 comm=syz.6.2621 [ 131.635355][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 131.819164][T10781] syzkaller1: entered promiscuous mode [ 131.824761][T10781] syzkaller1: entered allmulticast mode [ 132.195232][T10808] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.574795][T10824] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.661598][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 132.661614][ T28] audit: type=1400 audit(1784254108.637:1952): avc: denied { create } for pid=10830 comm="syz.6.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.713864][ T28] audit: type=1400 audit(1784254108.637:1953): avc: denied { setopt } for pid=10830 comm="syz.6.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.758794][ T28] audit: type=1400 audit(1784254108.637:1954): avc: denied { getopt } for pid=10830 comm="syz.6.2648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.889668][T10845] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2656'. [ 132.947552][T10852] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.951400][T10854] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 133.028026][T10855] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 133.052133][T10855] FAT-fs (loop6): Filesystem has been set read-only [ 133.077173][T10859] netlink: 'syz.9.2663': attribute type 2 has an invalid length. [ 133.081132][T10855] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008) [ 133.212475][ T35] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 133.220884][ T35] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 133.231717][ T35] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 133.239159][ T35] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 133.247105][ T35] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 133.271066][ T35] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 133.278766][ T35] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 133.286475][ T35] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 133.294375][ T35] hid-generic 0006:0008:0001.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 133.334251][T10875] fido_id[10875]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 133.358966][T10868] set_capacity_and_notify: 2 callbacks suppressed [ 133.359006][T10868] loop2: detected capacity change from 0 to 512 [ 133.381296][T10868] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 133.397495][T10868] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2665: bad orphan inode 15 [ 133.413995][T10868] loop2: lost filesystem error report for type 5 error -117 [ 133.414606][T10868] ext4_test_bit(bit=14, block=18) = 1 [ 133.422238][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 133.422277][ C0] EXT4-fs (loop2): initial error at time 1784254109: ext4_orphan_get:1425 [ 133.422356][ C0] EXT4-fs (loop2): last error at time 1784254109: ext4_orphan_get:1425 [ 133.452190][T10868] is_bad_inode(inode)=0 [ 133.456529][T10868] NEXT_ORPHAN(inode)=1023 [ 133.461118][T10868] max_ino=32 [ 133.464551][T10868] i_nlink=0 [ 133.472262][T10868] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2665: bg 0: block 161: padding at end of block bitmap is not set [ 133.509634][T10868] loop2: lost filesystem error report for type 5 error -117 [ 133.511217][T10868] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 133.550006][T10868] loop2: lost filesystem error report for type 5 error -117 [ 133.564445][T10868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.621487][T10868] ext2 filesystem being mounted at /570/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 133.673412][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.692186][T10885] loop8: detected capacity change from 0 to 1024 [ 133.702170][T10886] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 133.739747][T10885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.762937][T10885] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.776777][ T28] audit: type=1400 audit(1784254109.747:1955): avc: denied { write } for pid=10884 comm="syz.8.2672" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.800903][T10885] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: block 3: comm syz.8.2672: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.840434][T10885] EXT4-fs (loop8): Remounting filesystem read-only [ 133.896038][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.001657][ T28] audit: type=1400 audit(1784254109.977:1956): avc: denied { getopt } for pid=10906 comm="syz.8.2682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 134.130732][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2685'. [ 134.160753][T10913] gtp0: entered promiscuous mode [ 134.175603][T10913] gtp0: entered allmulticast mode [ 134.293795][ T28] audit: type=1400 audit(1784254110.267:1957): avc: denied { ioctl } for pid=10920 comm="syz.9.2688" path="socket:[29146]" dev="sockfs" ino=29146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.483223][T10932] loop8: detected capacity change from 0 to 4096 [ 134.502208][T10932] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.568706][T10932] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 134.624729][T10948] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2698'. [ 134.649395][T10932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.691113][T10932] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 134.735091][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.037920][T10975] loop2: detected capacity change from 0 to 128 [ 135.060430][T10975] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.087408][T10975] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.112197][T10979] veth1_to_bond: entered allmulticast mode [ 135.119513][ T3476] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.129899][T10979] veth1_to_bond: left allmulticast mode [ 135.162007][ T28] audit: type=1400 audit(1784254111.137:1958): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 135.184872][T10983] loop7: detected capacity change from 0 to 7 [ 135.205343][T10985] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.307600][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 135.309354][ T3476] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.317377][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 135.359098][T10993] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 135.359098][T10993] program syz.6.2718 not setting count and/or reply_len properly [ 135.944019][T11016] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.064089][T11022] program syz.9.2729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.233424][T11033] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2734'. [ 136.286968][ T28] audit: type=1326 audit(1784254112.257:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.8.2737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48aa4bde59 code=0x7ffc0000 [ 136.316433][T11041] loop9: detected capacity change from 0 to 128 [ 136.332531][ T28] audit: type=1326 audit(1784254112.257:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.8.2737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48aa4bde59 code=0x7ffc0000 [ 136.374892][T11041] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 136.397337][T11041] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.399425][T11045] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.450056][ T28] audit: type=1326 audit(1784254112.297:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.8.2737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f48aa4bde59 code=0x7ffc0000 [ 136.506334][ T3476] Bluetooth: hci1: Frame reassembly failed (-84) [ 136.517718][ T8707] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.746603][T11072] veth1_to_bond: entered promiscuous mode [ 136.754158][T11072] veth1_to_bond: entered allmulticast mode [ 136.760765][T11072] veth1_to_bond: left allmulticast mode [ 136.766331][T11072] veth1_to_bond: left promiscuous mode [ 137.034464][T11086] loop8: detected capacity change from 0 to 512 [ 137.064057][T11079] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 137.108881][T11086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.165279][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.321180][ T4417] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.327342][T11051] Bluetooth: hci0: command 0x1003 tx timeout [ 137.834340][T11109] loop8: detected capacity change from 0 to 512 [ 137.860958][T11109] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2777: inode has both inline data and extents flags [ 137.875532][T11109] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.875880][T11109] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2777: couldn't read orphan inode 15 (err -117) [ 137.885438][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 137.885452][ C0] EXT4-fs (loop8): initial error at time 1784254113: ext4_orphan_get:1399: inode 15 [ 137.885496][ C0] EXT4-fs (loop8): last error at time 1784254113: ext4_orphan_get:1399: inode 15 [ 137.922667][T11109] loop8: lost filesystem error report for type 5 error -117 [ 137.923287][T11109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 137.970921][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 