last executing test programs: 3m44.507361443s ago: executing program 32 (id=238): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 3m34.60051801s ago: executing program 33 (id=155): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m26.873168938s ago: executing program 34 (id=450): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m31.730373902s ago: executing program 35 (id=1500): r0 = socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f0000000140)=""/84, 0x54) 2m30.681905936s ago: executing program 36 (id=1520): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='N', 0x1, 0x20044801, 0x0, 0x0) shutdown(r0, 0x1) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 2m15.978032666s ago: executing program 37 (id=1854): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000280)={r1, 0x1, r2, 0x3, 0x80000}) 1m54.753744775s ago: executing program 38 (id=2316): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x10206, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) lsm_set_self_attr(0x69, 0x0, 0x20, 0x0) 1m35.643657564s ago: executing program 39 (id=2606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x0, 0x8}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1m24.944095264s ago: executing program 40 (id=2798): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close(r0) 1m23.424641742s ago: executing program 2 (id=2825): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1m23.385838873s ago: executing program 2 (id=2826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x388}], 0x1}}], 0x1, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 1m23.339758175s ago: executing program 2 (id=2827): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1m23.236881628s ago: executing program 2 (id=2828): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@user_xattr}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 1m23.001520765s ago: executing program 2 (id=2831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m22.731243844s ago: executing program 2 (id=2834): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x3, 0xfffffffffffffffc, 0xa6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') 1m22.647884457s ago: executing program 41 (id=2834): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x3, 0xfffffffffffffffc, 0xa6}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') 1m9.775737095s ago: executing program 0 (id=3081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x10, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffe06, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}}}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 1m9.191855284s ago: executing program 0 (id=3087): writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000280)='X', 0x1}], 0x1) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x4}) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1m9.191503724s ago: executing program 0 (id=3088): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m9.126226116s ago: executing program 0 (id=3089): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x398d0ce, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m8.889982673s ago: executing program 0 (id=3091): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 1m8.322245292s ago: executing program 0 (id=3101): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m8.322132372s ago: executing program 42 (id=3101): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x1000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 56.194152027s ago: executing program 9 (id=3280): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x5}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000200)="05178100", 0x3e, 0x50, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 56.122568899s ago: executing program 9 (id=3282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200e01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0xc008744c, &(0x7f0000000180)) 56.038673852s ago: executing program 9 (id=3283): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "642c72f67d5441f6e8da020400"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 55.499897409s ago: executing program 9 (id=3289): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x1, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) 55.475252189s ago: executing program 9 (id=3290): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000037) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 55.45094601s ago: executing program 9 (id=3291): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 49.434710992s ago: executing program 3 (id=3379): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 48.727624323s ago: executing program 3 (id=3388): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8011, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81ffffff}]}, 0x1c}}, 0x0) 48.634297986s ago: executing program 3 (id=3389): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x20000010) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xc, 0x4, 0x0, 0x100000001, 0x2, 0x3, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x1, 0x20, 0x1, 0x5, 0x9}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}], "", ['\x00']}, 0x158) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 48.634168526s ago: executing program 3 (id=3390): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 48.604107137s ago: executing program 3 (id=3392): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r2, r1, 0x4, r1}, 0x10) 48.385924894s ago: executing program 3 (id=3393): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x1, 0xfffb, 0x0, 0x180, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x2b}, @in=@remote, {0x0, 0x1, 0x2, 0x0, 0x4000000, 0x0, 0xffffffffffffffff}, {0x0, 0xff}, {}, 0x3, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x5, 0x5}}, 0xf8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xa0c89f, 0x1c881, 0x1, 0xd1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x40044) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 48.379341854s ago: executing program 43 (id=3393): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x1, 0xfffb, 0x0, 0x180, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x2b}, @in=@remote, {0x0, 0x1, 0x2, 0x0, 0x4000000, 0x0, 0xffffffffffffffff}, {0x0, 0xff}, {}, 0x3, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x5, 0x5}}, 0xf8}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xa0c89f, 0x1c881, 0x1, 0xd1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x40044) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 40.414027447s ago: executing program 44 (id=3291): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 33.125441938s ago: executing program 7 (id=3591): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb22, 0x200000000002}, 0x80, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001bc0)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x40, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x800}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004001}, 0x40890) 33.07038991s ago: executing program 7 (id=3594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000002cc0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 32.696718902s ago: executing program 7 (id=3602): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="d9", 0x1}], 0x1}}], 0x1, 0x2004c044) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x3c, 0x8, 0x2, 0xfc, 0x0, 0xfa, 0x3b, 0x6, 0x4, 0x82, 0x3, 0x8, 0x5, 0x8}, 0xe) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x1b, 0x0}, 0x2}], 0x88, 0x20, 0x0) shutdown(r0, 0x1) 32.562246536s ago: executing program 7 (id=3605): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) 32.519160787s ago: executing program 7 (id=3607): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 32.469325169s ago: executing program 7 (id=3608): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414f6030490781200183f2500000000000000000100007f"], 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 17.380026258s ago: executing program 45 (id=3608): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414f6030490781200183f2500000000000000000100007f"], 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 1.786300824s ago: executing program 6 (id=4148): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000100)='\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x5, 0xd, "85"}, @TCA_NETEM_DELAY_DIST={0x8, 0x2, "ce2b7239"}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 1.60070271s ago: executing program 6 (id=4150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.378921946s ago: executing program 5 (id=4154): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="b3", 0x1}], 0x1, &(0x7f0000000080)=ANY=[], 0xf0}}], 0x1, 0x24004c41) sendto(r0, &(0x7f0000000300)="249af2ab", 0x4, 0x4000800, 0x0, 0x0) 1.282163869s ago: executing program 5 (id=4155): connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @empty, 0xfbb3}, 0x1c) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.23991687s ago: executing program 5 (id=4156): sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20008004) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sync() ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.239529781s ago: executing program 6 (id=4157): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e1bd33ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2f1, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) 1.160727633s ago: executing program 5 (id=4159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x794, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.125434825s ago: executing program 8 (id=4160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x300}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 1.098339975s ago: executing program 5 (id=4161): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000180)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_winnt}, {@uni_xlate}, {@rodir}, {@utf8}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_lower}, {@numtail}]}, 0x1, 0x370, &(0x7f0000000400)="$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") write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 964.85385ms ago: executing program 6 (id=4162): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) close(r1) 894.725312ms ago: executing program 8 (id=4163): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x18, 0x0) 790.050835ms ago: executing program 8 (id=4166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r3, 0x2}, 0x8) 785.326735ms ago: executing program 4 (id=4167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x1fffffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 767.666936ms ago: