last executing test programs: 5.026332763s ago: executing program 0 (id=6434): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x24, 0x11, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000001940)=ANY=[], 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r6, &(0x7f0000000080)=""/25, 0x19) getdents64(r6, 0xfffffffffffffffe, 0x64) 4.726615832s ago: executing program 0 (id=6437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) 4.457656421s ago: executing program 0 (id=6438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.928529248s ago: executing program 0 (id=6445): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r3 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) 3.803537681s ago: executing program 0 (id=6448): socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_io_uring_setup(0x57b2, &(0x7f00000002c0)={0x0, 0x98d2, 0x800, 0x3, 0x321}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x9369, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000500041401002dbd7000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r6) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xe}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [], {0x14}}, 0x28}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can_delroute={0x20, 0x19, 0x919, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x48010) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 3.613772618s ago: executing program 1 (id=6450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 2.836922942s ago: executing program 2 (id=6456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x6000809) sendfile(r0, r1, 0x0, 0x7ffff004) 2.757933324s ago: executing program 2 (id=6457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0xffffff92}], 0x1}}], 0x1, 0x2400c042) 2.661029817s ago: executing program 1 (id=6458): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 2.498269042s ago: executing program 1 (id=6460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.550949882s ago: executing program 1 (id=6462): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e000110000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a0005000000000000000000"], 0x28}}, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4041}, 0x4e9bf35d3af3685) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x10) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$igmp6(0xa, 0x3, 0x2) listen(r3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r5, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) 1.29356264s ago: executing program 3 (id=6466): bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.177300783s ago: executing program 2 (id=6467): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.150257284s ago: executing program 2 (id=6468): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000240)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) 1.099404666s ago: executing program 3 (id=6469): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x8, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.073743507s ago: executing program 3 (id=6470): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000500000000000000000078d3ada47ffb93f95c03f9a5222a98c2a2c5ffab2663ada6db81bab95930e91752f902d9120033cacfda30bb86e00aa1e3912bcefbc8ec09307f049ab1141177bdda8de770b6cdff706b93cb8085d6a2e97b8c3c83a957efacb95f95ea29bf"], 0x28}}, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x9, 0x5}, {0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xd}, {0xfff1, 0x4}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 991.787139ms ago: executing program 3 (id=6471): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000140)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) clock_getres(0x7, &(0x7f0000000080)) r5 = dup(r4) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delqdisc={0x24, 0x25, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x9}, {0x3, 0x1ffe0}, {0x5, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x61, 0x0, 0x1, 0x1ffffe}, 0x28) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000180)="671723d7c6012b", 0x7}], 0x1}, 0x20008b88) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x8}}) 976.72808ms ago: executing program 0 (id=6472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 795.396315ms ago: executing program 2 (id=6474): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) 786.656235ms ago: executing program 4 (id=6475): syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000200), 0x20) 758.870016ms ago: executing program 4 (id=6476): syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000200), 0x20) 739.937127ms ago: executing program 4 (id=6477): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)=r2) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086"], 0xffdd) 729.966337ms ago: executing program 2 (id=6478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r1, &(0x7f00000006c0)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0xffffff92}], 0x1}}], 0x1, 0x2400c042) 694.599238ms ago: executing program 4 (id=6479): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x404c09c}, 0x0) recvmmsg(r2, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/76, 0x4c}, {&(0x7f00000001c0)=""/4096, 0x104c}], 0x2}, 0x10}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x9}], 0x4, 0x40010132, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000001000000000000000007a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x72}], &(0x7f0000000200)='GPL\x00'}, 0x94) close(r4) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0xb, 0x0, &(0x7f0000000080)=0x0) timer_settime(r7, 0x1, &(0x7f0000000640)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000140)) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)={[&(0x7f0000000180)='l2tp\x00', &(0x7f00000001c0)='^\xb8/\x00']}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000240)={0x5, 0x9, 0xc, 0x2, 0x43, 0x3, 0x3, 0x7, 0x1, 0x7, 0x0, 0x3, 0x8f, 0xe8}, 0xe) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000040)="d9b604") 666.00759ms ago: executing program 1 (id=6480): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6000000000000000290000003700000084090000000000000001000401010740000000010e31580605000000000000000800000000000000000000000000008008000000000000000100000000000000c900"], 0x78}}], 0x1, 0x4008080) 642.161331ms ago: executing program 4 (id=6481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f900", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 589.490912ms ago: executing program 1 (id=6482): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='dctcp', 0x5) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000500000000000000000078d3ada47ffb93f95c03f9a5222a98c2a2c5ffab2663ada6db81bab95930e91752f902d9120033cacfda30bb86e00aa1e3912bcefbc8ec09307f049ab1141177bdda8de770b6cdff706b93cb8085d6a2e97b8c3c83a957efacb95f95ea29bf"], 0x28}}, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0x9, 0x5}, {0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xd}, {0xfff1, 0x4}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 459.990016ms ago: executing program 4 (id=6483): socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_io_uring_setup(0x57b2, &(0x7f00000002c0)={0x0, 0x98d2, 0x800, 0x3, 0x321}, &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x9369, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000500041401002dbd7000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r6) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xe}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [], {0x14}}, 0x28}}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can_delroute={0x20, 0x19, 0x919, 0x70bd2c, 0x25dfdbfb, {0x1d, 0x1, 0x4}, [@CGW_FILTER={0xc, 0xb, {{0x3, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x48010) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 143.993696ms ago: executing program 3 (id=6484): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) 0s ago: executing program 3 (id=6485): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) kernel console output (not intermixed with test programs): ess `syz.4.5792'. [ 544.436656][T20169] veth0_vlan: entered promiscuous mode [ 544.469896][T20169] veth1_vlan: entered promiscuous mode [ 544.533905][T20169] veth0_macvtap: entered promiscuous mode [ 544.562274][T20169] veth1_macvtap: entered promiscuous mode [ 544.581333][T20169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.592123][T20169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.608522][ T7529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.617332][ T7529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.648344][ T7529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.659863][ T7529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.680757][ T28] audit: type=1400 audit(1781345060.012:729): avc: denied { mount } for pid=20169 comm="syz-executor" name="/" dev="gadgetfs" ino=4024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 544.758438][ T28] audit: type=1400 audit(1781345060.062:730): avc: denied { open } for pid=20359 comm="syz.0.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 544.823448][ T28] audit: type=1400 audit(1781345060.062:731): avc: denied { kernel } for pid=20359 comm="syz.0.5745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 544.849489][ T28] audit: type=1400 audit(1781345060.142:732): avc: denied { write } for pid=20356 comm="syz.2.5796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 544.992593][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5800'. [ 545.004936][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5800'. [ 545.024847][T20379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5800'. [ 545.035062][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5800'. [ 545.146168][T20386] program syz.2.5804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.296610][T20420] loop2: detected capacity change from 0 to 256 [ 546.960050][T20431] syzkaller0: entered promiscuous mode [ 546.970556][ T28] audit: type=1400 audit(1781345062.301:733): avc: denied { cpu } for pid=20439 comm="syz.3.5820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 546.991307][T20431] syzkaller0: entered allmulticast mode [ 547.091073][T20443] syzkaller0: entered promiscuous mode [ 547.096679][T20443] syzkaller0: entered allmulticast mode [ 547.305705][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5831'. [ 547.337284][T20469] : renamed from bond_slave_0 (while UP) [ 547.903871][T20465] loop4: detected capacity change from 0 to 256 [ 548.217551][T20477] netlink: 'syz.0.5833': attribute type 3 has an invalid length. [ 548.225602][T20477] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.5833'. [ 548.236698][T20477] netlink: 'syz.0.5833': attribute type 10 has an invalid length. [ 548.245134][T20477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5833'. [ 548.254535][T20477] dummy0: entered promiscuous mode [ 548.270481][T20477] dummy0: entered allmulticast mode [ 548.277182][T20477] bridge0: port 3(dummy0) entered blocking state [ 548.283720][T20477] bridge0: port 3(dummy0) entered disabled state [ 548.291477][T20477] bridge0: port 3(dummy0) entered blocking state [ 548.297902][T20477] bridge0: port 3(dummy0) entered forwarding state [ 548.467336][T20491] syzkaller0: entered promiscuous mode [ 548.472944][T20491] syzkaller0: entered allmulticast mode [ 548.623597][T20504] loop2: detected capacity change from 0 to 512 [ 548.684785][T20504] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.5834: corrupted in-inode xattr: e_value out of bounds [ 548.720569][T20504] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 548.720950][T20504] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5834: couldn't read orphan inode 15 (err -117) [ 548.730128][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 548.730145][ C1] EXT4-fs (loop2): initial error at time 1781345064: ext4_iget_extra_inode:5128: inode 15 [ 548.730182][ C1] EXT4-fs (loop2): last error at time 1781345064: ext4_iget_extra_inode:5128: inode 15 [ 548.928834][T20509] syzkaller0: entered promiscuous mode [ 548.956169][T20509] syzkaller0: entered allmulticast mode [ 549.024540][T20504] loop2: lost filesystem error report for type 5 error -117 [ 549.028405][T20504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.134277][T20506] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 550.689670][T20535] : renamed from bond_slave_0 (while UP) [ 551.048013][T20539] lo speed is unknown, defaulting to 1000 [ 552.816168][T11284] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.201418][T20547] loop0: detected capacity change from 0 to 256 [ 553.984256][T20563] netlink: 'syz.4.5855': attribute type 3 has an invalid length. [ 553.992303][T20563] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.5855'. [ 554.002989][T20563] netlink: 'syz.4.5855': attribute type 10 has an invalid length. [ 554.011921][T20565] syzkaller0: left promiscuous mode [ 554.017242][T20563] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5855'. [ 554.027049][T20565] syzkaller0: left allmulticast mode [ 554.033043][T20563] dummy0: entered promiscuous mode [ 554.038453][T20563] dummy0: entered allmulticast mode [ 554.044428][T20563] bridge0: port 1(dummy0) entered blocking state [ 554.054068][T20563] bridge0: port 1(dummy0) entered disabled state [ 554.061981][T20563] bridge0: port 1(dummy0) entered blocking state [ 554.068391][T20563] bridge0: port 1(dummy0) entered forwarding state [ 555.905102][T20626] lo speed is unknown, defaulting to 1000 [ 556.199721][T20626] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.208378][T20626] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.222418][T20626] bridge_slave_0: entered allmulticast mode [ 556.229347][T20626] bridge_slave_0: entered promiscuous mode [ 556.236584][T20626] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.243681][T20626] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.250977][T20626] bridge_slave_1: entered allmulticast mode [ 556.257658][T20626] bridge_slave_1: entered promiscuous mode [ 556.275219][T20626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.292716][T20626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.302890][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5889'. [ 556.312762][T20662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5889'. [ 