138.022759][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 138.022771][ T28] audit: type=1326 audit(1784254113.997:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.063959][ T28] audit: type=1326 audit(1784254114.037:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.090501][ T28] audit: type=1326 audit(1784254114.037:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.130283][ T28] audit: type=1326 audit(1784254114.037:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.157200][ T28] audit: type=1326 audit(1784254114.037:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.183254][T11119] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.184538][ T28] audit: type=1326 audit(1784254114.037:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa4ff8ae68e code=0x7ffc0000 [ 138.224951][ T28] audit: type=1326 audit(1784254114.037:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.250525][ T28] audit: type=1326 audit(1784254114.037:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.276908][ T28] audit: type=1326 audit(1784254114.037:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.302448][T10990] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 138.314574][ T28] audit: type=1326 audit(1784254114.037:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11116 comm="syz.6.2769" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 138.355043][T11130] loop6: detected capacity change from 0 to 1024 [ 138.416893][T11140] loop4: detected capacity change from 0 to 1024 [ 138.441986][T11140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.454174][T11140] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.468069][T11140] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.2781: lblock 3 mapped to illegal pblock 3 (length 1) [ 138.482443][T11140] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 138.494782][T11140] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.494782][T11140] [ 138.504609][T11140] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.2781: lblock 0 mapped to illegal pblock 0 (length 1) [ 138.518895][T11140] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 138.532904][ T4417] Bluetooth: hci1: command 0x1003 tx timeout [ 138.538962][ T3810] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 138.545361][T11140] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.545361][T11140] [ 138.564826][ T53] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:4: lblock 4 mapped to illegal pblock 4 (length 2) [ 138.579695][ T53] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 138.595048][ T53] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.595048][ T53] [ 138.605332][ T53] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 138.607116][T11147] sctp: [Deprecated]: syz.6.2784 (pid 11147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.607116][T11147] Use struct sctp_sack_info instead [ 138.636591][ T53] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 138.648255][T11149] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.650321][ T53] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.650321][ T53] [ 138.670551][ T3298] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 138.684343][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.690426][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2786'. [ 138.709411][T11151] openvswitch: netlink: Flow key attr not present in new flow. [ 138.747285][T11156] netlink: 'syz.6.2788': attribute type 4 has an invalid length. [ 138.755322][T11156] netlink: 'syz.6.2788': attribute type 7 has an invalid length. [ 138.766062][T11156] netlink: 'syz.6.2788': attribute type 8 has an invalid length. [ 138.793780][T11156] netlink: 'syz.6.2788': attribute type 7 has an invalid length. [ 138.797952][T11161] loop2: detected capacity change from 0 to 512 [ 138.807231][T11156] netlink: 125384 bytes leftover after parsing attributes in process `syz.6.2788'. [ 138.819034][T11161] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.846872][T11161] EXT4-fs (loop2): 1 truncate cleaned up [ 138.861140][T11161] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.881874][T11168] loop6: detected capacity change from 0 to 256 [ 138.892423][T11168] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.972725][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2798'. [ 139.042772][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.117695][T11193] loop2: detected capacity change from 0 to 512 [ 139.124850][T11193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.133152][T11193] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 139.160394][T11193] EXT4-fs (loop2): 1 truncate cleaned up [ 139.175023][T11193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.188109][T11195] loop8: detected capacity change from 0 to 256 [ 139.338332][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.383801][T11212] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11212 comm=syz.8.2815 [ 139.442329][T11212] syz.8.2815 (11212) used greatest stack depth: 9472 bytes left [ 140.114035][T11252] loop6: detected capacity change from 0 to 128 [ 140.147784][T11252] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.230503][T11252] ext4 filesystem being mounted at /393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 140.335753][ T5780] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.732067][T11286] loop9: detected capacity change from 0 to 256 [ 140.809937][T11290] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2848'. [ 141.105724][T11304] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2854'. [ 141.500189][T11325] loop8: detected capacity change from 0 to 512 [ 141.506839][T11325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.521400][T11325] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 141.532126][T11325] EXT4-fs (loop8): 1 truncate cleaned up [ 141.540046][T11325] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.577601][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.657589][T11340] loop8: detected capacity change from 0 to 2048 [ 141.666151][T11340] EXT4-fs: Ignoring removed bh option [ 141.705821][T11340] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.718924][T11340] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.729506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.753280][T11340] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2866: bg 0: block 345: padding at end of block bitmap is not set [ 141.769726][T11340] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 141.782891][T11340] EXT4-fs (loop8): This should not happen!! Data will be lost [ 141.782891][T11340] [ 141.793459][T11340] EXT4-fs (loop8): Total free blocks count 0 [ 141.799560][T11340] EXT4-fs (loop8): Free/Dirty block details [ 141.805801][T11340] EXT4-fs (loop8): free_blocks=0 [ 141.810875][T11340] EXT4-fs (loop8): dirty_blocks=16 [ 141.816447][T11340] EXT4-fs (loop8): Block reservation details [ 141.822531][T11340] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 141.863567][ T8165] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 141.875574][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.072594][T11363] loop6: detected capacity change from 0 to 256 [ 142.128780][T11366] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2877'. [ 142.156591][T11368] EXT4-fs (loop6): 1 truncate cleaned up [ 142.172880][T11368] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.197817][T11360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.217677][T11368] EXT4-fs (loop6): shut down requested (1) [ 142.238746][T11360] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.243550][T11368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 142.294910][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2880'. [ 142.308965][T11368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 142.340191][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.385005][ T5780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.467304][T11391] netlink: 656 bytes leftover after parsing attributes in process `syz.8.2888'. [ 142.492880][T11391] netlink: 656 bytes leftover after parsing attributes in process `syz.8.2888'. [ 142.536643][T11379] EXT4-fs: Ignoring removed bh option [ 142.602395][T11399] EXT4-fs: dax option not supported [ 142.610953][T11379] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2882: corrupted in-inode xattr: e_value size too large [ 142.682541][T11379] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.683897][T11379] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2882: couldn't read orphan inode 15 (err -117) [ 142.693573][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 142.693605][ C0] EXT4-fs (loop2): initial error at time 1784254118: ext4_iget_extra_inode:5180: inode 15 [ 142.693715][ C0] EXT4-fs (loop2): last error at time 1784254118: ext4_iget_extra_inode:5180: inode 15 [ 142.735120][T11379] loop2: lost filesystem error report for type 5 error -117 [ 142.745475][T11379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.807653][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.074682][T11414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.087986][T11414] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.145979][T11424] bridge0: entered promiscuous mode [ 143.201473][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.258871][T11439] netlink: 'syz.2.2907': attribute type 7 has an invalid length. [ 143.272737][T11439] netlink: 'syz.2.2907': attribute type 7 has an invalid length. [ 143.338136][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 143.338149][ T28] audit: type=1400 audit(1784254119.307:2036): avc: denied { write } for pid=11440 comm="syz.4.2909" lport=43073 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 143.406877][T11452] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2912'. [ 143.549059][ T28] audit: type=1326 audit(1784254119.517:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.584139][ T28] audit: type=1326 audit(1784254119.517:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.589521][T11471] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2922'. [ 143.610323][ T28] audit: type=1326 audit(1784254119.517:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.645128][ T28] audit: type=1326 audit(1784254119.517:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.671175][ T28] audit: type=1326 audit(1784254119.527:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.697142][ T28] audit: type=1326 audit(1784254119.527:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.760168][T11473] set_capacity_and_notify: 6 callbacks suppressed [ 143.760185][T11473] loop4: detected capacity change from 0 to 512 [ 143.773492][ T28] audit: type=1326 audit(1784254119.527:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.800667][ T28] audit: type=1326 audit(1784254119.547:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.826201][T11473] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.836890][ T28] audit: type=1326 audit(1784254119.717:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11468 comm="syz.6.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa4ff8ede59 code=0x7ffc0000 [ 143.864039][T11473] EXT4-fs (loop4): 1 truncate cleaned up [ 143.870238][T11473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.964310][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.048716][T11481] loop2: detected capacity change from 0 to 8192 [ 144.295755][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2936'. [ 144.316397][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2936'. [ 144.395727][T11454] loop9: detected capacity change from 0 to 8192 [ 144.559273][T11516] batadv_slave_1: entered promiscuous mode [ 144.574156][T11514] batadv_slave_1: left promiscuous mode [ 144.597622][T11521] loop9: detected capacity change from 0 to 256 [ 144.610637][T11521] FAT-fs (loop9): data area starts beyond volume (274 > 64) [ 144.624389][T11521] FAT-fs (loop9): Can't find a valid FAT filesystem [ 144.655061][ T53] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.803546][T11535] syzkaller1: entered promiscuous mode [ 144.821351][T11535] syzkaller1: entered allmulticast mode [ 144.919898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.033721][T11551] loop4: detected capacity change from 0 to 512 [ 145.051335][T11551] EXT4-fs: Ignoring removed oldalloc option [ 145.072649][T11551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.098237][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.138107][T11556] loop4: detected capacity change from 0 to 1024 [ 145.146264][T11556] EXT4-fs: dax option not supported [ 145.507028][T11587] loop6: detected capacity change from 0 to 1024 [ 145.514047][T11587] EXT4-fs: dax option not supported [ 145.645945][T11602] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11602 comm=syz.4.2977 [ 145.918508][T11615] loop9: detected capacity change from 0 to 1024 [ 145.930344][T11615] EXT4-fs: dax option not supported [ 146.098566][T11630] loop4: detected capacity change from 0 to 512 [ 146.116172][T11630] EXT4-fs: Ignoring removed bh option [ 146.132888][T11630] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2990: corrupted in-inode xattr: e_value size too large [ 146.147994][T11630] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 146.148591][T11630] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2990: couldn't read orphan inode 15 (err -117) [ 146.157892][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 146.157972][ C0] EXT4-fs (loop4): initial error at time 1784254122: ext4_iget_extra_inode:5180: inode 15 [ 146.158083][ C0] EXT4-fs (loop4): last error at time 1784254122: ext4_iget_extra_inode:5180: inode 15 [ 146.197381][T11630] loop4: lost filesystem error report for type 5 error -117 [ 146.203859][T11630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.679848][ T3810] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.120065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.969479][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.034785][T11643] __nla_validate_parse: 2 callbacks suppressed [ 149.034802][T11643] netlink: 7 bytes leftover after parsing attributes in process `syz.9.2995'. [ 149.080848][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 149.080926][ T28] audit: type=1400 audit(1784254125.047:2050): avc: denied { getopt } for pid=11646 comm="syz.9.2997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 149.135444][T11651] loop9: detected capacity change from 0 to 128 [ 149.154881][T11651] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.201755][T11651] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.235755][ T8707] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 149.247814][ T8707] FAT-fs (loop9): Filesystem has been set read-only [ 149.260760][ T8707] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 149.428733][ T35] IPVS: starting estimator thread 0... [ 149.486309][T11678] bridge0: port 3(syz_tun) entered blocking state [ 149.501875][T11678] bridge0: port 3(syz_tun) entered disabled state [ 149.520102][T11678] syz_tun: entered allmulticast mode [ 149.528939][T11682] SELinux: failed to load policy [ 149.531010][T11668] IPVS: using max 2496 ests per chain, 124800 per kthread [ 149.544043][T11678] syz_tun: entered promiscuous mode [ 149.556357][T11678] bridge0: port 3(syz_tun) entered blocking state [ 149.562857][T11678] bridge0: port 3(syz_tun) entered forwarding state [ 149.615346][ T310] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.649452][T11692] pim6reg1: entered promiscuous mode [ 149.673689][T11692] pim6reg1: entered allmulticast mode [ 149.694251][ T310] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.742112][ T310] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.818445][ T310] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.878873][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.899942][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.906748][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.913552][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.920283][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.927042][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.933796][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.940565][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.947345][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.954078][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.960913][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.967665][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.974421][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.981179][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.987890][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 149.994613][T11734] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 150.095738][ T28] audit: type=1400 audit(1784254126.067:2051): avc: denied { write } for pid=11740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.126131][T11708] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.143532][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.168069][T11708] bridge_slave_0: entered allmulticast mode [ 150.177369][ T28] audit: type=1400 audit(1784254126.117:2052): avc: denied { write } for pid=11762 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.207754][T11708] bridge_slave_0: entered promiscuous mode [ 150.215102][T11708] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.223203][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.232712][T11708] bridge_slave_1: entered allmulticast mode [ 150.239203][T11708] bridge_slave_1: entered promiscuous mode [ 150.246186][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 150.260364][ T310] bridge_slave_1: left allmulticast mode [ 150.266517][ T310] bridge_slave_1: left promiscuous mode [ 150.299515][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.307824][ T310] bridge_slave_0: left allmulticast mode [ 150.313830][ T310] bridge_slave_0: left promiscuous mode [ 150.321090][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.406777][T11779] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3039'. [ 150.419736][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3039'. [ 150.433115][ T310] geneve0 (unregistering): left promiscuous mode [ 150.450021][ T28] audit: type=1400 audit(1784254126.417:2053): avc: denied { listen } for pid=11782 comm="syz.4.