last executing test programs: 2m47.551389542s ago: executing program 32 (id=834): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffeffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES16], 0x1, 0x2d0, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0xc042, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7}, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 2m20.988539745s ago: executing program 1 (id=1384): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@errors_continue}]}, 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 2m20.688094965s ago: executing program 1 (id=1390): unshare(0x28000600) r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) unshare(0x8000280) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) 2m20.538423869s ago: executing program 1 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5, 0x0, 0x9}}}}, 0x36) 2m20.444840232s ago: executing program 33 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000480)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5, 0x0, 0x9}}}}, 0x36) 1m40.664166905s ago: executing program 0 (id=2029): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000002c0)=0x2, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) 1m40.531846929s ago: executing program 0 (id=2030): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'tunl0\x00'}}, 0x1e) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1m40.454977132s ago: executing program 0 (id=2032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) 1m40.331973225s ago: executing program 0 (id=2035): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 1m40.19816058s ago: executing program 0 (id=2037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000580)=""/213, 0xd5}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1m39.857575311s ago: executing program 0 (id=2045): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 1m39.805427712s ago: executing program 34 (id=2045): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 1m14.918793353s ago: executing program 7 (id=2495): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000002c0)="29000000140005b7ff04000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 1m14.858581654s ago: executing program 7 (id=2498): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xffffffffffffff0b, 0xaf, 0xe754}]}}}}}}}, 0x0) 1m14.747727678s ago: executing program 7 (id=2501): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab14524", 0x41}], 0x1}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1m14.531657885s ago: executing program 7 (id=2507): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m14.514180735s ago: executing program 7 (id=2509): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0xc4) 1m14.271859243s ago: executing program 7 (id=2513): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x2, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m14.271715113s ago: executing program 35 (id=2513): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x2, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m4.819103633s ago: executing program 5 (id=2684): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') 1m4.723676105s ago: executing program 5 (id=2687): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x75e, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=""/6, 0x6}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/146, 0x92}, 0x8}], 0x2, 0x89dae3db0a2be9c3, 0x0) 1m4.58386886s ago: executing program 5 (id=2691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @empty}}}}, 0x0) 1m4.489044064s ago: executing program 5 (id=2692): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80101c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 1m4.252158421s ago: executing program 5 (id=2698): r0 = io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0x1443, 0x8, 0xfffffffe, 0xc}) r1 = epoll_create(0x7) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x60000000}) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.835955764s ago: executing program 5 (id=2705): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1m3.835788214s ago: executing program 36 (id=2705): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 24.023368928s ago: executing program 9 (id=3426): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xf, 0x0, &(0x7f0000000240)="7993ff011900000000a63b00008f20", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) pselect6(0x40, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x3ff}, &(0x7f0000000000)={0x1f, 0x0, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 23.935404701s ago: executing program 9 (id=3428): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r1}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) 23.892338002s ago: executing program 9 (id=3430): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) 23.823831734s ago: executing program 9 (id=3431): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 23.823587474s ago: executing program 9 (id=3432): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 23.148641945s ago: executing program 9 (id=3443): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) 23.118786877s ago: executing program 37 (id=3443): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) 23.051865879s ago: executing program 8 (id=3447): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000010c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@orlov}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0xa2a41b4}}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) open(0x0, 0x14f840, 0xa4) 22.586705283s ago: executing program 8 (id=3453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 22.117742458s ago: executing program 8 (id=3460): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 22.05670612s ago: executing program 8 (id=3461): fsync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 21.526009327s ago: executing program 8 (id=3465): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 21.40792916s ago: executing program 8 (id=3466): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 6.240897502s ago: executing program 38 (id=3466): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 2.614744327s ago: executing program 2 (id=3632): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000666000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000826000/0x2000)=nil, &(0x7f0000a68000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2235, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x4932, 0x4) io_uring_enter(r0, 0x4c08, 0x57b7, 0x14, 0x0, 0x0) 2.045718935s ago: executing program 2 (id=3637): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x400c000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.58962881s ago: executing program 4 (id=3644): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x20040804) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0xff80, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.429099785s ago: executing program 4 (id=3645): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x2000}) close(r1) 1.27748355s ago: executing program 4 (id=3646): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) 1.250942491s ago: executing program 3 (id=3647): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x25a7, &(0x7f0000000040)={0x0, 0x7a21, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.107124505s ago: executing program 4 (id=3648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 924.042531ms ago: executing program 1 (id=3580): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$eJzs3M9uG0UYAPBvN/9I0tZB4oAKh0ggCAKSOhCgCInCGU7AA0RJWircpmqMREsOBXHixAFx49BX4AGqCiEh8Qq8AKpUoTQXbkZr7zpOHCd2Y8dJ+/tJI8/sjj3zeZ3VzGZ3AnhqzUbEpYgYiYjFiCjl29M8xZ1Gyuo92tpc2d7aXEmiVvvs3ySSfFvxWUn+Op0X5tKI9IeIF+60t7tx6/ZXy5XK2s28vFC9dmNh49btN69eW76ydmXtevndi+Xy0uJ75bf7FusvL792ceTjS+d//bt0f2l8fDLr75l8X2scPZnuvGs2ZpvfyV5Lj9XYyTU+7A4AANCVNB/7j9bH/6UYqecaSrGwOdTOAQAAAH1R+zB/BQAAAJ5gibk/AAAAPOGK+wAebW2uFGmItyMcu4cfRcTMzrPN2834R+OZvM7YAJ9vnY2IG68kpSzFUZ5DBgDo0v1s/HNhv/FfGs+31JuIqI+HJvvc/uyecvv4J33Q5yZ3ycZ/H0TEdtv4Ly2qzIzkpbP1oeJYcvlqZe1CRJyLiLkYm8jK5Q6fX+u0AEwui/+P5Oy5ImXtZ687NdIHoxO737O6XF1+/Ih3e/hdxPnR/eJPmuPfLISpI7Qx8u3d9zvtOzz+wardjXh13+O/c+CSg9cnWqj/HhaKX0W7/77/7dNO7Q87/uz4Tx0c/0zSul7TRu9t3Pvyrxc77Wud//Ty+x9PPq/ni3nZN8vV6s1yxHjySfv2xZ33FuWifhb/3Ev7//0X578kX+bpTH4O6NWPP/3+RjfxZylrv5gLHocs/tWejn/vmXfu/flFp/YPjz87/o01wObyLd2c/7rt4FG+OwAAADgt0vp1jSSdb+bTdH6+cb3juZhKK+sb1dcvr399fbVx/WMmxtLiSlep5XpoufFv9GZ5cU/5rYh4NiJ+Lk3Wy/Mr65XVYQcPAAAAT4npDvP/zD/HdhcCAAAAMHAzB+9Oj6sfAAAAwOAcMv8HAAAATrejrOvXlkn69DkDzoydjG7IyJzgzLDPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfb/wEAAP//TtW0Wg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 894.203612ms ago: executing program 2 (id=3649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1, 0x8, 0x2) 873.832332ms ago: executing program 6 (id=3650): r0 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000640)={[{@dioread_nolock}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}], [{@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@pcr={'pcr', 0x3d, 0x4000000007}}, {@dont_appraise}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000040)={0x4, "61d2be22a9ae314238991451f45a8e0bd5fdaa3fb4a39f3a5fb5d38174b5059d260d6c6ed11266be7fc0b8de6b3b9609f90a23c7f3947cabefc185f238de1ad2"}) close_range(r0, 0xffffffffffffffff, 0x0) 765.187786ms ago: executing program 3 (id=3651): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 658.0538ms ago: executing program 6 (id=3652): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 526.348743ms ago: executing program 3 (id=3653): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40810) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x1b, "e6ce09bbe96c68e71c6b58ffb3215a859efb1b7b61869c41081bc1"}, &(0x7f0000000140)=0x23) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800008209"], 0x18}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 500.473835ms ago: executing program 2 (id=3654): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x5, 0x2, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000801, &(0x7f0000000440)=ANY=[], 0x1, 0x26c, &(0x7f0000000840)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000000bc0)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) prctl$PR_SET_UNALIGN(0x6, 0x1) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) 459.217376ms ago: executing program 1 (id=3655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x54, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 424.984077ms ago: executing program 3 (id=3656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x2002, 0x0, 0x0) 417.267407ms ago: executing program 4 (id=3657): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") socket$inet(0x2, 0x80001, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 411.270078ms ago: executing program 6 (id=3658): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) creat(&(0x7f0000000240)='./bus\x00', 0xc2) 310.40957ms ago: executing program 6 (id=3659): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3, 0x19, r0}, 0x10) 276.050091ms ago: executing program 3 (id=3660): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680), &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 246.961243ms ago: executing program 2 (id=3661): sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f40)={0x3, &(0x7f0000000f00)=[{0x5}, {0x25}, {0x6}]}) 211.960604ms ago: executing program 6 (id=3662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x30, r1, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 132.008716ms ago: executing program 3 (id=3663): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000140)=@req={0x4, 0x200, 0x8001, 0x2}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xbc5a) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) 78.758298ms ago: executing program 6 (id=3664): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r0, 0x402, 0x2f) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) r2 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) splice(r2, 0x0, r1, 0x0, 0x59, 0x2) 64.773408ms ago: executing program 1 (id=3665): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 20.30444ms ago: executing program 4 (id=3666): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) modify_ldt$read(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 0s ago: executing program 2 (id=3667): syz_usb_connect(0x0, 0xffffffffffffff78, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xbc5a) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x5, 0x3, 0x1, 0xf, "0062fdffffffffffffff630400"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read$watch_queue(r2, &(0x7f0000000e00)=""/4095, 0xfff) kernel console output (not intermixed with test programs): filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.132780][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.014987][T10627] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.022335][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.029731][T10627] bridge_slave_0: entered allmulticast mode [ 177.036604][T10627] bridge_slave_0: entered promiscuous mode [ 177.044260][T10627] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.051791][T10627] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.059261][T10627] bridge_slave_1: entered allmulticast mode [ 177.066159][T10627] bridge_slave_1: entered promiscuous mode [ 177.084677][T10627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.095241][T10627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.117195][T10627] team0: Port device team_slave_0 added [ 177.123932][T10627] team0: Port device team_slave_1 added [ 177.141478][T10627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.148542][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.175014][T10627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.186792][T10627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.193972][T10627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.242311][T10627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.303124][T10627] hsr_slave_0: entered promiscuous mode [ 177.318605][T10627] hsr_slave_1: entered promiscuous mode [ 177.337473][T10627] debugfs: 'hsr0' already exists in 'hsr' [ 177.343319][T10627] Cannot create hsr debugfs directory [ 177.407639][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 177.407658][ T28] audit: type=1400 audit(1781826419.970:1152): avc: denied { setopt } for pid=10661 comm="syz.3.