556.387599][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5889'. [ 556.397519][T20662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5889'. [ 556.429349][T20626] team0: Port device team_slave_0 added [ 556.435901][T20626] team0: Port device team_slave_1 added [ 556.454242][T20626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.461376][T20626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.487500][T20626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.499099][T20626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.506129][T20626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.532287][T20626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.561598][T20626] hsr_slave_0: entered promiscuous mode [ 556.567873][T20626] hsr_slave_1: entered promiscuous mode [ 556.573815][T20626] debugfs: 'hsr0' already exists in 'hsr' [ 556.579798][T20626] Cannot create hsr debugfs directory [ 556.614090][ T40] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.696355][ T40] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.705184][ T40] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.823650][ T40] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.690840][T20626] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.700791][T20626] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.864616][T20626] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.889076][T20626] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.948251][T20626] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.971903][T20626] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.046275][T20626] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.056384][T20626] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.157426][T20626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 559.171455][T20697] loop3: detected capacity change from 0 to 512 [ 559.189116][T20626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 559.198371][T20697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.217154][T20626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 559.226141][T20697] ext4 filesystem being mounted at /513/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.239162][T20626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 559.258652][T20626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 559.270254][T20626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 559.280157][T20626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 559.300432][T20703] loop1: detected capacity change from 0 to 256 [ 559.319800][T20626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 559.423907][T20705] loop4: detected capacity change from 0 to 512 [ 559.432632][T20705] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.5899: corrupted in-inode xattr: e_value out of bounds [ 559.446726][T20705] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 559.456392][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 559.471970][ C1] EXT4-fs (loop4): initial error at time 1781345074: ext4_iget_extra_inode:5128: inode 15 [ 559.481889][ C1] EXT4-fs (loop4): last error at time 1781345074: ext4_iget_extra_inode:5128: inode 15 [ 559.507020][T20705] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5899: couldn't read orphan inode 15 (err -117) [ 559.518909][T20705] loop4: lost filesystem error report for type 5 error -117 [ 559.519633][T20705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.550294][T20697] lo speed is unknown, defaulting to 1000 [ 559.705912][T12794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.899229][T20716] : renamed from bond_slave_0 (while UP) [ 559.952842][T20626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.020188][T20626] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.070393][ T7529] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.077553][ T7529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.115660][T12520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.139806][ T7529] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.146955][ T7529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.500958][T20725] syzkaller0: entered promiscuous mode [ 560.512719][T20725] syzkaller0: entered allmulticast mode [ 560.646479][T20626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.735377][T20626] veth0_vlan: entered promiscuous mode [ 560.744340][T20626] veth1_vlan: entered promiscuous mode [ 560.773804][T20626] veth0_macvtap: entered promiscuous mode [ 560.782844][T20626] veth1_macvtap: entered promiscuous mode [ 560.830916][T20752] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.848409][T20752] bridge_slave_0 (unregistering): left allmulticast mode [ 560.855628][T20752] bridge_slave_0 (unregistering): left promiscuous mode [ 560.863368][T20752] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.895530][T20626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.907569][T20626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.922390][ T113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.932863][ T113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.945867][ T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.954858][ T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.012811][T20762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5913'. [ 561.088145][T20770] loop0: detected capacity change from 0 to 128 [ 561.171136][T20775] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5918'. [ 561.399750][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5919'. [ 561.409270][T20785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5919'. [ 561.440708][T20785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5919'. [ 561.450161][T20785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5919'. [ 561.477324][ T40] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.498884][ T40] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.510009][ T40] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.521892][ T40] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.753749][T20792] loop3: detected capacity change from 0 to 256 [ 563.940529][ T40] bond1 (unregistering): Released all slaves [ 563.973571][ T40] bond0 (unregistering): Released all slaves [ 564.044505][ T40] tipc: Disabling bearer [ 564.062702][ T40] tipc: Left network mode [ 564.087619][T20818] program syz.2.5929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.151672][ T40] hsr_slave_0: left promiscuous mode [ 564.397606][ T40] hsr_slave_1: left promiscuous mode [ 564.413070][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.152599][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.002958][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.030605][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.080463][ T40] veth1_macvtap: left promiscuous mode [ 566.098969][ T40] veth0_macvtap: left promiscuous mode [ 567.334900][ T40] team0 (unregistering): Port device team_slave_1 removed [ 567.395663][ T40] team0 (unregistering): Port device team_slave_0 removed [ 568.139569][T20848] loop0: detected capacity change from 0 to 256 [ 568.206421][ T40] IPVS: stop unused estimator thread 0... [ 568.307044][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5941'. [ 569.766489][T20876] loop1: detected capacity change from 0 to 512 [ 569.803251][T20876] EXT4-fs (loop1): 1 truncate cleaned up [ 569.832032][T20876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.543277][T20888] loop3: detected capacity change from 0 to 128 [ 570.612470][T12369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.430085][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5957'. [ 572.618199][T20926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5958'. [ 573.130136][T20930] loop2: detected capacity change from 0 to 512 [ 573.186582][T20930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.257573][T20930] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.5960: corrupted in-inode xattr: invalid ea_ino [ 573.510573][T20930] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.510745][T20930] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5960: couldn't read orphan inode 15 (err -117) [ 573.519915][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 573.519952][ C1] EXT4-fs (loop2): initial error at time 1781345088: ext4_iget_extra_inode:5128: inode 15 [ 573.519989][ C1] EXT4-fs (loop2): last error at time 1781345088: ext4_iget_extra_inode:5128: inode 15 [ 573.643101][T20930] loop2: lost filesystem error report for type 5 error -117 [ 573.643596][T20930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.343966][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.707941][T20943] loop4: detected capacity change from 0 to 512 [ 574.769208][T20943] EXT4-fs (loop4): 1 truncate cleaned up [ 574.776135][T20943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.037579][T12520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.048670][T20950] loop1: detected capacity change from 0 to 512 [ 575.063731][T20950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.086504][T20950] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.5965: corrupted in-inode xattr: invalid ea_ino [ 575.100657][T20950] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 575.100879][T20950] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5965: couldn't read orphan inode 15 (err -117) [ 575.110044][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 575.110063][ C1] EXT4-fs (loop1): initial error at time 1781345090: ext4_iget_extra_inode:5128: inode 15 [ 575.110090][ C1] EXT4-fs (loop1): last error at time 1781345090: ext4_iget_extra_inode:5128: inode 15 [ 575.150693][T20950] loop1: lost filesystem error report for type 5 error -117 [ 575.151915][T20950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.032337][T12369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.216866][T20962] syzkaller0: entered promiscuous mode [ 576.222479][T20962] syzkaller0: entered allmulticast mode [ 576.749198][T20964] bridge0: port 1(dummy0) entered disabled state [ 576.755698][T20964] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.762939][T20964] bridge0: entered allmulticast mode [ 576.774366][T20964] bridge0: port 1(dummy0) entered disabled state [ 576.789225][T20964] bridge_slave_1: left allmulticast mode [ 576.795020][T20964] bridge_slave_1: left promiscuous mode [ 576.800708][T20964] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.330210][T20981] loop2: detected capacity change from 0 to 128 [ 581.011806][T21004] program syz.2.5980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.023463][T20802] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.195204][T20802] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.003585][T20802] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.032290][T20802] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.046951][T21014] loop2: detected capacity change from 0 to 512 [ 582.057619][T21012] syzkaller0: entered promiscuous mode [ 582.063439][T21012] syzkaller0: entered allmulticast mode [ 582.084356][T21014] EXT4-fs: Ignoring removed bh option [ 582.097078][T20985] lo speed is unknown, defaulting to 1000 [ 582.105657][T21014] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 582.105855][T20802] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.126995][T20802] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.127238][T21014] EXT4-fs (loop2): 1 truncate cleaned up [ 582.149458][T21014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.192098][ T28] audit: type=1400 audit(1781345097.495:734): avc: denied { setattr } for pid=21013 comm="syz.2.5983" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 582.215930][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.245123][T21023] loop3: detected capacity change from 0 to 512 [ 582.253654][T21023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 582.267823][T21023] EXT4-fs (loop3): 1 truncate cleaned up [ 582.274583][T21023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.292337][T20802] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.302206][T20802] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.317372][T12794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.373618][T21028] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.380914][T21028] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.388522][T21028] bridge0: entered allmulticast mode [ 582.402388][T21028] bridge_slave_1: left allmulticast mode [ 582.408062][T21028] bridge_slave_1: left promiscuous mode [ 582.413858][T21028] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.423878][T21028] bridge_slave_0: left allmulticast mode [ 582.429597][T21028] bridge_slave_0: left promiscuous mode [ 582.435619][T21028] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.602537][T20985] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.609785][T20985] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.617245][T20985] bridge_slave_0: entered allmulticast mode [ 582.624645][T20985] bridge_slave_0: entered promiscuous mode [ 582.632993][T20985] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.640141][T20985] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.647983][T20985] bridge_slave_1: entered allmulticast mode [ 582.654938][T20985] bridge_slave_1: entered promiscuous mode [ 582.677022][T20985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.688201][T20985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.712589][T20985] team0: Port device team_slave_0 added [ 582.720476][T20985] team0: Port device team_slave_1 added [ 582.746691][T20985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.754377][T20985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.781013][T20985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.794182][T20985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.801524][T20985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.828049][T20985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.870716][T20985] hsr_slave_0: entered promiscuous mode [ 582.877753][T20985] hsr_slave_1: entered promiscuous mode [ 582.885358][T20985] debugfs: 'hsr0' already exists in 'hsr' [ 582.891452][T20985] Cannot create hsr debugfs directory [ 583.003573][T21042] loop3: detected capacity change from 0 to 128 [ 583.012455][T21040] loop1: detected capacity change from 0 to 128 [ 583.026486][T21044] loop0: detected capacity change from 0 to 512 [ 583.033766][T21044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.049188][T21044] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.5990: corrupted in-inode xattr: invalid ea_ino [ 583.063010][T21044] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.063729][T21044] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.5990: couldn't read orphan inode 15 (err -117) [ 583.072899][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 583.072925][ C1] EXT4-fs (loop0): initial error at time 1781345098: ext4_iget_extra_inode:5128: inode 15 [ 583.072955][ C1] EXT4-fs (loop0): last error at time 1781345098: ext4_iget_extra_inode:5128: inode 15 [ 583.139260][T21044] loop0: lost filesystem error report for type 5 error -117 [ 583.162794][T21044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.230306][T21053] bio_check_eod: 4 callbacks suppressed [ 583.230322][T21053] syz.3.5988: attempt to access beyond end of device [ 583.230322][T21053] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 583.314092][T21053] syz.3.5988: attempt to access beyond end of device [ 583.314092][T21053] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 583.329513][T21053] syz.3.5988: attempt to access beyond end of device [ 583.329513][T21053] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 583.343456][T21053] syz.3.5988: attempt to access beyond end of device [ 583.343456][T21053] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 583.358315][T21053] syz.3.5988: attempt to access beyond end of device [ 583.358315][T21053] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 583.371969][T21053] syz.3.5988: attempt to access beyond end of device [ 583.371969][T21053] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 583.859720][T21053] syz.3.5988: attempt to access beyond end of device [ 583.859720][T21053] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 583.873229][T21053] syz.3.5988: attempt to access beyond end of device [ 583.873229][T21053] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 583.886708][T21053] syz.3.5988: attempt to access beyond end of device [ 583.886708][T21053] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 583.900254][T21053] syz.3.5988: attempt to access beyond end of device [ 583.900254][T21053] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 583.927258][ T28] audit: type=1400 audit(1781345099.254:735): avc: denied { write } for pid=21049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.964490][T21072] loop2: detected capacity change from 0 to 512 [ 583.980952][T21072] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 583.996658][T21072] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.5993: inode #15: comm syz.2.5993: iget: illegal inode # [ 584.009661][ T28] audit: type=1400 audit(1781345099.324:736): avc: denied { write } for pid=21073 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.031849][T21072] loop2: lost filesystem error report for type 5 error -117 [ 584.032978][T21072] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.5993: couldn't read orphan inode 15 (err -117) [ 584.052130][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 584.052153][ C0] EXT4-fs (loop2): initial error at time 1781345099: ext4_orphan_get:1397 [ 584.052213][ C0] EXT4-fs (loop2): last error at time 1781345099: ext4_orphan_get:1397 [ 584.087270][T21072] loop2: lost filesystem error report for type 5 error -117 [ 584.090615][T21072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.143788][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.192471][T21079] loop1: detected capacity change from 0 to 512 [ 584.215323][T21081] loop2: detected capacity change from 0 to 1024 [ 584.227537][T21081] EXT4-fs: Ignoring removed bh option [ 584.236523][T21079] EXT4-fs: Ignoring removed nomblk_io_submit option [ 584.251054][T21079] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.5996: corrupted in-inode xattr: invalid ea_ino [ 584.265339][T21079] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 584.265456][T21079] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5996: couldn't read orphan inode 15 (err -117) [ 584.274626][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 584.274667][ C0] EXT4-fs (loop1): initial error at time 1781345099: ext4_iget_extra_inode:5128: inode 15 [ 584.274720][ C0] EXT4-fs (loop1): last error at time 1781345099: ext4_iget_extra_inode:5128: inode 15 [ 584.277524][T21081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.286748][T21079] loop1: lost filesystem error report for type 5 error -117 [ 584.316499][T21081] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 584.328481][ T28] audit: type=1400 audit(1781345099.644:737): avc: denied { write } for pid=21080 comm="syz.2.5995" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 584.343163][T21079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.407398][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.510075][T20802] bond0 (unregistering): (slave 30): Releasing backup interface [ 584.518415][T20802] : left allmulticast mode [ 584.524155][T20802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.533136][T20802] bond_slave_1: left allmulticast mode [ 584.539299][T20802] bond0 (unregistering): Released all slaves [ 584.546872][T20802] bond1 (unregistering): Released all slaves [ 584.555357][T20802] bond2 (unregistering): Released all slaves [ 584.567039][T20802] bond3 (unregistering): Released all slaves [ 584.579704][T20802] bond4 (unregistering): Released all slaves [ 584.727936][T20169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.741001][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 584.882178][T20802] tipc: Left network mode [ 585.101756][T20802] hsr_slave_0: left promiscuous mode [ 585.111949][T12369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.123278][T20802] hsr_slave_1: left promiscuous mode [ 585.129701][T20802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.137464][T20802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.153460][T20802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.179413][T21116] loop1: detected capacity change from 0 to 128 [ 585.186225][T20802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.203235][ T28] audit: type=1400 audit(1781345100.534:738): avc: denied { write } for pid=21100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.233690][T20802] veth1_macvtap: left promiscuous mode [ 585.240600][T20802] veth0_macvtap: left promiscuous mode [ 585.281268][ T28] audit: type=1400 audit(1781345100.604:739): avc: denied { write } for pid=21126 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 585.341129][T21116] Buffer I/O error on dev loop1, logical block 353, lost async page write [ 585.355661][T21134] loop3: detected capacity change from 0 to 1024 [ 585.375311][T21134] EXT4-fs: Ignoring removed bh option [ 585.402322][T20802] team0 (unregistering): Port device team_slave_1 removed [ 585.417289][T20802] team0 (unregistering): Port device team_slave_0 removed [ 585.484422][ T3432] smc: removing ib device sz1 [ 585.559486][T21134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.653059][ T28] audit: type=1400 audit(1781345100.924:740): avc: denied { write } for pid=21133 comm="syz.3.6007" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 585.802549][T12794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.897767][T21146] EXT4-fs: Ignoring removed bh option [ 585.941550][T21146] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 585.955553][T21123] syzkaller0: entered promiscuous mode [ 585.961540][T21123] syzkaller0: entered allmulticast mode [ 585.967996][T21146] EXT4-fs (loop1): 1 truncate cleaned up [ 585.975990][T21146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.047762][T12369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.056817][ T11] lo speed is unknown, defaulting to 1000 [ 586.056836][ T11] sz1: Port: 1 Link DOWN [ 586.063783][T21137] bridge0: port 3(dummy0) entered disabled state [ 586.073325][T21137] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.080553][T21137] bridge0: entered allmulticast mode [ 586.088151][T21139] bridge0: port 3(dummy0) entered disabled state [ 586.095863][T21139] bridge_slave_1: left allmulticast mode [ 586.101569][T21139] bridge_slave_1: left promiscuous mode [ 586.107289][T21139] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.228041][T20985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 586.236902][T20985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 586.245592][T20985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 586.257551][T20985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 586.272261][T20985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 586.296216][T20985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.328593][T20985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 586.328610][T21158] lo speed is unknown, defaulting to 1000 [ 586.351809][T20985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.363094][T21162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.397985][T21162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.405619][T21158] lo speed is unknown, defaulting to 1000 [ 586.457226][T21162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.486711][ T28] audit: type=1400 audit(1781345101.814:741): avc: denied { write } for pid=21163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.567223][ T28] audit: type=1400 audit(1781345101.894:742): avc: denied { write } for pid=21184 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.593664][T21185] EXT4-fs: Ignoring removed bh option [ 586.620075][T21162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.651681][T21158] lo speed is unknown, defaulting to 1000 [ 586.660082][T21185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.663377][T20802] IPVS: stop unused estimator thread 0... [ 586.684902][T20985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.722583][ T28] audit: type=1400 audit(1781345102.044:743): avc: denied { write } for pid=21177 comm="syz.1.6014" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 586.754197][T21162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.766202][T12369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.795823][T21162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.835260][T20985] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.845438][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.848942][T21158] infiniband sz1: set active [ 586.852538][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.862757][ T3432] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.871599][ T3432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.889850][T21158] infiniband sz1: added lo [ 586.902863][T18000] lo speed is unknown, defaulting to 1000 [ 586.930536][T21203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 586.963315][T21158] RDS/IB: sz1: added [ 586.970277][T21162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.993022][T21158] smc: adding ib device sz1 with port count 1 [ 586.999918][T21162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.010961][T21203] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.6016: corrupted in-inode xattr: invalid ea_ino [ 587.024388][T21158] smc: ib device sz1 port 1 has no pnetid [ 587.041598][T21203] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 587.043337][T21203] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6016: couldn't read orphan inode 15 (err -117) [ 587.049061][T21158] lo speed is unknown, defaulting to 1000 [ 587.052554][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 587.052572][ C0] EXT4-fs (loop1): initial error at time 1781345102: ext4_iget_extra_inode:5128: inode 15 [ 587.086536][ C0] EXT4-fs (loop1): last error at time 1781345102: ext4_iget_extra_inode:5128: inode 15 [ 587.096526][T21203] loop1: lost filesystem error report for type 5 error -117 [ 587.098045][T18000] lo speed is unknown, defaulting to 1000 [ 587.111963][T21203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.136656][T21162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.238952][T21162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.252681][T21158] lo speed is unknown, defaulting to 1000 [ 587.278515][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 587.278528][ T28] audit: type=1400 audit(1781345102.604:746): avc: denied { write } for pid=21212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.435119][T21158] lo speed is unknown, defaulting to 1000 [ 587.570560][T20985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.686567][T21158] lo speed is unknown, defaulting to 1000 [ 587.782143][ T28] audit: type=1400 audit(1781345102.684:747): avc: denied { write } for pid=21228 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.867329][T12369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.868229][T21242] set_capacity_and_notify: 4 callbacks suppressed [ 587.868244][T21242] loop2: detected capacity change from 0 to 512 [ 587.925248][ T113] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.930843][T21242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.938462][ T113] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.950635][ T113] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.959823][ T113] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.968454][T21158] lo speed is unknown, defaulting to 1000 [ 587.970210][T21242] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.6017: corrupted in-inode xattr: invalid ea_ino [ 587.990595][ T113] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.999470][T21242] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 588.000308][T21242] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6017: couldn't read orphan inode 15 (err -117) [ 588.011672][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 588.027749][ C1] EXT4-fs (loop2): initial error at time 1781345103: ext4_iget_extra_inode:5128: inode 15 [ 588.028937][ T113] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.037690][ C1] EXT4-fs (loop2): last error at time 1781345103: ext4_iget_extra_inode:5128: inode 15 [ 588.057698][T21250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6018'. [ 588.078775][T21242] loop2: lost filesystem error report for type 5 error -117 [ 588.079296][T21242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.113933][ T113] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.134339][ T113] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.268678][T21158] lo speed is unknown, defaulting to 1000 [ 588.279853][T20985] veth0_vlan: entered promiscuous mode [ 588.290906][T20985] veth1_vlan: entered promiscuous mode [ 588.308634][T21158] lo speed is unknown, defaulting to 1000 [ 588.309317][T20985] veth0_macvtap: entered promiscuous mode [ 588.409975][T21261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=21261 comm=syz.3.6020 [ 588.423781][T21261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=21261 comm=syz.3.6020 [ 588.439133][T21261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=21261 comm=syz.3.6020 [ 588.452954][T21261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=21261 comm=syz.3.6020 [ 588.481069][T20985] veth1_macvtap: entered promiscuous mode [ 588.498686][T20985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.514660][T20985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.529748][ T3432] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.726895][ T3432] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.738656][ T3432] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.760196][ T3432] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.798831][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.808609][T21266] loop1: detected capacity change from 0 to 512 [ 588.826043][T21268] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.832967][T21266] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 588.841749][T21268] bridge_slave_0 (unregistering): left allmulticast mode [ 588.842110][T21266] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.6021: inode #15: comm syz.1.6021: iget: illegal inode # [ 588.849156][T21268] bridge_slave_0 (unregistering): left promiscuous mode [ 588.868709][T21268] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.876508][T21266] loop1: lost filesystem error report for type 5 error -117 [ 588.881794][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 588.884454][T21266] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6021: couldn't read orphan inode 15 (err -117) [ 588.889117][ C1] EXT4-fs (loop1): initial error at time 1781345104: ext4_orphan_get:1397 [ 588.889155][ C1] EXT4-fs (loop1): last error at time 1781345104: ext4_orphan_get:1397 [ 588.900088][T21266] loop1: lost filesystem error report for type 5 error -117 [ 588.907397][ C1] [ 588.935275][T21266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.976774][ T28] audit: type=1400 audit(1781345104.303:748): avc: denied { write } for pid=21265 comm="syz.1.6021" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 588.992016][T21276] sz1: rxe_newlink: already configured on lo [ 589.006268][T12369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.038532][T21278] loop2: detected capacity change from 0 to 512 [ 589.059183][T21278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 589.090258][T21278] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.6026: corrupted in-inode xattr: invalid ea_ino [ 589.106921][T21284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 589.130465][T21278] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.130760][T21284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.130918][T21278] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6026: couldn't read orphan inode 15 (err -117) [ 589.139934][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 589.139954][ C0] EXT4-fs (loop2): initial error at time 1781345104: ext4_iget_extra_inode:5128: inode 15 [ 589.154209][T21286] loop3: detected capacity change from 0 to 512 [ 589.159530][ C0] [ 589.176191][T21278] loop2: lost filesystem error report for type 5 error -117 [ 589.182063][ C0] EXT4-fs (loop2): last error at time 1781345104: ext4_iget_extra_inode:5128: inode 15 [ 589.195656][T21286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 589.210097][T21276] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.221235][T21276] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.232414][T21286] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.6028: corrupted in-inode xattr: invalid ea_ino [ 589.235197][T21278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.246510][T21286] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.258795][T21286] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6028: couldn't read orphan inode 15 (err -117) [ 589.259036][T21289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6029'. [ 589.267958][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 589.267984][ C0] EXT4-fs (loop3): initial error at time 1781345104: ext4_iget_extra_inode:5128: inode 15 [ 589.268009][ C0] EXT4-fs (loop3): last error at time 1781345104: ext4_iget_extra_inode:5128: inode 15 [ 589.324372][T21286] loop3: lost filesystem error report for type 5 error -117 [ 589.324899][T21286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.456583][T21276] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.466881][T21276] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.509409][T21294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6031'. [ 589.570483][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.583544][T21297] loop1: detected capacity change from 0 to 128 [ 589.594975][T21276] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.642006][T21276] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.730314][T21299] bio_check_eod: 23 callbacks suppressed [ 589.730350][T21299] syz.1.6033: attempt to access beyond end of device [ 589.730350][T21299] loop1: rw=2049, sector=137, nr_sectors = 16 limit=128 [ 589.760769][T21297] syz.1.6033: attempt to access beyond end of device [ 589.760769][T21297] loop1: rw=2049, sector=345, nr_sectors = 128 limit=128 [ 589.781462][T21301] loop2: detected capacity change from 0 to 128 [ 589.792637][T21276] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.803059][T21299] syz.1.6033: attempt to access beyond end of device [ 589.803059][T21299] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 589.819857][T21276] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.015857][T21299] syz.1.6033: attempt to access beyond end of device [ 590.015857][T21299] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 590.032679][T21299] syz.1.6033: attempt to access beyond end of device [ 590.032679][T21299] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 590.046429][T21299] syz.1.6033: attempt to access beyond end of device [ 590.046429][T21299] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 590.082039][T21299] syz.1.6033: attempt to access beyond end of device [ 590.082039][T21299] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 590.095679][T21299] syz.1.6033: attempt to access beyond end of device [ 590.095679][T21299] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 590.109661][T12794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.112318][T21303] syz.2.6032: attempt to access beyond end of device [ 590.112318][T21303] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 590.119158][T21299] syz.1.6033: attempt to access beyond end of device [ 590.119158][T21299] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 590.209384][T21306] rdma_rxe: rxe_newlink: failed to add lo [ 590.300242][T21311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.326853][T21311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.346181][T21311] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.356460][T21311] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.414010][T21311] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.449292][T21311] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.515118][T21311] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.524938][T21311] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.759513][T21311] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.795159][T21311] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.970631][ T7525] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.997323][ T7525] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.034804][ T7525] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.063713][ T7525] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.121643][ T7525] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.130568][ T7525] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.147243][ T7525] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.185417][ T7525] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.391323][T21319] program syz.2.6039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.661663][T21323] loop2: detected capacity change from 0 to 512 [ 591.670914][T21323] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.6040: corrupted in-inode xattr: e_value out of bounds [ 591.684967][T21323] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 591.685321][T21323] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6040: couldn't read orphan inode 15 (err -117) [ 591.694523][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 591.694540][ C1] EXT4-fs (loop2): initial error at time 1781345107: ext4_iget_extra_inode:5128: inode 15 [ 591.694594][ C1] EXT4-fs (loop2): last error at time 1781345107: ext4_iget_extra_inode:5128: inode 15 [ 591.732614][T21323] loop2: lost filesystem error report for type 5 error -117 [ 591.734887][T21323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.070442][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6042'. [ 592.101221][T21330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6042'. [ 592.148169][T21334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6043'. [ 592.176626][T21336] loop1: detected capacity change from 0 to 128 [ 592.665305][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.715242][T21338] loop2: detected capacity change from 0 to 128 [ 593.510814][ T3432] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.528657][ T3432] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.557162][ T3432] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.598889][ T3432] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.633322][ T3432] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.650451][ T3432] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.671461][ T7525] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.690997][ T7525] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.794558][T21352] program syz.2.6050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.131315][T21365] loop0: detected capacity change from 0 to 256 [ 595.158822][T21378] loop2: detected capacity change from 0 to 128 [ 595.818201][T21388] program syz.4.6063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 596.566953][T21397] syzkaller0: entered promiscuous mode [ 596.587848][T21397] syzkaller0: entered allmulticast mode [ 596.612252][T21399] syzkaller0: entered promiscuous mode [ 596.632667][T21399] syzkaller0: entered allmulticast mode [ 596.843349][T21405] loop1: detected capacity change from 0 to 512 [ 596.851388][T21405] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.6062: corrupted in-inode xattr: e_value out of bounds [ 596.865572][T21405] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 596.866224][T21405] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6062: couldn't read orphan inode 15 (err -117) [ 596.875449][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 596.875474][ C1] EXT4-fs (loop1): initial error at time 1781345112: ext4_iget_extra_inode:5128: inode 15 [ 596.875542][ C1] EXT4-fs (loop1): last error at time 1781345112: ext4_iget_extra_inode:5128: inode 15 [ 596.913401][T21405] loop1: lost filesystem error report for type 5 error -117 [ 596.915011][T21405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.163556][T21418] loop4: detected capacity change from 0 to 1024 [ 598.170881][T21418] EXT4-fs: Ignoring removed orlov option [ 598.594812][T21418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.775329][T21425] loop2: detected capacity change from 0 to 1024 [ 599.782405][T21425] EXT4-fs: Ignoring removed orlov option [ 599.788102][T21425] EXT4-fs: Ignoring removed oldalloc option [ 599.794113][T21425] EXT4-fs: Ignoring removed orlov option [ 599.875027][T21425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 599.883416][T21425] System zones: 0-1, 3-12 [ 599.888960][T21425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.912325][T21425] EXT4-fs error (device loop2): __ext4_new_inode:1285: comm syz.2.6073: failed to insert inode 12: doubly allocated? [ 599.927100][ T28] audit: type=1400 audit(1781345115.232:749): avc: denied { write } for pid=21422 comm="syz.2.6073" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 599.982318][ T28] audit: type=1400 audit(1781345115.232:750): avc: denied { write } for pid=21422 comm="syz.2.6073" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.056165][ T28] audit: type=1400 audit(1781345115.232:751): avc: denied { write } for pid=21422 comm="syz.2.6073" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.124307][ T28] audit: type=1400 audit(1781345115.232:752): avc: denied { remove_name } for pid=21422 comm="syz.2.6073" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.198349][ T28] audit: type=1400 audit(1781345115.232:753): avc: denied { rename } for pid=21422 comm="syz.2.6073" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.269411][ T28] audit: type=1400 audit(1781345115.232:754): avc: denied { rmdir } for pid=21422 comm="syz.2.6073" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 600.713155][T12369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.726600][T20985] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.209223][T21437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'. [ 601.310391][T21440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6079'. [ 601.365498][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.058138][T21446] loop3: detected capacity change from 0 to 512 [ 