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.472283][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.484685][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.498138][ T310] bond0 (unregistering): Released all slaves [ 150.504809][ T28] audit: type=1400 audit(1784254126.487:2054): avc: denied { mount } for pid=11787 comm="syz.6.3048" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.541892][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.566683][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.566949][ T28] audit: type=1400 audit(1784254126.537:2055): avc: denied { unmount } for pid=5780 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.619038][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3051'. [ 150.634821][T11708] team0: Port device team_slave_0 added [ 150.650958][T11708] team0: Port device team_slave_1 added [ 150.696555][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.730326][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.816363][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.864390][T11828] loop4: detected capacity change from 0 to 512 [ 150.871563][ T28] audit: type=1400 audit(1784254126.837:2056): avc: denied { write } for pid=11799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.898014][ T310] batadv0: left promiscuous mode [ 150.924696][T11828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.940033][T11828] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.957009][ T310] hsr_slave_0: left promiscuous mode [ 150.964571][ T28] audit: type=1400 audit(1784254126.927:2057): avc: denied { write } for pid=11839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 150.975650][T11828] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 150.986980][ T28] audit: type=1400 audit(1784254126.947:2058): avc: denied { write } for pid=11827 comm="syz.4.3061" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.001006][T11828] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 151.024047][ T28] audit: type=1400 audit(1784254126.947:2059): avc: denied { setattr } for pid=11827 comm="syz.4.3061" path="/583/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.035123][ T310] hsr_slave_1: left promiscuous mode [ 151.061256][T11828] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.061256][T11828] [ 151.064101][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.073827][T11828] EXT4-fs (loop4): Total free blocks count 0 [ 151.080744][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.088203][T11828] EXT4-fs (loop4): Free/Dirty block details [ 151.099868][T11828] EXT4-fs (loop4): free_blocks=65280 [ 151.100148][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.105195][T11828] EXT4-fs (loop4): dirty_blocks=31 [ 151.112810][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.118031][T11828] EXT4-fs (loop4): Block reservation details [ 151.130880][T11828] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 151.137112][ T310] veth1_macvtap: left promiscuous mode [ 151.145014][ T310] veth0_macvtap: left promiscuous mode [ 151.150694][ T310] veth1_vlan: left promiscuous mode [ 151.156147][ T310] veth0_vlan: left promiscuous mode [ 151.171199][ T3298] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 151.183266][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.256248][ T310] team0 (unregistering): Port device team_slave_1 removed [ 151.274191][ T310] team0 (unregistering): Port device team_slave_0 removed [ 151.309951][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.316981][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.342978][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.359068][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 151.367390][T11850] bridge0: port 3(syz_tun) entered blocking state [ 151.379436][T11850] bridge0: port 3(syz_tun) entered disabled state [ 151.386150][T11850] syz_tun: entered allmulticast mode [ 151.392343][T11850] syz_tun: entered promiscuous mode [ 151.397839][T11850] bridge0: port 3(syz_tun) entered blocking state [ 151.404318][T11850] bridge0: port 3(syz_tun) entered forwarding state [ 151.435336][T11708] hsr_slave_0: entered promiscuous mode [ 151.441445][T11708] hsr_slave_1: entered promiscuous mode [ 151.623261][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 151.668632][T11886] loop6: detected capacity change from 0 to 512 [ 151.705878][T11886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.721363][T11886] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.754780][ T5780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.838715][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 151.962777][T11708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.983510][T11708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.997911][T11708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.022586][T11708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.052756][T11708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.071391][T11708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.083215][T11708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.099481][T11708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 152.185672][T11708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.216132][T11708] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.242905][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.249980][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.262424][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.269478][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.480154][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.510229][T12006] loop8: detected capacity change from 0 to 512 [ 152.613485][T12023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.638692][T12023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.673752][T12023] syz_tun: entered allmulticast mode [ 152.696370][T12020] syz_tun: left allmulticast mode [ 152.713397][T11708] veth0_vlan: entered promiscuous mode [ 152.726582][T12038] netlink: 'syz.8.3097': attribute type 8 has an invalid length. [ 152.746719][T11708] veth1_vlan: entered promiscuous mode [ 152.791070][T11708] veth0_macvtap: entered promiscuous mode [ 152.824597][T11708] veth1_macvtap: entered promiscuous mode [ 152.852538][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.873547][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.904105][ T3476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.938624][ T3476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.971614][ T3476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.006363][ T3476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.266377][T12095] tipc: Started in network mode [ 153.282946][T12095] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 153.318316][T12095] tipc: Enabling of bearer rejected, failed to enable media [ 153.545342][T12136] loop2: detected capacity change from 0 to 764 [ 153.569111][T12136] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 154.134435][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 154.134449][ T28] audit: type=1400 audit(1784254130.107:2097): avc: denied { write } for pid=12218 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.195488][T12228] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3154'. [ 154.300148][ T28] audit: type=1400 audit(1784254130.277:2098): avc: denied { write } for pid=12229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.349422][ T28] audit: type=1400 audit(1784254130.317:2099): avc: denied { write } for pid=12243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.463229][ T28] audit: type=1400 audit(1784254130.437:2100): avc: denied { write } for pid=12247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.511229][ T28] audit: type=1400 audit(1784254130.477:2101): avc: denied { write } for pid=12259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.609213][T12270] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3160'. [ 154.618370][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3160'. [ 154.627662][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3160'. [ 154.659970][T12272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.667198][T12272] IPv6: NLM_F_CREATE should be set when creating new route [ 154.674429][T12272] IPv6: NLM_F_CREATE should be set when creating new route [ 154.681626][T12272] IPv6: NLM_F_CREATE should be set when creating new route [ 154.689507][T12272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.907678][T12280] geneve0: entered promiscuous mode [ 154.913079][T12280] geneve0: entered allmulticast mode [ 155.063078][T12296] netlink: 'syz.6.3172': attribute type 1 has an invalid length. [ 155.092502][T12298] loop0: detected capacity change from 0 to 256 [ 155.109052][T12298] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.198125][T12298] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 155.206456][T12298] FAT-fs (loop0): Filesystem has been set read-only [ 155.213517][T12298] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 155.431515][T12321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12321 comm=syz.0.3183 [ 155.530306][T12338] loop2: detected capacity change from 0 to 512 [ 155.540737][T12338] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.556974][T12340] dummy0: entered allmulticast mode [ 155.564633][T12339] dummy0: left allmulticast mode [ 155.574630][T12338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.587603][T12338] ext4 filesystem being mounted at /648/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.600671][ T28] audit: type=1400 audit(1784254131.577:2102): avc: denied { write } for pid=12336 comm="syz.2.3192" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.813064][T12351] net_ratelimit: 6649 callbacks suppressed [ 155.813079][T12351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.827162][T12351] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 155.833931][ C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 155.840658][ C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 155.886234][T12354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.924515][ T28] audit: type=1400 audit(1784254131.897:2103): avc: denied { connect } for pid=12355 comm="syz.8.