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 177.802121][T10627] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 177.815602][T10627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.827267][T10627] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 177.841472][ T28] audit: type=1400 audit(1781826420.400:1153): avc: denied { connect } for pid=10671 comm="syz.6.2526" lport=32974 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 177.861414][T10670] loop4: detected capacity change from 0 to 2048 [ 177.876070][ T28] audit: type=1400 audit(1781826420.400:1154): avc: denied { name_connect } for pid=10671 comm="syz.6.2526" dest=20002 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 177.902513][T10627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.924003][T10627] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 177.941652][T10627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.951173][T10670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.958888][T10627] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 177.972847][ T28] audit: type=1400 audit(1781826420.530:1155): avc: denied { write } for pid=10669 comm="syz.4.2524" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.997861][T10627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.025431][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.064213][T10627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.099248][T10695] netlink: 'syz.4.2531': attribute type 12 has an invalid length. [ 178.118652][T10695] netlink: 'syz.4.2531': attribute type 29 has an invalid length. [ 178.135000][T10695] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2531'. [ 178.151790][T10695] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 178.162705][T10695] netlink: 'syz.4.2531': attribute type 2 has an invalid length. [ 178.175074][T10695] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2531'. [ 178.197856][T10697] futex_wake_op: syz.5.2533 tries to shift op by 32; fix this program [ 178.198486][T10627] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.335000][ T3765] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.342173][ T3765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.393039][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.400182][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.451057][T10627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.670189][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2543'. [ 178.728651][T10627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.994479][T10627] veth0_vlan: entered promiscuous mode [ 179.012374][T10627] veth1_vlan: entered promiscuous mode [ 179.048281][T10627] veth0_macvtap: entered promiscuous mode [ 179.073061][T10627] veth1_macvtap: entered promiscuous mode [ 179.106081][T10627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.132191][T10627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.156095][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.171765][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.223211][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.232798][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.336980][T10770] loop3: detected capacity change from 0 to 1024 [ 179.359664][T10770] EXT4-fs: Ignoring removed orlov option [ 179.396759][T10770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.415122][ T28] audit: type=1400 audit(1781826422.971:1156): avc: denied { write } for pid=10769 comm="syz.3.2552" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.467764][ T28] audit: type=1400 audit(1781826423.001:1157): avc: denied { mounton } for pid=10769 comm="syz.3.2552" path="/493/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.495877][T10770] support for cryptoloop has been removed. Use dm-crypt instead. [ 179.565755][ T28] audit: type=1400 audit(1781826423.121:1158): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.598809][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.608929][ T28] audit: type=1400 audit(1781826423.151:1159): avc: denied { write } for pid=3294 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.632070][ T28] audit: type=1400 audit(1781826423.151:1160): avc: denied { write } for pid=3294 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.655186][ T28] audit: type=1400 audit(1781826423.151:1161): avc: denied { unlink } for pid=3294 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 179.903840][T10801] policy can only be matched on NF_INET_PRE_ROUTING [ 179.903857][T10801] unable to load match [ 180.157405][T10814] 9p: Could not find request transport: fd0x0000000000000003 [ 180.245681][T10824] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2571'. [ 180.821104][T10835] loop3: detected capacity change from 0 to 512 [ 180.899467][T10835] EXT4-fs: Ignoring removed orlov option [ 180.990426][T10845] pim6reg: entered allmulticast mode [ 181.014153][T10845] pim6reg: left allmulticast mode [ 181.018536][T10835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.049475][T10835] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.098352][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.231719][T10857] loop3: detected capacity change from 0 to 256 [ 181.264834][T10857] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.283322][T10859] loop4: detected capacity change from 0 to 512 [ 181.306437][T10859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 181.357098][T10859] System zones: 1-12 [ 181.361548][T10859] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2587: error while reading EA inode 32 err=-116 [ 181.373971][T10859] loop4: lost filesystem error report for type 5 error -117 [ 181.385400][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 181.393057][T10859] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2587: error while reading EA inode 32 err=-116 [ 181.399247][ C1] EXT4-fs (loop4): initial error at time 1781826424: ext4_xattr_inode_iget:446 [ 181.399279][ C1] EXT4-fs (loop4): last error at time 1781826424: ext4_xattr_inode_iget:446 [ 181.475915][T10859] loop4: lost filesystem error report for type 5 error -117 [ 181.476223][T10859] EXT4-fs (loop4): 1 orphan inode deleted [ 181.507599][T10859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.547188][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2587'. [ 181.589538][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.701941][T10880] loop4: detected capacity change from 0 to 128 [ 181.950038][T10886] loop3: detected capacity change from 0 to 256 [ 181.971865][T10886] futex_wake_op: syz.3.2599 tries to shift op by 35; fix this program [ 182.258870][ T3395] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 182.269685][ T3395] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.397405][T10901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2605'. [ 182.542172][T10912] loop4: detected capacity change from 0 to 256 [ 182.568312][T10912] FAT-fs (loop4): Directory bread(block 64) failed [ 182.583956][T10912] FAT-fs (loop4): Directory bread(block 65) failed [ 182.598785][T10912] FAT-fs (loop4): Directory bread(block 66) failed [ 182.614290][T10912] FAT-fs (loop4): Directory bread(block 67) failed [ 182.632632][T10912] FAT-fs (loop4): Directory bread(block 68) failed [ 182.647008][T10912] FAT-fs (loop4): Directory bread(block 69) failed [ 182.665803][T10912] FAT-fs (loop4): Directory bread(block 70) failed [ 182.676956][T10912] FAT-fs (loop4): Directory bread(block 71) failed [ 182.694044][T10912] FAT-fs (loop4): Directory bread(block 72) failed [ 182.708337][T10912] FAT-fs (loop4): Directory bread(block 73) failed [ 182.760600][T10912] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 182.780614][T10912] FAT-fs (loop4): Filesystem has been set read-only [ 182.793557][T10912] bio_check_eod: 102 callbacks suppressed [ 182.793575][T10912] syz.4.2610: attempt to access beyond end of device [ 182.793575][T10912] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 182.832819][T10912] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 182.852324][T10912] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 183.109646][T10932] loop8: detected capacity change from 0 to 512 [ 183.142073][T10932] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 183.171645][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 183.171662][ T28] audit: type=1400 audit(1781826426.731:1171): avc: denied { map } for pid=10937 comm="syz.4.2621" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 183.214138][T10932] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 183.247697][T10940] netlink: 'syz.4.2622': attribute type 29 has an invalid length. [ 183.257751][T10932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 183.307535][T10932] System zones: 1-12 [ 183.322911][T10932] EXT4-fs (loop8): orphan cleanup on readonly fs [ 183.353893][T10932] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.2617: Block bitmap for bg 0 marked uninitialized [ 183.402838][T10932] loop8: lost filesystem error report for type 5 error -117 [ 183.405415][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 183.419210][ C1] EXT4-fs (loop8): initial error at time 1781826426: ext4_read_block_bitmap_nowait:517 [ 183.428881][ C1] EXT4-fs (loop8): last error at time 1781826426: ext4_read_block_bitmap_nowait:517 [ 183.455209][T10932] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.2617: Block bitmap for bg 0 marked uninitialized [ 183.475530][T10932] loop8: lost filesystem error report for type 5 error -117 [ 183.476448][T10932] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.2617: Block bitmap for bg 0 marked uninitialized [ 183.509223][T10932] loop8: lost filesystem error report for type 5 error -117 [ 183.521310][T10932] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.2617: Block bitmap for bg 0 marked uninitialized [ 183.547089][T10932] loop8: lost filesystem error report for type 5 error -117 [ 183.547832][T10932] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.2617: Block bitmap for bg 0 marked uninitialized [ 183.619211][T10952] syzkaller1: entered promiscuous mode [ 183.629449][T10952] syzkaller1: entered allmulticast mode [ 183.659119][T10932] loop8: lost filesystem error report for type 5 error -117 [ 183.659880][T10932] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.2617: Block bitmap for bg 0 marked uninitialized [ 183.742767][T10932] loop8: lost filesystem error report for type 5 error -117 [ 183.743578][T10932] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 183.810680][T10932] EXT4-fs (loop8): 1 truncate cleaned up [ 183.828107][T10959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2629'. [ 183.832764][T10932] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.215867][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.267078][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2635'. [ 184.288569][T10975] netlink: 'syz.5.2635': attribute type 12 has an invalid length. [ 184.304224][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2635'. [ 184.313786][T10975] netlink: 'syz.5.2635': attribute type 12 has an invalid length. [ 184.388834][T10982] loop4: detected capacity change from 0 to 512 [ 184.406892][T10982] EXT4-fs: test_dummy_encryption option not supported [ 184.513967][T10988] 9p: Could not find request transport: fd0xffffffffffffffff [ 184.613522][T11002] netlink: 'syz.4.2647': attribute type 4 has an invalid length. [ 184.648874][T11002] netlink: 'syz.4.2647': attribute type 4 has an invalid length. [ 184.870294][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2657'. [ 184.892704][T11024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2657'. [ 185.267542][ T28] audit: type=1400 audit(1781826428.831:1172): avc: denied { lock } for pid=11053 comm="syz.3.2668" path="socket:[30346]" dev="sockfs" ino=30346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 185.343146][ T28] audit: type=1400 audit(1781826428.901:1173): avc: denied { shutdown } for pid=11061 comm="syz.8.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.598940][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2673'. [ 185.623277][T11069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11069 comm=syz.8.2674 [ 185.636531][T11069] netlink: 'syz.8.2674': attribute type 1 has an invalid length. [ 185.856870][T11089] mmap: syz.4.2680 (11089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.322349][T11107] loop3: detected capacity change from 0 to 1024 [ 186.357390][T11107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.393435][ T28] audit: type=1400 audit(1781826429.951:1174): avc: denied { write } for pid=11105 comm="syz.3.2690" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.661079][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.867278][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.888334][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.324106][ T12] bond0: (slave netdevsim2): Releasing backup interface [ 187.350916][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.376778][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.459788][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.475317][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.546375][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.560562][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.701325][T11181] loop8: detected capacity change from 0 to 128 [ 187.761975][T11181] FAT-fs (loop8): Directory bread(block 162) failed [ 187.782032][T11181] FAT-fs (loop8): Directory bread(block 163) failed [ 187.788764][T11181] FAT-fs (loop8): Directory bread(block 164) failed [ 187.795558][T11181] FAT-fs (loop8): Directory bread(block 165) failed [ 187.802247][T11181] FAT-fs (loop8): Directory bread(block 166) failed [ 187.808999][T11181] FAT-fs (loop8): Directory bread(block 167) failed [ 187.815865][T11181] FAT-fs (loop8): Directory bread(block 168) failed [ 187.822611][T11181] FAT-fs (loop8): Directory bread(block 169) failed [ 187.829393][T11181] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.840297][ T12] bridge_slave_1: left allmulticast mode [ 187.846382][ T12] bridge_slave_1: left promiscuous mode [ 187.848784][T11181] FAT-fs (loop8): Directory bread(block 162) failed [ 187.859974][T11181] FAT-fs (loop8): Directory bread(block 163) failed [ 187.860908][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.868820][T11181] syz.8.2717: attempt to access beyond end of device [ 187.868820][T11181] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 187.888355][T11181] syz.8.2717: attempt to access beyond end of device [ 187.888355][T11181] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 187.905150][ T12] bridge_slave_0: left allmulticast mode [ 187.911635][ T12] bridge_slave_0: left promiscuous mode [ 187.925125][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.037007][ T12] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 188.045137][ T12] ip6gre1 (unregistering): left promiscuous mode [ 188.079605][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.089750][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.100379][ T12] bond0 (unregistering): Released all slaves [ 188.109282][ T12] bond1 (unregistering): (slave lo): Releasing backup interface [ 188.117526][ T12] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 188.129367][ T12] bond1 (unregistering): Released all slaves [ 188.139357][ T12] bond2 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 188.149545][ T12] bond2 (unregistering): Released all slaves [ 188.159544][ T12] bond3 (unregistering): Released all slaves [ 188.215880][ T28] audit: type=1400 audit(1781826431.771:1175): avc: denied { map } for pid=11205 comm="syz.6.2723" path="socket:[30702]" dev="sockfs" ino=30702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 188.257344][T11147] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.264743][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.272246][T11147] bridge_slave_0: entered allmulticast mode [ 188.278846][T11147] bridge_slave_0: entered promiscuous mode [ 