last executing test programs: 58.915406041s ago: executing program 4 (id=80): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x0, 0xcb}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 58.722666393s ago: executing program 4 (id=86): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 58.703419653s ago: executing program 4 (id=87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(r0, 0x0, r0) 58.687174533s ago: executing program 4 (id=88): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 58.428073016s ago: executing program 4 (id=95): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 58.180897089s ago: executing program 4 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x40, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 58.09622642s ago: executing program 32 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x40, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 56.572596629s ago: executing program 1 (id=120): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 56.4173471s ago: executing program 1 (id=122): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 56.204287853s ago: executing program 1 (id=126): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x10}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x140040c5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 55.836911397s ago: executing program 1 (id=131): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 55.771132678s ago: executing program 1 (id=133): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25ac1e0001000000000000000000000000fcdeffffff0000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x8040) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 55.480950542s ago: executing program 1 (id=140): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x101, 0x8, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010101000000fcffff7f00000000000000000c000200010000000400000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 55.411513443s ago: executing program 33 (id=140): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x101, 0x8, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010101000000fcffff7f00000000000000000c000200010000000400000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 53.575398994s ago: executing program 3 (id=168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x2c}}, 0x4008010) 53.461450026s ago: executing program 3 (id=169): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x26f, &(0x7f0000001d80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 53.297246267s ago: executing program 3 (id=170): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x2, 0x3}}, 0x20) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 53.170548159s ago: executing program 3 (id=171): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 53.135882629s ago: executing program 3 (id=172): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000011}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8306b, 0x0) 52.834856583s ago: executing program 3 (id=176): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 52.801044293s ago: executing program 34 (id=176): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 31.328958328s ago: executing program 0 (id=534): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$kcm(0x2a, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x176, 0x402) 31.21232449s ago: executing program 0 (id=536): write$tun(0xffffffffffffffff, 0x0, 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x9) 31.14760518s ago: executing program 0 (id=538): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.909089823s ago: executing program 0 (id=541): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 30.508260978s ago: executing program 0 (id=545): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x498f, &(0x7f0000000240)={0x0, 0xf4c8, 0x10, 0x1, 0x3c4}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 27.575336313s ago: executing program 0 (id=553): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2443, 0x58) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x1, r3, 0x1e, r0}, 0x10) 27.464505924s ago: executing program 35 (id=553): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2443, 0x58) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x1, r3, 0x1e, r0}, 0x10) 14.435119089s ago: executing program 6 (id=759): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xdc, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/246, 0xf6}], 0x1}, 0x3}], 0x1, 0x40000002, 0x0) 13.989777544s ago: executing program 6 (id=766): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x9}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 13.839915156s ago: executing program 6 (id=769): unshare(0x20000400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81801) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 13.793806886s ago: executing program 6 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 13.768848567s ago: executing program 6 (id=772): openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus/file0\x00', 0x30000, 0x30) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 13.556320699s ago: executing program 6 (id=777): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x6, 0x6fc}], 0x0) 13.49313522s ago: executing program 36 (id=777): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) kexec_load(0x7, 0x1, &(0x7f0000000580)=[{0x0, 0x0, 0x6, 0x6fc}], 0x0) 4.462816577s ago: executing program 5 (id=888): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xffffffbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4.316423169s ago: executing program 5 (id=893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x1000}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 4.196226551s ago: executing program 5 (id=896): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000000000100000009"], 0x110}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 3.328572211s ago: executing program 5 (id=906): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') 3.033795164s ago: executing program 5 (id=911): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000200)=ANY=[], 0x1, 0x260, &(0x7f0000000200)="$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") socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9, 0xfff3}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x7000000}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(r0, 0x0, 0x5f, 0x24048885, &(0x7f00000000c0)={0x11, 0x11, 0x0, 0x1, 0x70, 0x6, @broadcast}, 0x14) 2.681077008s ago: executing program 5 (id=918): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@jqfmt_vfsv1}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4048000) 2.644082129s ago: executing program 37 (id=918): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@jqfmt_vfsv1}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001200850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4048000) 2.266274143s ago: executing program 9 (id=929): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9ddf, 0xc, "3d52e3ff0000005e"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x80000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 1.882700458s ago: executing program 2 (id=938): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 1.72519045s ago: executing program 9 (id=939): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents64(r2, 0x0, 0x0) 1.72387736s ago: executing program 9 (id=941): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.645780591s ago: executing program 9 (id=943): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0) getpgid(r1) 989.077928ms ago: executing program 2 (id=952): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x14927e, 0x68) fallocate(r1, 0x0, 0x0, 0x1001ed) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x2, {0x1, 0x8, 0x959, 0x5, 0x4, 0x5, 0x6, 0x4e, 0xfffffff8}}, 0x43) fallocate(r1, 0x3, 0xf00, 0x10000) fallocate(r0, 0x0, 0xbf5, 0x2000402) 921.029759ms ago: executing program 9 (id=953): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='stack\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 920.773109ms ago: executing program 7 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x10000, 0x5, 0xfffffff8, 0x9, 0x51, 0xf5, 0x1, 0x9b}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) 816.94745ms ago: executing program 9 (id=955): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) unshare(0x2040400) vmsplice(r2, 0x0, 0x0, 0x0) 741.859401ms ago: executing program 8 (id=956): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2000002}}}, 0x10, 0x0}, 0x0) 731.571642ms ago: executing program 2 (id=957): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x88, 0x4cc, 0x2, 0x7f, 0x5, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 662.563162ms ago: executing program 8 (id=958): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'geneve0\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x55}, 0x0, 0xa8, 0xd8, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x1, 0x7}, {0x0, 0x3, 0x2}, 0xfffffff7, 0x1}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0x0, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {}, {}, 0x87, 0x2, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x41, 0x6, {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f10"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 589.198933ms ago: executing program 7 (id=959): connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4c22, 0x8, @empty, 0xfffffff5}, 0x1c) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x242, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='&'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 414.653465ms ago: executing program 7 (id=960): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) setresuid(r1, 0x0, r3) setresuid(0x0, 0x0, 0x0) 253.992478ms ago: executing program 7 (id=961): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xb, 0x102, 0xfffffffe, 0x595f3152, 0xe, "00e47903e795efffffff001900"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000002680)=[&(0x7f0000000a40)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000340)='\t', 0x1, 0x600}]) 235.788638ms ago: executing program 8 (id=962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}, "59cbddf8"}}}}}}}, 0x3a) 139.310308ms ago: executing program 2 (id=963): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r0, &(0x7f0000007a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)=""/39, 0x27}, 0x10000}, {{0x0, 0x0, 0x0}, 0x2890}], 0x2, 0x40002000, 0x0) 73.117739ms ago: executing program 2 (id=964): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x11) rmdir(&(0x7f00000000c0)='./file0\x00') 72.943879ms ago: executing program 7 (id=965): getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 52.271909ms ago: executing program 2 (id=966): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x101800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000026000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc89e, 0xf000, 0x4, 0x1d4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 24.46197ms ago: executing program 8 (id=967): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380), 0x3, 0x44d, &(0x7f0000001080)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1f, 0x0, 0x0, 0x1) 0s ago: executing program 7 (id=968): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) write$binfmt_script(r0, &(0x7f0000000140), 0xfcb8) kernel console output (not intermixed with test programs): d7329cdd9 code=0x7ffc0000 [ 43.483664][ T28] audit: type=1326 audit(1778357189.052:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 43.510146][ T28] audit: type=1326 audit(1778357189.052:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 43.536368][ T28] audit: type=1326 audit(1778357189.052:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3806 comm="syz.0.115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d7329cb42 code=0x7ffc0000 [ 43.566981][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.597309][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.626858][ T63] bond0 (unregistering): Released all slaves [ 43.646357][ T3814] loop3: detected capacity change from 0 to 1024 [ 43.665744][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 43.675904][ T3814] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 43.713872][ T3814] System zones: 0-1, 3-8 [ 43.722267][ T63] hsr_slave_0: left promiscuous mode [ 43.728578][ T63] hsr_slave_1: left promiscuous mode [ 43.734746][ T3814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.735770][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.754342][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.762095][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.771071][ T3814] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.781518][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.797952][ T63] veth1_macvtap: left promiscuous mode [ 43.807763][ T63] veth0_macvtap: left promiscuous mode [ 43.813387][ T63] veth1_vlan: left promiscuous mode [ 43.819015][ T63] veth0_vlan: left promiscuous mode [ 43.890615][ T3827] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.117: Freeing blocks not in datazone - block = 0, count = 16 [ 43.936883][ T63] team0 (unregistering): Port device team_slave_1 removed [ 43.946374][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.955978][ T63] team0 (unregistering): Port device team_slave_0 removed [ 43.983079][ T3834] netlink: 'syz.0.124': attribute type 22 has an invalid length. [ 44.027972][ T3834] netlink: 'syz.0.124': attribute type 22 has an invalid length. [ 44.035764][ T88] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.035815][ T88] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.078684][ T88] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.098925][ T88] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.166638][ T3841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.185333][ T3841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.269824][ T3846] loop2: detected capacity change from 0 to 512 [ 44.302954][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.335664][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.360163][ T3758] bridge_slave_0: entered allmulticast mode [ 44.378978][ T3758] bridge_slave_0: entered promiscuous mode [ 44.410963][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.443768][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.461114][ T3758] bridge_slave_1: entered allmulticast mode [ 44.472431][ T3758] bridge_slave_1: entered promiscuous mode [ 44.483878][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 44.485154][ T63] IPVS: stop unused estimator thread 0... [ 44.530134][ T3758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.540887][ T3758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.607439][ T3758] team0: Port device team_slave_0 added [ 44.615521][ T3758] team0: Port device team_slave_1 added [ 44.634262][ T3758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.641646][ T3758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.673466][ T3758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.684760][ T3880] veth1_macvtap: left promiscuous mode [ 44.692461][ T3880] macsec0: entered promiscuous mode [ 44.704348][ T3880] macsec0: entered allmulticast mode [ 44.718043][ T3758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.726886][ T3758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.753057][ T3758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.781051][ T3880] veth1_macvtap: entered promiscuous mode [ 44.787025][ T3880] veth1_macvtap: entered allmulticast mode [ 44.793138][ T3880] macsec0: left promiscuous mode [ 44.818508][ T3880] macsec0: left allmulticast mode [ 44.849397][ T3880] veth1_macvtap: left allmulticast mode [ 44.868076][ T3898] __nla_validate_parse: 3 callbacks suppressed [ 44.868144][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 44.898690][ T118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.902190][ T3898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 44.922382][ T3898] netlink: 'syz.0.141': attribute type 6 has an invalid length. [ 44.937295][ T3758] hsr_slave_0: entered promiscuous mode [ 44.943371][ T3758] hsr_slave_1: entered promiscuous mode [ 44.967190][ T3758] debugfs: 'hsr0' already exists in 'hsr' [ 44.981945][ T3758] Cannot create hsr debugfs directory [ 44.988269][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 45.034604][ T118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.046697][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 45.058065][ T3898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 45.068310][ T3898] netlink: 'syz.0.141': attribute type 6 has an invalid length. [ 45.123265][ T118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.210332][ T118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.329263][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 45.376292][ T3758] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.397868][ T3758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.416597][ T118] bridge_slave_1: left allmulticast mode [ 45.422363][ T118] bridge_slave_1: left promiscuous mode [ 45.428235][ T118] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.436499][ T118] bridge_slave_0: left allmulticast mode [ 45.448192][ T118] bridge_slave_0: left promiscuous mode [ 45.455403][ T118] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.557289][ T118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.567287][ T118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.576994][ T118] bond0 (unregistering): Released all slaves [ 45.584916][ T3758] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.597697][ T3758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.617140][ T3758] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.626317][ T3758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.651738][ T3758] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.652628][ T3956] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.152'. [ 45.672777][ T3956] netlink: zone id is out of range [ 45.678671][ T3956] netlink: zone id is out of range [ 45.683135][ T3758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.684784][ T3956] netlink: zone id is out of range [ 45.708457][ T3956] netlink: set zone limit has 8 unknown bytes [ 45.717859][ T118] hsr_slave_0: left promiscuous mode [ 45.733682][ T118] hsr_slave_1: left promiscuous mode [ 45.739805][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.747893][ T118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.760358][ T118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.769776][ T118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.793482][ T118] veth1_macvtap: left promiscuous mode [ 45.800750][ T118] veth0_macvtap: left promiscuous mode [ 45.819868][ T118] veth1_vlan: left promiscuous mode [ 45.829232][ T118] veth0_vlan: left promiscuous mode [ 45.950016][ T3976] loop0: detected capacity change from 0 to 1024 [ 45.970234][ T3976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.987229][ T3953] loop3: detected capacity change from 0 to 512 [ 45.997358][ T3976] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.019540][ T3953] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.028438][ T3976] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.159: lblock 0 mapped to illegal pblock 0 (length 6) [ 46.045571][ T3953] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.151: Failed to acquire dquot type 1 [ 46.078891][ T3976] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.159: Freeing blocks not in datazone - block = 1, count = 5 [ 46.080329][ T118] team0 (unregistering): Port device team_slave_1 removed [ 46.092250][ T3953] loop3: lost filesystem error report for type 5 error -117 [ 46.102556][ T118] team0 (unregistering): Port device team_slave_0 removed [ 46.117395][ T3953] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.151: Failed to acquire dquot type 1 [ 46.128628][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 46.128664][ C0] EXT4-fs (loop3): last error at time 1778357191: ext4_acquire_dquot:7034 [ 46.179758][ T3953] loop3: lost filesystem error report for type 5 error -117 [ 46.180120][ T3953] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.151: bg 0: block 248: padding at end of block bitmap is not set [ 46.202772][ T3953] loop3: lost filesystem error report for type 5 error -117 [ 46.203322][ T3953] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 46.223790][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.230251][ T3953] loop3: lost filesystem error report for type 5 error -117 [ 46.233159][ T3953] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.151: Failed to acquire dquot type 1 [ 46.254550][ T3953] loop3: lost filesystem error report for type 5 error -117 [ 46.255090][ T3953] EXT4-fs (loop3): 1 orphan inode deleted [ 46.269526][ T3953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.426348][ T3758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.433489][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.441359][ T3906] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.448943][ T3906] bridge_slave_0: entered allmulticast mode [ 46.455777][ T3906] bridge_slave_0: entered promiscuous mode [ 46.467851][ T3758] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.475496][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.482809][ T3906] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.490224][ T3906] bridge_slave_1: entered allmulticast mode [ 46.497090][ T3906] bridge_slave_1: entered promiscuous mode [ 46.505727][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.512831][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.524478][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.531590][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.565848][ T3906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.577369][ T3906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.595389][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.642637][ T4024] random: crng reseeded on system resumption [ 46.669422][ T3906] team0: Port device team_slave_0 added [ 46.678026][ T3906] team0: Port device team_slave_1 added [ 46.683188][ T4024] Restarting kernel threads ... [ 46.693501][ T4024] Done restarting kernel threads. [ 46.701079][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 46.734674][ T3906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.742712][ T3906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.769322][ T3906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.781169][ T3906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.788262][ T3906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.814610][ T3906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.856822][ T4035] loop3: detected capacity change from 0 to 128 [ 46.882132][ T4035] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.902140][ T4035] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.906109][ T3906] hsr_slave_0: entered promiscuous mode [ 46.925205][ T3906] hsr_slave_1: entered promiscuous mode [ 46.932401][ T4035] EXT4-fs error (device loop3): ext4_check_dx_root:2201: inode #2: comm syz.3.169: Corrupt dir, invalid name for '.', running e2fsck is recommended [ 46.999351][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.073387][ T3758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.089945][ T3906] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 47.114328][ T3906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.132483][ T3906] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 47.145168][ T3906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.163748][ T3906] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.178562][ T3906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.197604][ T3906] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.210863][ T3906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.231645][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 47.337897][ T3906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.378683][ T3906] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.400973][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.408176][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.440204][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.447372][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.508907][ T4107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 47.525773][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.539675][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.567788][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 47.595849][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.618164][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.638653][ T3758] veth0_vlan: entered promiscuous mode [ 47.663256][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.680800][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.695307][ T4121] loop2: detected capacity change from 0 to 512 [ 47.707776][ T3758] veth1_vlan: entered promiscuous mode [ 47.748000][ T4121] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 47.759912][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.771498][ T4121] System zones: 0-2, 18-18, 34-35 [ 47.783004][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.796177][ T4121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.809112][ T4121] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.842260][ T3758] veth0_macvtap: entered promiscuous mode [ 47.885180][ T3758] veth1_macvtap: entered promiscuous mode [ 47.892002][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.922578][ T3906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.974859][ T63] bridge_slave_1: left allmulticast mode [ 47.987623][ T63] bridge_slave_1: left promiscuous mode [ 47.995674][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.005862][ T63] bridge_slave_0: left allmulticast mode [ 48.015804][ T63] bridge_slave_0: left promiscuous mode [ 48.021575][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.129460][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.139777][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.150954][ T63] bond0 (unregistering): Released all slaves [ 48.164042][ T3758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.173637][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 48.193249][ T28] kauditd_printk_skb: 296 callbacks suppressed [ 48.193266][ T28] audit: type=1400 audit(1778357194.052:594): avc: denied { read } for pid=4163 comm="syz.2.185" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.220280][ T3758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.240625][ T63] hsr_slave_0: left promiscuous mode [ 48.247963][ T63] hsr_slave_1: left promiscuous mode [ 48.253812][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.261614][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.270197][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.277803][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.288591][ T63] veth1_macvtap: left promiscuous mode [ 48.294733][ T63] veth0_macvtap: left promiscuous mode [ 48.300367][ T63] veth1_vlan: left promiscuous mode [ 48.307313][ T63] veth0_vlan: left promiscuous mode [ 48.332494][ T4169] loop2: detected capacity change from 0 to 4096 [ 48.340233][ T4169] EXT4-fs: inline encryption not supported [ 48.352045][ T4169] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 48.369290][ T4169] System zones: 0-5 [ 48.374356][ T4169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.402500][ T28] audit: type=1400 audit(1778357194.262:595): avc: denied { create } for pid=4171 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.432108][ T28] audit: type=1400 audit(1778357194.272:596): avc: denied { bind } for pid=4171 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.491164][ T63] team0 (unregistering): Port device team_slave_1 removed [ 48.514871][ T63] team0 (unregistering): Port device team_slave_0 removed [ 48.571326][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.588771][ T112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.619433][ T112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.650513][ T112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.663128][ T28] audit: type=1326 audit(1778357194.522:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 48.670694][ T112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.745492][ T28] audit: type=1326 audit(1778357194.522:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 48.772299][ T28] audit: type=1326 audit(1778357194.522:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 48.865700][ T4202] netlink: 'syz.0.193': attribute type 8 has an invalid length. [ 48.881858][ T28] audit: type=1326 audit(1778357194.522:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 48.912591][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 48.934974][ T4202] erspan0: entered promiscuous mode [ 48.941518][ T4202] gretap0: entered promiscuous mode [ 48.947755][ T28] audit: type=1326 audit(1778357194.522:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 48.974447][ T28] audit: type=1326 audit(1778357194.522:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 48.974544][ T4202] erspan0: left promiscuous mode [ 49.005118][ T28] audit: type=1326 audit(1778357194.522:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.191" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7329cdd9 code=0x7ffc0000 [ 49.031771][ T4202] gretap0: left promiscuous mode [ 49.049319][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 49.072229][ T4115] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.079459][ T4115] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.087197][ T4115] bridge_slave_0: entered allmulticast mode [ 49.093650][ T4115] bridge_slave_0: entered promiscuous mode [ 49.106157][ T4115] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.117943][ T4115] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.125618][ T4115] bridge_slave_1: entered allmulticast mode [ 49.132161][ T4115] bridge_slave_1: entered promiscuous mode [ 49.142309][ T3906] veth0_vlan: entered promiscuous mode [ 49.165803][ T3906] veth1_vlan: entered promiscuous mode [ 49.173326][ T4115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.189981][ T4115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.227567][ T4115] team0: Port device team_slave_0 added [ 49.234591][ T4115] team0: Port device team_slave_1 added [ 49.260555][ T3906] veth0_macvtap: entered promiscuous mode [ 49.274636][ T4115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.292930][ T4115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.326401][ T4115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.350743][ T3906] veth1_macvtap: entered promiscuous mode [ 49.374040][ T4115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.388695][ T4115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.437128][ T4115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.476667][ T4240] loop2: detected capacity change from 0 to 512 [ 49.499957][ T4115] hsr_slave_0: entered promiscuous mode [ 49.501689][ T4240] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.199: inode has both inline data and extents flags [ 49.506912][ T4115] hsr_slave_1: entered promiscuous mode [ 49.534566][ T4115] debugfs: 'hsr0' already exists in 'hsr' [ 49.540610][ T4115] Cannot create hsr debugfs directory [ 49.550335][ T3906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.558824][ T4240] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 49.564130][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 49.579710][ C0] EXT4-fs (loop2): initial error at time 1778357195: __ext4_fill_super:5596: inode 2 [ 49.589254][ C0] EXT4-fs (loop2): last error at time 1778357195: __ext4_fill_super:5596: inode 2 [ 49.599418][ T4240] EXT4-fs (loop2): get root inode failed [ 49.605548][ T4240] EXT4-fs (loop2): mount failed [ 49.636702][ T3906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.699233][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 49.734438][ T118] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.755485][ T118] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.766407][ T118] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.785133][ T118] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.879172][ T4268] netlink: 'syz.5.208': attribute type 83 has an invalid length. [ 49.975285][ T4115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 50.015052][ T4115] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.039732][ T4115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 50.075539][ T4115] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.100000][ T4115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 50.126257][ T4115] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.158169][ T4115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 50.169404][ T4294] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 50.177465][ T4281] loop0: detected capacity change from 0 to 8192 [ 50.197426][ T4115] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.345622][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 50.394801][ T4115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.406874][ T4317] loop2: detected capacity change from 0 to 512 [ 50.413853][ T4317] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.427147][ T4317] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.440751][ T4317] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.441321][ T4115] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.461671][ T4317] EXT4-fs (loop2): 1 truncate cleaned up [ 50.468040][ T4317] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.488559][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.495694][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.541569][ T3302] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 50.583224][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.590350][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.600954][ T3302] FAT-fs (loop0): Filesystem has been set read-only [ 50.655112][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.018201][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 51.072533][ T4115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.449922][ T4393] loop0: detected capacity change from 0 to 512 [ 51.470138][ T4393] EXT4-fs: Ignoring removed orlov option [ 51.483035][ T4393] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.509159][ T4115] veth0_vlan: entered promiscuous mode [ 51.525661][ T4393] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.235: corrupted in-inode xattr: e_value size too large [ 51.549949][ T4393] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.550224][ T4393] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.235: couldn't read orphan inode 15 (err -117) [ 51.559458][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 51.559481][ C1] EXT4-fs (loop0): initial error at time 1778357197: ext4_iget_extra_inode:5128: inode 15 [ 51.559519][ C1] EXT4-fs (loop0): last error at time 1778357197: ext4_iget_extra_inode:5128: inode 15 [ 51.572693][ T4115] veth1_vlan: entered promiscuous mode [ 51.579918][ T4393] loop0: lost filesystem error report for type 5 error -117 [ 51.605410][ T4393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.635705][ T4393] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 12: comm syz.0.235: lblock 3 mapped to illegal pblock 12 (length 1) [ 51.678302][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.716284][ T4115] veth0_macvtap: entered promiscuous mode [ 51.751245][ T4115] veth1_macvtap: entered promiscuous mode [ 51.779400][ T4413] loop5: detected capacity change from 0 to 256 [ 51.793119][ T4115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.802096][ T4413] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.811625][ T4409] loop0: detected capacity change from 0 to 128 [ 51.832458][ T4115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.868832][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.898048][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.908817][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.926844][ T4409] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.950118][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.003975][ T4409] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.231657][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.081072][ T4483] loop7: detected capacity change from 0 to 512 [ 53.090180][ T4483] EXT4-fs: Ignoring removed nobh option [ 53.105441][ T4483] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 53.119786][ T4483] EXT4-fs (loop7): 1 truncate cleaned up [ 53.136056][ T4483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.166258][ T4489] loop0: detected capacity change from 0 to 512 [ 53.176761][ T4489] EXT4-fs: Ignoring removed orlov option [ 53.182691][ T4489] EXT4-fs: test_dummy_encryption option not supported [ 53.270466][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 53.270484][ T28] audit: type=1400 audit(1778357199.132:677): avc: denied { create } for pid=4494 comm="syz.5.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.308660][ T28] audit: type=1400 audit(1778357199.132:678): avc: denied { mount } for pid=4493 comm="syz.6.270" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.348182][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.353720][ T28] audit: type=1400 audit(1778357199.142:679): avc: denied { write } for pid=4494 comm="syz.5.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.501374][ T28] audit: type=1400 audit(1778357199.362:680): avc: denied { create } for pid=4521 comm="syz.7.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.535043][ T28] audit: type=1400 audit(1778357199.392:681): avc: denied { bind } for pid=4521 comm="syz.7.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.791367][ T4550] netlink: zone id is out of range [ 54.035556][ T28] audit: type=1400 audit(1778357199.902:682): avc: denied { getopt } for pid=4582 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.277043][ T28] audit: type=1400 audit(1778357200.142:683): avc: denied { bind } for pid=4634 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.416423][ T28] audit: type=1400 audit(1778357200.282:684): avc: denied { map } for pid=4651 comm="syz.6.296" path="socket:[9618]" dev="sockfs" ino=9618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.462031][ T28] audit: type=1400 audit(1778357200.282:685): avc: denied { read } for pid=4651 comm="syz.6.296" path="socket:[9618]" dev="sockfs" ino=9618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.643584][ T4664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.688751][ T4669] pim6reg: entered allmulticast mode [ 54.703691][ T4669] pim6reg: left allmulticast mode [ 54.769849][ T28] audit: type=1400 audit(1778357200.632:686): avc: denied { getopt } for pid=4675 comm="syz.2.306" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.790890][ T4676] xt_TCPMSS: Only works on TCP SYN packets [ 54.840507][ T4681] loop7: detected capacity change from 0 to 512 [ 54.852061][ T4681] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.872033][ T4681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.910205][ T4681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.948848][ T4681] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.028271][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.166462][ T4708] bridge1: entered promiscuous mode [ 55.182192][ T4708] bridge1: entered allmulticast mode [ 55.355823][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.377347][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.398583][ T4726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.427932][ T4726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.446837][ T4726] xt_hashlimit: size too large, truncated to 1048576 [ 55.540080][ T4738] netlink: 'syz.7.330': attribute type 7 has an invalid length. [ 55.569179][ T4738] netlink: 'syz.7.330': attribute type 5 has an invalid length. [ 55.619304][ T4738] netlink: 17 bytes leftover after parsing attributes in process `syz.7.330'. [ 55.798734][ T4749] loop7: detected capacity change from 0 to 512 [ 55.832951][ T4749] EXT4-fs: Ignoring removed oldalloc option [ 55.864038][ T4749] EXT4-fs (loop7): 1 truncate cleaned up [ 55.887930][ T4749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.018329][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.059253][ T4753] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.338'. [ 56.139514][ T4757] capability: warning: `syz.5.339' uses 32-bit capabilities (legacy support in use) [ 56.179824][ T4757] loop5: detected capacity change from 0 to 512 [ 56.208075][ T4757] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 56.230498][ T4757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 56.248896][ T4757] System zones: 0-1, 15-15, 18-18, 34-34 [ 56.259043][ T4757] EXT4-fs (loop5): orphan cleanup on readonly fs [ 56.297835][ T4757] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 56.362841][ T4757] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 56.394368][ T4757] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.339: bg 0: block 40: padding at end of block bitmap is not set [ 56.445407][ T4757] loop5: lost filesystem error report for type 5 error -117 [ 56.449861][ T4757] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 56.457282][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 56.457302][ C0] EXT4-fs (loop5): initial error at time 1778357202: ext4_validate_block_bitmap:441 [ 56.457410][ C0] EXT4-fs (loop5): last error at time 1778357202: ext4_validate_block_bitmap:441 [ 56.525918][ T4757] loop5: lost filesystem error report for type 5 error -117 [ 56.526116][ T4757] EXT4-fs (loop5): 1 truncate cleaned up [ 56.556017][ T4757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.610907][ T4757] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 56.634348][ T4757] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 56.690559][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.220580][ T4803] batadv_slave_0: entered promiscuous mode [ 57.255730][ T4803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.350'. [ 57.290955][ T4803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.329414][ T4803] batadv_slave_0 (unregistering): left promiscuous mode [ 57.354040][ T4803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.096975][ T4822] loop5: detected capacity change from 0 to 1024 [ 58.113379][ T4822] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 58.125364][ T4822] System zones: 0-1, 3-36 [ 58.144483][ T4822] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.355: bad orphan inode 134217728 [ 58.178533][ T4822] loop5: lost filesystem error report for type 5 error -117 [ 58.180052][ T4822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.518634][ T4836] loop2: detected capacity change from 0 to 512 [ 58.547878][ T4836] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 58.609784][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 58.609801][ T28] audit: type=1400 audit(1778357204.472:733): avc: denied { name_bind } for pid=4841 comm="syz.2.363" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 58.856684][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.985190][ T4849] loop5: detected capacity change from 0 to 8192 [ 58.996531][ T4849] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.061758][ T4861] IPv6: Can't replace route, no match found [ 59.237141][ T4874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.375'. [ 59.257974][ T4874] team1: entered promiscuous mode [ 59.263206][ T4874] team1: entered allmulticast mode [ 59.268868][ T4874] 8021q: adding VLAN 0 to HW filter on device team1 [ 59.341596][ T4880] loop6: detected capacity change from 0 to 2048 [ 59.360876][ T4880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.394943][ T4880] EXT4-fs (loop6): shut down requested (2) [ 59.401497][ T4880] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 59.421723][ T3906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.577217][ T4894] netlink: 'syz.2.383': attribute type 4 has an invalid length. [ 60.011509][ T28] audit: type=1400 audit(1778357205.872:734): avc: denied { setopt } for pid=4919 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.086026][ T4923] loop0: detected capacity change from 0 to 512 [ 60.122719][ T4923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.155696][ T4927] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.397'. [ 60.165035][ T4923] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.198312][ T4923] SELinux: Context system_u:object_r:ptchown_exec_t:s0 is not valid (left unmapped). [ 60.208078][ T28] audit: type=1400 audit(1778357206.062:735): avc: denied { mac_admin } for pid=4922 comm="syz.0.396" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.260422][ T28] audit: type=1400 audit(1778357206.102:736): avc: denied { relabelto } for pid=4922 comm="syz.0.396" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ptchown_exec_t:s0" [ 60.475778][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.539186][ T4932] loop0: detected capacity change from 0 to 512 [ 60.594384][ T4932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.643392][ T4932] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.668766][ T4932] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 60.679099][ T28] audit: type=1400 audit(1778357206.532:737): avc: denied { write } for pid=4931 comm="syz.0.398" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.701162][ T4932] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 60.722362][ T4932] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.398: Failed to acquire dquot type 1 [ 60.746794][ T4932] EXT4-fs (loop0): Remounting filesystem read-only [ 60.771331][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.889795][ T4951] netlink: 'syz.7.404': attribute type 1 has an invalid length. [ 60.903630][ T4951] bond1: entered promiscuous mode [ 60.909095][ T4951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.929549][ T4951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.938195][ T4951] bond1: (slave bond2): making interface the new active one [ 60.945838][ T4951] bond2: entered promiscuous mode [ 60.951936][ T4951] bond1: (slave bond2): Enslaving as an active interface with an up link [ 61.145565][ T4956] loop7: detected capacity change from 0 to 32766 [ 61.184964][ T4956] loop7: p1 < > p3 < p5 > [ 61.191713][ T4956] loop7: p5 size 131072 extends beyond EOD, truncated [ 61.205409][ T4957] ------------[ cut here ]------------ [ 61.210965][ T4957] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.7.405/4957 [ 61.220664][ T4957] Modules linked in: [ 61.224648][ T4957] CPU: 0 UID: 0 PID: 4957 Comm: syz.7.405 Not tainted syzkaller #0 PREEMPT(full) [ 61.233932][ T4957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 61.244063][ T4957] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 61.250902][ T4957] Code: 8b 05 d1 79 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9e 1a 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 90 1a 1e 00 90 0f 0b 90 e9 af fa ff ff [ 61.270649][ T4957] RSP: 0018:ffffc90000e63dd8 EFLAGS: 00010093 [ 61.276881][ T4957] RAX: ffffffff813b1672 RBX: ffff8881041ac400 RCX: ffff8881041ac400 [ 61.284976][ T4957] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 61.293113][ T4957] RBP: 0000000000000080 R08: ffff8881041acf00 R09: 0000000000000000 [ 61.301124][ T4957] R10: ffffc90000e63df0 R11: 0001c90000e63df0 R12: ffff8881041ac400 [ 61.309148][ T4957] R13: ffff8881041acc28 R14: ffff888103475b10 R15: 0000000000000080 [ 61.317146][ T4957] FS: 0000000000000000(0000) GS:ffff8882ae8fb000(0000) knlGS:0000000000000000 [ 61.326104][ T4957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.332790][ T4957] CR2: 00007f74fac9d000 CR3: 0000000127da4000 CR4: 00000000003506f0 [ 61.340796][ T4957] Call Trace: [ 61.344137][ T4957] [ 61.347149][ T4957] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 61.352665][ T4957] ? __list_add_valid_or_report+0x38/0xe0 [ 61.358408][ T4957] do_exit+0xc13/0x1530 [ 61.362657][ T4957] ? switch_fpu_return+0xe7/0x1b0 [ 61.367709][ T4957] __x64_sys_exit+0x1f/0x20 [ 61.372303][ T4957] x64_sys_call+0x301d/0x3020 [ 61.377040][ T4957] do_syscall_64+0x12c/0x3b0 [ 61.381668][ T4957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.387597][ T4957] RIP: 0033:0x7f750368cdd9 [ 61.392050][ T4957] Code: Unable to access opcode bytes at 0x7f750368cdaf. [ 61.399132][ T4957] RSP: 002b:00007f75020defd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 61.407634][ T4957] RAX: ffffffffffffffda RBX: 00007f7503905fa0 RCX: 00007f750368cdd9 [ 61.415626][ T4957] RDX: 00007f75020df9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.423707][ T4957] RBP: 00007f7503722d69 R08: 0000000000000000 R09: 0000000000000000 [ 61.431729][ T4957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.439718][ T4957] R13: 00007f7503906038 R14: 00007f7503905fa0 R15: 00007ffd8ba72088 [ 61.447723][ T4957] [ 61.450810][ T4957] ---[ end trace 0000000000000000 ]--- [ 61.577533][ T4967] netlink: 'syz.7.407': attribute type 1 has an invalid length. [ 61.591954][ T4967] bond3: entered promiscuous mode [ 61.597659][ T4967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.633320][ T4967] bond3: (slave veth3): making interface the new active one [ 61.641083][ T4967] veth3: entered promiscuous mode [ 61.647822][ T28] audit: type=1400 audit(1778357207.512:738): avc: denied { write } for pid=4958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.671350][ T4967] bond3: (slave veth3): Enslaving as an active interface with an up link [ 61.685137][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 61.696812][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 61.700188][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 61.738329][ T28] audit: type=1400 audit(1778357207.602:739): avc: denied { write } for pid=4974 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.818697][ T4979] loop7: detected capacity change from 0 to 164 [ 61.835538][ T28] audit: type=1400 audit(1778357207.702:740): avc: denied { mount } for pid=4978 comm="syz.7.408" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 61.870239][ T4979] rock: directory entry would overflow storage [ 61.876871][ T4979] rock: sig=0x4d4e, size=5, remaining=4 [ 61.882633][ T4979] isofs: isofs_export_get_parent(): child directory not normalized! [ 61.893784][ T4979] isofs: isofs_export_get_parent(): child directory not normalized! [ 62.086476][ T4864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.223135][ T5033] loop2: detected capacity change from 0 to 512 [ 62.269463][ T5033] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.299490][ T5033] EXT4-fs (loop2): mount failed [ 62.638544][ T5067] netlink: 'syz.5.428': attribute type 25 has an invalid length. [ 62.652909][ T5067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.428'. [ 62.684667][ T4628] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.693551][ T5067] netlink: 'syz.5.428': attribute type 25 has an invalid length. [ 62.704877][ T4628] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.715520][ T5067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.428'. [ 62.732879][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 62.748249][ T5072] loop6: detected capacity change from 0 to 512 [ 62.762113][ T4628] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.777716][ T4628] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.788929][ T5072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.812537][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 62.837627][ T5072] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.057376][ T5096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.434'. [ 63.104770][ T5096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.434'. [ 63.186983][ T5110] loop2: detected capacity change from 0 to 128 [ 63.209506][ T5108] netlink: 'syz.5.437': attribute type 29 has an invalid length. [ 63.222634][ T5110] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 63.253907][ T5110] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 63.264602][ T5114] netlink: 'syz.5.437': attribute type 29 has an invalid length. [ 63.271377][ T5110] FAT-fs (loop2): Filesystem has been set read-only [ 63.288957][ T5110] syz.2.436: attempt to access beyond end of device [ 63.288957][ T5110] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 63.298226][ T5108] netlink: 500 bytes leftover after parsing attributes in process `syz.5.437'. [ 63.329754][ T5110] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 63.360704][ T5110] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 63.379278][ T5110] syz.2.436: attempt to access beyond end of device [ 63.379278][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.427162][ T5110] syz.2.436: attempt to access beyond end of device [ 63.427162][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.482331][ T5110] syz.2.436: attempt to access beyond end of device [ 63.482331][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.513977][ T3906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.530780][ T5110] syz.2.436: attempt to access beyond end of device [ 63.530780][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.556176][ T5110] syz.2.436: attempt to access beyond end of device [ 63.556176][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.614326][ T5110] syz.2.436: attempt to access beyond end of device [ 63.614326][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.646452][ T5110] syz.2.436: attempt to access beyond end of device [ 63.646452][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.687034][ T5110] syz.2.436: attempt to access beyond end of device [ 63.687034][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.715452][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 63.715471][ T28] audit: type=1400 audit(1778357209.582:764): avc: denied { mount } for pid=5139 comm="syz.5.444" name="/" dev="configfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 63.735495][ T5110] syz.2.436: attempt to access beyond end of device [ 63.735495][ T5110] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.793107][ T28] audit: type=1400 audit(1778357209.632:765): avc: denied { search } for pid=5139 comm="syz.5.444" name="/" dev="configfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.856569][ T28] audit: type=1400 audit(1778357209.632:766): avc: denied { search } for pid=5139 comm="syz.5.444" name="/" dev="configfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.928184][ T28] audit: type=1400 audit(1778357209.632:767): avc: denied { read } for pid=5139 comm="syz.5.444" name="/" dev="configfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.979845][ T28] audit: type=1400 audit(1778357209.632:768): avc: denied { read open } for pid=5139 comm="syz.5.444" path="/" dev="configfs" ino=1003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.053004][ T28] audit: type=1400 audit(1778357209.782:769): avc: denied { write } for pid=5136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.124159][ T28] audit: type=1400 audit(1778357209.872:770): avc: denied { write } for pid=5156 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.362038][ T28] audit: type=1400 audit(1778357210.222:771): avc: denied { write } for pid=5159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.448164][ T28] audit: type=1400 audit(1778357210.312:772): avc: denied { write } for pid=5177 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.640200][ T28] audit: type=1400 audit(1778357210.502:773): avc: denied { setopt } for pid=5187 comm="syz.6.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.710990][ T5192] loop5: detected capacity change from 0 to 1024 [ 64.740193][ T5192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 64.794228][ T5192] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.808478][ T5192] veth0_vlan: left promiscuous mode [ 64.905020][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.031239][ T5216] loop5: detected capacity change from 0 to 128 [ 65.279479][ T5232] netlink: 24 bytes leftover after parsing attributes in process `syz.5.459'. [ 65.316227][ T5232] netlink: 'syz.5.459': attribute type 2 has an invalid length. [ 65.351988][ T5240] loop2: detected capacity change from 0 to 256 [ 65.390859][ T5240] FAT-fs (loop2): Directory bread(block 64) failed [ 65.406179][ T5240] FAT-fs (loop2): Directory bread(block 65) failed [ 65.424300][ T5240] FAT-fs (loop2): Directory bread(block 66) failed [ 65.442635][ T5240] FAT-fs (loop2): Directory bread(block 67) failed [ 65.457544][ T5240] FAT-fs (loop2): Directory bread(block 68) failed [ 65.474156][ T5240] FAT-fs (loop2): Directory bread(block 69) failed [ 65.485805][ T5240] FAT-fs (loop2): Directory bread(block 70) failed [ 65.503101][ T5240] FAT-fs (loop2): Directory bread(block 71) failed [ 65.521990][ T5240] FAT-fs (loop2): Directory bread(block 72) failed [ 65.536925][ T5240] FAT-fs (loop2): Directory bread(block 73) failed [ 66.299818][ T5303] loop5: detected capacity change from 0 to 512 [ 66.345594][ T5303] EXT4-fs (loop5): 1 truncate cleaned up [ 66.359589][ T5303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.581462][ T5321] xt_hashlimit: size too large, truncated to 1048576 [ 66.584086][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.038083][ T5345] hsr0: entered promiscuous mode [ 67.052036][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 67.191517][ T5353] loop7: detected capacity change from 0 to 128 [ 67.598818][ T5362] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.505'. [ 67.731616][ T5385] SELinux: failed to load policy [ 67.906738][ T5387] loop6: detected capacity change from 0 to 512 [ 67.938096][ T5387] EXT4-fs: Ignoring removed bh option [ 67.955497][ T5387] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.006256][ T5387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.041536][ T5387] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 68.072052][ T5402] loop5: detected capacity change from 0 to 128 [ 68.111473][ T5387] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 68.132017][ T5402] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.148076][ T5387] EXT4-fs (loop6): orphan cleanup on readonly fs [ 68.213974][ T5387] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.515: Failed to acquire dquot type 1 [ 68.245784][ T5402] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.292356][ T5387] loop6: lost filesystem error report for type 5 error -5 [ 68.304123][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 68.317766][ C0] EXT4-fs (loop6): last error at time 1778357214: ext4_acquire_dquot:7034 [ 68.337650][ T5387] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.515: Invalid block bitmap block 0 in block_group 0 [ 68.368873][ T5387] loop6: lost filesystem error report for type 5 error -117 [ 68.374968][ T5387] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.515: Invalid block bitmap block 0 in block_group 0 [ 68.402454][ T5425] xfrm0 speed is unknown, defaulting to 1000 [ 68.411826][ T5387] loop6: lost filesystem error report for type 5 error -117 [ 68.417730][ T5387] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.515: Invalid block bitmap block 0 in block_group 0 [ 68.427783][ T5425] xfrm0 speed is unknown, defaulting to 1000 [ 68.429157][ T5425] xfrm0 speed is unknown, defaulting to 1000 [ 68.467995][ T5387] loop6: lost filesystem error report for type 5 error -117 [ 68.470105][ T5387] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.515: Failed to acquire dquot type 1 [ 68.495822][ T5387] loop6: lost filesystem error report for type 5 error -28 [ 68.502163][ T5387] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.515: Failed to acquire dquot type 1 [ 68.522798][ T5387] loop6: lost filesystem error report for type 5 error -28 [ 68.527260][ T5387] EXT4-fs (loop6): 1 orphan