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 155.992749][T12360] loop8: detected capacity change from 0 to 512 [ 156.023974][T12360] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.038023][T12360] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.429223][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.438985][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.612289][ T28] audit: type=1326 audit(1784254132.587:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a9ecde59 code=0x7ffc0000 [ 156.663203][ T28] audit: type=1326 audit(1784254132.607:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3205" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f36a9ecde59 code=0x7ffc0000 [ 156.695025][T12378] loop0: detected capacity change from 0 to 512 [ 156.716456][T12378] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.3207: corrupted in-inode xattr: invalid ea_ino [ 156.753136][T12387] IPVS: lc: FWM 3 0x00000003 - no destination available [ 156.756040][T12378] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.763006][ T35] IPVS: starting estimator thread 0... [ 156.764436][T12378] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3207: couldn't read orphan inode 15 (err -117) [ 156.772164][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 156.772180][ C0] EXT4-fs (loop0): initial error at time 1784254132: ext4_iget_extra_inode:5180: inode 15 [ 156.772227][ C0] EXT4-fs (loop0): last error at time 1784254132: ext4_iget_extra_inode:5180: inode 15 [ 156.815966][T12378] loop0: lost filesystem error report for type 5 error -117 [ 156.819365][T12378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.857727][ T28] audit: type=1400 audit(1784254132.827:2106): avc: denied { write } for pid=12377 comm="syz.0.3207" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.889958][T12388] IPVS: using max 2448 ests per chain, 122400 per kthread [ 156.914044][T11708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.944897][T12399] loop0: detected capacity change from 0 to 512 [ 156.955814][T12393] loop6: detected capacity change from 0 to 512 [ 156.962948][T12399] EXT4-fs: Ignoring removed nobh option [ 156.983906][T12393] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 156.993820][T12399] ------------[ cut here ]------------ [ 156.999297][T12399] EA inode 11 i_nlink=1026 [ 156.999314][T12399] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.0.3215/12399 [ 157.014702][T12399] Modules linked in: [ 157.018600][T12399] CPU: 0 UID: 0 PID: 12399 Comm: syz.0.3215 Not tainted syzkaller #0 PREEMPT(lazy) [ 157.027987][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 157.038063][T12399] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 157.044777][T12399] Code: 96 c5 96 ff 49 8d 7e 40 4c 8d 2d fb a3 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 ad d9 03 90 90 90 90 90 90 90 [ 157.064454][T12399] RSP: 0018:ffffc9000204b7f8 EFLAGS: 00010246 [ 157.070625][T12399] RAX: ffff888103660b30 RBX: ffff88810767af38 RCX: ffffffff81c29236 [ 157.078611][T12399] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3620 [ 157.086644][T12399] RBP: 000000000000000b R08: 000188810767aeeb R09: 0000000000000000 [ 157.094670][T12399] R10: ffffc9000204b728 R11: 0001c9000204b728 R12: ffff88810767aee8 [ 157.102668][T12399] R13: ffffffff871d3620 R14: ffff88810767aea0 R15: 0000000000000001 [ 157.110666][T12399] FS: 00007fdf390176c0(0000) GS:ffff8882ae8cf000(0000) knlGS:0000000000000000 [ 157.119595][T12399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.126211][T12399] CR2: 00007fa4ff99cc2b CR3: 000000011c1c6000 CR4: 00000000003506f0 [ 157.134214][T12399] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.142265][T12399] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 157.150304][T12399] Call Trace: [ 157.153582][T12399] [ 157.156515][T12399] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 157.162527][T12399] ext4_xattr_delete_inode+0x6b5/0x790 [ 157.168008][T12399] ext4_evict_inode+0xb18/0xdf0 [ 157.172928][T12399] ? __pfx_ext4_evict_inode+0x10/0x10 [ 157.178299][T12399] evict+0x2a5/0x510 [ 157.182273][T12399] iput+0x430/0x5a0 [ 157.186149][T12399] ext4_process_orphan+0x1a4/0x1c0 [ 157.191329][T12399] ext4_orphan_cleanup+0x6a6/0xa10 [ 157.196469][T12399] ? ext4_register_li_request+0x14c/0x440 [ 157.202249][T12399] ext4_fill_super+0x33ab/0x3760 [ 157.207224][T12399] ? set_blocksize+0x14c/0x270 [ 157.212084][T12399] ? __pfx_ext4_fill_super+0x10/0x10 [ 157.217424][T12399] get_tree_bdev_flags+0x291/0x300 [ 157.222567][T12399] ? __pfx_ext4_fill_super+0x10/0x10 [ 157.227926][T12399] get_tree_bdev+0x1f/0x30 [ 157.232413][T12399] ext4_get_tree+0x1c/0x30 [ 157.236910][T12399] vfs_get_tree+0x57/0x1d0 [ 157.241391][T12399] do_new_mount+0x288/0x8d0 [ 157.243518][T12393] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.3213: bad orphan inode 15 [ 157.245911][T12399] path_mount+0x4ad/0xb90 [ 157.246013][T12399] __se_sys_mount+0x28c/0x2e0 [ 157.259173][T12393] loop6: lost filesystem error report for type 5 error -117 [ 157.260324][T12399] __x64_sys_mount+0x67/0x80 [ 157.260391][T12399] x64_sys_call+0x2d61/0x3020 [ 157.260419][T12399] do_syscall_64+0x136/0x3c0 [ 157.260445][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.260471][T12399] RIP: 0033:0x7fdf3a5bf0ca [ 157.260521][T12399] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.260556][T12399] RSP: 002b:00007fdf39016e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.260581][T12399] RAX: ffffffffffffffda RBX: 00007fdf39016ee0 RCX: 00007fdf3a5bf0ca [ 157.260625][T12399] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fdf39016ea0 [ 157.260639][T12399] RBP: 0000200000000180 R08: 00007fdf39016ee0 R09: 0000000000800718 [ 157.260653][T12399] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 157.260670][T12399] R13: 00007fdf39016ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 157.260694][T12399] [ 157.260702][T12399] ---[ end trace 0000000000000000 ]--- [ 157.263955][T12399] EXT4-fs (loop0): 1 orphan inode deleted [ 157.267832][T12393] ext4_test_bit(bit=14, block=18) = 1 [ 157.273013][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 157.273052][ C1] EXT4-fs (loop6): initial error at time 1784254133: ext4_orphan_get:1425 [ 157.273113][ C1] EXT4-fs (loop6): last error at time 1784254133: ext4_orphan_get:1425 [ 157.273784][T12399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.301241][T12393] is_bad_inode(inode)=0 [ 157.438088][T12393] NEXT_ORPHAN(inode)=1023 [ 157.442914][T12393] max_ino=32 [ 157.446483][T12393] i_nlink=0 [ 157.452087][T12393] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3213: bg 0: block 161: padding at end of block bitmap is not set [ 157.468354][T12393] loop6: lost filesystem error report for type 5 error -117 [ 157.469532][T12393] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 157.494315][T12393] loop6: lost filesystem error report for type 5 error -117 [ 157.497630][T12393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.522095][T12393] ext2 filesystem being mounted at /484/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 157.608209][ T5780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.651819][T12399] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.3215: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 157.690808][T11708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.719568][T12423] loop0: detected capacity change from 0 to 512 [ 157.731203][T12423] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 157.739194][T12423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 157.751725][T12423] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.759338][T12423] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #13: comm syz.0.3224: iget: bad i_size value: 12154761577498 [ 157.772200][T12423] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 157.772481][T12423] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3224: couldn't read orphan inode 13 (err -117) [ 157.781622][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 157.781646][ C1] EXT4-fs (loop0): initial error at time 1784254133: ext4_orphan_get:1399: inode 13 [ 157.781672][ C1] EXT4-fs (loop0): last error at time 1784254133: ext4_orphan_get:1399: inode 13 [ 157.819485][T12423] loop0: lost filesystem error report for type 5 error -117 [ 157.824205][T12423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 157.846988][T12432] netlink: 'syz.6.3229': attribute type 3 has an invalid length. [ 157.870814][T11708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.887712][T12433] loop4: detected capacity change from 0 to 8192 [ 157.909545][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3231'. [ 158.066158][T12441] loop0: detected capacity change from 0 to 512 [ 158.082970][T12441] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 158.106845][T12441] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3232: bad orphan inode 15 [ 158.128470][T12441] loop0: lost filesystem error report for type 5 error -117 [ 158.129848][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 158.143588][ C1] EXT4-fs (loop0): initial error at time 1784254134: ext4_orphan_get:1425 [ 158.152144][ C1] EXT4-fs (loop0): last error at time 1784254134: ext4_orphan_get:1425 [ 158.164633][T12441] ext4_test_bit(bit=14, block=18) = 1 [ 158.172161][T12441] is_bad_inode(inode)=0 [ 158.178380][T12441] NEXT_ORPHAN(inode)=1023 [ 158.193129][T12441] max_ino=32 [ 158.203328][T12441] i_nlink=0 [ 158.216539][T12441] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3232: bg 0: block 161: padding at end of block bitmap is not set [ 158.237773][T12441] loop0: lost filesystem error report for type 5 error -117 [ 158.239216][T12441] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 158.244330][T12459] loop4: detected capacity change from 0 to 1024 [ 158.256011][T12441] loop0: lost filesystem error report for type 5 error -117 [ 158.274620][T12441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.280384][T12459] EXT4-fs: Ignoring removed orlov option [ 158.284421][T12441] ext2 filesystem being mounted at /32/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 158.326380][T12459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.347687][T12465] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3244'. [ 158.382837][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.394056][T11708] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.443208][T12471] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3249'. [ 158.511404][T12476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.519727][T12476] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.556395][T12476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.594161][T12476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.603622][T12476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.615453][T12490] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3255'. [ 158.620694][T12476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.635640][T12476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.648946][T12476] veth1_vlan: left promiscuous mode [ 158.654847][T12476] veth0_vlan: left promiscuous mode [ 158.661336][T12476] veth0_vlan: entered promiscuous mode [ 158.667677][T12476] veth1_vlan: entered promiscuous mode [ 158.675621][T12476] veth1_macvtap: left promiscuous mode [ 158.681488][T12476] veth0_macvtap: left promiscuous mode [ 158.687387][T12476] veth0_macvtap: entered promiscuous mode [ 158.694599][T12476] veth1_macvtap: entered promiscuous mode [ 158.706716][T12476] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.716555][T12476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.728389][T12476] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 158.736539][T12476] 8021q: adding VLAN 0 to HW filter on device eth0 [ 158.744647][T12476] 8021q: adding VLAN 0 to HW filter on device eth1 [ 158.752356][T12476] 8021q: adding VLAN 0 to HW filter on device eth2 [ 158.760480][T12476] 8021q: adding VLAN 0 to HW filter on device eth3 [ 158.767725][T12476] veth0_to_team: entered promiscuous mode [ 158.782999][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.790071][T10468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.798984][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.806070][T10468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.866696][T10470] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.886514][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 158.895859][T10470] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 158.916662][T10470] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.925235][T10470] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 158.947884][T10470] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.956566][T10470] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 158.989952][T10470] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.012839][T10470] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 159.047611][T12513] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.081059][T10470] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 159.110223][T12502] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 159.125293][T10470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.131323][ T6267] IPVS: starting estimator thread 0... [ 159.138238][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.187014][T12502] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.3258: bad orphan inode 15 [ 159.203215][T12502] loop4: lost filesystem error report for type 5 error -117 [ 159.208165][T12526] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3266'. [ 159.215594][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 159.215612][ C0] EXT4-fs (loop4): initial error at time 1784254135: ext4_orphan_get:1425 [ 159.215654][ C0] EXT4-fs (loop4): last error at time 1784254135: ext4_orphan_get:1425 [ 159.225417][T12502] ext4_test_bit(bit=14, block=18) = 1 [ 159.256339][T12502] is_bad_inode(inode)=0 [ 159.261041][T12502] NEXT_ORPHAN(inode)=1023 [ 159.265604][T12502] max_ino=32 [ 159.269337][T12502] i_nlink=0 [ 159.277125][T12502] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3258: bg 0: block 161: padding at end of block bitmap is not set [ 159.287476][T12528] bio_check_eod: 235 callbacks suppressed [ 159.287490][T12528] syz.8.3269: attempt to access beyond end of device [ 159.287490][T12528] loop8: rw=2049, sector=528, nr_sectors = 32 limit=512 [ 159.291920][T12521] IPVS: using max 2400 ests per chain, 120000 per kthread [ 159.319024][T12502] loop4: lost filesystem error report for type 5 error -117 [ 159.320886][T12502] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 159.331020][T12528] syz.8.3269: attempt to access beyond end of device [ 159.331020][T12528] loop8: rw=2049, sector=592, nr_sectors = 32 limit=512 [ 159.374347][T12528] syz.8.3269: attempt to access beyond end of device [ 159.374347][T12528] loop8: rw=2049, sector=656, nr_sectors = 32 limit=512 [ 159.378771][T12502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.414207][T12502] ext2 filesystem being mounted at /614/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 159.960114][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.972635][ T361] kworker/u8:6: attempt to access beyond end of device [ 159.972635][ T361] loop8: rw=1, sector=688, nr_sectors = 896 limit=512 [ 159.987048][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.079352][T12548] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.086577][T12548] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.128221][T12556] sg_write: data in/out 352340/136 bytes for SCSI command 0x0-- guessing data in; [ 160.128221][T12556] program syz.0.3284 not setting count and/or reply_len properly [ 160.181591][T12562] set_capacity_and_notify: 4 callbacks suppressed [ 160.181678][T12562] loop6: detected capacity change from 0 to 1024 [ 160.201096][ T3476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.214762][T12564] loop2: detected capacity change from 0 to 512 [ 160.228775][T12564] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 160.239877][T12562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.266600][T12564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3285'. [ 160.275905][T12562] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.288353][T12564] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3285'. [ 160.315079][ T5780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.958497][T12585] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3291'. [ 161.026046][T12600] tipc: Started in network mode [ 161.034550][T12600] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 161.043777][T12600] tipc: Enabling of bearer rejected, failed to enable media [ 161.117265][T12610] net_ratelimit: 2 callbacks suppressed [ 161.117281][T12610] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 161.134373][T12610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.917828][T12632] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3314'. [ 162.147670][T12650] loop8: detected capacity change from 0 to 512 [ 162.169010][T12650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.185888][T12650] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.322030][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3332'. [ 