188.286043][T11147] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.293258][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.300777][T11147] bridge_slave_1: entered allmulticast mode [ 188.311862][T11147] bridge_slave_1: entered promiscuous mode [ 188.366895][T11147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.391298][ T12] hsr_slave_0: left promiscuous mode [ 188.397618][ T12] hsr_slave_1: left promiscuous mode [ 188.403894][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.411590][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.420805][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.428619][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.439370][ T12] veth1_macvtap: left promiscuous mode [ 188.444956][ T12] veth0_macvtap: left promiscuous mode [ 188.451000][ T12] veth1_vlan: left promiscuous mode [ 188.456470][ T12] veth0_vlan: left promiscuous mode [ 188.481440][ T28] audit: type=1400 audit(1781826432.041:1176): avc: denied { write } for pid=11210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.527462][ T28] audit: type=1400 audit(1781826432.091:1177): avc: denied { write } for pid=11226 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.596332][ T12] team0 (unregistering): Port device team_slave_1 removed [ 188.608299][ T12] team0 (unregistering): Port device team_slave_0 removed [ 188.654879][T11147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.671072][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13 [ 188.697322][T11147] team0: Port device team_slave_0 added [ 188.717089][T11147] team0: Port device team_slave_1 added [ 188.743700][T11147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.751790][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.780417][T11147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.794275][T11147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.801703][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.829860][T11147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.911638][T11147] hsr_slave_0: entered promiscuous mode [ 188.951139][T11147] hsr_slave_1: entered promiscuous mode [ 188.966139][T11147] debugfs: 'hsr0' already exists in 'hsr' [ 188.979086][T11147] Cannot create hsr debugfs directory [ 189.044460][ T28] audit: type=1400 audit(1781826432.601:1178): avc: denied { write } for pid=11240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.110799][ T28] audit: type=1400 audit(1781826432.671:1179): avc: denied { write } for pid=11258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.164092][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 189.233832][T11147] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 189.268750][ T28] audit: type=1326 audit(1781826432.821:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.3.2733" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45acce59 code=0x7fc00000 [ 189.301003][T11147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.316189][T11147] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 189.344511][T11147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.373167][T11147] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 189.394124][T11147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.422085][T11147] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 189.436587][T11147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.557471][T11147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.573924][T11147] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.588901][ T3767] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.596037][ T3767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.604122][ T28] audit: type=1400 audit(1781826433.161:1181): avc: denied { write } for pid=11275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.641209][ T4540] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.648447][ T4540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.720560][ T28] audit: type=1400 audit(1781826433.261:1182): avc: denied { write } for pid=11312 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.773907][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 189.781466][T11319] loop4: detected capacity change from 0 to 1024 [ 189.798207][T11319] EXT4-fs: Ignoring removed oldalloc option [ 189.812072][T11319] EXT4-fs: Ignoring removed oldalloc option [ 189.823806][T11319] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 189.849012][T11319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.903395][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.930521][ T28] audit: type=1326 audit(1781826433.481:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11256 comm="syz.3.2733" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4c45a6e1d9 code=0x7fc00000 [ 190.048467][T11348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2751'. [ 190.058672][T11147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.077666][T11348] netlink: 'syz.4.2751': attribute type 39 has an invalid length. [ 190.105504][ T28] audit: type=1400 audit(1781826433.661:1184): avc: denied { write } for pid=11332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.241025][ T3017] 8021q: adding VLAN 0 to HW filter on device eth16 [ 190.452406][T11147] veth0_vlan: entered promiscuous mode [ 190.486156][T11147] veth1_vlan: entered promiscuous mode [ 190.494981][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2756'. [ 190.518301][T11147] veth0_macvtap: entered promiscuous mode [ 190.539239][T11147] veth1_macvtap: entered promiscuous mode [ 190.587525][T11147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.601216][T11147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.641869][ T3765] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.652694][ T3765] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.024772][T11410] loop8: detected capacity change from 0 to 128 [ 191.086473][ T3765] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.095542][ T3765] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.221041][T11415] netlink: 'syz.8.2767': attribute type 15 has an invalid length. [ 191.229481][T11415] netlink: 'syz.8.2767': attribute type 7 has an invalid length. [ 191.238938][T11415] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2767'. [ 191.498974][T11437] loop4: detected capacity change from 0 to 512 [ 191.512624][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2778'. [ 191.532993][T11437] EXT4-fs: Ignoring removed nobh option [ 191.571364][T11437] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 191.611706][T11437] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.2776: inode has both inline data and extents flags [ 191.666394][T11437] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 191.668119][T11437] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2776: couldn't read orphan inode 13 (err -117) [ 191.677334][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 191.677356][ C1] EXT4-fs (loop4): initial error at time 1781826435: ext4_orphan_get:1399: inode 13 [ 191.677388][ C1] EXT4-fs (loop4): last error at time 1781826435: ext4_orphan_get:1399: inode 13 [ 191.722119][T11437] loop4: lost filesystem error report for type 5 error -117 [ 191.742564][T11437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.827463][T11437] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 191.858852][T11437] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 192.026173][T11458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2785'. [ 192.725628][T11443] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 193.687348][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.753118][T11462] syzkaller0: entered promiscuous mode [ 193.776452][T11462] syzkaller0: entered allmulticast mode [ 193.972499][T11469] loop4: detected capacity change from 0 to 1024 [ 194.017301][T11469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.077156][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 194.077173][ T28] audit: type=1400 audit(1781826437.631:1186): avc: denied { write } for pid=11468 comm="syz.4.2784" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.127904][T11469] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.2784: Attempting to read directory block (623) that is past i_size (638464) [ 194.151085][ T28] audit: type=1400 audit(1781826437.631:1187): avc: denied { write } for pid=11468 comm="syz.4.2784" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.190550][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.264026][T11495] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 194.276408][T11493] loop9: detected capacity change from 0 to 2048 [ 194.288196][T11495] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 194.309495][T11493] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.331584][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2801'. [ 194.342016][ T28] audit: type=1400 audit(1781826437.881:1188): avc: denied { write } for pid=11491 comm="syz.9.2796" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.382745][T11503] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2801'. [ 194.575813][ T4351] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.588107][ T4351] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.650375][T11524] loop3: detected capacity change from 0 to 4096 [ 194.666710][T11524] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 194.679766][T11515] loop8: detected capacity change from 0 to 1024 [ 194.728223][T11515] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.770770][ T28] audit: type=1400 audit(1781826438.321:1189): avc: denied { write } for pid=11513 comm="syz.8.2806" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.771648][T11515] EXT4-fs error (device loop8): ext4_empty_dir:3114: inode #11: block 623: comm syz.8.2806: Attempting to read directory block (623) that is past i_size (638464) [ 194.817183][ T28] audit: type=1400 audit(1781826438.321:1190): avc: denied { write } for pid=11513 comm="syz.8.2806" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.895130][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.194099][T11556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.214755][T11556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.248843][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2825'. [ 195.275500][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2825'. [ 195.312608][ T12] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 195.327267][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 754 with error 28 [ 195.339984][ T12] EXT4-fs (loop9): This should not happen!! Data will be lost [ 195.339984][ T12] [ 195.351337][ T12] EXT4-fs (loop9): Total free blocks count 0 [ 195.360463][ T12] EXT4-fs (loop9): Free/Dirty block details [ 195.367408][ T12] EXT4-fs (loop9): free_blocks=4096 [ 195.372798][ T12] EXT4-fs (loop9): dirty_blocks=784 [ 195.380979][ T12] EXT4-fs (loop9): Block reservation details [ 195.387705][ T12] EXT4-fs (loop9): i_reserved_data_blocks=49 [ 195.404410][ T12] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 195.430933][T11147] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 195.453845][T11565] loop3: detected capacity change from 0 to 1024 [ 195.461971][T11565] EXT4-fs: Ignoring removed bh option [ 195.487694][T11565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.489140][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2827'. [ 195.507274][ T28] audit: type=1400 audit(1781826439.061:1191): avc: denied { write } for pid=11564 comm="syz.3.2829" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.543172][T11565] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 195.614510][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.649488][T11578] syzkaller1: entered promiscuous mode [ 195.665056][T11578] syzkaller1: entered allmulticast mode [ 195.748347][T11586] gretap2: entered promiscuous mode [ 195.863095][T11598] loop3: detected capacity change from 0 to 512 [ 195.874236][T11601] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 195.885898][ T28] audit: type=1400 audit(1781826439.451:1192): avc: denied { bind } for pid=11593 comm="syz.4.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.888694][T11598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.907263][T11600] IPVS: stopping master sync thread 11601 ... [ 195.924512][ T28] audit: type=1400 audit(1781826439.471:1193): avc: denied { getopt } for pid=11599 comm="syz.9.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 195.947964][T11598] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.997574][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.072388][T11617] loop4: detected capacity change from 0 to 512 [ 196.079463][T11617] EXT4-fs: Ignoring removed orlov option [ 196.090590][T11617] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.107796][T11617] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2849: corrupted in-inode xattr: e_value size too large [ 196.122121][T11617] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.122285][T11617] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2849: couldn't read orphan inode 15 (err -117) [ 196.131496][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 196.131520][ C1] EXT4-fs (loop4): initial error at time 1781826439: ext4_iget_extra_inode:5180: inode 15 [ 196.131563][ C1] EXT4-fs (loop4): last error at time 1781826439: ext4_iget_extra_inode:5180: inode 15 [ 196.170096][T11617] loop4: lost filesystem error report for type 5 error -117 [ 196.173965][T11617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.214713][ T28] audit: type=1400 audit(1781826439.771:1194): avc: denied { write } for pid=11616 comm="syz.4.2849" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.251782][ T28] audit: type=1400 audit(1781826439.801:1195): avc: denied { write } for pid=11616 comm="syz.4.2849" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.280325][T11627] loop9: detected capacity change from 0 to 512 [ 196.299833][T11627] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.304078][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.351577][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2856'. [ 196.364717][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.374364][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2856'. [ 196.625579][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2866'. [ 196.815048][T11661] netlink: 'syz.4.2868': attribute type 5 has an invalid length. [ 197.309394][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.323348][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.699634][T11678] loop9: detected capacity change from 0 to 512 [ 197.706395][T11678] EXT4-fs: Ignoring removed orlov option [ 197.712163][T11678] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.736948][T11678] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.2876: corrupted in-inode xattr: e_value size too large [ 197.752919][T11678] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.753154][T11678] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2876: couldn't read orphan inode 15 (err -117) [ 197.762398][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 197.762419][ C0] EXT4-fs (loop9): initial error at time 1781826441: ext4_iget_extra_inode:5180: inode 15 [ 197.762451][ C0] EXT4-fs (loop9): last