602.094043][T21446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 602.178834][T21446] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.6078: corrupted in-inode xattr: invalid ea_ino [ 602.232910][T21449] syzkaller0: entered promiscuous mode [ 602.239763][T21446] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 602.239892][T21446] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6078: couldn't read orphan inode 15 (err -117) [ 602.249150][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 602.249166][ C1] EXT4-fs (loop3): initial error at time 1781345117: ext4_iget_extra_inode:5128: inode 15 [ 602.249215][ C1] EXT4-fs (loop3): last error at time 1781345117: ext4_iget_extra_inode:5128: inode 15 [ 602.653985][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6077'. [ 602.664625][T21449] syzkaller0: entered allmulticast mode [ 602.677102][T21446] loop3: lost filesystem error report for type 5 error -117 [ 602.677711][T21446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.099518][T21472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.123266][T21472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.413803][T21476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6090'. [ 603.465850][T21478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.479177][T21478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.799923][T12794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.841708][T21483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.887271][T21483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.039956][T21484] loop2: detected capacity change from 0 to 1024 [ 604.047095][T21484] EXT4-fs: Ignoring removed orlov option [ 604.103422][T21488] syzkaller0: entered promiscuous mode [ 604.109383][T21488] syzkaller0: entered allmulticast mode [ 604.204585][T21484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.334326][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6094'. [ 604.458360][T21493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6094'. [ 605.196490][T21520] loop3: detected capacity change from 0 to 256 [ 605.321405][T21512] lo speed is unknown, defaulting to 1000 [ 605.451454][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.535540][T21525] loop2: detected capacity change from 0 to 128 [ 605.610290][ T7515] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.763344][ T7515] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.892340][T21533] loop4: detected capacity change from 0 to 1024 [ 605.899733][T21533] EXT4-fs: Ignoring removed orlov option [ 605.905420][T21533] EXT4-fs: Ignoring removed oldalloc option [ 605.911361][T21533] EXT4-fs: Ignoring removed orlov option [ 606.809201][T21533] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 606.817455][T21533] System zones: 0-1, 3-12 [ 606.823151][T21533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.844565][T21533] EXT4-fs error (device loop4): __ext4_new_inode:1285: comm syz.4.6104: failed to insert inode 12: doubly allocated? [ 606.863076][ T28] audit: type=1400 audit(1781345122.161:755): avc: denied { write } for pid=21528 comm="syz.4.6104" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 606.917632][ T7515] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.043567][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6105'. [ 607.075928][ T7515] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.085766][ T28] audit: type=1400 audit(1781345122.161:756): avc: denied { write } for pid=21528 comm="syz.4.6104" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.108499][ T28] audit: type=1400 audit(1781345122.161:757): avc: denied { write } for pid=21528 comm="syz.4.6104" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 607.527518][T20985] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.557498][ T7515] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.599504][ T7515] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.740730][T21512] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.754800][T21512] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.771384][T21512] bridge_slave_0: entered allmulticast mode [ 607.781629][T21512] bridge_slave_0: entered promiscuous mode [ 607.790660][ T7515] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.803378][ T7515] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.838175][T21556] syzkaller0: entered promiscuous mode [ 607.843671][T21556] syzkaller0: entered allmulticast mode [ 607.850916][T21512] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.859129][T21512] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.866476][T21512] bridge_slave_1: entered allmulticast mode [ 607.873100][T21512] bridge_slave_1: entered promiscuous mode [ 607.944613][T21512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.977719][T21512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.994875][T21564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.006427][T21564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.054787][T21512] team0: Port device team_slave_0 added [ 608.091715][T21512] team0: Port device team_slave_1 added [ 608.111669][T21512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.131894][T21512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.159500][T21512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.229742][ T7515] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 608.299001][T21573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.314849][T21573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.487332][ T7515] bond0 (unregistering): (slave 30): Releasing backup interface [ 608.496383][ T7515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.505914][ T7515] bond0 (unregistering): Released all slaves [ 608.513846][ T7515] bond1 (unregistering): Released all slaves [ 608.525974][ T7515] bond2 (unregistering): Released all slaves [ 608.537211][ T7515] bond3 (unregistering): Released all slaves [ 608.558440][T21512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.587846][T21512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.668371][T21512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.776640][T21512] hsr_slave_0: entered promiscuous mode [ 608.800212][T21512] hsr_slave_1: entered promiscuous mode [ 608.822320][T21512] debugfs: 'hsr0' already exists in 'hsr' [ 608.842955][T21512] Cannot create hsr debugfs directory [ 609.508629][T21582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=21582 comm=syz.4.6120 [ 609.521378][T21582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=21582 comm=syz.4.6120 [ 609.534180][T21582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=21582 comm=syz.4.6120 [ 609.546931][T21582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=21582 comm=syz.4.6120 [ 609.573092][T21591] kthread_run failed with err -4 [ 609.597248][T21594] loop0: detected capacity change from 0 to 1024 [ 609.626778][T21594] EXT4-fs: Ignoring removed orlov option [ 609.657507][ T7515] tipc: Left network mode [ 609.674393][T21594] EXT4-fs: Ignoring removed oldalloc option [ 609.703949][T21594] EXT4-fs: Ignoring removed orlov option [ 609.732097][T21512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 609.767155][T21512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 609.807242][ T7515] hsr_slave_0: left promiscuous mode [ 609.818688][T21594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 609.835781][T21608] loop2: detected capacity change from 0 to 512 [ 609.858468][T21594] System zones: 0-1, 3-12 [ 609.869160][T21608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 609.892158][T21594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.906701][ T7515] hsr_slave_1: left promiscuous mode [ 609.926474][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.939636][ T28] audit: type=1400 audit(1781345125.240:758): avc: denied { write } for pid=21597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.970879][T21608] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.6125: corrupted in-inode xattr: invalid ea_ino [ 609.989924][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.018092][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.030220][T21608] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 610.030408][T21608] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6125: couldn't read orphan inode 15 (err -117) [ 610.039679][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 610.039696][ C0] EXT4-fs (loop2): initial error at time 1781345125: ext4_iget_extra_inode:5128: inode 15 [ 610.039724][ C0] EXT4-fs (loop2): last error at time 1781345125: ext4_iget_extra_inode:5128: inode 15 [ 610.085851][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.094201][ T28] audit: type=1400 audit(1781345125.330:759): avc: denied { write } for pid=21593 comm="syz.0.6124" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 610.122169][ T7515] veth1_macvtap: left promiscuous mode [ 610.131307][T20169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.143362][ T7515] veth0_macvtap: left promiscuous mode [ 610.179733][ T28] audit: type=1400 audit(1781345125.330:760): avc: denied { write } for pid=21593 comm="syz.0.6124" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 610.182225][T21608] loop2: lost filesystem error report for type 5 error -117 [ 610.202905][T21608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.210454][ T28] audit: type=1400 audit(1781345125.330:761): avc: denied { write } for pid=21593 comm="syz.0.6124" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 610.246911][ T28] audit: type=1400 audit(1781345125.330:762): avc: denied { write } for pid=21593 comm="syz.0.6124" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 610.271101][T21622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6129'. [ 610.273182][ T28] audit: type=1400 audit(1781345125.330:763): avc: denied { rename } for pid=21593 comm="syz.0.6124" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 610.340896][T21626] loop3: detected capacity change from 0 to 256 [ 610.345669][ T28] audit: type=1400 audit(1781345125.400:764): avc: denied { write } for pid=21617 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.370135][ T7515] team0 (unregistering): Port device team_slave_1 removed [ 610.391669][ T7515] team0 (unregistering): Port device team_slave_0 removed [ 611.392155][T21512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 611.402678][T21512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.419161][T21512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 611.549401][T21512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.565723][T21512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 611.588720][T21512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.711248][T21512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.754144][T21512] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.786457][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.793565][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.837453][ T7505] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.844570][ T7505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.996047][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.076888][T21512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.238580][T21675] syzkaller0: left promiscuous mode [ 612.246748][T21675] syzkaller0: left allmulticast mode [ 612.467147][T21680] loop4: detected capacity change from 0 to 1024 [ 612.474814][T21680] EXT4-fs: Ignoring removed orlov option [ 612.513405][T21680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.558190][T21512] veth0_vlan: entered promiscuous mode [ 612.581220][T21674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6133'. [ 612.596147][T21512] veth1_vlan: entered promiscuous mode [ 612.798400][T21512] veth0_macvtap: entered promiscuous mode [ 612.817074][T21512] veth1_macvtap: entered promiscuous mode [ 612.846349][T21512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.854059][T21687] loop2: detected capacity change from 0 to 1024 [ 612.863067][T21687] EXT4-fs: Ignoring removed orlov option [ 612.870530][T21512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.884549][T21687] EXT4-fs: Ignoring removed oldalloc option [ 612.899407][ T7529] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.908489][T21687] EXT4-fs: Ignoring removed orlov option [ 612.914159][ T7529] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.927695][T21687] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 612.937810][T21687] System zones: 0-1, 3-12 [ 612.944166][ T7529] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.953915][T21687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.966271][ T7529] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.000193][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 613.000237][ T28] audit: type=1400 audit(1781345128.320:767): avc: denied { write } for pid=21686 comm="syz.2.6136" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.053698][T20626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.075771][ T28] audit: type=1400 audit(1781345128.350:768): avc: denied { write } for pid=21686 comm="syz.2.6136" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.121447][ T28] audit: type=1400 audit(1781345128.360:769): avc: denied { write } for pid=21686 comm="syz.2.6136" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.166874][ T28] audit: type=1400 audit(1781345128.360:770): avc: denied { write } for pid=21686 comm="syz.2.6136" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.250877][T21695] loop3: detected capacity change from 0 to 128 [ 613.268547][T21697] loop2: detected capacity change from 0 to 128 [ 613.795225][T20985] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.917315][T21708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6139'. [ 614.156132][T21715] loop4: detected capacity change from 0 to 1024 [ 614.164636][T21715] EXT4-fs: Ignoring removed orlov option [ 614.177009][T21715] EXT4-fs: Ignoring removed oldalloc option [ 614.186411][T21715] EXT4-fs: Ignoring removed orlov option [ 614.289114][T21720] loop1: detected capacity change from 0 to 256 [ 614.527180][T21720] FAT-fs (loop1): IO charset koi8-ru not found [ 614.538262][ T28] audit: type=1326 