executing program 6 (id=4168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 718.596147ms ago: executing program 6 (id=4170): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ee3b25205a0609006560010203010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x575, &(0x7f00000002c0)=ANY=[], 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000100)=0x1b) 678.485709ms ago: executing program 4 (id=4171): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "97943e142c06737c54df5c4a9fc8398fc4ea165b26b7458e31bb8d1aa22f4a59", 0xb, 0x1, 0x7, 0x10000}, 0x3c) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x7, 0x0, {0x5, 0x4, 0x2, 0xc, 0x9, 0x66, 0xb, 0xf8, 0x2, 0x5, @loopback, @broadcast}}}}}}, 0x0) 678.107309ms ago: executing program 8 (id=4172): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@dioread_nolock}, {@data_err_ignore}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@delalloc}, {@orlov}]}, 0xff, 0x26c, &(0x7f00000002c0)="$eJzs3U1oHGUYB/BnZncTkywS9SKIHyAiGgjxJngwXhQCEoKIoEJExIuSCDHBW+LJiwc9ikpOXoL01rTHkkvopaXQU9rmkF4KbeihoYe2dMvubEq+2k2zm53S+f1gMx95533eYeb/TggZEkBhDUbEaESUImIoIioRkexs8Eb2GWxuLvatTkbUap/dTBrtsu3M9nEDEbEQEe9HxEqaxA/liLnlrzZur33y9u+zlbf+W/6yr6sn2bS50fvp1r/jv50ce2/u/MXr40mMRnXXeXVecsC+chLx4nEUe0ok5bxHwGFM/HLiUj33L0XEm438VyKN7OL9MdOzUol3/3nUsX/euPBKN8cKdF6tVqk/AxdqQOGkEVGNJB2OiGw9TYeHs5/hL5f60x+nZ34e+n56duq7vGcqoFOqEesfn+49NbAn/9dKWf6BZ1T2S6n1zyeWrtRXtkp5Dwg4Ph9OPVx9NVvUn/9D38y/E/IPhSP/UFyHzn9P98YEdIfnPxSX/ENxyT8Ul/xDQdxv/rHfjl3yD8Ul/1BcR87/X/eOb1BAV+zMPwBQLLXeI7013NmXkIFc5D3/AAAAAAAAAAAAAAAAAAAA+y32rU5ufzrTY7lli7N/R2x+lDXdX7/U+H/EEc81vvbfSnb1mByqwuN9/XqbHbTp/5zfvn7+ar71z72Wb/35qYiFXyNipFzef/8lzfvv6F5o8f3Kt20WeELJnu0Pvuhu/b3uLuVbf2wt4kx9/hk5aP5J4+XG8uD5p1q/fi36bzU//XSnndEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTQ8CAAD//+m8da8=") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003340)={&(0x7f00000032c0)={0x10, 0x1410, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 640.77587ms ago: executing program 1 (id=4173): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000100)='\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x3, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x5, 0xd, "85"}, @TCA_NETEM_DELAY_DIST={0x8, 0x2, "ce2b7239"}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 584.230671ms ago: executing program 4 (id=4174): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0xd99b}, {{0x0, 0x0, &(0x7f00000001c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x20, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x90000018}) 555.900412ms ago: executing program 4 (id=4175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) 537.913583ms ago: executing program 8 (id=4176): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000b80)=""/230, 0xe6}], 0x1, &(0x7f0000000880)=""/64, 0x40}, 0x40012160) 511.771114ms ago: executing program 1 (id=4177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 498.912754ms ago: executing program 4 (id=4178): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000200)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) 468.347505ms ago: executing program 1 (id=4179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0xa84053c42c89434b, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8}]}, 0x5e}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 343.84881ms ago: executing program 8 (id=4180): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r0, 0x3, 0x4, 0x8000c62) 343.14605ms ago: executing program 1 (id=4181): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x30, 0x660f53fe, 0x6f}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 239.523392ms ago: executing program 5 (id=4182): r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x3c, 0x9, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mq_timedreceive(r0, &(0x7f0000000280)=""/196, 0xc4, 0x27, 0x0) mq_timedreceive(r0, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) 77.147218ms ago: executing program 4 (id=4183): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) epoll_pwait(r2, &(0x7f0000000580)=[{}], 0x1, 0xf7fefffb, 0x0, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x101, 0x0, 0x0) close(r0) 76.413918ms ago: executing program 1 (id=4193): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2283460, 0x0) 0s ago: executing program 1 (id=4184): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002380)={0xa, 0x1, 0x0, &(0x7f0000002280)=[{0x0}, {&(0x7f0000000400)=""/191, 0xbf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000af6000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 212.981279][ T4042] bridge0 (unregistering): left allmulticast mode [ 212.982679][T13173] loop5: detected capacity change from 0 to 512 [ 213.029735][ T4042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.030106][T13173] EXT4-fs: Ignoring removed bh option [ 213.047391][T13176] loop7: detected capacity change from 0 to 1024 [ 213.054232][T13173] EXT4-fs: inline encryption not supported [ 213.063692][ T4042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.066415][T13173] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.085331][ T4042] bond0 (unregistering): Released all slaves [ 213.095678][T13173] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 213.114010][T13173] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3121: bg 0: block 248: padding at end of block bitmap is not set [ 213.135305][T13176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 213.156381][T13176] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.181064][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 213.217696][T13176] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3122: bg 0: block 112: padding at end of block bitmap is not set [ 213.233150][ T28] audit: type=1400 audit(1781284148.460:1950): avc: denied { write } for pid=13175 comm="syz.7.3122" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.265267][ T4042] hsr_slave_0: left promiscuous mode [ 213.286479][ T4042] hsr_slave_1: left promiscuous mode [ 213.292077][T13173] loop5: lost filesystem error report for type 5 error -117 [ 213.294536][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 213.305914][T13173] Quota error (device loop5): write_blk: dquota write failed [ 213.308356][ C1] EXT4-fs (loop5): last error at time 1781284148: ext4_validate_block_bitmap:441 [ 213.333444][T13173] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 213.341268][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.346667][T13176] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.3122: lblock 3 mapped to illegal pblock 3 (length 1) [ 213.364644][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.389940][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.398101][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.408700][T13176] EXT4-fs error (device loop7): ext4_ext_remove_space:2969: inode #15: comm syz.7.3122: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 213.428640][ T4042] veth1_macvtap: left promiscuous mode [ 213.429897][T13173] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3121: Failed to acquire dquot type 1 [ 213.434225][ T4042] veth0_macvtap: left promiscuous mode [ 213.451313][ T4042] veth1_vlan: left promiscuous mode [ 213.460164][ T4042] veth0_vlan: left promiscuous mode [ 213.476057][T13189] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.3122: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.506966][T13173] loop5: lost filesystem error report for type 5 error -28 [ 213.507648][T13173] EXT4-fs (loop5): 1 truncate cleaned up [ 213.533975][T13189] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: comm syz.7.3122: lblock 0 mapped to illegal pblock 0 (length 1) [ 213.561332][T13173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 213.583887][T13189] EXT4-fs error (device loop7): ext4_ext_remove_space:2969: inode #15: comm syz.7.3122: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 213.600067][ T28] audit: type=1400 audit(1781284148.820:1951): avc: denied { write } for pid=13182 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.696283][ T28] audit: type=1400 audit(1781284148.940:1952): avc: denied { write } for pid=13203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.984678][ T4961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 214.087921][ T4042] team0 (unregistering): Port device team_slave_1 removed [ 214.109859][ T4042] team0 (unregistering): Port device team_slave_0 removed [ 214.281817][T13087] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.300672][T13087] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.312833][T13087] bridge_slave_0: entered allmulticast mode [ 214.326738][T13087] bridge_slave_0: entered promiscuous mode [ 214.345474][T13087] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.356229][T13087] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.376117][T13087] bridge_slave_1: entered allmulticast mode [ 214.386993][T13087] bridge_slave_1: entered promiscuous mode [ 214.421442][T13225] netlink: 'syz.9.3128': attribute type 4 has an invalid length. [ 214.429719][ T28] audit: type=1400 audit(1781284149.660:1953): avc: denied { write } for pid=13212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.501932][T13087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.540880][ T28] audit: type=1400 audit(1781284149.770:1954): avc: denied { write } for pid=13232 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.545627][T13087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.616691][ T28] audit: type=1400 audit(1781284149.820:1955): avc: denied { ioctl } for pid=13233 comm="syz.4.3131" path="socket:[37116]" dev="sockfs" ino=37116 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 214.728135][T13087] team0: Port device team_slave_0 added [ 214.754978][T13087] team0: Port device team_slave_1 added [ 214.815150][T13087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.841141][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.903508][T13087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.947788][T13087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.977050][T13087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.054351][T13087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.156916][T11128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 215.198473][T13087] hsr_slave_0: entered promiscuous mode [ 215.219300][T13087] hsr_slave_1: entered promiscuous mode [ 215.254910][T13297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3147'. [ 215.453587][T13322] netlink: 'syz.9.3152': attribute type 1 has an invalid length. [ 215.488522][T13322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.521104][T13330] loop4: detected