inode deleted [ 68.555557][ T3758] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.585476][ T5387] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.676198][ T5387] netlink: 12 bytes leftover after parsing attributes in process `syz.6.515'. [ 68.722069][ T5387] syz.6.515 (5387) used greatest stack depth: 7744 bytes left [ 68.775635][ T1039] xfrm0 speed is unknown, defaulting to 1000 [ 68.783184][ T5425] infiniband syz0: set active [ 68.794564][ T5425] infiniband syz0: added xfrm0 [ 68.831187][ T3906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.855026][ T5425] RDS/IB: syz0: added [ 68.869920][ T5425] smc: adding ib device syz0 with port count 1 [ 68.885665][ T5425] smc: ib device syz0 port 1 has no pnetid [ 68.908426][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 68.917023][ T5425] xfrm0 speed is unknown, defaulting to 1000 [ 68.994519][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 68.994543][ T28] audit: type=1400 audit(1778357214.862:797): avc: denied { create } for pid=5437 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 69.056214][ T28] audit: type=1400 audit(1778357214.892:799): avc: denied { view } for pid=5437 comm="syz.0.534" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 69.114420][ T28] audit: type=1400 audit(1778357214.882:798): avc: denied { mounton } for pid=5435 comm="syz.6.533" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.287984][ T5425] xfrm0 speed is unknown, defaulting to 1000 [ 69.323010][ T5452] loop6: detected capacity change from 0 to 128 [ 69.404988][ T5455] loop0: detected capacity change from 0 to 128 [ 69.435520][ T5425] xfrm0 speed is unknown, defaulting to 1000 [ 69.504652][ T5425] xfrm0 speed is unknown, defaulting to 1000 [ 69.505506][ T5455] loop0: detected capacity change from 128 to 0 [ 69.541273][ T5457] FAT-fs (loop0): Directory bread(block 33) failed [ 69.559491][ T5457] FAT-fs (loop0): Directory bread(block 34) failed [ 69.577967][ T5457] FAT-fs (loop0): Directory bread(block 35) failed [ 69.604241][ T5457] FAT-fs (loop0): Directory bread(block 36) failed [ 69.614468][ T5457] FAT-fs (loop0): Directory bread(block 37) failed [ 69.628860][ T5425] xfrm0 speed is unknown, defaulting to 1000 [ 69.630025][ T5457] FAT-fs (loop0): Directory bread(block 38) failed [ 69.669180][ T5457] FAT-fs (loop0): Directory bread(block 39) failed [ 69.688329][ T5457] FAT-fs (loop0): Directory bread(block 40) failed [ 69.708845][ T5457] FAT-fs (loop0): Directory bread(block 33) failed [ 69.728674][ T5457] FAT-fs (loop0): Directory bread(block 34) failed [ 69.873814][ T28] audit: type=1400 audit(1778357215.732:800): avc: denied { create } for pid=5465 comm="syz.7.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.920030][ T28] audit: type=1400 audit(1778357215.762:801): avc: denied { connect } for pid=5465 comm="syz.7.546" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.956382][ T28] audit: type=1400 audit(1778357215.762:802): avc: denied { write } for pid=5465 comm="syz.7.546" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.439847][ T4614] FAT-fs (loop0): bread failed in fat_clusters_flush [ 70.449513][ T3634] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 70.537776][ T5469] netlink: 436 bytes leftover after parsing attributes in process `syz.7.547'. [ 70.547704][ T5469] netlink: 16 bytes leftover after parsing attributes in process `syz.7.547'. [ 72.510016][ T4614] bio_check_eod: 1870 callbacks suppressed [ 72.510041][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.510041][ T4614] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 72.530808][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.530808][ T4614] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 72.545018][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.545018][ T4614] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 72.580772][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.580772][ T4614] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 72.605668][ T28] audit: type=1400 audit(1778357218.462:803): avc: denied { setopt } for pid=5473 comm="syz.2.551" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.628093][ T5474] pimreg: entered allmulticast mode [ 72.634080][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.634080][ T4614] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 72.653908][ T5474] pimreg: left allmulticast mode [ 72.662028][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.662028][ T4614] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 72.677700][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.677700][ T4614] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 72.678234][ T28] audit: type=1326 audit(1778357218.542:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 72.718734][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.718734][ T4614] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 72.732565][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.732565][ T4614] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 72.746467][ T4614] kworker/u8:15: attempt to access beyond end of device [ 72.746467][ T4614] loop6: rw=1, sector=289, nr_sectors = 8 limit=128 [ 72.749856][ T88] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.760003][ T28] audit: type=1326 audit(1778357218.542:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 72.796811][ T88] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.842668][ T28] audit: type=1326 audit(1778357218.542:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5475 comm="syz.5.550" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 72.879127][ T88] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.892022][ T88] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.977927][ T88] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.993762][ T88] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.106742][ T88] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.139358][ T88] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.168493][ T5503] loop2: detected capacity change from 0 to 1024 [ 73.183359][ T5503] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 73.227928][ T5503] JBD2: no valid journal superblock found [ 73.253026][ T5503] EXT4-fs (loop2): Could not load journal inode [ 73.368797][ T88] bridge_slave_1: left allmulticast mode [ 73.381363][ T88] bridge_slave_1: left promiscuous mode [ 73.398811][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.416351][ T88] bridge_slave_0: left allmulticast mode [ 73.427530][ T88] bridge_slave_0: left promiscuous mode [ 73.440184][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.677812][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.845835][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.887112][ T88] bond0 (unregistering): Released all slaves [ 73.933167][ T5490] xfrm0 speed is unknown, defaulting to 1000 [ 74.049155][ T5551] program syz.5.576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.189083][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 74.189099][ T28] audit: type=1400 audit(1778357220.052:930): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.231938][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.254301][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.278751][ T28] audit: type=1400 audit(1778357220.142:931): avc: denied { getopt } for pid=5561 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.306304][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.323850][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.346244][ T28] audit: type=1400 audit(1778357220.202:932): avc: denied { write } for pid=5565 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.386820][ T88] veth1_macvtap: left promiscuous mode [ 74.396267][ T88] veth0_macvtap: left promiscuous mode [ 74.509617][ T88] team0 (unregistering): Port device team_slave_1 removed [ 74.529430][ T88] team0 (unregistering): Port device team_slave_0 removed [ 74.628974][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 74.982423][ T28] audit: type=1400 audit(1778357220.842:933): avc: denied { write } for pid=5582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.024394][ T5490] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.053217][ T5490] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.060732][ T5490] bridge_slave_0: entered allmulticast mode [ 75.072907][ T5490] bridge_slave_0: entered promiscuous mode [ 75.086142][ T5490] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.104174][ T5490] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.126572][ T28] audit: type=1400 audit(1778357220.992:934): avc: denied { write } for pid=5606 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.151661][ T5490] bridge_slave_1: entered allmulticast mode [ 75.156019][ T5608] loop7: detected capacity change from 0 to 2048 [ 75.164682][ T5490] bridge_slave_1: entered promiscuous mode [ 75.186071][ T5608] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.218622][ T5608] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.232247][ T5611] loop6: detected capacity change from 0 to 512 [ 75.244187][ T5490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.263989][ T5608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.278711][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 75.291423][ T5611] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.588: inode has both inline data and extents flags [ 75.313099][ T5611] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.313288][ T5611] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.588: couldn't read orphan inode 15 (err -117) [ 75.322508][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 75.322531][ C0] EXT4-fs (loop6): initial error at time 1778357221: ext4_orphan_get:1397: inode 15 [ 75.322582][ C0] EXT4-fs (loop6): last error at time 1778357221: ext4_orphan_get:1397: inode 15 [ 75.324930][ T5490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.336896][ T5611] loop6: lost filesystem error report for type 5 error -117 [ 75.369837][ T5611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.390281][ T28] audit: type=1400 audit(1778357221.262:935): avc: denied { write } for pid=5607 comm="syz.7.587" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.413790][ T28] audit: type=1400 audit(1778357221.262:936): avc: denied { write } for pid=5610 comm="syz.6.588" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.435646][ T28] audit: type=1400 audit(1778357221.262:937): avc: denied { execute } for pid=5610 comm="syz.6.588" path="/70/file0/file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.451873][ T5490] team0: Port device team_slave_0 added [ 75.465187][ T28] audit: type=1400 audit(1778357221.332:938): avc: denied { write } for pid=5607 comm="syz.7.587" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.466005][ T5616] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.587: bg 0: block 234: padding at end of block bitmap is not set [ 75.487891][ T28] audit: type=1400 audit(1778357221.332:939): avc: denied { write } for pid=5607 comm="syz.7.587" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.525223][ T5490] team0: Port device team_slave_1 added [ 75.538686][ T5616] EXT4-fs (loop7): Remounting filesystem read-only [ 75.554645][ T5490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.561774][ T5490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.588326][ T5490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.599893][ T5490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.617536][ T5490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.645817][ T5490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.657758][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.685092][ T5490] hsr_slave_0: entered promiscuous mode [ 75.723433][ T5490] hsr_slave_1: entered promiscuous mode [ 75.742960][ T5490] debugfs: 'hsr0' already exists in 'hsr' [ 75.758011][ T5490] Cannot create hsr debugfs directory [ 75.784708][ T3906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.938436][ T5649] loop6: detected capacity change from 0 to 512 [ 75.960459][ T5647] loop7: detected capacity change from 0 to 128 [ 75.968171][ T5490] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 75.978807][ T35] IPVS: starting estimator thread 0... [ 75.994324][ T5490] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.026060][ T5647] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.040851][ T5647] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.080703][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 76.091968][ T5490] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 76.104385][ T5653] IPVS: using max 1920 ests per chain, 96000 per kthread [ 76.105514][ T5490] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.124515][ T5490] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 76.136339][ T5490] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.142959][ T5659] loop6: detected capacity change from 0 to 128 [ 76.145471][ T5490] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 76.158386][ T5659] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 76.170007][ T5490] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.207179][ T5659] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 76.232618][ T5659] FAT-fs (loop6): Filesystem has been set read-only [ 76.261024][ T5659] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 76.297002][ T5659] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 76.306302][ T5490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.343221][ T5490] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.359317][ T4115] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.377586][ T118] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.384749][ T118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.399111][ T118] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.406314][ T118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.596318][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 76.767579][ T5490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.083499][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.604'. [ 77.086762][ T5721] loop7: detected capacity change from 0 to 2048 [ 77.113417][ T5723] netlink: 'syz.5.604': attribute type 6 has an invalid length. [ 77.135671][ T5721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.136550][ T5723] vxlan0: entered promiscuous mode [ 77.212399][ T5490] veth0_vlan: entered promiscuous mode [ 77.224605][ T5490] veth1_vlan: entered promiscuous mode [ 77.230443][ T5721] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.605: bg 0: block 234: padding at end of block bitmap is not set [ 77.247642][ T5490] veth0_macvtap: entered promiscuous mode [ 77.254369][ T5721] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1034 with error 28 [ 77.270750][ T5490] veth1_macvtap: entered promiscuous mode [ 77.284734][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.295660][ T5490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.303481][ T5721] EXT4-fs (loop7): This should not happen!! Data will be lost [ 77.303481][ T5721] [ 77.319736][ T4614] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.322993][ T5721] EXT4-fs (loop7): Total free blocks count 0 [ 77.335187][ T5721] EXT4-fs (loop7): Free/Dirty block details [ 77.341186][ T5721] EXT4-fs (loop7): free_blocks=0 [ 77.349243][ T5721] EXT4-fs (loop7): dirty_blocks=1040 [ 77.356859][ T4614] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.367627][ T4614] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.376812][ T5721] EXT4-fs (loop7): Block reservation details [ 77.382898][ T5721] EXT4-fs (loop7): i_reserved_data_blocks=65 [ 77.385757][ T4614] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.490288][ T5741] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 77.531077][ T5743] netlink: 'syz.8.554': attribute type 21 has an invalid length. [ 77.540792][ T5743] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.598885][ T23] IPVS: starting estimator thread 0... [ 77.612059][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.658056][ T5753] random: crng reseeded on system resumption [ 77.696794][ T5753] Restarting kernel threads ... [ 77.703966][ T5753] Done restarting kernel threads. [ 77.711743][ T5751] IPVS: using max 2304 ests per chain, 115200 per kthread [ 77.788259][ T5769] loop7: detected capacity change from 0 to 128 [ 77.805570][ T5769] EXT4-fs: Ignoring removed orlov option [ 77.817701][ T5769] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 77.851601][ T5773] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 77.871727][ T5771] loop2: detected capacity change from 0 to 128 [ 77.916630][ T5771] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.075679][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.263722][ T5799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.642'. [ 78.806426][ T5828] loop2: detected capacity change from 0 to 128 [ 78.831229][ T5828] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.835899][ T5822] loop7: detected capacity change from 0 to 512 [ 78.927178][ T5822] EXT4-fs: Ignoring removed bh option [ 78.955218][ T5822] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.983297][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.045259][ T5844] loop2: detected capacity change from 0 to 1024 [ 79.051732][ T5822] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 79.070416][ T5844] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 79.070416][ T5844] [ 79.091385][ T5822] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 79.150452][ T5822] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 79.216834][ T5844] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 79.232578][ T5822] EXT4-fs (loop7): orphan cleanup on readonly fs [ 79.265675][ T5822] __quota_error: 38 callbacks suppressed [ 79.265719][ T5822] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 79.276518][ T5847] loop8: detected capacity change from 0 to 512 [ 79.286750][ T5822] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 79.320558][ T5822] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.639: Failed to acquire dquot type 1 [ 79.336495][ T5822] loop7: lost filesystem error report for type 5 error -5 [ 79.344122][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 79.357768][ C0] EXT4-fs (loop7): last error at time 79: ext4_acquire_dquot:7034 [ 79.381511][ T5822] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.639: Invalid block bitmap block 0 in block_group 0 [ 79.410390][ T5822] loop7: lost filesystem error report for type 5 error -117 [ 79.418329][ T5822] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.639: Invalid block bitmap block 0 in block_group 0 [ 79.450126][ T5822] loop7: lost filesystem error report for type 5 error -117 [ 79.461913][ T5822] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.639: Invalid block bitmap block 0 in block_group 0 [ 79.486799][ T5822] loop7: lost filesystem error report for type 5 error -117 [ 79.502206][ T4160] IPVS: starting estimator thread 0... [ 79.525848][ T5822] Quota error (device loop7): write_blk: dquota write failed [ 79.539667][ T5822] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 79.555977][ T5822] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.639: Failed to acquire dquot type 1 [ 79.586867][ T5822] loop7: lost filesystem error report for type 5 error -28 [ 79.589423][ T5822] Quota error (device loop7): write_blk: dquota write failed [ 79.606929][ T5868] IPVS: using max 1872 ests per chain, 93600 per kthread [ 79.727039][ T5822] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 79.839387][ T5822] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.639: Failed to acquire dquot type 1 [ 79.851740][ T5822] loop7: lost filesystem error report for type 5 error -28 [ 79.855237][ T5822] EXT4-fs (loop7): 1 orphan inode deleted [ 79.999823][ T5822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.045946][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.7.639'. [ 80.099175][ T5822] syz.7.639 (5822) used greatest stack depth: 7488 bytes left [ 80.117381][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.176174][ T28] audit: type=1400 audit(80.144:978): avc: denied { mount } for pid=5911 comm="syz.7.656" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 80.243419][ T28] audit: type=1400 audit(80.194:979): avc: denied { ioctl } for pid=5913 comm="syz.7.657" path="socket:[12806]" dev="sockfs" ino=12806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.387422][ T5919] loop7: detected capacity change from 0 to 128 [ 80.528470][ T5923] syzkaller0: entered promiscuous mode [ 80.534069][ T5923] syzkaller0: entered allmulticast mode [ 80.698432][ T28] audit: type=1400 audit(80.664:980): avc: denied { bind } for pid=5930 comm="syz.8.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.734212][ T28] audit: type=1400 audit(80.664:981): avc: denied { setopt } for pid=5930 comm="syz.8.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.802987][ T5933] loop8: detected capacity change from 0 to 1024 [ 80.824052][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.855444][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.009910][ T5944] loop2: detected capacity change from 0 to 512 [ 81.018103][ T5942] loop6: detected capacity change from 0 to 128 [ 81.040293][ T5944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.075449][ T5942] FAT-fs (loop6): bogus logical sector size 0 [ 81.086836][ T5944] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 81.104327][ T5942] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 81.124588][ T5942] FAT-fs (loop6): Can't find a valid FAT filesystem [ 81.192982][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.322230][ T5959] loop2: detected capacity change from 0 to 1024 [ 81.374611][ T5959] EXT4-fs: Ignoring removed bh option [ 81.401284][ T5956] syzkaller0: entered promiscuous mode [ 81.413359][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.432631][ T5956] syzkaller0: entered allmulticast mode [ 81.544557][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.698738][ T5990] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 81.717518][ T5994] loop6: detected capacity change from 0 to 512 [ 81.746520][ T5994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.056910][ T3906] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.488182][ T6109] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 82.677821][ T6138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.885608][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.981684][ T6158] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.705: inode has both inline data and extents flags [ 83.062981][ T6158] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.063130][ T6158] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.705: couldn't read orphan inode 15 (err -117) [ 83.072448][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 83.072468][ C0] EXT4-fs (loop7): initial error at time 83: ext4_orphan_get:1397: inode 15 [ 83.072499][ C0] EXT4-fs (loop7): last error at time 83: ext4_orphan_get:1397: inode 15 [ 83.152654][ T6166] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.199125][ T6158] loop7: lost filesystem error report for type 5 error -117 [ 83.199658][ T6158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.295637][ T3758] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.366483][ T6175] FAT-fs (loop2): bogus logical sector size 0 [ 83.370392][ T6178] netlink: 'syz.5.713': attribute type 12 has an invalid length. [ 83.396646][ T6175] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 83.424846][ T6175] FAT-fs (loop2): Can't find a valid FAT filesystem [ 83.558492][ T6188] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.717: iget: bad i_size value: 38620345925642 [ 83.615565][ T6188] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.615763][ T6188] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.717: couldn't read orphan inode 15 (err -117) [ 83.625023][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 83.625060][ C0] EXT4-fs (loop2): initial error at time 83: ext4_orphan_get:1397: inode 15 [ 83.625104][ C0] EXT4-fs (loop2): last error at time 83: ext4_orphan_get:1397: inode 15 [ 83.674212][ T6188] loop2: lost filesystem error report for type 5 error -117 [ 83.684058][ T6188] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.716852][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.829565][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 83.851689][ T6196] syzkaller0: entered promiscuous mode [ 83.871478][ T6196] syzkaller0: entered allmulticast mode [ 83.975181][ T6204] syz0: rxe_newlink: already configured on xfrm0 [ 84.053256][ T6210] netlink: 7 bytes leftover after parsing attributes in process `syz.5.725'. [ 84.277564][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 84.277581][ T28] audit: type=1326 audit(84.244:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6221 comm="syz.2.730" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fce9af1cdd9 code=0x7ffc0000 [ 84.671285][ T28] audit: type=1400 audit(84.634:1029): avc: denied { listen } for pid=6235 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.747036][ T6238] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 84.883576][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 84.921131][ T6244] set_capacity_and_notify: 5 callbacks suppressed [ 84.921150][ T6244] loop5: detected capacity change from 0 to 1024 [ 84.967857][ T6244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.000463][ T6247] tipc: Failed to remove unknown binding: 66,1,1/0:171793042/171793044 [ 85.016386][ T6247] tipc: Failed to remove unknown binding: 66,1,1/0:171793042/171793044 [ 85.025055][ T28] audit: type=1400 audit(84.984:1030): avc: denied { read } for pid=6243 comm="syz.5.740" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.047472][ T28] audit: type=1400 audit(84.984:1031): avc: denied { open } for pid=6243 comm="syz.5.740" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.089066][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.177541][ T28] audit: type=1400 audit(85.144:1032): avc: denied { read } for pid=6254 comm="syz.5.744" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.228923][ T28] audit: type=1400 audit(85.144:1033): avc: denied { open } for pid=6254 comm="syz.5.744" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.329635][ T6266] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 85.814137][ T6194] Bluetooth: hci0: command 0x1003 tx timeout [ 85.814156][ T3820] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.849317][ T6287] loop2: detected capacity change from 0 to 7 [ 85.938825][ T4618] Bluetooth: hci0: Frame reassembly failed (-84) [ 86.216213][ T28] audit: type=1400 audit(86.174:1034): avc: denied { write } for pid=6297 comm="syz.5.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.284438][ T28] audit: type=1400 audit(86.244:1035): avc: denied { create } for pid=6301 comm="syz.8.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 86.307901][ T28] audit: type=1400 audit(86.274:1036): avc: denied { sys_admin } for pid=6301 comm="syz.8.765" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 86.332699][ T6304] loop5: detected capacity change from 0 to 512 [ 86.371489][ T6304] EXT4-fs (loop5): 1 truncate cleaned up [ 86.384945][ T6304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.405728][ T28] audit: type=1400 audit(86.364:1037): avc: denied { write } for pid=6302 comm="syz.5.767" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.469683][ T3758] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.736695][ T4610] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.762891][ T6327] netlink: 'syz.5.778': attribute type 1 has an invalid length. [ 86.826498][ T6331] gretap1: entered allmulticast mode [ 86.879720][ T4610] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.947149][ T4610] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.036337][ T4610] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.117028][ T6333] xfrm0 speed is unknown, defaulting to 1000 [ 87.171092][ T4610] bridge_slave_1: left allmulticast mode [ 87.188434][ T4610] bridge_slave_1: left promiscuous mode [ 87.208256][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.240915][ T4610] bridge_slave_0: left allmulticast mode [ 87.255544][ T4610] bridge_slave_0: left promiscuous mode [ 87.266271][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.429187][ T4610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.443432][ T4610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.450968][ T6361] loop2: detected capacity change from 0 to 512 [ 87.461399][ T4610] bond0 (unregistering): Released all slaves [ 87.486804][ T6361] EXT4-fs: Ignoring removed bh option [ 87.503895][ T6361] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.541901][ T6361] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.568271][ T6361] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 87.611817][ T6361] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 87.643543][ T6361] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.660905][ T4610] hsr_slave_0: left promiscuous mode [ 87.669015][ T4610] hsr_slave_1: left promiscuous mode [ 87.677002][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.684554][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.696840][ T4610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.704467][ T4610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.709814][ T6361] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.782: Failed to acquire dquot type 1 [ 87.728909][ T4610] veth1_macvtap: left promiscuous mode [ 87.735073][ T4610] veth0_macvtap: left promiscuous mode [ 87.735365][ T6361] loop2: lost filesystem error report for type 5 error -5 [ 87.754117][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 87.767765][ C0] EXT4-fs (loop2): last error at time 87: ext4_acquire_dquot:7034 [ 87.781237][ T6361] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.782: Invalid block bitmap block 0 in block_group 0 [ 87.798953][ T6361] loop2: lost filesystem error report for type 5 error -117 [ 87.808388][ T6361] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.782: Invalid block bitmap block 0 in block_group 0 [ 87.864016][ T6361] loop2: lost filesystem error report for type 5 error -117 [ 87.866865][ T6361] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.782: Invalid block bitmap block 0 in block_group 0 [ 87.902034][ T4610] team0 (unregistering): Port device team_slave_1 removed [ 87.909614][ T6361] loop2: lost filesystem error report for type 5 error -117 [ 87.912165][ T6361] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.782: Failed to acquire dquot type 1 [ 87.949110][ T4610] team0 (unregistering): Port device team_slave_0 removed [ 87.960173][ T6361] loop2: lost filesystem error report for type 5 error -28 [ 87.974205][ T6194] Bluetooth: hci0: command 0x1003 tx timeout [ 87.975267][ T3820] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.019423][ T6361] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.782: Failed to acquire dquot type 1 [ 88.034789][ T6361] loop2: lost filesystem error report for type 5 error -28 [ 88.042052][ T6361] EXT4-fs (loop2): 1 orphan inode deleted [ 88.194674][ T6361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.250943][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.258223][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.265772][ T6333] bridge_slave_0: entered allmulticast mode [ 88.272482][ T6333] bridge_slave_0: entered promiscuous mode [ 88.279499][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.286833][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.294019][ T6333] bridge_slave_1: entered allmulticast mode [ 88.306332][ T6333] bridge_slave_1: entered promiscuous mode [ 88.330548][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.350973][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.369118][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.782'. [ 88.511390][ T6333] team0: Port device team_slave_0 added [ 88.535463][ T6333] team0: Port device team_slave_1 added [ 88.586443][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.604321][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.640607][ T6431] netlink: 16 bytes leftover after parsing attributes in process `syz.7.792'. [ 88.664216][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.684860][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.700468][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.735969][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.746866][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.858957][ T6333] hsr_slave_0: entered promiscuous mode [ 88.874908][ T6333] hsr_slave_1: entered promiscuous mode [ 88.978659][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.8.799'. [ 89.026023][ T6459] sctp: [Deprecated]: syz.5.801 (pid 6459) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.026023][ T6459] Use struct sctp_sack_info instead [ 89.048554][ T4610] IPVS: stop unused estimator thread 0... [ 89.104715][ T6459] loop5: detected capacity change from 0 to 2048 [ 89.189263][ T6459] loop5: p3 < > p4 < > [ 89.193509][ T6459] loop5: partition table partially beyond EOD, truncated [ 89.213699][ T6459] loop5: p3 start 4284289 is beyond EOD, truncated [ 89.292893][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 89.292919][ T28] audit: type=1400 audit(89.254:1057): avc: denied { write } for pid=6468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.379129][ T28] audit: type=1400 audit(89.334:1058): avc: denied { write } for pid=6486 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.582843][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 89.662913][ T6333] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 89.694408][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.706002][ T6491] loop7: detected capacity change from 0 to 512 [ 89.719543][ T6333] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 89.737101][ T6491] EXT4-fs: Ignoring removed orlov option [ 89.744189][ T6491] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.751135][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.763879][ T6491] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.771999][ T6333] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 89.799441][ T6491] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.809: corrupted in-inode xattr: e_value size too large [ 89.830631][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.844774][ T6333] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 89.863524][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.872990][ T6491] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.873243][ T6491] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.809: couldn't read orphan inode 15 (err -117) [ 89.874175][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 89.884252][ T6491] loop7: lost filesystem error report for type 5 error -117 [ 89.894311][ C0] EXT4-fs (loop7): initial error at time 89: ext4_iget_extra_inode:5128: inode 15 [ 89.917446][ C0] EXT4-fs (loop7): last error at time 89: ext4_orphan_get:1402 [ 89.933813][ T6491] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.987553][ T28] audit: type=1400 audit(89.954:1059): avc: denied { write } for pid=6490 comm="syz.7.809" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.014341][ T6491] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.809: corrupted in-inode xattr: e_value size too large [ 90.047509][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.065661][ T28] audit: type=1400 audit(89.974:1060): avc: denied { write } for pid=6490 comm="syz.7.809" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.096970][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.113335][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.125055][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.131461][ T28] audit: type=1400 audit(89.974:1061): avc: denied { write } for pid=6490 comm="syz.7.809" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.132206][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.153146][ T28] audit: type=1400 audit(89.974:1062): avc: denied { write } for pid=6490 comm="syz.7.809" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.206625][ T4610] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.213777][ T4610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.267339][ T28] audit: type=1400 audit(89.974:1063): avc: denied { write } for pid=6490 comm="syz.7.809" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.309781][ T6333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.330961][ T28] audit: type=1400 audit(89.974:1064): avc: denied { rename } for pid=6490 comm="syz.7.809" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.399557][ T28] audit: type=1400 audit(89.974:1065): avc: denied { write } for pid=6490 comm="syz.7.809" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.432762][ T6523] loop7: detected capacity change from 0 to 1024 [ 90.441474][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 90.457175][ T28] audit: type=1400 audit(90.164:1066): avc: denied { write } for pid=6496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.480016][ T6523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.609851][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.736167][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.893526][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 91.073100][ T6333] veth0_vlan: entered promiscuous mode [ 91.108643][ T6333] veth1_vlan: entered promiscuous mode [ 91.163595][ T6333] veth0_macvtap: entered promiscuous mode [ 91.189672][ T6333] veth1_macvtap: entered promiscuous mode [ 91.233327][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.281687][ T6333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.322548][ T4618] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.350201][ T4618] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.389022][ T4618] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.413592][ T4618] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.564884][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 91.753793][ T6621] loop9: detected capacity change from 0 to 128 [ 91.783695][ T6621] bio_check_eod: 7053 callbacks suppressed [ 91.783714][ T6621] syz.9.779: attempt to access beyond end of device [ 91.783714][ T6621] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 91.849197][ T6621] syz.9.779: attempt to access beyond end of device [ 91.849197][ T6621] loop9: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 91.863342][ T6630] cgroup: Setting release_agent not allowed [ 91.882928][ T6621] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 91.904219][ T6621] syz.9.779: attempt to access beyond end of device [ 91.904219][ T6621] loop9: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 91.944682][ T6621] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 91.968412][ T6621] syz.9.779: attempt to access beyond end of device [ 91.968412][ T6621] loop9: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 92.010598][ T6621] syz.9.779: attempt to access beyond end of device [ 92.010598][ T6621] loop9: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 92.043036][ T6621] Buffer I/O error on dev loop9, logical block 83, lost async page write [ 92.065762][ T6621] syz.9.779: attempt to access beyond end of device [ 92.065762][ T6621] loop9: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 92.092148][ T6621] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 92.117021][ T6621] syz.9.779: attempt to access beyond end of device [ 92.117021][ T6621] loop9: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 92.162094][ T6621] syz.9.779: attempt to access beyond end of device [ 92.162094][ T6621] loop9: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 92.196722][ T6621] Buffer I/O error on dev loop9, logical block 95, lost async page write [ 92.217107][ T6621] syz.9.779: attempt to access beyond end of device [ 92.217107][ T6621] loop9: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 92.268161][ T6621] Buffer I/O error on dev loop9, logical block 96, lost async page write [ 92.292513][ T6621] syz.9.779: attempt to access beyond end of device [ 92.292513][ T6621] loop9: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 92.336525][ T6621] Buffer I/O error on dev loop9, logical block 99, lost async page write [ 92.364426][ T6621] Buffer I/O error on dev loop9, logical block 100, lost async page write [ 92.400667][ T6621] Buffer I/O error on dev loop9, logical block 111, lost async page write [ 92.433215][ T6621] Buffer I/O error on dev loop9, logical block 112, lost async page write [ 92.556696][ T6658] loop8: detected capacity change from 0 to 512 [ 92.578559][ T6658] EXT4-fs: Ignoring removed bh option [ 92.607654][ T6658] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.634676][ T6658] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.652204][ T6658] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 92.748576][ T6658] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 92.822854][ T6658] EXT4-fs (loop8): orphan cleanup on readonly fs [ 92.886238][ T6658] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.847: Failed to acquire dquot type 1 [ 92.921562][ T6658] loop8: lost filesystem error report for type 5 error -5 [ 92.925956][ T6658] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.847: Invalid block bitmap block 0 in block_group 0 [ 92.934113][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 92.934136][ C1] EXT4-fs (loop8): last error at time 92: ext4_acquire_dquot:7034 [ 92.976917][ T6658] loop8: lost filesystem error report for type 5 error -117 [ 92.986237][ T6658] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.847: Invalid block bitmap block 0 in block_group 0 [ 93.009326][ T6658] loop8: lost filesystem error report for type 5 error -117 [ 93.010624][ T6658] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.847: Invalid block bitmap block 0 in block_group 0 [ 93.041222][ T6658] loop8: lost filesystem error report for type 5 error -117 [ 93.045751][ T6658] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.847: Failed to acquire dquot type 1 [ 93.066058][ T6658] loop8: lost filesystem error report for type 5 error -28 [ 93.068355][ T6658] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.847: Failed to acquire dquot type 1 [ 93.089098][ T6658] loop8: lost filesystem error report for type 5 error -28 [ 93.095237][ T6658] EXT4-fs (loop8): 1 orphan inode deleted [ 93.115813][ T6658] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.168844][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.8.847'. [ 93.238192][ T5490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.279448][ T6681] netlink: 'syz.9.857': attribute type 1 has an invalid length. [ 93.308215][ T6681] netlink: 'syz.9.857': attribute type 22 has an invalid length. [ 93.545143][ T6696] loop5: detected capacity change from 0 to 512 [ 93.584288][ T6696] EXT4-fs: old and new quota format mixing [ 94.534789][ T6732] loop5: detected capacity change from 0 to 128 [ 94.566558][ T6732] FAT-fs (loop5): bogus logical sector size 0 [ 94.580646][ T6732] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 94.601502][ T6732] FAT-fs (loop5): Can't find a valid FAT filesystem [ 94.799951][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 94.799965][ T28] audit: type=1326 audit(94.764:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 94.866823][ T28] audit: type=1326 audit(94.804:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 94.921820][ T28] audit: type=1326 audit(94.804:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 94.964864][ T28] audit: type=1326 audit(94.804:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 95.017952][ T28] audit: type=1326 audit(94.804:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 95.069799][ T28] audit: type=1326 audit(94.804:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 95.139984][ T6774] ipip0: entered promiscuous mode [ 95.140808][ T28] audit: type=1326 audit(94.804:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 95.178236][ T28] audit: type=1326 audit(94.804:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 95.204847][ T28] audit: type=1326 audit(94.804:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 95.230162][ T28] audit: type=1326 audit(94.804:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6751 comm="syz.5.879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f17ab2ecdd9 code=0x7ffc0000 [ 96.873566][ T6914] loop7: detected capacity change from 0 to 128 [ 96.921626][ T6914] bio_check_eod: 32 callbacks suppressed [ 96.921646][ T6914] syz.7.905: attempt to access beyond end of device [ 96.921646][ T6914] loop7: rw=2049, sector=145, nr_sectors = 57 limit=128 [ 96.999872][ T6917] loop5: detected capacity change from 0 to 1024 [ 97.029154][ T6917] EXT4-fs: Ignoring removed bh option [ 97.070497][ T6917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 97.113103][ T6922] xt_hashlimit: size too large, truncated to 1048576 [ 97.164164][ T6917] loop5: detected capacity change from 1024 to 64 [ 97.187674][ T6930] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -12) [ 97.318907][ T5221] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 97.361792][ T6923] kmmpd-loop5: attempt to access beyond end of device [ 97.361792][ T6923] loop5: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 97.393573][ T6923] buffer_io_error: 18 callbacks suppressed [ 97.393588][ T6923] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 97.559836][ T6822] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.576490][ T6822] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.631655][ T6822] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.662062][ T6822] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.768638][ T6822] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.797159][ T6822] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.869124][ T6822] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.882159][ T6974] loop9: detected capacity change from 0 to 128 [ 97.905970][ T6822] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.916674][ T6974] FAT-fs (loop9): bogus logical sector size 0 [ 97.927617][ T6974] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 97.950594][ T6974] FAT-fs (loop9): Can't find a valid FAT filesystem [ 98.076020][ T6822] bridge_slave_1: left allmulticast mode [ 98.095967][ T6822] bridge_slave_1: left promiscuous mode [ 98.124459][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.154883][ T6822] bridge_slave_0: left allmulticast mode [ 98.167791][ T6822] bridge_slave_0: left promiscuous mode [ 98.180892][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.427611][ T6822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.448386][ T6822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.467087][ T6822] bond0 (unregistering): Released all slaves [ 98.485182][ T6822] bond1 (unregistering): Released all slaves [ 98.539091][ T6961] xfrm0 speed is unknown, defaulting to 1000 [ 98.597663][ T7018] loop7: detected capacity change from 0 to 512 [ 98.627900][ T7018] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 98.665184][ T7018] EXT4-fs (loop7): 1 orphan inode deleted [ 98.672813][ T7018] EXT4-fs (loop7): 1 truncate cleaned up [ 98.691195][ T7018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.774744][ T4115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.846223][ T6822] hsr_slave_0: left promiscuous mode [ 98.860302][ T6822] hsr_slave_1: left promiscuous mode [ 98.872412][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.884926][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.896924][ T6822] veth1_macvtap: left promiscuous mode [ 98.906118][ T6822] veth0_macvtap: left promiscuous mode [ 98.911798][ T6822] veth1_vlan: left promiscuous mode [ 98.996140][ T6822] team0 (unregistering): Port device team_slave_1 removed [ 99.007066][ T6822] team0 (unregistering): Port device team_slave_0 removed [ 99.052089][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 99.309030][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.349898][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.357345][ T6961] bridge_slave_0: entered allmulticast mode [ 99.367180][ T6961] bridge_slave_0: entered promiscuous mode [ 99.371796][ T7082] loop2: detected capacity change from 0 to 512 [ 99.381115][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.393526][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.409764][ T6961] bridge_slave_1: entered allmulticast mode [ 99.419938][ T7082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.435934][ T6961] bridge_slave_1: entered promiscuous mode [ 99.449232][ T7082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.483615][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 99.509526][ T6961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.518346][ T6822] IPVS: stop unused estimator thread 0... [ 99.533861][ T6961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.562344][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.590806][ T6961] team0: Port device team_slave_0 added [ 99.613366][ T6961] team0: Port device team_slave_1 added [ 99.689541][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.712391][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.776005][ T6961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.797527][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.822467][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.871489][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 99.871504][ T28] audit: type=1400 audit(99.834:1139): avc: denied { write } for pid=7121 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.900005][ T6961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.951451][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 99.986547][ T6961] hsr_slave_0: entered promiscuous mode [ 100.014735][ T6961] hsr_slave_1: entered promiscuous mode [ 100.021251][ T6961] debugfs: 'hsr0' already exists in 'hsr' [ 100.042658][ T6961] Cannot create hsr debugfs directory [ 100.268426][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.300099][ T7149] loop8: detected capacity change from 0 to 512 [ 100.308074][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.319685][ T28] audit: type=1400 audit(100.284:1140): avc: denied { create } for pid=7143 comm="syz.2.966" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.347807][ T7149] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 100.373052][ T7151] loop7: detected capacity change from 0 to 512 [ 100.380953][ T28] audit: type=1400 audit(100.324:1141): avc: denied { write } for pid=7131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.408762][ T7149] EXT4-fs (loop8): 1 truncate cleaned up [ 100.414782][ T7151] EXT4-fs: Ignoring removed i_version option [ 100.424309][ T7151] EXT4-fs: Ignoring removed nobh option [ 100.430533][ T7149] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.452018][ T28] audit: type=1400 audit(100.414:1142): avc: denied { write } for pid=7147 comm="syz.8.967" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.473668][ T3291] ================================================================== [ 100.481789][ T3291] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 100.490225][ T3291] [ 100.492555][ T3291] write to 0xffffea0004916498 of 8 bytes by task 7151 on cpu 1: [ 100.500185][ T3291] delete_from_page_cache_batch+0x310/0x720 [ 100.506102][ T3291] truncate_inode_pages_range+0x1fe/0x7e0 [ 100.511829][ T3291] truncate_inode_pages+0x24/0x30 [ 100.516941][ T3291] set_blocksize+0x1ed/0x270 [ 100.521640][ T3291] sb_set_blocksize+0x93/0x170 [ 100.526498][ T3291] sb_min_blocksize+0x53/0x60 [ 100.531178][ T3291] ext4_fill_super+0x398/0x37c0 [ 100.536039][ T3291] get_tree_bdev_flags+0x291/0x300 [ 100.541161][ T3291] get_tree_bdev+0x1f/0x30 [ 100.545588][ T3291] ext4_get_tree+0x1c/0x30 [ 100.550010][ T3291] vfs_get_tree+0x57/0x1d0 [ 100.554450][ T3291] do_new_mount+0x288/0x8d0 [ 100.558967][ T3291] path_mount+0x4d0/0xbc0 [ 100.563307][ T3291] __se_sys_mount+0x28c/0x2e0 [ 100.568005][ T3291] __x64_sys_mount+0x67/0x80 [ 100.572621][ T3291] x64_sys_call+0x2d61/0x3020 [ 100.577312][ T3291] do_syscall_64+0x12c/0x3b0 [ 100.581916][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.587837][ T3291] [ 100.590162][ T3291] read to 0xffffea0004916498 of 8 bytes by task 3291 on cpu 0: [ 100.597704][ T3291] folio_mapping+0xa1/0xe0 [ 100.602136][ T3291] lru_add+0x8d/0x460 [ 100.606131][ T3291] folio_batch_move_lru+0x1d3/0x290 [ 100.611342][ T3291] lru_add_drain_cpu+0x66/0x210 [ 100.616207][ T3291] __folio_batch_release+0x44/0xb0 [ 100.621415][ T3291] shmem_undo_range+0x327/0xb10 [ 100.626270][ T3291] shmem_evict_inode+0x12e/0x540 [ 100.631212][ T3291] evict+0x2af/0x510 [ 100.635112][ T3291] iput+0x41a/0x580 [ 100.638921][ T3291] dentry_unlink_inode+0x26f/0x290 [ 100.644063][ T3291] __dentry_kill+0x145/0x4d0 [ 100.648751][ T3291] finish_dput+0x2b/0x200 [ 100.653081][ T3291] dput+0x52/0x60 [ 100.656716][ T3291] filename_renameat2+0x493/0x6e0 [ 100.661753][ T3291] __se_sys_rename+0x4a/0x1c0 [ 100.666446][ T3291] __x64_sys_rename+0x31/0x40 [ 100.671124][ T3291] x64_sys_call+0x2b3/0x3020 [ 100.675720][ T3291] do_syscall_64+0x12c/0x3b0 [ 100.680316][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.686213][ T3291] [ 100.688532][ T3291] value changed: 0xffff888100489728 -> 0x0000000000000000 [ 100.695638][ T3291] [ 100.697961][ T3291] Reported by Kernel Concurrency Sanitizer on: [ 100.704110][ T3291] CPU: 0 UID: 0 PID: 3291 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 100.714547][ T3291] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 100.718346][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.728404][ T3291] ================================================================== [ 100.743486][ T28] audit: type=1400 audit(100.714:1143): avc: denied { write } for pid=7156 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.794004][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 100.802237][ T7151] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 100.844310][ T7151] EXT4-fs (loop7): 1 truncate cleaned up [ 100.860827][ T7151] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.891450][ T28] audit: type=1400 audit(100.854:1144): avc: denied { write } for pid=7150 comm="syz.7.968" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.019878][ T4600] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.100249][ T4600] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.157737][ T28] audit: type=1400 audit(101.124:1145): avc: denied { write } for pid=7160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.224220][ T28] audit: type=1400 audit(101.174:1146): avc: denied { write } for pid=7171 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.252781][ T4600] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.304998][ T4600] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.326997][ T7150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.386485][ T5935] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.430977][ T4600] bridge_slave_1: left allmulticast mode [ 101.438408][ T4600] bridge_slave_1: left promiscuous mode [ 101.447599][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.466965][ T4600] bridge_slave_0: left allmulticast mode [ 101.473513][ T4600] bridge_slave_0: left promiscuous mode [ 101.479848][ T28] audit: type=1400 audit(101.444:1147): avc: denied { write } for pid=7173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.494460][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.540640][ T28] audit: type=1400 audit(101.504:1148): avc: denied { write } for pid=7184 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.628140][ T4600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.638684][ T4600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.649145][ T4600] bond0 (unregistering): Released all slaves [ 101.741283][ T4600] hsr_slave_0: left promiscuous mode [ 101.747712][ T4600] hsr_slave_1: left promiscuous mode [ 101.753455][ T4600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.762324][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.771466][ T4600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.779182][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.790444][ T4600] veth1_macvtap: left promiscuous mode [ 101.804246][ T4600] veth0_macvtap: left promiscuous mode [ 101.815797][ T4600] veth1_vlan: left promiscuous mode [ 101.825769][ T4600] veth0_vlan: left promiscuous mode [ 102.011238][ T4600] team0 (unregistering): Port device team_slave_1 removed [ 102.027449][ T4600] team0 (unregistering): Port device team_slave_0 removed [ 102.288940][ T4600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.339531][ T4600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.390672][ T4600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.439394][ T4600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.516681][ T4600] bridge_slave_1: left allmulticast mode [ 102.522421][ T4600] bridge_slave_1: left promiscuous mode [ 102.528520][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.538051][ T4600] bridge_slave_0: left allmulticast mode [ 102.543892][ T4600] bridge_slave_0: left promiscuous mode [ 102.550043][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.559590][ T4600] bridge_slave_1: left allmulticast mode [ 102.565374][ T4600] bridge_slave_1: left promiscuous mode [ 102.571083][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.579134][ T4600] bridge_slave_0: left allmulticast mode [ 102.584984][ T4600] bridge_slave_0: left promiscuous mode [ 102.590792][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.746340][ T4600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.759152][ T4600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.769216][ T4600] bond0 (unregistering): Released all slaves [ 102.816664][ T4600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.826514][ T4600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.835713][ T4600] bond0 (unregistering): Released all slaves [ 102.943646][ T4600] hsr_slave_0: left promiscuous mode [ 102.950850][ T4600] hsr_slave_1: left promiscuous mode [ 102.956873][ T4600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.965653][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.973185][ T4600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.980937][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.990811][ T4600] hsr_slave_0: left promiscuous mode [ 102.996749][ T4600] hsr_slave_1: left promiscuous mode [ 103.002480][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.010265][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.021240][ T4600] veth1_macvtap: left promiscuous mode [ 103.027108][ T4600] veth0_macvtap: left promiscuous mode [ 103.032744][ T4600] veth1_vlan: left promiscuous mode [ 103.038134][ T4600] veth0_vlan: left promiscuous mode [ 103.111402][ T4600] team0 (unregistering): Port device team_slave_1 removed [ 103.121393][ T4600] team0 (unregistering): Port device team_slave_0 removed [ 103.182445][ T4600] team0 (unregistering): Port device team_slave_1 removed [ 103.192654][ T4600] team0 (unregistering): Port device team_slave_0 removed [ 103.227175][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 103.427722][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 103.539573][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 103.649877][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 103.688343][ T4600] IPVS: stop unused estimator thread 0... [ 103.768323][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 103.876166][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26 [ 103.984767][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27 [ 104.092146][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28