162.414670][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.421841][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.429011][T12662] bridge_slave_0: entered allmulticast mode [ 162.435633][T12662] bridge_slave_0: entered promiscuous mode [ 162.442379][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.449534][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.456806][T12662] bridge_slave_1: entered allmulticast mode [ 162.463714][T12662] bridge_slave_1: entered promiscuous mode [ 162.479291][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.489608][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.508008][T12662] team0: Port device team_slave_0 added [ 162.514595][T12662] team0: Port device team_slave_1 added [ 162.529898][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.536883][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.562828][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.574009][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.581017][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.606935][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.632331][T12662] hsr_slave_0: entered promiscuous mode [ 162.638433][T12662] hsr_slave_1: entered promiscuous mode [ 162.644289][T12662] debugfs: 'hsr0' already exists in 'hsr' [ 162.650022][T12662] Cannot create hsr debugfs directory [ 162.758069][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 162.758084][ T28] audit: type=1400 audit(1784254138.727:2111): avc: denied { write } for pid=12685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.789519][ T28] audit: type=1400 audit(1784254138.747:2112): avc: denied { write } for pid=12700 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.907489][ T28] audit: type=1400 audit(1784254138.877:2113): avc: denied { write } for pid=12702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.913817][T12711] loop6: detected capacity change from 0 to 8192 [ 162.969296][ T28] audit: type=1400 audit(1784254138.937:2114): avc: denied { write } for pid=12719 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.022569][ T8165] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.023025][T12662] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 163.049250][T12662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.079930][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 163.088377][T12662] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 163.108790][T12662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.124039][T12662] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 163.134673][T12662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.152240][T12662] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 163.170821][T12662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.196171][ T28] audit: type=1400 audit(1784254139.167:2115): avc: denied { write } for pid=12722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.218149][T12662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.233245][T12662] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.252456][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.259557][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.280450][ T28] audit: type=1400 audit(1784254139.227:2116): avc: denied { write } for pid=12747 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.313688][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.320764][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.483357][ T28] audit: type=1400 audit(1784254139.457:2117): avc: denied { write } for pid=12750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.528601][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3347'. [ 163.572183][ T28] audit: type=1400 audit(1784254139.547:2118): avc: denied { write } for pid=12784 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.575142][T12787] loop2: detected capacity change from 0 to 512 [ 163.635304][ T9] IPVS: starting estimator thread 0... [ 163.659741][T12787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.678765][T12787] ext4 filesystem being mounted at /675/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.678934][T12662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.744393][ T28] audit: type=1400 audit(1784254139.717:2119): avc: denied { write } for pid=12793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.768163][T12798] IPVS: using max 2256 ests per chain, 112800 per kthread [ 163.795803][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.826674][ T28] audit: type=1400 audit(1784254139.797:2120): avc: denied { write } for pid=12816 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 163.885415][T12662] veth0_vlan: entered promiscuous mode [ 163.898514][T12662] veth1_vlan: entered promiscuous mode [ 163.937050][T12662] veth0_macvtap: entered promiscuous mode [ 163.963388][T12662] veth1_macvtap: entered promiscuous mode [ 163.994510][T12662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.023014][T12662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.048941][ T3476] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.078267][ T3476] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.089404][T12840] loop2: detected capacity change from 0 to 8192 [ 164.102890][ T3476] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.146420][ T3476] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.199926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.257057][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3376'. [ 164.418499][ T2979] ================================================================== [ 164.426615][ T2979] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 164.434615][ T2979] [ 164.436927][ T2979] write to 0xffff888100609030 of 8 bytes by task 10770 on cpu 1: [ 164.444658][ T2979] dentry_unlink_inode+0x65/0x260 [ 164.449680][ T2979] d_delete+0x164/0x180 [ 164.453831][ T2979] d_delete_notify+0x32/0x100 [ 164.458496][ T2979] vfs_unlink+0x287/0x490 [ 164.462816][ T2979] filename_unlinkat+0x1dc/0x410 [ 164.467750][ T2979] __se_sys_unlink+0x2b/0xe0 [ 164.472332][ T2979] __x64_sys_unlink+0x1f/0x30 [ 164.477000][ T2979] x64_sys_call+0x2eb6/0x3020 [ 164.481671][ T2979] do_syscall_64+0x136/0x3c0 [ 164.486255][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.492144][ T2979] [ 164.494452][ T2979] read to 0xffff888100609030 of 8 bytes by task 2979 on cpu 0: [ 164.501979][ T2979] step_into_slowpath+0x12c/0x4c0 [ 164.507003][ T2979] path_lookupat+0x2eb/0x4c0 [ 164.511593][ T2979] filename_lookup+0x18f/0x390 [ 164.516359][ T2979] do_readlinkat+0x74/0x2f0 [ 164.520866][ T2979] __x64_sys_readlink+0x47/0x60 [ 164.525715][ T2979] x64_sys_call+0x2b51/0x3020 [ 164.530390][ T2979] do_syscall_64+0x136/0x3c0 [ 164.534971][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.540858][ T2979] [ 164.543169][ T2979] value changed: 0xffff8881037e3428 -> 0x0000000000000000 [ 164.550275][ T2979] [ 164.552586][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 164.558746][ T2979] CPU: 0 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 164.569158][ T2979] Tainted: [W]=WARN [ 164.572944][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 164.582986][ T2979] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 164.824092][T12895] bridge0: port 3(syz_tun) entered disabled state [ 164.843981][T12895] syz_tun (unregistering): left allmulticast mode [ 164.856397][T12895] syz_tun (unregistering): left promiscuous mode [ 164.869995][T12895] bridge0: port 3(syz_tun) entered disabled state [ 164.894571][ T53] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.907318][ T53] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 164.928886][ T53] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 44799 - 0 [ 165.043717][ T53] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.070103][ T53] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 165.080615][ T53] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 44799 - 0 [ 165.124434][ T5273] bridge0: port 3(syz_tun) entered disabled state [ 165.142851][ T5273] syz_tun (unregistering): left allmulticast mode [ 165.149337][ T5273] syz_tun (unregistering): left promiscuous mode [ 165.156453][ T5273] bridge0: port 3(syz_tun) entered disabled state [ 165.172787][ T53] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.182665][ T53] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 165.192502][ T53] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 44799 - 0 [ 165.262489][ T53] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.274850][ T53] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 165.284967][ T53] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 44799 - 0 [ 165.379721][ T53] bridge_slave_1: left allmulticast mode [ 165.385562][ T53] bridge_slave_1: left promiscuous mode [ 165.391320][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.399009][ T53] bridge_slave_0: left allmulticast mode [ 165.406923][ T53] bridge_slave_0: left promiscuous mode [ 165.413868][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.465594][ T53] geneve0 (unregistering): left promiscuous mode [ 165.481119][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.493237][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.503906][ T53] bond0 (unregistering): Released all slaves [ 165.512127][ T53] bond1 (unregistering): Released all slaves [ 165.523830][ T53] bond2 (unregistering): Released all slaves [ 165.553343][ T53] batadv0: left promiscuous mode [ 165.560471][ T53] hsr_slave_0: left promiscuous mode [ 165.566407][ T53] hsr_slave_1: left promiscuous mode [ 165.572434][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.580013][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.587688][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.595259][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.608696][ T53] veth0_to_team: left promiscuous mode [ 165.614390][ T53] veth1_macvtap: left promiscuous mode [ 165.620007][ T53] veth0_macvtap: left promiscuous mode [ 165.625625][ T53] veth1_vlan: left promiscuous mode [ 165.631871][ T53] veth0_vlan: left promiscuous mode [ 165.662229][ T53] team0 (unregistering): Port device batadv2 removed [ 165.678201][ T53] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 165.702985][ T53] team0 (unregistering): Port device team_slave_1 removed [ 165.712666][ T53] team0 (unregistering): Port device team_slave_0 removed [ 165.826344][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.908811][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 166.022289][ T53] IPVS: stop unused estimator thread 0... [ 166.072760][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.086763][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.097219][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38116 - 0 [ 166.133130][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.143589][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.154051][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38116 - 0 [ 166.166032][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 166.192273][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.202843][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.213430][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38116 - 0 [ 166.263314][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 166.272739][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.283301][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.293720][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38116 - 0 [ 166.371056][ T53] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.381405][ T53] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.403309][ T53] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.414215][ T53] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.462395][ T53] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.472777][ T53] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.492434][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 166.524009][ T53] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.534360][ T53] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.607239][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 166.614785][ T53] bridge_slave_1: left allmulticast mode [ 166.620706][ T53] bridge_slave_1: left promiscuous mode [ 166.626381][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.634244][ T53] bridge_slave_0: left allmulticast mode [ 166.640019][ T53] bridge_slave_0: left promiscuous mode [ 166.645620][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.654421][ T53] bridge_slave_1: left allmulticast mode [ 166.660152][ T53] bridge_slave_1: left promiscuous mode [ 166.665819][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.673614][ T53] bridge_slave_0: left allmulticast mode [ 166.679237][ T53] bridge_slave_0: left promiscuous mode [ 166.685054][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.752004][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.762641][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.772992][ T53] bond0 (unregistering): Released all slaves [ 166.780404][ T53] bond1 (unregistering): Released all slaves [ 166.806682][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.816991][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.826995][ T53] bond0 (unregistering): Released all slaves [ 166.834234][ T53] bond1 (unregistering): Released all slaves [ 166.883981][ T53] tipc: Left network mode [ 166.891335][ T53] hsr_slave_0: left promiscuous mode [ 166.896943][ T53] hsr_slave_1: left promiscuous mode [ 166.902705][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.910266][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.917825][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.925624][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.935699][ T53] hsr_slave_0: left promiscuous mode [ 166.941588][ T53] hsr_slave_1: left promiscuous mode [ 166.947333][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.955000][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.962586][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.970095][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.981950][ T53] veth1_macvtap: left promiscuous mode [ 166.987492][ T53] veth0_macvtap: left promiscuous mode [ 166.993636][ T53] veth1_macvtap: left promiscuous mode [ 166.999100][ T53] veth0_macvtap: left promiscuous mode [ 167.004770][ T53] veth1_vlan: left promiscuous mode [ 167.010092][ T53] veth0_vlan: left promiscuous mode [ 167.066432][ T53] team0 (unregistering): Port device team_slave_1 removed [ 167.077701][ T53] team0 (unregistering): Port device team_slave_0 removed [ 167.128563][ T53] team0 (unregistering): Port device team_slave_1 removed [ 167.138621][ T53] team0 (unregistering): Port device team_slave_0 removed [ 167.167792][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 167.255500][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 167.349768][ T3018] 8021q: adding VLAN 0 to HW filter on device eth25 [ 167.436615][ T3018] 8021q: adding VLAN 0 to HW filter on device eth26 [ 167.520791][ T3018] 8021q: adding VLAN 0 to HW filter on device eth27 [ 167.584612][ T53] IPVS: stop unused estimator thread 0... [ 167.591462][ T53] IPVS: stop unused estimator thread 0... [ 167.622038][ T3018] 8021q: adding VLAN 0 to HW filter on device eth28 [ 167.642444][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.762230][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.813408][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.862758][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.931442][ T53] bridge_slave_1: left allmulticast mode [ 167.937107][ T53] bridge_slave_1: left promiscuous mode [ 167.942876][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.950616][ T53] bridge_slave_0: left allmulticast mode [ 167.956302][ T53] bridge_slave_0: left promiscuous mode [ 167.962016][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.001855][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.012194][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.021407][ T53] bond0 (unregistering): Released all slaves [ 168.063480][ T53] hsr_slave_0: left promiscuous mode [ 168.069174][ T53] hsr_slave_1: left promiscuous mode [ 168.075004][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.082646][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.091137][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.098554][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.109149][ T53] veth1_macvtap: left promiscuous mode [ 168.112256][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 168.112269][ T28] audit: type=1400 audit(1784254144.087:2170): avc: denied { write } for pid=13215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.115107][ T53] veth0_macvtap: left promiscuous mode [ 168.138475][ T28] audit: type=1400 audit(1784254144.107:2171): avc: denied { write } for pid=13226 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.144391][ T53] veth1_vlan: left promiscuous mode [ 168.176287][ T53] veth0_vlan: left promiscuous mode [ 168.228855][ T53] team0 (unregistering): Port device team_slave_1 removed [ 168.238084][ T53] team0 (unregistering): Port device team_slave_0 removed [ 168.271978][ T3018] 8021q: adding VLAN 0 to HW filter on device eth29 [ 168.348491][ T28] audit: type=1400 audit(1784254144.317:2172): avc: denied { write } for pid=13231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.371659][ T28] audit: type=1400 audit(1784254144.317:2173): avc: denied { write } for pid=13242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.394754][ T3018] 8021q: adding VLAN 0 to HW filter on device eth30 [ 168.462094][ T28] audit: type=1400 audit(1784254144.437:2174): avc: denied { write } for pid=13246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.485240][ T28] audit: type=1400 audit(1784254144.437:2175): avc: denied { write } for pid=13257 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.502502][ T3018] 8021q: adding VLAN 0 to HW filter on device eth31 [ 168.585066][ T28] audit: type=1400 audit(1784254144.557:2176): avc: denied { write } for pid=13262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.608415][ T28] audit: type=1400 audit(1784254144.557:2177): avc: denied { write } for pid=13273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 168.622638][ T3018] 8021q: adding VLAN 0 to HW filter on device eth32