capacity change from 0 to 2048 [ 215.536102][T13322] bond1: (slave geneve2): making interface the new active one [ 215.547923][T13322] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 215.563883][T13330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.576862][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.588601][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.782321][T13345] loop9: detected capacity change from 0 to 512 [ 215.803385][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.820895][T13087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.840952][T13345] EXT4-fs: Ignoring removed bh option [ 215.854983][T13345] EXT4-fs: inline encryption not supported [ 215.868051][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 215.876734][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 215.886932][T13087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.907951][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.928040][T13345] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.929657][T13087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.956787][T13345] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 215.973592][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 215.986554][T13087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.998451][T13087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.006957][T13364] netlink: 'syz.4.3159': attribute type 3 has an invalid length. [ 216.017249][T13345] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3155: bg 0: block 248: padding at end of block bitmap is not set [ 216.025019][T13364] netlink: 'syz.4.3159': attribute type 4 has an invalid length. [ 216.040137][T13364] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.3159'. [ 216.090452][T13087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.103306][T13087] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.114300][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.121409][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.149631][T13345] loop9: lost filesystem error report for type 5 error -117 [ 216.154575][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 216.168397][ C0] EXT4-fs (loop9): last error at time 1781284151: ext4_validate_block_bitmap:441 [ 216.184350][T13345] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.3155: Failed to acquire dquot type 1 [ 216.203807][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.210949][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.251758][T13345] loop9: lost filesystem error report for type 5 error -28 [ 216.257773][T13345] EXT4-fs (loop9): 1 truncate cleaned up [ 216.310647][T13345] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 216.357562][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 216.490616][T13087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.684762][T13087] veth0_vlan: entered promiscuous mode [ 216.714674][T13087] veth1_vlan: entered promiscuous mode [ 216.760296][T13087] veth0_macvtap: entered promiscuous mode [ 216.778836][T13087] veth1_macvtap: entered promiscuous mode [ 216.810430][T13087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.837422][T13087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.850769][ T7812] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 216.860900][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 216.900732][ T4035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.937671][ T4035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.962796][T13425] loop9: detected capacity change from 0 to 1024 [ 216.979547][ T4035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.994084][T13425] EXT4-fs: Ignoring removed bh option [ 217.022992][ T4035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.045408][T13427] loop5: detected capacity change from 0 to 512 [ 217.064291][T13425] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.115293][T13427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.144183][T13427] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.260345][ T7812] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.276108][T11128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.404610][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 217.552601][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3168'. [ 217.571739][T13462] netlink: 'syz.7.3168': attribute type 31 has an invalid length. [ 217.582713][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3168'. [ 217.591863][T13462] netlink: 'syz.7.3168': attribute type 31 has an invalid length. [ 217.969310][T13488] loop4: detected capacity change from 0 to 32768 [ 218.078889][T13488] loop4: p1 p3 < > [ 218.223447][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 218.226333][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 218.246180][T13504] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 218.428685][T13505] loop9: detected capacity change from 0 to 32768 [ 218.470358][T13505] loop9: p1 p3 < > [ 218.509049][T13524] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3186'. [ 218.623537][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 218.627183][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 218.704380][T13518] syz.5.3184 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 218.738212][T13518] CPU: 1 UID: 0 PID: 13518 Comm: syz.5.3184 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 218.738325][T13518] Tainted: [W]=WARN [ 218.738352][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.738368][T13518] Call Trace: [ 218.738374][T13518] [ 218.738381][T13518] __dump_stack+0x1d/0x30 [ 218.738485][T13518] dump_stack_lvl+0x95/0xd0 [ 218.738505][T13518] dump_stack+0x15/0x1b [ 218.738608][T13518] dump_header+0x80/0x240 [ 218.738665][T13518] oom_kill_process+0x295/0x350 [ 218.738710][T13518] out_of_memory+0x981/0xbc0 [ 218.738830][T13518] try_charge_memcg+0x621/0xa00 [ 218.738868][T13518] ? xas_load+0x281/0x430 [ 218.738972][T13518] charge_memcg+0x6d/0x120 [ 218.738997][T13518] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 218.739036][T13518] __swap_cache_prepare_and_add+0x69/0x490 [ 218.739122][T13518] ? alloc_pages_mpol+0xd9/0x1d0 [ 218.739151][T13518] swap_cache_alloc_folio+0xa2/0x120 [ 218.739176][T13518] swap_cluster_readahead+0x25f/0x3c0 [ 218.739217][T13518] swapin_readahead+0xde/0x840 [ 218.739280][T13518] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 218.739389][T13518] ? hrtimer_start_range_ns+0x5b2/0x10c0 [ 218.739423][T13518] ? __rcu_read_unlock+0x4e/0x70 [ 218.739479][T13518] ? swap_cache_get_folio+0x1e0/0x1f0 [ 218.739503][T13518] do_swap_page+0x34d/0x2150 [ 218.739588][T13518] ? __rcu_read_lock+0x36/0x50 [ 218.739686][T13518] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 218.739714][T13518] handle_mm_fault+0xb3e/0x2da0 [ 218.739754][T13518] do_user_addr_fault+0x634/0x1060 [ 218.739847][T13518] ? trace_page_fault_user+0x1f/0xa0 [ 218.739880][T13518] exc_page_fault+0x62/0xa0 [ 218.739924][T13518] asm_exc_page_fault+0x26/0x30 [ 218.739948][T13518] RIP: 0033:0x7fcd548f7f83 [ 218.739964][T13518] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 2e 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 218.740018][T13518] RSP: 002b:00007ffd76f92350 EFLAGS: 00010246 [ 218.740034][T13518] RAX: 0000000000000000 RBX: 0000555577aac500 RCX: 0000000000000000 [ 218.740094][T13518] RDX: 00007ffd76f92390 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.740109][T13518] RBP: 00007fcd54bb7da0 R08: 0000000000000000 R09: 0000000000000000 [ 218.740123][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000035816 [ 218.740215][T13518] R13: 00007fcd54bb5fac R14: 0000000000035511 R15: 00007ffd76f924c0 [ 218.740252][T13518] [ 218.743746][T13518] memory: usage 307200kB, limit 307200kB, failcnt 650 [ 218.991701][T13518] memory+swap: usage 256272kB, limit 9007199254740988kB, failcnt 0 [ 218.999658][T13518] kmem: usage 255596kB, limit 9007199254740988kB, failcnt 0 [ 219.007119][T13518] Memory cgroup stats for /syz5: [ 219.007283][T13518] cache 0 [ 219.015397][T13518] rss 24576 [ 219.018603][T13518] shmem 0 [ 219.021580][T13518] mapped_file 0 [ 219.025125][T13518] dirty 0 [ 219.028102][T13518] writeback 8192 [ 219.031693][T13518] workingset_refault_anon 123 [ 219.054617][T13518] workingset_refault_file 0 [ 219.067926][T13518] swap 303104 [ 219.075643][T13518] swapcached 1998848 [ 219.082531][T13518] pgpgin 36499 [ 219.091393][T13518] pgpgout 36484 [ 219.098032][T13518] pgfault 43662 [ 219.107669][T13518] pgmajfault 39 [ 219.111811][T13542] loop3: detected capacity change from 0 to 512 [ 219.121380][T13518] inactive_anon 16384 [ 219.129759][T13518] active_anon 45056 [ 219.129932][T13542] EXT4-fs: Ignoring removed nobh option [ 219.138223][T13518] inactive_file 0 [ 219.145815][T13518] active_file 0 [ 219.154571][T13518] unevictable 0 [ 219.159472][T13518] hierarchical_memory_limit 314572800 [ 219.175126][T13518] hierarchical_memsw_limit 9223372036854771712 [ 219.192964][T13518] total_cache 0 [ 219.197986][T13518] total_rss 24576 [ 219.204402][T13542] EXT4-fs (loop3): 1 orphan inode deleted [ 219.204813][T13518] total_shmem 0 [ 219.215857][T13542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.228621][T13518] total_mapped_file 0 [ 219.232967][T13518] total_dirty 0 [ 219.250233][T13518] total_writeback 8192 [ 219.262911][T13518] total_workingset_refault_anon 123 [ 219.279833][T13518] total_workingset_refault_file 0 [ 219.305489][T13518] total_swap 303104 [ 219.316717][T13518] total_swapcached 1998848 [ 219.338971][T13518] total_pgpgin 36499 [ 219.352578][T13087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.368253][T13518] total_pgpgout 36484 [ 219.386454][T13518] total_pgfault 43662 [ 219.398433][T13518] total_pgmajfault 39 [ 219.409014][T13518] total_inactive_anon 16384 [ 219.422876][T13518] total_active_anon 45056 [ 219.432968][T13553] netlink: 'syz.3.3195': attribute type 1 has an invalid length. [ 219.442553][T13518] total_inactive_file 0 [ 219.453490][T13518] total_active_file 0 [ 219.462810][T13518] total_unevictable 0 [ 219.473441][T13518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3184,pid=13518,uid=0 [ 219.506013][T13518] Memory cgroup out of memory: Killed process 13518 (syz.5.3184) total-vm:96084kB, anon-rss:1248kB, file-rss:22296kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 219.772976][T13575] netlink: 'syz.3.3205': attribute type 13 has an invalid length. [ 219.784272][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'. [ 219.800144][T13575] netlink: 'syz.3.3205': attribute type 13 has an invalid length. [ 219.808368][ T4035] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.814988][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3205'. [ 