audit(1781345129.860:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21711 comm="syz.1.6141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498191ce59 code=0x7ffc0000 [ 614.571883][T21721] syzkaller0: entered promiscuous mode [ 614.614135][T21721] syzkaller0: entered allmulticast mode [ 614.751637][ T28] audit: type=1326 audit(1781345129.860:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21711 comm="syz.1.6141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498191ce59 code=0x7ffc0000 [ 615.017076][ T28] audit: type=1326 audit(1781345129.860:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21711 comm="syz.1.6141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f498191ce59 code=0x7ffc0000 [ 615.092061][ T28] audit: type=1326 audit(1781345129.860:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21711 comm="syz.1.6141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498191ce59 code=0x7ffc0000 [ 615.159808][T21715] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 615.168038][T21715] System zones: 0-1, 3-12 [ 615.215253][ T28] audit: type=1326 audit(1781345129.860:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21711 comm="syz.1.6141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498191ce59 code=0x7ffc0000 [ 615.394554][T21715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.430246][ T28] audit: type=1400 audit(1781345130.749:776): avc: denied { write } for pid=21714 comm="syz.4.6142" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 615.481157][T21743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6151'. [ 615.532022][T20985] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.720888][T21759] syzkaller0: entered promiscuous mode [ 616.771734][T21759] syzkaller0: entered allmulticast mode [ 617.193404][T21773] netlink: 'syz.4.6158': attribute type 5 has an invalid length. [ 617.352036][T21787] loop4: detected capacity change from 0 to 512 [ 617.366289][T21787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 617.383404][T21787] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.6164: corrupted in-inode xattr: invalid ea_ino [ 617.396845][T21787] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 617.397050][T21787] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6164: couldn't read orphan inode 15 (err -117) [ 617.406209][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 617.406265][ C0] EXT4-fs (loop4): initial error at time 1781345132: ext4_iget_extra_inode:5128: inode 15 [ 617.406290][ C0] EXT4-fs (loop4): last error at time 1781345132: ext4_iget_extra_inode:5128: inode 15 [ 617.444610][T21787] loop4: lost filesystem error report for type 5 error -117 [ 617.445171][T21787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.655354][T21797] rdma_rxe: rxe_newlink: failed to add lo [ 617.679863][T21797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.689014][T21797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.704089][T21797] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.758851][T21797] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.809517][T21797] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.868485][T21797] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.933575][ T7525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.948340][ T7525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.963668][ T7525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.972012][ T7525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.002280][T21801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6167'. [ 618.250511][T21809] loop3: detected capacity change from 0 to 256 [ 618.453240][T21813] loop2: detected capacity change from 0 to 128 [ 618.663408][T21815] bio_check_eod: 32 callbacks suppressed [ 618.663748][T21815] syz.2.6171: attempt to access beyond end of device [ 618.663748][T21815] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 618.691934][T20985] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.714459][T21815] syz.2.6171: attempt to access beyond end of device [ 618.714459][T21815] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 618.728542][T21815] syz.2.6171: attempt to access beyond end of device [ 618.728542][T21815] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 618.742350][T21815] syz.2.6171: attempt to access beyond end of device [ 618.742350][T21815] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 618.756525][T21815] syz.2.6171: attempt to access beyond end of device [ 618.756525][T21815] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 618.770132][T21815] syz.2.6171: attempt to access beyond end of device [ 618.770132][T21815] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 618.783866][T21815] syz.2.6171: attempt to access beyond end of device [ 618.783866][T21815] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 618.804751][T21815] syz.2.6171: attempt to access beyond end of device [ 618.804751][T21815] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 618.818788][T21815] syz.2.6171: attempt to access beyond end of device [ 618.818788][T21815] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 618.832484][T21815] syz.2.6171: attempt to access beyond end of device [ 618.832484][T21815] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 618.988466][T21827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6175'. [ 619.179835][T21832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6178'. [ 619.477896][T21840] netlink: 'syz.0.6180': attribute type 3 has an invalid length. [ 619.499456][T21840] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.6180'. [ 619.512341][T21840] netlink: 'syz.0.6180': attribute type 10 has an invalid length. [ 619.520998][T21840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6180'. [ 619.531386][T21840] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 619.584064][T21838] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6179'. [ 619.594077][T21838] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6179'. [ 620.475414][T21859] loop4: detected capacity change from 0 to 256 [ 622.160565][T21875] loop2: detected capacity change from 0 to 128 [ 622.521901][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 622.521915][ T28] audit: type=1400 audit(1781345137.839:778): avc: denied { read } for pid=21880 comm="syz.0.6192" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 622.646120][ T28] audit: type=1400 audit(1781345137.959:779): avc: denied { connect } for pid=21893 comm="syz.0.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 622.688243][ T28] audit: type=1400 audit(1781345137.959:780): avc: denied { ioctl } for pid=21893 comm="syz.0.6198" path="socket:[69950]" dev="sockfs" ino=69950 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 622.797298][T21900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6199'. [ 623.751654][T21929] netlink: 'syz.3.6209': attribute type 5 has an invalid length. [ 623.892615][T21933] syz_tun: entered allmulticast mode [ 623.899429][T21931] syz_tun: left allmulticast mode [ 623.932352][T21940] loop0: detected capacity change from 0 to 512 [ 623.939309][T21940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 623.952780][T21940] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.6212: corrupted in-inode xattr: invalid ea_ino [ 623.967695][T21940] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 623.967918][T21940] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.6212: couldn't read orphan inode 15 (err -117) [ 623.977159][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 623.977178][ C1] EXT4-fs (loop0): initial error at time 1781345139: ext4_iget_extra_inode:5128: inode 15 [ 623.977229][ C1] EXT4-fs (loop0): last error at time 1781345139: ext4_iget_extra_inode:5128: inode 15 [ 624.016171][T21940] loop0: lost filesystem error report for type 5 error -117 [ 624.016712][T21940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.026563][T21944] netlink: 'syz.4.6213': attribute type 3 has an invalid length. [ 624.044219][T21944] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.6213'. [ 624.071985][T21944] netlink: 'syz.4.6213': attribute type 10 has an invalid length. [ 624.080054][T21944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6213'. [ 624.089309][T21944] dummy0: entered promiscuous mode [ 624.094627][T21944] dummy0: entered allmulticast mode [ 624.100939][T21944] bridge0: port 1(dummy0) entered blocking state [ 624.107676][T21944] bridge0: port 1(dummy0) entered disabled state [ 624.115613][T21944] bridge0: port 1(dummy0) entered blocking state [ 624.122084][T21944] bridge0: port 1(dummy0) entered forwarding state [ 624.150683][T21948] syz_tun: entered allmulticast mode [ 624.156893][T21947] syz_tun: left allmulticast mode [ 624.190175][T21953] rdma_rxe: rxe_newlink: failed to add lo [ 624.283818][T21961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.298909][T21961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.315605][T21953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.344163][T21963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6218'. [ 624.380992][T21953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.440811][T21953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.489598][T21953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.545648][ T113] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.561155][ T113] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.569988][ T113] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.582381][ T7525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.840155][T20169] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.869771][T21972] xt_hashlimit: size too large, truncated to 1048576 [ 624.993011][T21976] syz_tun: entered allmulticast mode [ 624.999679][T21975] syz_tun: left allmulticast mode [ 625.088376][T21983] rdma_rxe: rxe_newlink: failed to add lo [ 625.175573][T21988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.185671][T21985] syzkaller0: entered promiscuous mode [ 625.191871][T21985] syzkaller0: entered allmulticast mode [ 625.195198][T21988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.232988][T21988] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.295963][T21988] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.368668][T21988] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.421781][T21988] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.497674][ T7525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.508603][ T7525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.528635][ T7515] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.549340][ T7515] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.598847][T21998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.608470][T21998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.992462][T22006] xt_hashlimit: size too large, truncated to 1048576 [ 626.152544][T22016] sz1: rxe_newlink: already configured on lo [ 626.166979][T22016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.176427][T22013] syz_tun: entered allmulticast mode [ 626.176756][T22016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.202445][T22016] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.229210][T22016] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.378738][T22016] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.388721][T22016] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.464173][T22028] syzkaller0: entered promiscuous mode [ 626.469707][T22028] syzkaller0: entered allmulticast mode [ 626.477855][T22016] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.487650][T22016] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.523667][T22030] loop1: detected capacity change from 0 to 512 [ 626.530581][T22030] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 626.598844][T22016] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.608932][T22016] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.684844][ T3432] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.693104][ T3432] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.705448][ T3432] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.716423][ T3432] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.728448][ T3432] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.736752][ T3432] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.745134][T22035] syz_tun: entered allmulticast mode [ 626.753745][ T3432] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.762034][ T3432] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.795748][T22039] xt_hashlimit: size too large, truncated to 1048576 [ 626.909342][T22043] rdma_rxe: rxe_newlink: failed to add lo [ 626.933138][T22043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.942486][T22043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.956783][T22043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 626.967177][T22043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.010680][T22043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.021152][T22043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.080624][T22043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.091355][T22043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.159522][T22043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.169889][T22043] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.242796][ T3432] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.251175][ T3432] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.263274][ T3432] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.271630][ T3432] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.282952][ T3432] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.291318][ T3432] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.305106][ T7505] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.320716][ T7505] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.417435][T22048] loop0: detected capacity change from 0 to 256 [ 627.419687][T22051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.432709][T22051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.703363][T22056] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6251'. [ 627.873771][T22063] syzkaller0: entered promiscuous mode [ 627.879413][T22063] syzkaller0: entered allmulticast mode [ 627.911228][T22065] syzkaller0: entered promiscuous mode [ 627.916706][T22065] syzkaller0: entered allmulticast mode [ 627.970787][T22068] xt_hashlimit: size too large, truncated to 1048576 [ 628.130571][T22077] syzkaller0: entered promiscuous mode [ 628.136166][T22077] syzkaller0: entered allmulticast mode [ 628.335125][T22082] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6262'. [ 628.532445][T12794] syz_tun (unregistering): left allmulticast mode [ 628.604002][T22087] lo speed is unknown, defaulting to 1000 [ 628.691307][ T3432] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.701288][ T3432] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.725169][T22087] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.732303][T22087] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.739557][T22087] bridge_slave_0: entered allmulticast mode [ 628.745931][T22087] bridge_slave_0: entered promiscuous mode [ 628.752650][T22087] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.759796][T22087] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.766983][T22087] bridge_slave_1: entered allmulticast mode [ 628.773742][T22087] bridge_slave_1: entered promiscuous mode [ 628.785576][ T3432] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.795501][ T3432] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.812286][T22087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.822612][T22087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.841732][ T3432] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.851672][ T3432] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.863346][T22087] team0: Port device team_slave_0 added [ 628.869784][T22087] team0: Port device team_slave_1 added [ 628.884450][T22087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.891467][T22087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.917671][T22087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.928748][T22087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.935679][T22087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.961699][T22087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.983940][ T3432] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.994645][ T3432] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.019807][T22087] hsr_slave_0: entered promiscuous mode [ 629.027303][T22087] hsr_slave_1: entered promiscuous mode [ 629.033429][T22087] debugfs: 'hsr0' already exists in 'hsr' [ 629.039380][T22087] Cannot create hsr debugfs directory [ 629.089069][T22105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.098384][T22105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.149146][ T3432] bridge0: port 1(dummy0) entered disabled state [ 629.158850][ T3432] bridge_slave_1: left allmulticast mode [ 629.164523][ T3432] bridge_slave_1: left promiscuous mode [ 629.170361][ T3432] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.193949][ T28] audit: type=1400 audit(1781345144.508:781): avc: denied { write } for pid=22107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.222800][ T3432] tipc: Resetting bearer [ 629.244078][ T28] audit: type=1400 audit(1781345144.558:782): avc: denied { write } for pid=22120 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.373039][ T3432] tipc: Disabling bearer [ 629.559316][ T3432] bond0 (unregistering): (slave 30): Releasing backup interface [ 629.568634][ T3432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.578064][ T3432] bond0 (unregistering): Released all slaves [ 629.585754][ T3432] bond1 (unregistering): Released all slaves [ 629.594863][ T3432] bond2 (unregistering): (slave bond3): Releasing backup interface [ 629.602872][ T3432] bond3 (unregistering): left promiscuous mode [ 629.609603][ T3432] bond2 (unregistering): Released all slaves [ 629.618361][ T3432] bond3 (unregistering): Released all slaves [ 629.630414][T22103] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.641818][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 629.671006][ T3432] tipc: Disabling bearer [ 629.676082][ T3432] tipc: Left network mode [ 629.705827][ T3432] hsr_slave_0: left promiscuous mode [ 629.713335][ T3432] hsr_slave_1: left promiscuous mode [ 629.719063][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.726760][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.734666][ T3432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.742596][ T28] audit: type=1400 audit(1781345145.058:783): avc: denied { write } for pid=22127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.765897][ T3432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.772573][ T28] audit: type=1400 audit(1781345145.068:784): avc: denied { write } for pid=22138 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 629.797369][ T3432] veth1_macvtap: left promiscuous mode [ 629.802973][ T3432] veth0_macvtap: left promiscuous mode [ 629.843819][ T3432] team0 (unregistering): Port device team_slave_1 removed [ 629.853289][ T3432] team0 (unregistering): Port device team_slave_0 removed [ 629.883112][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 629.892642][T22103] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.953691][T22103] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.996778][ T28] audit: type=1400 audit(1781345145.308:785): avc: denied { write } for pid=22142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.020167][ T28] audit: type=1400 audit(1781345145.308:786): avc: denied { write } for pid=22153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.046614][T22103] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.080284][ T28] audit: type=1400 audit(1781345145.398:787): avc: denied { write } for pid=22155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.103673][ T28] audit: type=1400 audit(1781345145.418:788): avc: denied { write } for pid=22166 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.144405][T22087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 630.153524][T22087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.161323][T22087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 630.170214][T22087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.178908][T22087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 630.188947][T22087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.196112][ T28] audit: type=1400 audit(1781345145.508:789): avc: denied { write } for pid=22168 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.221475][T22087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 630.227609][ T28] audit: type=1400 audit(1781345145.518:790): avc: denied { write } for pid=22179 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 630.252391][T22087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 630.272487][T22182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.281092][ T113] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.281308][T22182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.291890][ T113] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.311897][ T7505] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.324406][ T7525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.351537][T22087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.362250][T22087] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.371249][ T7505] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.378343][ T7505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.390713][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.397783][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.482437][T22087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.535428][T22087] veth0_vlan: entered promiscuous mode [ 630.543390][T22087] veth1_vlan: entered promiscuous mode [ 630.557252][T22087] veth0_macvtap: entered promiscuous mode [ 630.564601][T22087] veth1_macvtap: entered promiscuous mode [ 630.575286][T22087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.585493][T22087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.596243][ T3432] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.605114][ T3432] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.613927][ T3432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.623269][ T3432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.670049][T22207] syz_tun: entered allmulticast mode [ 630.719235][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6268'. [ 630.965612][T22225] loop1: detected capacity change from 0 to 128 [ 631.115382][T22235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6271'. [ 631.158679][T22232] bio_check_eod: 18 callbacks suppressed [ 631.158696][T22232] syz.1.6274: attempt to access beyond end of device [ 631.158696][T22232] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 631.232330][T22232] syz.1.6274: attempt to access beyond end of device [ 631.232330][T22232] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 631.261046][T22232] syz.1.6274: attempt to access beyond end of device [ 631.261046][T22232] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 631.274811][T22232] syz.1.6274: attempt to access beyond end of device [ 631.274811][T22232] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 631.298099][T22232] syz.1.6274: attempt to access beyond end of device [ 631.298099][T22232] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 631.312274][T22232] syz.1.6274: attempt to access beyond end of device [ 631.312274][T22232] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 631.327504][T22232] syz.1.6274: attempt to access beyond end of device [ 631.327504][T22232] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 631.343859][T22232] syz.1.6274: attempt to access beyond end of device [ 631.343859][T22232] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 631.358603][T22240] netlink: 'syz.0.6279': attribute type 5 has an invalid length. [ 631.369402][T22232] syz.1.6274: attempt to access beyond end of device [ 631.369402][T22232] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 631.383181][T22232] syz.1.6274: attempt to access beyond end of device [ 631.383181][T22232] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 631.412491][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6278'. [ 631.538426][T22247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.548152][T22247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.574576][T22246] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.584717][T22246] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.639582][T22246] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.649697][T22246] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.699869][T22246] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.709777][T22246] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.781533][T22246] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.792340][T22246] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.935946][ T7525] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.944842][ T7525] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.953601][ T7525] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.963742][ T7525] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.980704][ T113] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.005938][ T113] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.023667][ T113] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.032618][ T113] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.184954][T22257] netlink: 'syz.1.6284': attribute type 5 has an invalid length. [ 632.364712][T22264] program syz.1.6286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.075060][T22298] loop1: detected capacity change from 0 to 128 [ 634.168957][T22299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.195120][T22299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.217817][T22294] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.283426][T22294] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.346227][T22294] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.394587][T22294] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.624922][T22294] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.656245][T22294] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.678523][T22314] program syz.0.6305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.712812][T22294] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.722696][T22294] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.775404][T20802] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.783850][T20802] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.801856][ T113] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.810407][ T113] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.824485][ T7505] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.833997][ T7505] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.848462][ T113] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.879088][ T113] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.039689][T22324] loop1: detected capacity change from 0 to 512 [ 635.048558][T22324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.064773][T22324] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.6309: corrupted in-inode xattr: invalid ea_ino [ 635.079684][T22324] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 635.080178][T22324] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6309: couldn't read orphan inode 15 (err -117) [ 635.089388][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 635.089404][ C1] EXT4-fs (loop1): initial error at time 1781345150: ext4_iget_extra_inode:5128: inode 15 [ 635.089437][ C1] EXT4-fs (loop1): last error at time 1781345150: ext4_iget_extra_inode:5128: inode 15 [ 635.149812][T22324] loop1: lost filesystem error report for type 5 error -117 [ 635.150956][T22324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.869896][T22351] loop3: detected capacity change from 0 to 128 [ 636.009093][T22351] Buffer I/O error on dev loop3, logical block 345, lost async page write [ 