error at time 1781826441: ext4_iget_extra_inode:5180: inode 15 [ 197.800494][T11678] loop9: lost filesystem error report for type 5 error -117 [ 197.802411][T11678] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.838916][T11678] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #2: block 12: comm syz.9.2876: lblock 3 mapped to illegal pblock 12 (length 1) [ 197.910869][T11686] loop8: detected capacity change from 0 to 1024 [ 197.919727][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.928419][T11686] EXT4-fs: inline encryption not supported [ 197.941197][T11686] EXT4-fs: Ignoring removed bh option [ 197.947889][T11686] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 197.994662][T11686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.050637][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.102951][T11700] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2884'. [ 199.204910][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2905'. [ 199.465768][T11777] loop4: detected capacity change from 0 to 512 [ 199.505546][T11777] EXT4-fs: inline encryption not supported [ 199.535904][T11777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.564649][T11777] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.608638][T11777] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 199.623635][T11777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2914: bg 0: block 248: padding at end of block bitmap is not set [ 199.646036][T11777] loop4: lost filesystem error report for type 5 error -117 [ 199.646286][T11777] __quota_error: 50 callbacks suppressed [ 199.646303][T11777] Quota error (device loop4): write_blk: dquota write failed [ 199.659397][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 199.659413][ C1] EXT4-fs (loop4): last error at time 1781826443: ext4_validate_block_bitmap:441 [ 199.667681][T11794] loop9: detected capacity change from 0 to 1024 [ 199.694069][T11777] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 199.704566][T11777] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.2914: Failed to acquire dquot type 1 [ 199.716765][T11777] loop4: lost filesystem error report for type 5 error -28 [ 199.721427][T11777] EXT4-fs (loop4): 1 truncate cleaned up [ 199.735308][T11777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 199.751916][T11794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.770291][ T28] audit: type=1400 audit(1781826443.331:1246): avc: denied { write } for pid=11792 comm="syz.9.2924" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.803582][T11794] EXT4-fs error (device loop9): ext4_empty_dir:3114: inode #11: block 623: comm syz.9.2924: Attempting to read directory block (623) that is past i_size (638464) [ 199.826877][ T28] audit: type=1400 audit(1781826443.331:1247): avc: denied { write } for pid=11792 comm="syz.9.2924" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.858378][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.923110][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 200.146875][T11828] netlink: 'syz.6.2936': attribute type 10 has an invalid length. [ 200.262986][T11850] loop4: detected capacity change from 0 to 1024 [ 200.292106][T11850] EXT4-fs: inline encryption not supported [ 200.301759][ T28] audit: type=1326 audit(1781826443.861:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11857 comm="syz.8.2952" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f2a35ce59 code=0x0 [ 200.319037][T11850] EXT4-fs: Ignoring removed bh option [ 200.367718][T11850] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 200.378774][ T28] audit: type=1400 audit(1781826443.931:1249): avc: denied { write } for pid=11835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.418239][T11843] loop3: detected capacity change from 0 to 1024 [ 200.457995][T11850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.477847][T11843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.509415][ T28] audit: type=1400 audit(1781826444.061:1250): avc: denied { write } for pid=11872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.536358][ T28] audit: type=1400 audit(1781826444.071:1251): avc: denied { write } for pid=11849 comm="syz.4.2941" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.559391][ T28] audit: type=1400 audit(1781826444.091:1252): avc: denied { write } for pid=11840 comm="syz.3.2938" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.583247][ T28] audit: type=1400 audit(1781826444.091:1253): avc: denied { write } for pid=11840 comm="syz.3.2938" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.612895][T11883] tipc: Started in network mode [ 200.619983][T11843] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 623: comm syz.3.2938: Attempting to read directory block (623) that is past i_size (638464) [ 200.631665][T11883] tipc: Node identity ac14140f, cluster identity 4711 [ 200.663831][T11883] tipc: Enabled bearer , priority 10 [ 200.674395][T11888] loop9: detected capacity change from 0 to 512 [ 200.683425][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.697360][T11888] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.711719][T11888] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.725876][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.932368][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.953801][T11925] loop3: detected capacity change from 0 to 1024 [ 200.967431][T11925] EXT4-fs: Ignoring removed bh option [ 201.009752][T11925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.152947][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.220364][T11932] loop8: detected capacity change from 0 to 1024 [ 201.252782][T11932] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.303786][T11932] EXT4-fs error (device loop8): ext4_empty_dir:3114: inode #11: block 623: comm syz.8.2962: Attempting to read directory block (623) that is past i_size (638464) [ 201.429268][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.644322][T11956] loop3: detected capacity change from 0 to 1024 [ 201.657652][T11956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.723994][ T35] tipc: Node number set to 2886997007 [ 201.923043][T11979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.967809][T11979] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.2975: Attempting to read directory block (623) that is past i_size (638464) [ 202.085967][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.098902][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.189794][T12001] EXT4-fs: Ignoring removed bh option [ 202.219856][T12001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.251370][T12001] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.2978: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 202.307163][T12015] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.2978: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 202.404434][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.502193][T12030] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2984'. [ 202.534017][T12033] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2987'. [ 202.878977][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3002'. [ 202.901506][T12069] set_capacity_and_notify: 2 callbacks suppressed [ 202.901622][T12069] loop4: detected capacity change from 0 to 1024 [ 202.906352][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3002'. [ 202.924302][ T3779] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.939717][ T3779] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.957399][ T3779] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.970909][T12069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.002888][ T3779] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.023319][T12069] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.3000: Attempting to read directory block (623) that is past i_size (638464) [ 203.050766][T12077] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 203.104479][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.124870][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3006'. [ 203.184915][T12080] loop9: detected capacity change from 0 to 8192 [ 203.193284][T12084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3005'. [ 203.208173][T12080] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.226241][T12080] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 203.235527][T12080] FAT-fs (loop9): Filesystem has been set read-only [ 203.242291][T12080] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 203.256064][T12080] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 203.270595][T12080] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 203.297587][T12080] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 203.311084][T12092] netlink: 'syz.6.3008': attribute type 5 has an invalid length. [ 203.611273][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3016'. [ 203.709292][T12118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3019'. [ 204.214162][T12141] loop8: detected capacity change from 0 to 512 [ 204.260212][T12141] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 204.293451][T12144] netlink: 'syz.9.3030': attribute type 1 has an invalid length. [ 204.318366][T12144] netlink: 'syz.9.3030': attribute type 4 has an invalid length. [ 204.334184][T12144] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.3030'. [ 204.355467][T12141] EXT4-fs (loop8): 1 truncate cleaned up [ 204.364071][T12141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.411349][T12147] loop9: detected capacity change from 0 to 1024 [ 204.422751][T12147] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 204.465701][T12147] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.532071][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.010424][T12138] syz.8.3029 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 205.026096][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.8.3029 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 205.026143][T12138] Tainted: [W]=WARN [ 205.026152][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 205.026255][T12138] Call Trace: [ 205.026262][T12138] [ 205.026270][T12138] __dump_stack+0x1d/0x30 [ 205.026294][T12138] dump_stack_lvl+0x95/0xd0 [ 205.026399][T12138] dump_stack+0x15/0x1b [ 205.026423][T12138] dump_header+0x80/0x240 [ 205.026448][T12138] oom_kill_process+0x295/0x350 [ 205.026512][T12138] out_of_memory+0x981/0xbc0 [ 205.026543][T12138] try_charge_memcg+0x621/0xa00 [ 205.026576][T12138] ? submit_bio_noacct_nocheck+0x54f/0x620 [ 205.026759][T12138] charge_memcg+0x6d/0x120 [ 205.026795][T12138] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 205.026835][T12138] __swap_cache_prepare_and_add+0x69/0x490 [ 205.026867][T12138] ? alloc_pages_mpol+0xd9/0x1d0 [ 205.026924][T12138] swap_cache_alloc_folio+0xa2/0x120 [ 205.026959][T12138] swap_cluster_readahead+0x25f/0x3c0 [ 205.027149][T12138] swapin_readahead+0xde/0x840 [ 205.027182][T12138] ? _raw_spin_unlock+0x9/0x30 [ 205.027217][T12138] ? swap_put_entries_cluster+0x44a/0x470 [ 205.027300][T12138] ? __rcu_read_unlock+0x4e/0x70 [ 205.027332][T12138] ? swap_cache_get_folio+0x1e0/0x1f0 [ 205.027365][T12138] do_swap_page+0x34d/0x2150 [ 205.027425][T12138] ? __css_rstat_updated+0xbb/0x280 [ 205.027452][T12138] ? __rcu_read_lock+0x36/0x50 [ 205.027483][T12138] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 205.027515][T12138] handle_mm_fault+0xb3c/0x2da0 [ 205.027612][T12138] do_user_addr_fault+0x634/0x1060 [ 205.027644][T12138] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 205.027670][T12138] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 205.027843][T12138] ? trace_page_fault_user+0x1f/0xa0 [ 205.027882][T12138] exc_page_fault+0x62/0xa0 [ 205.027912][T12138] asm_exc_page_fault+0x26/0x30 [ 205.027932][T12138] RIP: 0033:0x7f2f2a317f83 [ 205.028004][T12138] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 205.028029][T12138] RSP: 002b:00007fff40b32770 EFLAGS: 00010246 [ 205.028049][T12138] RAX: 0000000000000000 RBX: 000055556cb6f500 RCX: 0000000000000000 [ 205.028065][T12138] RDX: 00007fff40b327b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.028081][T12138] RBP: 00007f2f2a5d7da0 R08: 0000000000000000 R09: 0000000000000000 [ 205.028098][T12138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000032096 [ 205.028116][T12138] R13: 00007f2f2a5d609c R14: 0000000000031f17 R15: 00007f2f2a5d6090 [ 205.028218][T12138] [ 205.028281][T12138] memory: usage 307200kB, limit 307200kB, failcnt 516 [ 205.297464][T12138] memory+swap: usage 307704kB, limit 9007199254740988kB, failcnt 0 [ 205.305713][T12138] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 205.313116][T12138] Memory cgroup stats for /syz8: [ 205.313446][T12138] cache 12288 [ 205.322127][T12138] rss 4096 [ 205.325302][T12138] shmem 4096 [ 205.328843][T12138] mapped_file 0 [ 205.332452][T12138] dirty 0 [ 205.335723][T12138] writeback 16384 [ 205.339424][T12138] workingset_refault_anon 57 [ 205.344244][T12138] workingset_refault_file 0 [ 205.349065][T12138] swap 516096 [ 205.352571][T12138] swapcached 790528 [ 205.356706][T12138] pgpgin 15323 [ 205.360168][T12138] pgpgout 15310 [ 205.363705][T12138] pgfault 21943 [ 205.367657][T12138] pgmajfault 11 [ 205.371278][T12138] inactive_anon 40960 [ 205.375326][T12138] active_anon 0 [ 205.379282][T12138] inactive_file 0 [ 205.383032][T12138] active_file 8192 [ 205.387126][T12138] unevictable 0 [ 205.390747][T12138] hierarchical_memory_limit 314572800 [ 205.396544][T12138] hierarchical_memsw_limit 9223372036854771712 [ 205.402860][T12138] total_cache 12288 [ 205.406964][T12138] total_rss 4096 [ 205.410625][T12138] total_shmem 4096 [ 205.414545][T12138] total_mapped_file 0 [ 205.418914][T12138] total_dirty 0 [ 205.422453][T12138] total_writeback 16384 [ 205.427035][T12138] total_workingset_refault_anon 57 [ 205.432238][T12138] total_workingset_refault_file 0 [ 205.437594][T12138] total_swap 516096 [ 205.441518][T12138] total_swapcached 790528 [ 205.446350][T12138] total_pgpgin 15323 [ 205.450549][T12138] total_pgpgout 15310 [ 205.454595][T12138] total_pgfault 21943 [ 205.458938][T12138] total_pgmajfault 11 [ 205.463075][T12138] total_inactive_anon 40960 [ 205.467922][T12138] total_active_anon 0 [ 205.471994][T12138] total_inactive_file 0 [ 205.476445][T12138] total_active_file 8192 [ 205.480745][T12138] total_unevictable 0 [ 205.484853][T12138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3029,pid=12138,uid=0 [ 205.500273][T12138] Memory cgroup out of memory: Killed process 12138 (syz.8.3029) total-vm:96216kB, anon-rss:1232kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 205.600514][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.659684][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3043'. [ 205.803739][T12183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.854375][T12185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.509409][T12194] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 206.662817][T12207] loop3: detected capacity change from 0 to 512 [ 206.677461][T12205] loop8: detected capacity change from 0 to 512 [ 206.684858][T12205] EXT4-fs error (device loop8): ext4_get_journal_inode:5900: comm syz.8.3055: inode #2147418112: comm syz.8.3055: iget: illegal inode # [ 206.699627][T12205] loop8: lost filesystem error report for type 5 error -117 [ 206.699724][T12205] EXT4-fs (loop8): no journal found [ 206.707076][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 206.707099][ C1] EXT4-fs (loop8): initial error at time 1781826450: ext4_get_journal_inode:5900 [ 206.707130][ C1] EXT4-fs (loop8): last error at time 1781826450: ext4_get_journal_inode:5900 [ 206.725994][ T3356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.728801][T12205] EXT4-fs (loop8): can't get journal size [ 206.752250][T12205] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 206.765508][T12205] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 206.774162][T12205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.021472][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.177776][T12233] loop9: detected capacity change from 0 to 512 [ 207.203093][T12233] EXT4-fs (loop9): 1 truncate cleaned up [ 207.209739][T12233] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.242132][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.757532][T12280] ipip0: entered promiscuous mode [ 207.766425][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.862139][T12286] loop3: detected capacity change from 0 to 4096 [ 207.881569][T12286] EXT4-fs: Ignoring removed orlov option [ 207.890867][T12286] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.906438][T12286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.923610][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 207.923682][ T28] audit: type=1400 audit(1781826451.481:1279): avc: denied { write } for pid=12285 comm="syz.3.3091" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.003329][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.117141][T12295] loop4: detected capacity change from 0 to 512 [ 208.137636][T12295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.189123][ T28] audit: type=1400 audit(1781826451.751:1280): avc: denied { write } for pid=12294 comm="syz.4.3095" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.298148][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.325665][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.370460][T12307] loop8: detected capacity change from 0 to 1024 [ 208.801007][T12324] loop9: detected capacity change from 0 to 512 [ 208.809625][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.855789][T12324] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.114638][ T28] audit: type=1326 audit(1781826452.671:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.8.3114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2a35ce59 code=0x7ffc0000 [ 209.149124][T12343] loop8: detected capacity change from 0 to 1024 [ 209.159787][ T28] audit: type=1326 audit(1781826452.671:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.8.3114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f2f2a35ce59 code=0x7ffc0000 [ 209.168613][T12343] EXT4-fs: Ignoring removed orlov option [ 209.191268][T12346] loop4: detected capacity change from 0 to 256 [ 209.192432][ T28] audit: type=1326 audit(1781826452.671:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.8.3114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2a35ce59 code=0x7ffc0000 [ 209.226365][ T28] audit: type=1326 audit(1781826452.671:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.8.3114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f2a35ce59 code=0x7ffc0000 [ 209.254984][ T28] audit: type=1326 audit(1781826452.671:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.8.3114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2a35ce59 code=0x7ffc0000 [ 209.281166][ T28] audit: type=1326 audit(1781826452.671:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.8.3114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2f2a35ce59 code=0x7ffc0000 [ 209.307592][ T28] audit: type=1326 audit(1781826452.671:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.8.3114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2f2a35cbc2 code=0x7ffc0000 [ 209.334308][ T28] audit: type=1326 audit(1781826452.671:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12342 comm="syz.8.3114" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2f2a31d68e code=0x7ffc0000 [ 209.368126][T12343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.618183][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.720107][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.804635][T12367] __nla_validate_parse: 2 callbacks suppressed [ 209.804655][T12367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3124'. [ 209.823796][T12369] loop9: detected capacity change from 0 to 512 [ 209.836108][ T3374] IPVS: starting estimator thread 0... [ 209.845678][ T3356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.862993][T12369] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 209.877016][T12367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3124'. [ 209.913898][T12376] loop3: detected capacity change from 0 to 1024 [ 209.933677][T12376] EXT4-fs: Ignoring removed oldalloc option [ 209.940361][T12376] EXT4-fs: Ignoring removed oldalloc option [ 209.950850][T12376] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 209.959180][T12373] IPVS: using max 2256 ests per chain, 112800 per kthread [ 209.964713][T12369] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.3125: Unimplemented hash flags: 0x0001 [ 209.979523][T12369] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.3125: Corrupt directory, running e2fsck is recommended [ 209.992796][T12369] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 3: comm syz.9.3125: path /79/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 210.021358][T12376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.111623][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.410449][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.492125][T12408] loop3: detected capacity change from 0 to 8192 [ 210.514339][T12408] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.530919][T12408] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 210.548405][T12408] FAT-fs (loop3): Filesystem has been set read-only [ 210.561925][T12408] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 210.583752][T12408] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 211.319549][T12435] loop3: detected capacity change from 0 to 512 [ 211.547297][T12448] loop9: detected capacity change from 0 to 256 [ 211.560082][T12448] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.926771][ T3356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.258692][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.957478][T12509] bridge2: entered promiscuous mode [ 212.962860][T12509] bridge2: entered allmulticast mode [ 212.965933][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.392080][T12521] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 213.481120][T12540] netlink: 'syz.6.3196': attribute type 1 has an invalid length. [ 213.498716][T12538] loop9: detected capacity change from 0 to 1024 [ 213.507352][T12540] netlink: 'syz.6.3196': attribute type 4 has an invalid length. [ 213.517946][T12538] EXT4-fs: Ignoring removed oldalloc option [ 213.525546][T11459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.535620][T12540] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3196'. [ 213.545023][T12538] EXT4-fs: Ignoring removed oldalloc option [ 213.556197][T12538] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 213.584806][T12538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.629557][T12553] netlink: 27 bytes leftover after parsing attributes in process `syz.8.3201'. [ 213.663518][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.741710][T12572] raw_sendmsg: syz.8.3204 forgot to set AF_INET. Fix it! [ 213.749952][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3207'. [ 213.811180][T12579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.823099][T12575] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.835633][T12579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.844056][T12579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.853559][T12579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.861976][T12579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.870707][T12579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.909646][T12583] loop3: detected capacity change from 0 to 1024 [ 213.939752][T12583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 213.959749][T12583] ext4 filesystem being mounted at /613/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.983523][T12583] netlink: 'syz.3.3212': attribute type 1 has an invalid length. [ 214.011509][T12594] loop9: detected capacity change from 0 to 1024 [ 214.018611][T12594] EXT4-fs: Ignoring removed bh option [ 214.052827][T12594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.072397][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 214.085193][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 214.085224][ T28] audit: type=1400 audit(1781826457.641:1330): avc: denied { write } for pid=12593 comm="syz.9.3215" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.186584][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.291360][T12613] loop3: detected capacity change from 0 to 128 [ 214.305535][ T28] audit: type=1400 audit(1781826457.861:1331): avc: denied { write } for pid=12612 comm="syz.3.3223" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 214.459945][T12557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.594311][ T28] audit: type=1400 audit(1781826458.151:1332): avc: denied { mounton } for pid=12633 comm="syz.6.3232" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.746650][T12637] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 215.666643][T12743] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3245'. [ 215.696834][T12740] loop3: detected capacity change from 0 to 512 [ 215.715310][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3230'. [ 215.732903][T12740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.736735][ T28] audit: type=1400 audit(1781826459.301:1333): avc: denied { write } for pid=12739 comm="syz.3.3246" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.768819][T12630] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3230'. [ 215.891604][ T28] audit: type=1400 audit(1781826459.451:1334): avc: denied { accept } for pid=12754 comm="syz.6.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.108697][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.331635][T12781] SELinux: policydb version 0 does not match my version range 15-35 [ 216.352492][T12781] SELinux: failed to load policy [ 216.380414][ T28] audit: type=1400 audit(1781826459.921:1335): avc: denied { getattr } for pid=12782 comm="syz.6.3263" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=35699 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 216.568539][T12787] batadv1: entered promiscuous mode [ 216.575479][T12787] batadv1: entered allmulticast mode [ 216.723882][T12795] xt_hashlimit: size too large, truncated to 1048576 [ 216.767429][ T28] audit: type=1400 audit(1781826460.331:1336): avc: denied { setopt } for pid=12794 comm="syz.9.3269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 217.047231][T12813] loop3: detected capacity change from 0 to 128 [ 217.068382][T12814] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 217.128751][T12818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.165648][T12818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.178630][T12822] syzkaller1: entered promiscuous mode [ 217.184190][T12822] syzkaller1: entered allmulticast mode [ 217.216899][ T28] audit: type=1400 audit(1781826460.771:1337): avc: denied { read } for pid=12825 comm="syz.9.3282" laddr=::ffff:172.20.20.10 lport=42200 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 217.264526][ T28] audit: type=1400 audit(1781826460.821:1338): avc: denied { getattr } for pid=12825 comm="syz.9.3282" path="socket:[36779]" dev="sockfs" ino=36779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 217.302135][ T28] audit: type=1326 audit(1781826460.861:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12829 comm="syz.3.3283" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c45acce59 code=0x7ffc0000 [ 217.365326][T12834] loop9: detected capacity change from 0 to 128 [ 217.378168][T12834] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 217.415087][T12834] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.514290][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3290'. [ 217.538366][T11147] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.547360][T12846] bond6: entered promiscuous mode [ 217.547652][T12846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.572179][T12846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.579746][T12846] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 217.591481][T12846] bond6: (slave sit2): Error -95 calling set_mac_address [ 217.635971][T12849] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 217.815511][T12867] loop3: detected capacity change from 0 to 256 [ 217.867380][T12867] FAT-fs (loop3): codepage cp862 not found [ 217.908625][T12874] sctp: [Deprecated]: syz.4.3302 (pid 12874) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.908625][T12874] Use struct sctp_sack_info instead [ 217.970025][T12879] loop8: detected capacity change from 0 to 512 [ 218.000845][T12879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.190113][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.212569][T12887] netlink: 'syz.8.3307': attribute type 4 has an invalid length. [ 218.228785][ T3356] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 218.238069][ T3356] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.854023][T12912] loop4: detected capacity change from 0 to 512 [ 218.871049][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3315'. [ 218.880582][T12912] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.929878][T12912] EXT4-fs (loop4): 1 truncate cleaned up [ 218.943156][T12912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.998560][T12918] loop8: detected capacity change from 0 to 512 [ 219.038172][T12918] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.095537][T12918] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.109112][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 219.109125][ T28] audit: type=1400 audit(1781826462.671:1376): avc: denied { write } for pid=12915 comm="syz.8.3316" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.205683][T10627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.383582][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.535793][T12954] loop4: detected capacity change from 0 to 512 [ 220.550137][T12954] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.575456][T12954] EXT4-fs (loop4): 1 truncate cleaned up [ 220.581881][T12954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.607480][ T28] audit: type=1400 audit(1781826464.161:1377): avc: denied { write } for pid=12952 comm="syz.4.3331" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.703727][T12961] loop9: detected capacity change from 0 to 512 [ 220.714775][ T28] audit: type=1400 audit(1781826464.201:1378): avc: denied { write } for pid=12952 comm="syz.4.3331" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.767895][T12961] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.784292][T12960] net_ratelimit: 6 callbacks suppressed [ 220.784382][T12960] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 220.819168][ T28] audit: type=1400 audit(1781826464.211:1379): avc: denied { write } for pid=12952 comm="syz.4.3331" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.871025][ T28] audit: type=1400 audit(1781826464.211:1380): avc: denied { write } for pid=12952 comm="syz.4.3331" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.895226][ T28] audit: type=1400 audit(1781826464.221:1381): avc: denied { write } for pid=12952 comm="syz.4.3331" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.917301][ T28] audit: type=1400 audit(1781826464.431:1382): avc: denied { write } for pid=12959 comm="syz.9.3334" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.070138][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.126581][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.247757][T12970] loop9: detected capacity change from 0 to 512 [ 221.288958][T12970] EXT4-fs: Ignoring removed i_version option [ 221.312708][T12970] EXT4-fs: Ignoring removed nobh option [ 221.328144][T12970] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 221.352870][T12970] EXT4-fs (loop9): 1 truncate cleaned up [ 221.369495][T12970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.429636][ T28] audit: type=1400 audit(1781826464.991:1383): avc: denied { write } for pid=12969 comm="syz.9.3336" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.606287][T12985] syzkaller1: entered promiscuous mode [ 221.635497][T12985] syzkaller1: entered allmulticast mode [ 221.724090][T11147] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.852937][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3346'. [ 221.893573][T12995] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3346'. [ 221.904130][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3347'. [ 221.912914][T13005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3346'. [ 221.917841][T13003] netlink: 'syz.4.3347': attribute type 7 has an invalid length. [ 221.949062][T13003] netlink: 'syz.4.3347': attribute type 8 has an invalid length. [ 221.968461][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3347'. [ 221.978508][T12995] erspan0: entered promiscuous mode [ 221.995426][T13005] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3346'. [ 222.008244][T12995] gretap0: entered promiscuous mode [ 222.056585][T12995] debugfs: 'hsr1' already exists in 'hsr' [ 222.090924][T12995] Cannot create hsr debugfs directory [ 222.360097][T13010] ref_ctr_offset mismatch. inode: 0xd2a offset: 0x0 ref_ctr_offset(old): 0x400000000000000 ref_ctr_offset(new): 0x0 [ 222.480349][T13049] cgroup: No subsys list or none specified [ 222.569573][T13057] loop4: detected capacity change from 0 to 512 [ 222.602990][ T28] audit: type=1400 audit(1781826466.161:1384): avc: denied { write } for pid=13056 comm="syz.4.3354" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.666901][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3356'. [ 222.781134][T13094] netlink: 'syz.9.3357': attribute type 1 has an invalid length. [ 222.815148][T13091] team0: Port device team_slave_0 removed [ 222.859789][T13094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.874338][T13099] loop3: detected capacity change from 0 to 128 [ 222.884583][T13097] xt_hashlimit: size too large, truncated to 1048576 [ 222.924651][T13099] ext4 filesystem being mounted at /646/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.958434][T13101] bond1: (slave gretap1): making interface the new active one [ 222.971906][ T28] audit: type=1400 audit(1781826466.531:1385): avc: denied { write } for pid=13098 comm="syz.3.3359" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.998621][T13101] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 223.216682][T13128] SELinux: Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped). [ 223.326331][T13135] loop4: detected capacity change from 0 to 1024 [ 223.350343][T13135] EXT4-fs: Ignoring removed nobh option [ 223.369134][T13135] EXT4-fs: Ignoring removed i_version option [ 223.492415][T13135] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 223.559463][T13135] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 548 with error 28 [ 223.605455][T13135] EXT4-fs (loop4): This should not happen!! Data will be lost [ 223.605455][T13135] [ 223.615281][T13135] EXT4-fs (loop4): Total free blocks count 0 [ 223.651765][T13135] EXT4-fs (loop4): Free/Dirty block details [ 223.658354][T13135] EXT4-fs (loop4): free_blocks=20480 [ 223.671546][T13135] EXT4-fs (loop4): dirty_blocks=560 [ 223.677820][T13135] EXT4-fs (loop4): Block reservation details [ 223.686192][T13135] EXT4-fs (loop4): i_reserved_data_blocks=35 [ 223.815114][ T3761] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 548 with error 28 [ 223.828125][ T3761] EXT4-fs (loop4): This should not happen!! Data will be lost [ 223.828125][ T3761] [ 223.840910][ T3301] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 224.841431][T13181] loop4: detected capacity change from 0 to 128 [ 224.860999][T13181] ext4 filesystem being mounted at /660/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.897036][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 224.897053][ T28] audit: type=1400 audit(1781826468.451:1389): avc: denied { write } for pid=13180 comm="syz.4.3387" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.180261][T13205] loop4: detected capacity change from 0 to 8192 [ 225.203674][T13209] loop3: detected capacity change from 0 to 512 [ 225.226430][T13209] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.260825][T13209] EXT4-fs (loop3): 1 orphan inode deleted [ 226.133323][T13119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.176515][T13226] loop9: detected capacity change from 0 to 512 [ 226.201015][T13226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.220406][T13226] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.233707][ T28] audit: type=1400 audit(1781826469.791:1390): avc: denied { write } for pid=13225 comm="syz.9.3405" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.284950][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3406'. [ 226.317452][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3406'. [ 226.331014][T13231] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3406'. [ 226.402077][T13239] loop3: detected capacity change from 0 to 128 [ 226.411517][T13235] xt_hashlimit: size too large, truncated to 1048576 [ 226.431086][T13239] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.456509][T13239] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.490512][ T3775] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.823635][ T3773] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.844478][ T3773] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.861214][ T3773] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.871328][ T3773] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.914316][T13283] loop8: detected capacity change from 0 to 128 [ 227.112207][T13293] loop8: detected capacity change from 0 to 8192 [ 227.160683][T13293] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 227.168116][T13293] FAT-fs (loop8): Filesystem has been set read-only [ 227.278110][ T3775] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.297954][ T3775] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.359938][ T3775] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.375095][ T3775] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.441772][ T3775] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.452571][ T3775] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.539223][ T3775] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.569841][ T3775] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.706762][T13315] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.747372][ T3775] bridge_slave_1: left allmulticast mode [ 227.753734][ T3775] bridge_slave_1: left promiscuous mode [ 227.770076][ T3775] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.803065][ T3775] bridge_slave_0: left allmulticast mode [ 227.821031][ T3775] bridge_slave_0: left promiscuous mode [ 227.840034][ T3775] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.949597][T13338] loop4: detected capacity change from 0 to 512 [ 227.990264][T13338] ext4 filesystem being mounted at /673/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.008778][ T28] audit: type=1400 audit(1781826471.571:1391): avc: denied { write } for pid=13337 comm="syz.4.3449" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.031173][ T3775] bond1 (unregistering): (slave gretap1): Releasing active interface [ 228.043489][T13331] loop8: detected capacity change from 0 to 4096 [ 228.051253][T13331] EXT4-fs: Ignoring removed orlov option [ 228.067399][T13331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.076439][ T28] audit: type=1400 audit(1781826471.601:1392): avc: denied { write } for pid=13320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.124575][ T28] audit: type=1400 audit(1781826471.681:1393): avc: denied { write } for pid=13354 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.151922][ T28] audit: type=1400 audit(1781826471.711:1394): avc: denied { write } for pid=13330 comm="syz.8.3447" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.191374][ T3775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.205655][ T3775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.222631][ T3775] bond0 (unregistering): Released all slaves [ 228.230928][ T3775] bond1 (unregistering): Released all slaves [ 228.242826][T13319] syzkaller1: entered promiscuous mode [ 228.249801][T13319] syzkaller1: entered allmulticast mode [ 228.267558][ T3017] 8021q: adding VLAN 0 to HW filter on device eth17 [ 228.369382][ T3775] hsr_slave_0: left promiscuous mode [ 228.376959][ T3775] hsr_slave_1: left promiscuous mode [ 228.385287][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.409952][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.511490][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.520901][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.534787][ T28] audit: type=1400 audit(1781826472.091:1395): avc: denied { write } for pid=13368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.599866][ T28] audit: type=1400 audit(1781826472.161:1396): avc: denied { write } for pid=13384 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.649361][ T3775] veth1_macvtap: left promiscuous mode [ 228.658378][ T3775] veth0_macvtap: left promiscuous mode [ 228.666342][ T3775] veth1_vlan: left promiscuous mode [ 228.672514][ T3775] veth0_vlan: left promiscuous mode [ 228.840037][ T3775] team0 (unregistering): Port device team_slave_1 removed [ 228.861218][ T3775] team0 (unregistering): Port device team_slave_0 removed [ 228.918651][ T3017] 8021q: adding VLAN 0 to HW filter on device eth18 [ 229.208879][ T28] audit: type=1400 audit(1781826472.761:1397): avc: denied { write } for pid=13412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.291458][ T28] audit: type=1400 audit(1781826472.851:1398): avc: denied { write } for pid=13429 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.421412][ T3017] 8021q: adding VLAN 0 to HW filter on device eth19 [ 229.523880][T13340] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.534033][T13425] loop4: detected capacity change from 0 to 512 [ 229.543524][T13340] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.547615][T13425] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.551058][T13340] bridge_slave_0: entered allmulticast mode [ 229.568512][T13340] bridge_slave_0: entered promiscuous mode [ 229.586819][T13340] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.593948][T13340] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.601598][T13340] bridge_slave_1: entered allmulticast mode [ 229.608338][T13340] bridge_slave_1: entered promiscuous mode [ 229.646531][T13340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.666880][T13340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.683176][T13425] EXT4-fs (loop4): 1 orphan inode deleted [ 229.716458][T13340] team0: Port device team_slave_0 added [ 229.731807][T13340] team0: Port device team_slave_1 added [ 229.879593][T13451] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 229.916683][ T3301] EXT4-fs unmount: 17 callbacks suppressed [ 229.916703][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.946984][T13451] bond7 (unregistering): Released all slaves [ 229.966177][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 229.966208][ T28] audit: type=1400 audit(1781826473.531:1401): avc: denied { write } for pid=13462 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.074667][T13340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.088041][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.146973][T13340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.164144][ T28] audit: type=1400 audit(1781826473.711:1402): avc: denied { write } for pid=13452 comm="syz.6.3469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 230.194823][T13340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.205445][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.265500][T13340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.286131][ T3017] 8021q: adding VLAN 0 to HW filter on device eth20 [ 230.293491][T13467] netlink: 'syz.4.3471': attribute type 4 has an invalid length. [ 230.383404][T13340] hsr_slave_0: entered promiscuous mode [ 230.394567][T13340] hsr_slave_1: entered promiscuous mode [ 230.400898][T13340] debugfs: 'hsr0' already exists in 'hsr' [ 230.407905][T13340] Cannot create hsr debugfs directory [ 230.690253][T13501] netlink: 'syz.6.3479': attribute type 10 has an invalid length. [ 230.699943][T13501] __nla_validate_parse: 3 callbacks suppressed [ 230.699962][T13501] netlink: 16154 bytes leftover after parsing attributes in process `syz.6.3479'. [ 230.749068][ T28] audit: type=1400 audit(1781826474.311:1403): avc: denied { write } for pid=13490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.827380][ T28] audit: type=1400 audit(1781826474.391:1404): avc: denied { write } for pid=13510 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.877814][T13340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.904021][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 230.918914][T13340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.929911][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.954247][T13340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.971689][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 230.985780][T13340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.003574][T13340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.150191][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.202384][T13340] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.245592][ T3773] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.252718][ T3773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.319380][ T3773] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.326512][ T3773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.341053][ T28] audit: type=1400 audit(1781826474.901:1405): avc: denied { write } for pid=13515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.381399][T13340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.460232][ T28] audit: type=1400 audit(1781826475.021:1406): avc: denied { write } for pid=13543 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.626946][T13340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.767490][ T28] audit: type=1400 audit(1781826475.331:1407): avc: denied { write } for pid=13554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.867280][ T28] audit: type=1400 audit(1781826475.431:1408): avc: denied { write } for pid=13582 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.892332][T13340] veth0_vlan: entered promiscuous mode [ 231.913551][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3492'. [ 231.932658][T13340] veth1_vlan: entered promiscuous mode [ 232.015149][T13340] veth0_macvtap: entered promiscuous mode [ 232.031262][T13340] veth1_macvtap: entered promiscuous mode [ 232.059189][T13340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.081130][T13340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.112963][ T3761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.131974][ T3761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.161877][ T3761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.183506][ T3761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.221314][ T28] audit: type=1400 audit(1781826475.781:1409): avc: denied { write } for pid=13596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.275701][ T28] audit: type=1400 audit(1781826475.831:1410): avc: denied { write } for pid=13615 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.567184][T13640] loop3: detected capacity change from 0 to 512 [ 232.598823][T13640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.776808][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3505'. [ 233.063974][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.663981][T13750] loop2: detected capacity change from 0 to 512 [ 233.706002][T13750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.110923][T13777] loop4: detected capacity change from 0 to 512 [ 234.165878][T13777] EXT4-fs (loop4): filesystem is read-only [ 234.195938][T13777] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 234.224220][T13340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.248830][T13777] EXT4-fs (loop4): failed to initialize system zone (-117) [ 234.265491][T13777] EXT4-fs (loop4): mount failed [ 235.179291][T13846] loop3: detected capacity change from 0 to 1024 [ 235.236514][T13846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 235.259766][T13846] ext4 filesystem being mounted at /689/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.290839][T13846] EXT4-fs (loop3): shut down requested (1) [ 235.308161][T13846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 235.336704][T13846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 235.359586][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3542'. [ 235.368906][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3542'. [ 235.378289][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3542'. [ 235.387414][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 235.387433][ T28] audit: type=1400 audit(1781826478.941:1431): avc: denied { setattr } for pid=13844 comm="syz.3.3540" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.416034][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3542'. [ 235.444038][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 235.516716][T13863] loop3: detected capacity change from 0 to 512 [ 235.529434][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3546'. [ 235.552428][T13860] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 235.564675][T13863] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3554: inode has both inline data and extents flags [ 235.587492][T13863] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 235.587642][T13863] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3554: couldn't read orphan inode 15 (err -117) [ 235.596912][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 235.596930][ C0] EXT4-fs (loop3): initial error at time 1781826479: ext4_orphan_get:1399: inode 15 [ 235.596970][ C0] EXT4-fs (loop3): last error at time 1781826479: ext4_orphan_get:1399: inode 15 [ 235.640439][T13869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3546'. [ 235.656416][T13860] bond2 (unregistering): Released all slaves [ 235.700701][T13863] loop3: lost filesystem error report for type 5 error -117 [ 235.701427][T13863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.737604][ T28] audit: type=1400 audit(1781826479.301:1432): avc: denied { write } for pid=13862 comm="syz.3.3554" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.765482][ T28] audit: type=1400 audit(1781826479.301:1433): avc: denied { write } for pid=13862 comm="syz.3.3554" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.789086][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.887561][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3551'. [ 236.060743][T13895] IPv6: Can't replace route, no match found [ 236.074190][T13895] IPv6: Can't replace route, no match found [ 236.098068][T13897] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 236.112113][T13897] bond1 (unregistering): Released all slaves [ 236.316952][T13914] xt_hashlimit: size too large, truncated to 1048576 [ 236.579962][T13910] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.900112][T13910] bond0: (slave netdevsim2): Releasing backup interface [ 237.123433][T13910] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.150627][T13934] syzkaller1: entered promiscuous mode [ 237.156871][T13934] syzkaller1: entered allmulticast mode [ 237.176546][T13942] netlink: 'syz.2.3573': attribute type 2 has an invalid length. [ 237.192096][T13910] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.292065][T13948] netlink: 'syz.3.3575': attribute type 3 has an invalid length. [ 237.308970][T13948] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3575'. [ 237.320392][T13910] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.413064][ T3757] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.428564][ T3761] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.452227][ T3761] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.474370][ T3761] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.025289][ T28] audit: type=1400 audit(1781826485.581:1434): avc: denied { write } for pid=13958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.075432][ T28] audit: type=1400 audit(1781826485.621:1435): avc: denied { write } for pid=13969 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.166589][ T28] audit: type=1400 audit(1781826485.731:1436): avc: denied { write } for pid=13972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.205408][ T28] audit: type=1400 audit(1781826485.761:1437): avc: denied { write } for pid=13983 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.311039][ T28] audit: type=1400 audit(1781826485.871:1438): avc: denied { write } for pid=13986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.355434][ T28] audit: type=1400 audit(1781826485.911:1439): avc: denied { write } for pid=13997 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.783435][ T28] audit: type=1400 audit(1781826486.341:1440): avc: denied { write } for pid=14000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.828324][ T28] audit: type=1400 audit(1781826486.391:1441): avc: denied { write } for pid=14011 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.408023][ T28] audit: type=1326 audit(1781826488.971:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14017 comm="syz.4.3584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8402dce59 code=0x0 [ 245.506629][T14025] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.513916][T14025] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.521382][T14025] bridge_slave_0: entered allmulticast mode [ 245.529068][T14025] bridge_slave_0: entered promiscuous mode [ 245.536034][T14025] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.543218][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.550653][T14025] bridge_slave_1: entered allmulticast mode [ 245.557450][T14025] bridge_slave_1: entered promiscuous mode [ 245.604099][T14025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.623473][T14025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.664123][T14025] team0: Port device team_slave_0 added [ 245.680028][T14025] team0: Port device team_slave_1 added [ 245.699106][T14025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.706353][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.732886][T14025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.746296][T14025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.753380][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.781911][T14025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.818277][T14025] hsr_slave_0: entered promiscuous mode [ 245.824498][T14025] hsr_slave_1: entered promiscuous mode [ 245.830749][T14025] debugfs: 'hsr0' already exists in 'hsr' [ 245.836901][T14025] Cannot create hsr debugfs directory [ 245.877845][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3596'. [ 245.897864][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3596'. [ 245.906958][ T3775] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.915296][ T3775] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.936570][ T3757] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.958265][ T3757] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.985943][ T3775] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.994387][ T3775] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.056953][ T3757] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.067633][ T3757] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.163230][ T3757] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.181235][ T3757] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.234433][ T3757] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.236258][ T28] audit: type=1400 audit(1781826489.791:1443): avc: denied { write } for pid=14079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.246121][ T3757] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.356087][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3606'. [ 246.376765][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3606'. [ 246.548915][ T3757] bridge_slave_1: left allmulticast mode [ 246.558321][ T3757] bridge_slave_1: left promiscuous mode [ 246.568549][ T3757] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.593192][ T3757] bridge_slave_0: left allmulticast mode [ 246.607853][ T3757] bridge_slave_0: left promiscuous mode [ 246.624015][ T3757] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.771873][ T3757] erspan0 (unregistering): left promiscuous mode [ 246.793488][ T3757] gretap0 (unregistering): left promiscuous mode [ 246.833815][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 246.846036][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 246.864896][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.876795][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.885028][ T3757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.894303][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.902878][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.911971][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.930887][ T3757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.939642][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.954612][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.962528][ T3381] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 246.989358][ T3757] bond0 (unregistering): Released all slaves [ 247.016614][ T3381] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 247.060338][T14159] fido_id[14159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 247.077200][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 247.077218][ T28] audit: type=1400 audit(1781826490.641:1449): avc: denied { write } for pid=14147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.188740][ T28] audit: type=1400 audit(1781826490.751:1450): avc: denied { write } for pid=14167 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.277370][ T28] audit: type=1400 audit(1781826490.831:1451): avc: denied { read } for pid=14164 comm="syz.2.3613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 247.308086][ T3757] hsr_slave_0: left promiscuous mode [ 247.328014][ T3757] hsr_slave_1: left promiscuous mode [ 247.334744][T14178] netlink: 'syz.3.3617': attribute type 10 has an invalid length. [ 247.344716][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.365788][ T3757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.372999][T14178] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3617'. [ 247.387311][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.397735][ T3757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.421395][ T3757] veth1_macvtap: left promiscuous mode [ 247.439655][ T3757] veth0_macvtap: left promiscuous mode [ 247.445279][ T3757] veth1_vlan: left promiscuous mode [ 247.452378][ T3757] veth0_vlan: left promiscuous mode [ 247.656010][ T3757] team0 (unregistering): Port device team_slave_1 removed [ 247.731711][T14197] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 247.731711][T14197] program syz.4.3623 not setting count and/or reply_len properly [ 247.839851][T14025] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.864436][T14025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.873747][T14203] VFS: Mount too revealing [ 247.879130][T14025] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.902548][T14025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.937759][T14025] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.962674][T14025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.991510][T14025] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.004091][T14222] loop4: detected capacity change from 0 to 1024 [ 248.025740][T14025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.034358][ T28] audit: type=1400 audit(1781826491.591:1452): avc: denied { write } for pid=14200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.061388][T14222] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 248.099152][T14222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.132206][ T28] audit: type=1400 audit(1781826491.661:1453): avc: denied { write } for pid=14230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.173670][ T28] audit: type=1400 audit(1781826491.691:1454): avc: denied { write } for pid=14220 comm="syz.4.3630" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.218823][T14025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.245326][ T3757] IPVS: stop unused estimator thread 0... [ 