219.828034][ T4035] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.846114][ T4035] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.869537][ T4035] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.909850][T13579] loop7: detected capacity change from 0 to 512 [ 219.921022][T13579] EXT4-fs: Ignoring removed bh option [ 219.931577][T13579] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 219.944828][T13579] EXT4-fs (loop7): 1 truncate cleaned up [ 219.952908][T13579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.977079][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 219.977094][ T28] audit: type=1400 audit(1781284155.220:1972): avc: denied { write } for pid=13578 comm="syz.7.3207" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.032405][T13585] vlan2: entered allmulticast mode [ 220.052696][T13585] bond0: entered allmulticast mode [ 220.061619][ T4961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.075347][T13585] bond_slave_0: entered allmulticast mode [ 220.082862][T13585] bond_slave_1: entered allmulticast mode [ 220.090461][T13585] bridge0: port 3(vlan2) entered blocking state [ 220.134862][T13585] bridge0: port 3(vlan2) entered disabled state [ 220.143290][T13585] vlan2: entered promiscuous mode [ 220.149384][T13585] bond0: entered promiscuous mode [ 220.154472][T13585] bond_slave_0: entered promiscuous mode [ 220.160333][T13585] bond_slave_1: entered promiscuous mode [ 220.171064][T13585] bridge0: port 3(vlan2) entered blocking state [ 220.177390][T13585] bridge0: port 3(vlan2) entered forwarding state [ 220.362505][ T28] audit: type=1326 audit(1781284155.600:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fb0ace59 code=0x7ffc0000 [ 220.391807][ T28] audit: type=1326 audit(1781284155.600:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fb0ace59 code=0x7ffc0000 [ 220.419732][ T28] audit: type=1326 audit(1781284155.600:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe6fb0ace59 code=0x7ffc0000 [ 220.467485][ T28] audit: type=1326 audit(1781284155.600:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fb0ace59 code=0x7ffc0000 [ 220.520822][ T28] audit: type=1326 audit(1781284155.660:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fb0ace59 code=0x7ffc0000 [ 220.589001][ T28] audit: type=1326 audit(1781284155.660:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe6fb0acbc2 code=0x7ffc0000 [ 220.595328][T13621] loop4: detected capacity change from 0 to 512 [ 220.671776][ T28] audit: type=1326 audit(1781284155.660:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe6fb0acc57 code=0x7ffc0000 [ 220.751440][T13621] EXT4-fs: Ignoring removed oldalloc option [ 220.752077][ T28] audit: type=1326 audit(1781284155.660:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe6fb069b51 code=0x7ffc0000 [ 220.816526][T13621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.839406][T13621] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.857293][ T28] audit: type=1326 audit(1781284155.660:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13609 comm="syz.3.3220" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe6fb0adc49 code=0x7ffc0000 [ 220.922907][T13621] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #18: comm syz.4.3224: corrupted inode contents [ 220.959889][T13621] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 220.960081][T13621] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #18: comm syz.4.3224: mark_inode_dirty error [ 221.002387][T13621] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 221.002577][T13621] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #18: comm syz.4.3224: corrupted inode contents [ 221.046846][T13621] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 221.047121][T13621] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #18: comm syz.4.3224: mark_inode_dirty error [ 221.096376][T13621] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 221.096508][T13621] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #18: comm syz.4.3224: mark inode dirty (error -117) [ 221.128418][T13621] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 221.128640][T13621] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 221.161915][T13642] Invalid argument reading file caps for ./file0 [ 221.235217][T13645] bridge1: entered promiscuous mode [ 221.255754][T13645] bridge1: entered allmulticast mode [ 221.387298][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.575892][T13653] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.671664][T13657] loop5: detected capacity change from 0 to 1764 [ 221.703208][T13655] loop3: detected capacity change from 0 to 4096 [ 221.744142][T13655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.755371][T13657] 9p: Bad value for 'rfdno' [ 221.792797][T13655] EXT4-fs error (device loop3): ext4_empty_dir:3101: inode #12: block 80: comm syz.3.3238: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 221.821762][T13655] EXT4-fs warning (device loop3): ext4_empty_dir:3104: inode #12: comm syz.3.3238: directory missing '..' [ 221.834025][T13664] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3242'. [ 221.887222][T13664] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.894570][T13664] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.915616][T13087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.939448][T13664] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3242'. [ 223.263624][T13689] Set syz1 is full, maxelem 65536 reached [ 223.643668][T13726] netlink: 'syz.9.3270': attribute type 1 has an invalid length. [ 223.665196][T13726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.758771][T13737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3275'. [ 223.895219][T13749] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 224.040901][T13758] loop4: detected capacity change from 0 to 512 [ 224.048564][T13758] EXT4-fs: Ignoring removed nobh option [ 224.087847][T13758] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3284: Failed to acquire dquot type 0 [ 224.111639][T13758] loop4: lost filesystem error report for type 5 error -5 [ 224.115244][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 224.126828][T13758] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.3284: corrupted inode contents [ 224.128888][ C0] EXT4-fs (loop4): initial error at time 1781284159: ext4_acquire_dquot:7034 [ 224.149538][ C0] EXT4-fs (loop4): last error at time 1781284159: ext4_acquire_dquot:7034 [ 224.153067][T13758] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 224.160683][T13758] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.3284: mark_inode_dirty error [ 224.182085][T13758] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 224.184191][T13758] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.3284: corrupted inode contents [ 224.211545][T13758] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 224.211837][T13758] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.3284: mark_inode_dirty error [ 224.234781][T13758] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 224.235071][T13758] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.3284: corrupted inode contents [ 224.257616][T13758] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 224.274594][T13758] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 224.292861][T13758] loop4: lost filesystem error report for type 5 error -117 [ 224.293619][T13758] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.3284: corrupted inode contents [ 224.313902][T13758] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.3284: mark_inode_dirty error [ 224.327549][T13758] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 224.338147][T13758] loop4: lost filesystem error report for type 5 error -117 [ 224.340122][T13758] EXT4-fs (loop4): 1 truncate cleaned up [ 224.366696][T13758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.380032][T13758] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.459572][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.772999][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3292'. [ 225.072859][T13790] netlink: 'syz.5.3296': attribute type 21 has an invalid length. [ 225.082672][T13790] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3296'. [ 225.122391][T13793] gretap1: entered allmulticast mode [ 225.130496][T13793] team0: Port device gretap1 added [ 225.141028][T13793] bridge0: port 3(team0) entered blocking state [ 225.147575][T13793] bridge0: port 3(team0) entered disabled state [ 225.170233][T13793] team0: entered allmulticast mode [ 225.175554][T13793] team_slave_0: entered allmulticast mode [ 225.181429][T13793] team_slave_1: entered allmulticast mode [ 225.188747][T13793] team0: entered promiscuous mode [ 225.193912][T13793] team_slave_0: entered promiscuous mode [ 225.199927][T13793] team_slave_1: entered promiscuous mode [ 225.205816][T13793] gretap1: entered promiscuous mode [ 225.435969][T13801] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 225.707052][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 225.707084][ T28] audit: type=1326 audit(1781284160.950:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13806 comm="syz.3.3304" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6fb0ace59 code=0x0 [ 225.843741][T13816] netlink: 'syz.5.3308': attribute type 1 has an invalid length. [ 225.859684][T13816] bond2: entered promiscuous mode [ 225.865284][T13816] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.886817][T13816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.910533][T13816] bond2: (slave bond3): making interface the new active one [ 225.918410][T13816] bond3: entered promiscuous mode [ 225.924409][T13816] bond2: (slave bond3): Enslaving as an active interface with an up link [ 226.035397][T13826] loop4: detected capacity change from 0 to 512 [ 226.077052][T13826] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.088693][T13826] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 226.099376][T13826] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3312: Corrupt directory, running e2fsck is recommended [ 226.116569][T13826] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 226.137159][T13826] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3312: corrupted in-inode xattr: e_name out of bounds [ 226.151457][T13826] fserror_report: 2 callbacks suppressed [ 226.151468][T13826] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 226.157689][T13826] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3312: couldn't read orphan inode 15 (err -117) [ 226.166914][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 226.166955][ C0] EXT4-fs (loop4): initial error at time 1781284161: ext4_iget_extra_inode:5128: inode 15 [ 226.166994][ C0] EXT4-fs (loop4): last error at time 1781284161: ext4_iget_extra_inode:5128: inode 15 [ 226.205196][T13826] loop4: lost filesystem error report for type 5 error -117 [ 226.214962][T13826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.243241][ T28] audit: type=1400 audit(1781284161.480:2027): avc: denied { write } for pid=13825 comm="syz.4.3312" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.243260][T13826] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.243288][T13826] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 226.299757][T13826] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3312: Corrupt directory, running e2fsck is recommended [ 226.313926][T13837] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.328941][T13837] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 226.339639][T13837] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3312: Corrupt directory, running e2fsck is recommended [ 226.352663][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881376c9600: rx timeout, send abort [ 226.363407][T13826] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.384782][T13826] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 226.395280][T13826] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3312: Corrupt directory, running e2fsck is recommended [ 226.411558][T13826] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 226.425597][ T28] audit: type=1400 audit(1781284161.660:2028): avc: denied { write } for pid=13825 comm="syz.4.3312" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.458183][T13840] loop7: detected capacity change from 0 to 1024 [ 226.459231][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.466735][T13840] EXT4-fs: Ignoring removed bh option [ 226.497455][T13840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.509967][T13840] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.529489][ T28] audit: type=1400 audit(1781284161.770:2029): avc: denied { write } for pid=13839 comm="syz.7.3317" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.553674][T13840] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 3) [ 226.572999][T13840] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 226.585527][T13840] EXT4-fs (loop7): This should not happen!! Data will be lost [ 226.585527][T13840] [ 226.599171][T13844] netlink: 'syz.4.3318': attribute type 21 has an invalid length. [ 226.610349][T13840] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.625495][T13840] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.655664][T13840] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.670325][T13847] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.691277][T13847] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.711251][T13849] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3320'. [ 226.740857][T13851] loop4: detected capacity change from 0 to 512 [ 226.749459][T13840] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.787569][T13840] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.822210][T13840] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.846478][T13854] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 226.848141][T13840] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #15: block 3: comm syz.7.3317: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.854345][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881376c9600: abort rx timeout. Force session deactivation [ 226.907973][T13854] bond1: entered promiscuous mode [ 226.938360][T13854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.957558][T13851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.974790][T13858] loop5: detected capacity change from 0 to 512 [ 227.044519][T13851] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.061414][T13858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.075505][T13856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.114081][T13856] bond1: (slave bond2): making interface the new active one [ 227.129339][T13858] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.153521][T13856] bond2: entered promiscuous mode [ 227.161759][ T28] audit: type=1400 audit(1781284162.390:2030): avc: denied { write } for pid=13850 comm="syz.4.3321" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.188004][T13856] bond1: (slave bond2): Enslaving as an active interface with an up link [ 227.220258][ T28] audit: type=1400 audit(1781284162.440:2031): avc: denied { write } for pid=13857 comm="syz.5.3323" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.280668][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.310959][T11128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.331713][T13865] netlink: 'syz.4.3324': attribute type 16 has an invalid length. [ 227.361340][T13867] loop5: detected capacity change from 0 to 256 [ 227.362997][T13865] netlink: 'syz.4.3324': attribute type 17 has an invalid length. [ 227.368544][T13863] netlink: 'syz.3.3325': attribute type 21 has an invalid length. [ 227.399657][ T4052] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 227.413576][T13867] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.421298][ T4052] EXT4-fs (loop7): This should not happen!! Data will be lost [ 227.421298][ T4052] [ 227.450518][T13867] FAT-fs (loop5): Directory bread(block 64) failed [ 227.461102][T13867] FAT-fs (loop5): Directory bread(block 65) failed [ 227.465383][ T4961] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 227.477836][T13867] FAT-fs (loop5): Directory bread(block 66) failed [ 227.487944][ T4961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.495339][T13867] FAT-fs (loop5): Directory bread(block 67) failed [ 227.517920][T13867] FAT-fs (loop5): Directory bread(block 68) failed [ 227.533370][T13867] FAT-fs (loop5): Directory bread(block 69) failed [ 227.547834][T13867] FAT-fs (loop5): Directory bread(block 70) failed [ 227.558704][T13869] netlink: 'syz.7.3327': attribute type 13 has an invalid length. [ 227.575199][T13867] FAT-fs (loop5): Directory bread(block 71) failed [ 227.588392][T13867] FAT-fs (loop5): Directory bread(block 72) failed [ 227.603313][T13867] FAT-fs (loop5): Directory bread(block 73) failed [ 227.614383][T13863] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3325'. [ 227.867286][ T28] audit: type=1400 audit(1781284163.110:2032): avc: denied { write } for pid=13880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.922590][ T28] audit: type=1400 audit(1781284163.150:2033): avc: denied { write } for pid=13895 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.012096][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811961f200: rx timeout, send abort [ 228.038924][ T28] audit: type=1400 audit(1781284163.280:2034): avc: denied { read } for pid=13906 comm="syz.7.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 228.512115][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811cfb9400: rx timeout, send abort [ 228.520449][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811961f200: abort rx timeout. Force session deactivation [ 228.795282][ T28] audit: type=1400 audit(1781284164.040:2035): avc: denied { write } for pid=13913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.891454][T13936] syzkaller1: entered promiscuous mode [ 228.914535][T13936] syzkaller1: entered allmulticast mode [ 229.020430][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811cfb9400: abort rx timeout. Force session deactivation [ 229.203929][T13970] loop3: detected capacity change from 0 to 128 [ 229.214656][T13969] loop5: detected capacity change from 0 to 512 [ 229.241891][T13970] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.250493][T13972] netlink: 'syz.7.3350': attribute type 21 has an invalid length. [ 229.271347][T13969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.318169][T13972] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3350'. [ 229.373458][ T49] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.844209][T14011] loop3: detected capacity change from 0 to 512 [ 229.881442][T14011] EXT4-fs: inline encryption not supported [ 229.922569][T14011] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.947260][T11128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.977381][T14011] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 230.064324][T14011] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 230.089455][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 230.110500][T14011] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3360: bg 0: block 248: padding at end of block bitmap is not set [ 230.137285][T14011] loop3: lost filesystem error report for type 5 error -117 [ 230.137575][T14011] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.3360: Failed to acquire dquot type 1 [ 230.144964][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 230.144980][ C0] EXT4-fs (loop3): last error at time 1781284165: ext4_validate_block_bitmap:441 [ 230.172115][T14011] loop3: lost filesystem error report for type 5 error -28 [ 230.177190][T14011] EXT4-fs (loop3): 1 truncate cleaned up [ 230.197402][T14011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 230.304681][T14027] loop4: detected capacity change from 0 to 512 [ 230.333964][T14027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 230.349513][T13087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 230.368811][T14027] EXT4-fs (loop4): 1 truncate cleaned up [ 230.417055][T14027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.545142][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.712608][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3381'. [ 230.730460][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3381'. [ 230.760587][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3381'. [ 230.779453][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3381'. [ 231.536027][T14078] netlink: 'syz.4.3391': attribute type 13 has an invalid length. [ 231.638098][ T4056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.667627][ T4056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.769519][ T4056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.790369][ T4056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.874168][ T4056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.884630][ T4056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.931655][ T4056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.954582][ T4056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.120425][ T4056] vlan2: left promiscuous mode [ 232.125609][ T4056] bond0: left promiscuous mode [ 232.130467][ T4056] bond_slave_0: left promiscuous mode [ 232.135993][ T4056] bond_slave_1: left promiscuous mode [ 232.136216][T10403] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 232.142142][ T4056] bridge0: port 3(vlan2) entered disabled state [ 232.149127][ T3518] Bluetooth: hci0: command 0x1003 tx timeout [ 232.170077][ T4056] bridge_slave_1: left allmulticast mode [ 232.184717][ T4056] bridge_slave_1: left promiscuous mode [ 232.190480][ T4056] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.209044][ T4056] bridge_slave_0: left allmulticast mode [ 232.214936][ T4056] bridge_slave_0: left promiscuous mode [ 232.220607][ T4056] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.234140][T14111] netlink: 'syz.5.3402': attribute type 16 has an invalid length. [ 232.250532][T14111] netlink: 'syz.5.3402': attribute type 17 has an invalid length. [ 232.379571][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.388590][ T4056] bond_slave_0: left allmulticast mode [ 232.395724][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.404769][ T4056] bond_slave_1: left allmulticast mode [ 232.421035][ T4056] bond0 (unregistering): Released all slaves [ 232.438429][ T4056] bond1 (unregistering): (slave bond2): Releasing backup interface [ 232.447138][ T4056] bond2 (unregistering): left promiscuous mode [ 232.454069][ T4056] bond1 (unregistering): Released all slaves [ 232.463844][ T4056] bond2 (unregistering): Released all slaves [ 232.651920][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.659381][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.688679][T14122] loop7: detected capacity change from 0 to 4096 [ 232.722112][T14122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.764211][T14129] loop5: detected capacity change from 0 to 128 [ 232.773474][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 232.773490][ T28] audit: type=1400 audit(1781284168.010:2065): avc: denied { write } for pid=14121 comm="syz.7.3407" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.819225][T14129] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.837391][T14129] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.874666][ T28] audit: type=1400 audit(1781284168.110:2066): avc: denied { write } for pid=14128 comm="syz.5.3409" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.896569][ T28] audit: type=1400 audit(1781284168.120:2067): avc: denied { create } for pid=14128 comm="syz.5.3409" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 232.939998][ T28] audit: type=1400 audit(1781284168.140:2068): avc: denied { write } for pid=14128 comm="syz.5.3409" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.977160][ T28] audit: type=1400 audit(1781284168.220:2069): avc: denied { write } for pid=4961 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.001791][ T28] audit: type=1400 audit(1781284168.240:2070): avc: denied { write } for pid=4961 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.028310][ T4961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.037843][ T28] audit: type=1400 audit(1781284168.240:2071): avc: denied { write } for pid=4961 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.061524][ T28] audit: type=1400 audit(1781284168.240:2072): avc: denied { write } for pid=4961 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.088613][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.111269][ T28] audit: type=1400 audit(1781284168.240:2073): avc: denied { write } for pid=4961 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.133789][ T28] audit: type=1400 audit(1781284168.240:2074): avc: denied { write } for pid=4961 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 233.159551][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.174920][T11128] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.276678][ T4056] hsr_slave_0: left promiscuous mode [ 233.282462][ T4056] hsr_slave_1: left promiscuous mode [ 233.293923][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.311637][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.325499][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.340851][ T4056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.352626][ T4056] veth1_macvtap: left promiscuous mode [ 233.358387][ T4056] veth0_macvtap: left promiscuous mode [ 233.364070][ T4056] veth1_vlan: left promiscuous mode [ 233.369594][ T4056] veth0_vlan: left promiscuous mode [ 233.462446][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3414'. [ 233.485188][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3414'. [ 233.501129][ T4056] team0 (unregistering): Port device team_slave_1 removed [ 233.513283][ T4056] team0 (unregistering): Port device team_slave_0 removed [ 233.552986][ T3439] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 233.562357][ T3439] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.571675][ T3439] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 233.582045][ T3439] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.599589][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3414'. [ 233.610117][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3414'. [ 233.620049][ T3439] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 233.629414][ T3439] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.639241][ T3439] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 233.649464][ T3439] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.670774][ T3439] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.691457][ T3439] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.706027][ T3439] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.733460][ T3439] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.838522][T14082] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.845701][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3416'. [ 233.869811][T14082] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.884400][T14082] bridge_slave_0: entered allmulticast mode [ 233.898590][T14082] bridge_slave_0: entered promiscuous mode [ 233.949632][T14082] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.967882][T14082] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.977503][T14168] netlink: 'syz.4.3419': attribute type 21 has an invalid length. [ 233.986235][T14082] bridge_slave_1: entered allmulticast mode [ 233.993053][T14082] bridge_slave_1: entered promiscuous mode [ 234.017726][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 234.044604][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 234.073971][T14082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.075579][T14175] loop7: detected capacity change from 0 to 512 [ 234.137377][T14082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.207567][T14082] team0: Port device team_slave_0 added [ 234.232906][T14082] team0: Port device team_slave_1 added [ 234.284403][T14082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.308093][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.380793][T14193] __nla_validate_parse: 1 callbacks suppressed [ 234.380814][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 234.405849][T14082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.451247][T14082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.480199][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.561760][T14082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.345324][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 235.414225][T14082] hsr_slave_0: entered promiscuous mode [ 235.429216][T14082] hsr_slave_1: entered promiscuous mode [ 235.632003][T14082] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.661218][T14082] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.706356][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 235.742669][T14082] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.776847][T14082] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.888799][T14082] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.919008][T14082] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.037837][T14082] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.063878][T14082] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.116683][T14284] loop7: detected capacity change from 0 to 1764 [ 236.134931][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 236.187857][T14284] 9p: Bad value for 'rfdno' [ 236.196897][T14082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.206597][T14082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.225052][T14082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.246124][T14082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.263922][T14082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.287476][T14082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.304805][T14082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.322976][T14082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.371272][T14082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.389295][T14082] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.399045][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.406150][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.423800][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.430926][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.608613][T14082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.805822][T14082] veth0_vlan: entered promiscuous mode [ 236.821162][T14082] veth1_vlan: entered promiscuous mode [ 236.862507][T14082] veth0_macvtap: entered promiscuous mode [ 236.882659][T14082] veth1_macvtap: entered promiscuous mode [ 236.897716][T14082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.920835][T14082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.934938][ T4039] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.951607][ T4039] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.968063][ T4039] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.985413][ T4039] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.259980][T14437] syzkaller1: entered promiscuous mode [ 237.270879][T14437] syzkaller1: entered allmulticast mode [ 237.400127][T14444] loop5: detected capacity change from 0 to 512 [ 237.548882][T14451] loop6: detected capacity change from 0 to 2048 [ 237.605465][T14451] loop6: p1 p2 p3 [ 237.609387][T14451] loop6: p1 size 16777216 extends beyond EOD, truncated [ 237.628614][T14455] loop5: detected capacity change from 0 to 512 [ 237.638464][T14451] loop6: p2 size 458752 extends beyond EOD, truncated [ 237.660881][T14451] loop6: p3 start 3036741376 is beyond EOD, truncated [ 237.703879][T14455] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.3465: bad orphan