636.116221][T21512] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.593052][T22374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.669973][T22374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.791758][T22373] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.883763][T22373] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.966065][T22373] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.059487][T22391] loop0: detected capacity change from 0 to 128 [ 637.067104][T22373] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.150054][ T113] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.159876][ T113] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.175682][T22400] bio_check_eod: 21 callbacks suppressed [ 637.175712][T22400] syz.0.6328: attempt to access beyond end of device [ 637.175712][T22400] loop0: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 637.180942][ T113] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.192670][T22400] syz.0.6328: attempt to access beyond end of device [ 637.192670][T22400] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 637.211261][T20802] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.229515][T22400] syz.0.6328: attempt to access beyond end of device [ 637.229515][T22400] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 637.238706][T22404] syz.0.6328: attempt to access beyond end of device [ 637.238706][T22404] loop0: rw=2049, sector=353, nr_sectors = 120 limit=128 [ 637.243210][T22400] syz.0.6328: attempt to access beyond end of device [ 637.243210][T22400] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 637.270572][T22400] syz.0.6328: attempt to access beyond end of device [ 637.270572][T22400] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 637.287387][T22400] syz.0.6328: attempt to access beyond end of device [ 637.287387][T22400] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 637.301677][T22391] syz.0.6328: attempt to access beyond end of device [ 637.301677][T22391] loop0: rw=2049, sector=353, nr_sectors = 1 limit=128 [ 637.313428][T22400] syz.0.6328: attempt to access beyond end of device [ 637.313428][T22400] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 637.328982][T22391] Buffer I/O error on dev loop0, logical block 353, lost async page write [ 637.329804][T22400] syz.0.6328: attempt to access beyond end of device [ 637.329804][T22400] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 637.480503][T22418] xt_hashlimit: size too large, truncated to 1048576 [ 637.581164][T22420] loop0: detected capacity change from 0 to 256 [ 637.849217][T22427] loop2: detected capacity change from 0 to 128 [ 638.559081][T22452] syzkaller0: entered promiscuous mode [ 638.580014][T22452] syzkaller0: entered allmulticast mode [ 638.681418][T22457] xt_hashlimit: size too large, truncated to 1048576 [ 639.693457][T22481] loop3: detected capacity change from 0 to 256 [ 640.057587][T22497] loop2: detected capacity change from 0 to 128 [ 640.667958][T22530] loop3: detected capacity change from 0 to 128 [ 641.704035][T22566] loop1: detected capacity change from 0 to 128 [ 641.928055][T22574] syzkaller0: entered promiscuous mode [ 641.941904][T22574] syzkaller0: entered allmulticast mode [ 642.696458][T22606] program syz.0.6402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.101913][T22610] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6404'. [ 643.407087][T22629] program syz.3.6413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.564594][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6414'. [ 643.573859][T22640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6414'. [ 643.603482][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6414'. [ 643.613280][T22640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6414'. [ 644.411436][ T7525] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.429875][ T7525] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.443226][ T7525] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.451723][ T7525] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.270501][T22655] rdma_rxe: rxe_newlink: failed to add lo [ 647.354573][T22663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6423'. [ 647.364129][T22663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6423'. [ 647.377418][T22663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6423'. [ 647.387410][T22663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6423'. [ 648.192753][T22665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.206564][T22665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.267599][T22665] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.372879][T22665] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.580734][T22665] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.641348][T22665] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.731111][ T7525] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.743192][ T7525] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.759031][ T7525] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.767921][ T7525] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.055634][T22686] program syz.0.6429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.138808][T22690] syzkaller0: entered promiscuous mode [ 649.144442][T22690] syzkaller0: entered allmulticast mode [ 649.162914][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6430'. [ 649.282067][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6434'. [ 649.374182][T22703] loop1: detected capacity change from 0 to 256 [ 649.503350][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6435'. [ 650.147821][T18000] IPVS: starting estimator thread 0... [ 650.276623][T22734] syzkaller0: entered promiscuous mode [ 650.282535][T22731] IPVS: using max 2688 ests per chain, 134400 per kthread [ 650.290812][T22734] syzkaller0: entered allmulticast mode [ 650.378394][T18200] IPVS: starting estimator thread 0... [ 650.389340][T22738] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6445'. [ 650.403228][T22736] syzkaller0: entered promiscuous mode [ 650.410679][T22736] syzkaller0: entered allmulticast mode [ 650.417000][T22742] netlink: 'syz.3.6446': attribute type 3 has an invalid length. [ 650.441178][T22742] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.6446'. [ 650.455167][T22742] netlink: 'syz.3.6446': attribute type 10 has an invalid length. [ 650.463707][T22742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6446'. [ 650.498900][T22742] dummy0: entered promiscuous mode [ 650.568769][T22750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.577476][T22740] IPVS: using max 2400 ests per chain, 120000 per kthread [ 650.588319][T22750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.600955][T22742] dummy0: entered allmulticast mode [ 650.613219][T22742] bridge0: port 3(dummy0) entered blocking state [ 650.623380][T22742] bridge0: port 3(dummy0) entered disabled state [ 650.632101][T22742] bridge0: port 3(dummy0) entered blocking state [ 650.638629][T22742] bridge0: port 3(dummy0) entered forwarding state [ 650.659044][T22747] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.107976][T22747] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.135808][T22770] loop3: detected capacity change from 0 to 256 [ 651.258100][T22754] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.265308][T22754] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.487494][T22754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.570346][T22754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.616750][T22766] syzkaller0: entered promiscuous mode [ 651.622658][T22766] syzkaller0: entered allmulticast mode [ 651.643849][T22747] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.662543][T22747] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.696696][ T7525] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.706248][ T7525] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.714968][ T7525] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.723471][ T7525] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.834982][ T7525] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.851260][ T7525] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.867025][ T7525] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.875453][ T7525] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.885472][T22747] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.895576][T22747] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.361595][T22747] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.385146][T22747] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.472313][ T7525] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.487894][ T7525] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.513935][ T7525] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.531571][ T7525] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.573939][ T7525] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.582411][ T7525] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.594334][ T7525] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.671538][ T7525] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.140819][T22819] loop2: detected capacity change from 0 to 128 [ 653.221813][T22824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6470'. [ 653.256062][T22822] bio_check_eod: 36 callbacks suppressed [ 653.256078][T22822] syz.2.6468: attempt to access beyond end of device [ 653.256078][T22822] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 653.268587][T22825] syz.2.6468: attempt to access beyond end of device [ 653.268587][T22825] loop2: rw=2049, sector=353, nr_sectors = 112 limit=128 [ 653.316297][T22822] syz.2.6468: attempt to access beyond end of device [ 653.316297][T22822] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 653.342860][T22822] syz.2.6468: attempt to access beyond end of device [ 653.342860][T22822] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 653.361721][T22819] syz.2.6468: attempt to access beyond end of device [ 653.361721][T22819] loop2: rw=2049, sector=353, nr_sectors = 1 limit=128 [ 653.364448][T22829] syzkaller0: entered promiscuous mode [ 653.381525][T22829] syzkaller0: entered allmulticast mode [ 653.389543][T22822] syz.2.6468: attempt to access beyond end of device [ 653.389543][T22822] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 653.403551][T22822] syz.2.6468: attempt to access beyond end of device [ 653.403551][T22822] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 653.412143][T22819] Buffer I/O error on dev loop2, logical block 353, lost async page write [ 653.417640][T22822] syz.2.6468: attempt to access beyond end of device [ 653.417640][T22822] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 653.439686][T22822] syz.2.6468: attempt to access beyond end of device [ 653.439686][T22822] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 653.453469][T22822] syz.2.6468: attempt to access beyond end of device [ 653.453469][T22822] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 653.468168][T22832] netlink: 164 bytes leftover after parsing attributes in process `syz.4.6473'. [ 653.513331][T22839] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 653.525099][T22838] IPVS: stopping master sync thread 22839 ... [ 653.597432][T22847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6479'. [ 653.606634][T22847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6479'. [ 653.689609][T22852] syzkaller0: entered promiscuous mode [ 653.695432][T22852] syzkaller0: entered allmulticast mode [ 653.923151][T22861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.932468][T22861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.961948][T22860] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.043523][T22860] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.102799][T22860] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.181623][T22860] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.226513][T20802] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.237509][T20802] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.248913][T20802] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.260528][ T113] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.290304][T22866] loop3: detected capacity change from 0 to 128 [ 654.373578][ T113] ================================================================== [ 654.381670][ T113] BUG: KCSAN: data-race in __fat_write_inode / copy_folio_from_iter_atomic [ 654.390241][ T113] [ 654.392545][ T113] write to 0xffff88810c21d2dc of 4 bytes by task 22867 on cpu 1: [ 654.400236][ T113] __fat_write_inode+0x235/0x540 [ 654.405156][ T113] fat_sync_inode+0x1a/0x30 [ 654.409826][ T113] fat_truncate_blocks+0x1df/0x5b0 [ 654.414952][ T113] fat_write_end+0xba/0x160 [ 654.419439][ T113] generic_perform_write+0x314/0x490 [ 654.424723][ T113] __generic_file_write_iter+0x9e/0x120 [ 654.430614][ T113] generic_file_write_iter+0x8d/0x310 [ 654.435981][ T113] vfs_write+0x57d/0x9b0 [ 654.440209][ T113] ksys_write+0xdc/0x1a0 [ 654.444435][ T113] __x64_sys_write+0x40/0x50 [ 654.449615][ T113] x64_sys_call+0x27e1/0x3020 [ 654.454279][ T113] do_syscall_64+0x136/0x3c0 [ 654.458891][ T113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.464880][ T113] [ 654.467316][ T113] read to 0xffff88810c21d200 of 512 bytes by task 113 on cpu 0: [ 654.474936][ T113] copy_folio_from_iter_atomic+0x728/0x10a0 [ 654.480841][ T113] generic_perform_write+0x2c4/0x490 [ 654.486130][ T113] shmem_file_write_iter+0xc5/0xf0 [ 654.491318][ T113] lo_rw_aio+0x67a/0x730 [ 654.495574][ T113] loop_process_work+0x567/0xac0 [ 654.500507][ T113] loop_workfn+0x31/0x40 [ 654.504735][ T113] process_scheduled_works+0x4d4/0x9a0 [ 654.510179][ T113] worker_thread+0x569/0x750 [ 654.514753][ T113] kthread+0x221/0x270 [ 654.518800][ T113] ret_from_fork+0x146/0x330 [ 654.523374][ T113] ret_from_fork_asm+0x1a/0x30 [ 654.528300][ T113] [ 654.530610][ T113] Reported by Kernel Concurrency Sanitizer on: [ 654.536751][ T113] CPU: 0 UID: 0 PID: 113 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(lazy) [ 654.546108][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.556145][ T113] Workqueue: loop3 loop_workfn [ 654.560905][ T113] ================================================================== [ 654.590416][T22866] Buffer I/O error on dev loop3, logical block 361, lost async page write