248.264347][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.274118][T14025] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.295198][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.302398][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.323646][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.330934][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.437772][ T28] audit: type=1400 audit(1781826491.991:1455): avc: denied { write } for pid=14237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.520258][ T28] audit: type=1400 audit(1781826492.081:1456): avc: denied { write } for pid=14257 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.574222][T14256] team0: left allmulticast mode [ 248.589103][T14256] team_slave_0: left allmulticast mode [ 248.605549][T14256] team_slave_1: left allmulticast mode [ 248.611493][T14256] team0: left promiscuous mode [ 248.616756][T14256] team_slave_0: left promiscuous mode [ 248.631222][T14256] team_slave_1: left promiscuous mode [ 248.648003][T14256] gretap1: left promiscuous mode [ 248.659885][T14256] bridge0: port 3(team0) entered disabled state [ 248.702470][T14256] bridge_slave_0: left allmulticast mode [ 248.728331][T14256] bridge_slave_0: left promiscuous mode [ 248.737796][ T28] audit: type=1400 audit(1781826492.301:1457): avc: denied { write } for pid=14264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.763410][T14256] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.778706][T14256] bridge_slave_1: left allmulticast mode [ 248.785826][T14256] bridge_slave_1: left promiscuous mode [ 248.791818][T14256] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.807692][ T28] audit: type=1400 audit(1781826492.371:1458): avc: denied { write } for pid=14277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.834299][T14256] bond0: (slave bond_slave_0): Releasing backup interface [ 248.850670][T14256] bond0: (slave bond_slave_1): Releasing backup interface [ 248.889091][T14256] team0: Port device team_slave_0 removed [ 248.929709][T14256] team0: Port device team_slave_1 removed [ 248.949410][T14256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.977951][T14256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.990258][T14256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.999535][T14256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.029282][T14290] netlink: 'syz.6.3640': attribute type 1 has an invalid length. [ 249.032892][T14256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.070690][T14288] serio: Serial port ptm0 [ 249.096352][T14294] erspan1: entered allmulticast mode [ 249.122415][T14290] bond2: entered promiscuous mode [ 249.129387][T14290] bond2: entered allmulticast mode [ 249.135052][T14290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.190820][T14025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.215720][T14288] serio: Serial port ptm0 [ 249.299016][T14314] loop3: detected capacity change from 0 to 512 [ 249.315418][T14314] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3643: error while reading EA inode 32 err=-116 [ 249.347221][T14314] loop3: lost filesystem error report for type 5 error -117 [ 249.348620][T14314] EXT4-fs (loop3): 1 orphan inode deleted [ 249.355995][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 249.356033][ C1] EXT4-fs (loop3): initial error at time 1781826492: ext4_xattr_inode_iget:446 [ 249.356053][ C1] EXT4-fs (loop3): last error at time 1781826492: ext4_xattr_inode_iget:446 [ 249.394674][T14314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.439764][T14321] netlink: 182 bytes leftover after parsing attributes in process `syz.4.3644'. [ 249.524807][T14314] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.3643: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 249.578755][T14338] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.3643: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 249.659339][T14025] veth0_vlan: entered promiscuous mode [ 249.676112][T14025] veth1_vlan: entered promiscuous mode [ 249.683941][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.716292][T14025] veth0_macvtap: entered promiscuous mode [ 249.733514][T14025] veth1_macvtap: entered promiscuous mode [ 249.759991][T14025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.787764][T14025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.827883][ T311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.855465][ T311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.884282][ T311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.964235][ T311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.033692][T14362] loop1: detected capacity change from 0 to 512 [ 250.089420][T14362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.456305][T14387] loop2: detected capacity change from 0 to 512 [ 250.488924][T14025] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.532574][T14399] loop4: detected capacity change from 0 to 512 [ 250.554913][T14399] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 250.578349][T14387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.614960][T14387] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.629852][T14399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 250.644940][T14399] System zones: 1-12 [ 250.681604][T13340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.692074][T14399] EXT4-fs (loop4): 1 truncate cleaned up [ 250.698958][T14399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.728660][ T3017] 8021q: adding VLAN 0 to HW filter on device eth1 [ 250.908741][ T3301] ================================================================== [ 250.916891][ T3301] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 250.924310][ T3301] [ 250.926665][ T3301] read-write to 0xffff88811b71db48 of 8 bytes by interrupt on cpu 0: [ 250.934783][ T3301] __xa_clear_mark+0xf5/0x1e0 [ 250.939506][ T3301] __folio_end_writeback+0xf4/0x360 [ 250.944842][ T3301] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 250.951140][ T3301] folio_end_writeback+0x1c/0x70 [ 250.956141][ T3301] ext4_finish_bio+0x454/0x770 [ 250.960968][ T3301] ext4_end_bio+0x281/0x3a0 [ 250.965518][ T3301] bio_endio+0x35b/0x3f0 [ 250.969807][ T3301] blk_update_request+0x338/0x710 [ 250.974879][ T3301] blk_mq_end_request+0x26/0x50 [ 250.979787][ T3301] lo_complete_rq+0x98/0x130 [ 250.984452][ T3301] blk_done_softirq+0x77/0xb0 [ 250.989268][ T3301] handle_softirqs+0xb9/0x280 [ 250.993983][ T3301] run_ksoftirqd+0x1c/0x30 [ 250.998447][ T3301] smpboot_thread_fn+0x32a/0x510 [ 251.003443][ T3301] kthread+0x221/0x270 [ 251.007545][ T3301] ret_from_fork+0x146/0x330 [ 251.012182][ T3301] ret_from_fork_asm+0x1a/0x30 [ 251.016999][ T3301] [ 251.019354][ T3301] read to 0xffff88811b71db48 of 8 bytes by task 3301 on cpu 1: [ 251.026925][ T3301] xas_find_marked+0x211/0x650 [ 251.031900][ T3301] filemap_get_folios_tag+0xf7/0x400 [ 251.037234][ T3301] filemap_fdatawait_keep_errors+0x6c/0x190 [ 251.043171][ T3301] sync_inodes_sb+0x41e/0x4d0 [ 251.047919][ T3301] sync_filesystem+0x102/0x190 [ 251.052714][ T3301] generic_shutdown_super+0x4c/0x220 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.058049][ T3301] kill_block_super+0x2a/0x70 [ 251.062763][ T3301] ext4_kill_sb+0x42/0x80 [ 251.067117][ T3301] deactivate_locked_super+0x75/0x1c0 [ 251.072525][ T3301] deactivate_super+0x97/0xa0 [ 251.077234][ T3301] cleanup_mnt+0x2c3/0x340 [ 251.081674][ T3301] __cleanup_mnt+0x19/0x20 [ 251.086201][ T3301] task_work_run+0x130/0x1a0 [ 251.090815][ T3301] exit_to_user_mode_loop+0x1e4/0x8c0 [ 251.096215][ T3301] do_syscall_64+0x23c/0x3c0 [ 251.100821][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.106731][ T3301] [ 251.109084][ T3301] value changed: 0x003ffffffffff000 -> 0x003fffffffff0000 [ 251.116204][ T3301] [ 251.118538][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 251.124711][ T3301] CPU: 1 UID: 0 PID: 3301 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 251.135756][ T3301] Tainted: [W]=WARN [ 251.139576][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.149739][ T3301] ================================================================== [ 251.228626][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.430096][ T3017] 8021q: adding VLAN 0 to HW filter on device eth2 [ 251.648842][ T3017] 8021q: adding VLAN 0 to HW filter on device eth3 [ 251.766453][ T3017] 8021q: adding VLAN 0 to HW filter on device eth4 [ 251.887171][ T3775] bridge_slave_1: left allmulticast mode [ 251.894506][ T3775] bridge_slave_1: left promiscuous mode [ 251.907332][ T3775] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.930326][ T3775] bridge0: left allmulticast mode [ 251.976199][ T3775] bond4 (unregistering): (slave gretap1): Releasing active interface [ 252.004799][ T311] smc: removing ib device syz1 [ 252.010634][ T3775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.020239][ T3775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.030608][ T3775] bond0 (unregistering): Released all slaves [ 252.038800][ T3775] bond1 (unregistering): Released all slaves [ 252.048616][ T3775] bond2 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 252.059073][ T3775] bond2 (unregistering): Released all slaves [ 252.068306][ T3775] bond3 (unregistering): Released all slaves [ 252.079656][ T3775] bond4 (unregistering): Released all slaves [ 252.089530][ T3775] bond5 (unregistering): Released all slaves [ 252.098939][ T3775] bond6 (unregistering): Released all slaves [ 252.115993][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 252.116011][ T28] audit: type=1400 audit(1781826495.681:1485): avc: denied { write } for pid=14498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.172208][ T28] audit: type=1400 audit(1781826495.731:1486): avc: denied { write } for pid=14509 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.301327][ T28] audit: type=1400 audit(1781826495.861:1487): avc: denied { write } for pid=14512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.342925][ T28] audit: type=1400 audit(1781826495.901:1488): avc: denied { write } for pid=14523 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.368523][ T3775] hsr_slave_0: left promiscuous mode [ 252.374324][ T3775] hsr_slave_1: left promiscuous mode [ 252.380196][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.388403][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.443935][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 252.526824][ T28] audit: type=1400 audit(1781826496.091:1489): avc: denied { write } for pid=14526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.566102][ T28] audit: type=1400 audit(1781826496.131:1490): avc: denied { write } for pid=14537 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.599033][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 252.678573][ T28] audit: type=1400 audit(1781826496.241:1491): avc: denied { write } for pid=14540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.711650][ T28] audit: type=1400 audit(1781826496.271:1492): avc: denied { write } for pid=14551 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.738395][ T3775] IPVS: stop unused estimator thread 0... [ 252.752009][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 252.798883][ T3775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.838594][ T3775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.841445][ T28] audit: type=1400 audit(1781826496.401:1493): avc: denied { write } for pid=14554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.888461][ T28] audit: type=1400 audit(1781826496.451:1494): avc: denied { write } for pid=14565 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.919332][ T3775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.932176][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 252.988663][ T3775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.079529][ T3775] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.129171][ T3775] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.178806][ T3775] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.212082][ T3017] 8021q: adding VLAN 0 to HW filter on device eth21 [ 253.232055][ T3775] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.308982][ T3775] bridge_slave_1: left allmulticast mode [ 253.314698][ T3775] bridge_slave_1: left promiscuous mode [ 253.320793][ T3775] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.329367][ T3775] bridge_slave_0: left allmulticast mode [ 253.335118][ T3775] bridge_slave_0: left promiscuous mode [ 253.341027][ T3775] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.350711][ T3775] bridge_slave_1: left allmulticast mode [ 253.356525][ T3775] bridge_slave_1: left promiscuous mode [ 253.362294][ T3775] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.371085][ T3775] bridge_slave_0: left allmulticast mode [ 253.377020][ T3775] bridge_slave_0: left promiscuous mode [ 253.382718][ T3775] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.457398][ T3775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.467468][ T3775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.477480][ T3775] bond0 (unregistering): Released all slaves [ 253.504306][ T3775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.514752][ T3775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.524320][ T3775] bond0 (unregistering): Released all slaves [ 253.532489][ T3017] 8021q: adding VLAN 0 to HW filter on device eth22 [ 253.582711][ T3775] hsr_slave_0: left promiscuous mode [ 253.588590][ T3775] hsr_slave_1: left promiscuous mode [ 253.594383][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.602249][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.610173][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.618959][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.628686][ T3775] hsr_slave_0: left promiscuous mode [ 253.634586][ T3775] hsr_slave_1: left promiscuous mode [ 253.640609][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.648210][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.658829][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.666555][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.680817][ T3775] veth1_macvtap: left promiscuous mode [ 253.689616][ T3775] veth0_macvtap: left promiscuous mode [ 253.695199][ T3775] veth1_vlan: left promiscuous mode [ 253.700784][ T3775] veth0_vlan: left promiscuous mode [ 253.706727][ T3775] veth1_macvtap: left promiscuous mode [ 253.712272][ T3775] veth0_macvtap: left promiscuous mode [ 253.718225][ T3775] veth1_vlan: left promiscuous mode [ 253.723511][ T3775] veth0_vlan: left promiscuous mode [ 253.826696][ T3775] team0 (unregistering): Port device team_slave_1 removed [ 253.836801][ T3775] team0 (unregistering): Port device team_slave_0 removed [ 253.898631][ T3775] team0 (unregistering): Port device team_slave_1 removed [ 253.908887][ T3775] team0 (unregistering): Port device team_slave_0 removed [ 253.945307][ T3017] 8021q: adding VLAN 0 to HW filter on device eth23 [ 254.065909][ T3017] 8021q: adding VLAN 0 to HW filter on device eth24 [ 254.195836][ T3017] 8021q: adding VLAN 0 to HW filter on device eth25 [ 254.310591][ T3017] 8021q: adding VLAN 0 to HW filter on device eth26 [ 254.427052][ T3017] 8021q: adding VLAN 0 to HW filter on device eth27 [ 254.539419][ T3017] 8021q: adding VLAN 0 to HW filter on device eth28