inode 13 [ 237.730745][T14455] loop5: lost filesystem error report for type 5 error -117 [ 237.732611][T14455] ext4_test_bit(bit=12, block=4) = 1 [ 237.741423][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 237.741460][ C1] EXT4-fs (loop5): initial error at time 1781284172: ext4_orphan_get:1423 [ 237.741621][ C1] EXT4-fs (loop5): last error at time 1781284172: ext4_orphan_get:1423 [ 237.783872][T14455] is_bad_inode(inode)=0 [ 237.789863][T14455] NEXT_ORPHAN(inode)=0 [ 237.794406][T14455] max_ino=32 [ 237.798123][T14455] i_nlink=1 [ 237.814044][T14465] tls_set_device_offload: netdev not found [ 237.839578][T14455] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.845547][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 237.862923][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 237.934655][T11128] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.225109][T14489] loop5: detected capacity change from 0 to 128 [ 238.236507][T14488] loop7: detected capacity change from 0 to 512 [ 238.253350][T14489] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.288748][T14488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.305782][T14489] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.344424][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 238.344439][ T28] audit: type=1400 audit(1781284173.580:2103): avc: denied { write } for pid=14486 comm="syz.5.3478" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.384857][ T28] audit: type=1400 audit(1781284173.600:2104): avc: denied { write } for pid=14486 comm="syz.5.3478" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.431410][T11128] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.444856][ T4961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.791707][T14516] loop6: detected capacity change from 0 to 512 [ 238.813279][T14516] EXT4-fs: Ignoring removed bh option [ 238.846605][T14516] EXT4-fs (loop6): orphan cleanup on readonly fs [ 238.873016][T14516] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 238.892879][T14516] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 238.911479][T14516] EXT4-fs (loop6): 1 truncate cleaned up [ 238.918231][T14516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.838512][T14525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 241.852958][T14525] batman_adv: batadv0: Adding interface: gretap1 [ 241.861269][T14525] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.865330][T14082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.902252][T14525] batman_adv: batadv0: Interface activated: gretap1 [ 241.971705][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3496'. [ 242.012379][T14547] netlink: 'syz.5.3498': attribute type 13 has an invalid length. [ 242.111674][ T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.191094][ T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.249906][ T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.315245][ T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.394197][T14570] loop5: detected capacity change from 0 to 1024 [ 242.425796][T14570] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.445074][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3507'. [ 242.510311][T14519] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.518472][T14519] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.526483][T14519] bridge_slave_0: entered allmulticast mode [ 242.533424][T14519] bridge_slave_0: entered promiscuous mode [ 242.543496][ T36] bridge_slave_1: left allmulticast mode [ 242.549700][ T36] bridge_slave_1: left promiscuous mode [ 242.555966][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.567541][ T36] bridge_slave_0: left allmulticast mode [ 242.573531][ T36] bridge_slave_0: left promiscuous mode [ 242.580069][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.673672][ T36] bond1 (unregistering): (slave geneve2): Releasing active interface [ 242.751210][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.762407][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.774043][ T36] bond0 (unregistering): Released all slaves [ 242.783255][ T36] bond1 (unregistering): Released all slaves [ 242.795746][ T36] bond2 (unregistering): Released all slaves [ 242.818418][T14519] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.832095][T14519] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.848660][T14519] bridge_slave_1: entered allmulticast mode [ 242.866616][T14519] bridge_slave_1: entered promiscuous mode [ 242.900062][T14519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.913775][ T36] tipc: Left network mode [ 242.922304][T14605] veth0_vlan: entered allmulticast mode [ 242.931114][T14519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.991820][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3518'. [ 243.076988][T14611] loop6: detected capacity change from 0 to 1024 [ 243.121769][T14611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.141480][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3519'. [ 243.152320][T14606] veth0_vlan (unregistering): left allmulticast mode [ 243.172027][T14620] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3528'. [ 243.186105][ T36] hsr_slave_0: left promiscuous mode [ 243.191916][ T36] hsr_slave_1: left promiscuous mode [ 243.198217][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.210502][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.219698][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.230437][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.252866][ T36] veth1_macvtap: left allmulticast mode [ 243.264555][ T36] veth1_macvtap: left promiscuous mode [ 243.270490][ T36] veth0_macvtap: left promiscuous mode [ 243.276200][ T36] veth1_vlan: left promiscuous mode [ 243.281702][ T36] veth0_vlan: left promiscuous mode [ 243.309189][ T28] audit: type=1400 audit(1781284178.550:2105): avc: denied { write } for pid=14618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.367061][ T28] audit: type=1400 audit(1781284178.610:2106): avc: denied { write } for pid=14638 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.442150][ T36] team0 (unregistering): Port device team_slave_1 removed [ 243.452891][ T36] team0 (unregistering): Port device team_slave_0 removed [ 243.506028][T14519] team0: Port device team_slave_0 added [ 243.523820][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 243.533896][T14519] team0: Port device team_slave_1 added [ 243.599050][T14519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.615892][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.642391][T14519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.660258][T14519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.674643][T14519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.707496][T14519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.718439][T14645] loop7: detected capacity change from 0 to 512 [ 243.785325][T14519] hsr_slave_0: entered promiscuous mode [ 243.786616][T14645] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3525: bad orphan inode 13 [ 243.804123][T14645] loop7: lost filesystem error report for type 5 error -117 [ 243.804634][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 243.819984][ C0] EXT4-fs (loop7): initial error at time 1781284179: ext4_orphan_get:1423 [ 243.829384][ C0] EXT4-fs (loop7): last error at time 1781284179: ext4_orphan_get:1423 [ 243.833240][T14519] hsr_slave_1: entered promiscuous mode [ 243.847760][T14645] ext4_test_bit(bit=12, block=4) = 1 [ 243.871702][T14519] debugfs: 'hsr0' already exists in 'hsr' [ 243.873787][T14645] is_bad_inode(inode)=0 [ 243.877722][T14519] Cannot create hsr debugfs directory [ 243.918120][T14645] NEXT_ORPHAN(inode)=0 [ 243.923651][T14645] max_ino=32 [ 243.929571][T14645] i_nlink=1 [ 243.954368][T14645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.984270][T14666] netlink: 'syz.6.3530': attribute type 13 has an invalid length. [ 244.020818][ T28] audit: type=1400 audit(1781284179.260:2107): avc: denied { write } for pid=14652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.080135][ T4961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.089306][ T28] audit: type=1400 audit(1781284179.320:2108): avc: denied { write } for pid=14674 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.397069][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 244.415100][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.434265][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.446504][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.462644][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.497251][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.508080][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.517855][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.527174][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.702704][ T28] audit: type=1400 audit(1781284179.940:2109): avc: denied { write } for pid=14693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.781418][ T28] audit: type=1400 audit(1781284180.010:2110): avc: denied { write } for pid=14711 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.833944][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 244.890824][T14718] netlink: 'syz.6.3543': attribute type 1 has an invalid length. [ 244.997434][T14519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.026678][T14519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.039056][T14735] loop7: detected capacity change from 0 to 128 [ 245.057608][T14519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.102168][T14519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.132167][T14519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.158929][ T28] audit: type=1400 audit(1781284180.400:2111): avc: denied { write } for pid=14722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.202584][T14748] loop7: detected capacity change from 0 to 256 [ 245.216551][T14748] vfat: Unknown parameter '' [ 245.255618][ T28] audit: type=1400 audit(1781284180.500:2112): avc: denied { write } for pid=14751 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.432515][T14519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.441684][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 245.450557][T14763] tunl0: Caught tx_queue_len zero misconfig [ 245.464109][T14519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.479303][T14519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.614424][T14519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.664877][T14519] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.694488][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.701690][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.730786][T14793] loop7: detected capacity change from 0 to 256 [ 245.772330][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.779507][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.819046][T14793] FAT-fs (loop7): IO charset iso8859-4 not found [ 245.858500][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3565'. [ 245.872167][ T28] audit: type=1400 audit(1781284181.110:2113): avc: denied { write } for pid=14784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.950619][ T28] audit: type=1400 audit(1781284181.190:2114): avc: denied { write } for pid=14807 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.164285][T14519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.200564][ T28] audit: type=1400 audit(1781284181.440:2115): avc: denied { write } for pid=14814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.376781][T14519] veth0_vlan: entered promiscuous mode [ 246.395888][T14519] veth1_vlan: entered promiscuous mode [ 246.441162][T14519] veth0_macvtap: entered promiscuous mode [ 246.460188][T14519] veth1_macvtap: entered promiscuous mode [ 246.496320][T14519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.515783][T14519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.539290][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.548456][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.564139][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.597615][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.686622][T14885] tipc: Started in network mode [ 246.691709][T14885] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 246.716209][T14885] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 246.741022][T14885] tipc: Enabled bearer , priority 10 [ 246.830990][ T3413] Process accounting resumed [ 246.972206][T14926] ip6_vti0: Caught tx_queue_len zero misconfig [ 247.050609][ T4039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.062542][ T4039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.080320][ T4039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.114873][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.320439][T14963] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 247.340401][T14963] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 247.515237][T14985] loop1: detected capacity change from 0 to 128 [ 247.579430][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.579430][ T12] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 247.596365][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.596365][ T12] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 247.629283][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.629283][ T12] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 247.670584][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.670584][ T12] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 247.719031][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.719031][ T12] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 247.764288][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.764288][ T12] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 247.808805][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.808805][ T12] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 247.849114][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.849114][ T12] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 247.864584][ T3399] tipc: Node number set to 1 [ 247.896864][ T12] kworker/u8:0: attempt to access beyond end of device [ 247.896864][ T12] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 247.953770][ T4039] kworker/u8:12: attempt to access beyond end of device [ 247.953770][ T4039] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 248.489396][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 248.489413][ T28] audit: type=1400 audit(1781284183.730:2133): avc: denied { write } for pid=15038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.572182][ T28] audit: type=1400 audit(1781284183.810:2134): avc: denied { write } for pid=15062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.815545][ T28] audit: type=1400 audit(1781284184.050:2135): avc: denied { write } for pid=15066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.875712][ T28] audit: type=1400 audit(1781284184.110:2136): avc: denied { write } for pid=15085 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 248.910756][ T28] audit: type=1326 audit(1781284184.120:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.5.3623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5493ce59 code=0x7ffc0000 [ 248.952102][ T28] audit: type=1326 audit(1781284184.120:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.5.3623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5493ce59 code=0x7ffc0000 [ 248.989444][ T28] audit: type=1326 audit(1781284184.120:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.5.3623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5493ce59 code=0x7ffc0000 [ 249.054158][ T28] audit: type=1326 audit(1781284184.120:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.5.3623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5493ce59 code=0x7ffc0000 [ 249.100262][ T28] audit: type=1326 audit(1781284184.120:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.5.3623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5493ce59 code=0x7ffc0000 [ 249.155181][ T28] audit: type=1326 audit(1781284184.120:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15086 comm="syz.5.3623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fcd5493ce59 code=0x7ffc0000 [ 249.487835][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3633'. [ 249.536945][T15145] loop4: detected capacity change from 0 to 512 [ 249.556128][T15145] EXT4-fs: Ignoring removed nobh option [ 249.582915][T15145] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 249.599850][T15145] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #13: comm syz.4.3635: inode has both inline data and extents flags [ 249.640682][T15145] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 249.644536][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 249.660206][ C0] EXT4-fs (loop4): initial error at time 1781284184: ext4_orphan_get:1397: inode 13 [ 249.669662][ C0] EXT4-fs (loop4): last error at time 1781284184: ext4_orphan_get:1397: inode 13 [ 249.678273][T15145] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3635: couldn't read orphan inode 13 (err -117) [ 249.716514][T15145] loop4: lost filesystem error report for type 5 error -117 [ 249.723622][T15145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.785041][T15150] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 249.805194][T15145] EXT4-fs warning (device loop4): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 249.820509][T15163] netlink: 'syz.1.3636': attribute type 13 has an invalid length. [ 249.875393][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.124065][T15187] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3640'. [ 250.140242][T15187] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3640'. [ 250.298199][T15193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.315736][T15193] bridge0: port 4(bond5) entered blocking state [ 250.340123][T15193] bridge0: port 4(bond5) entered disabled state [ 250.361365][T15193] bond5: entered allmulticast mode [ 250.390235][T15193] bond5: entered promiscuous mode [ 250.524670][T15205] netlink: 4684 bytes leftover after parsing attributes in process `syz.4.3647'. [ 250.868552][ T9] Process accounting resumed [ 250.910312][T15255] loop4: detected capacity change from 0 to 128 [ 251.193038][T15267] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.201077][T15267] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.336325][T15267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.364408][T15267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.679519][ T4035] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.697712][ T4035] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.730359][ T4035] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.755794][ T4035] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.818204][T15297] loop4: detected capacity change from 0 to 512 [ 251.870547][T15297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.919165][T15297] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.285361][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.429778][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 252.451544][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3684'. [ 252.477506][T15320] netlink: 'syz.4.3682': attribute type 5 has an invalid length. [ 252.487540][T15325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3684'. [ 252.520545][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3682'. [ 252.574336][T15320] geneve3: entered promiscuous mode [ 252.596355][T15320] geneve3: entered allmulticast mode [ 252.607535][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3686'. [ 252.620399][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 252.632568][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 252.648816][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 252.668143][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 253.024420][T15366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15366 comm=syz.6.3704 [ 253.276251][T15402] bridge_slave_0: Caught tx_queue_len zero misconfig [ 253.323555][T15404] loop4: detected capacity change from 0 to 128 [ 253.335726][T15410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15410 comm=syz.5.3724 [ 253.350699][T15404] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.374827][T15404] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.393253][T15410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.415845][T15413] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 253.426113][T15409] veth0_to_bond: Caught tx_queue_len zero misconfig [ 253.444382][ T4039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.458203][ T4039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.484130][ T4039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.497243][ T36] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.519331][ T4039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.564556][T15422] loop4: detected capacity change from 0 to 256 [ 253.583042][T15424] netlink: 4684 bytes leftover after parsing attributes in process `syz.5.3729'. [ 253.597985][T15422] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.060725][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 254.060744][ T28] audit: type=1400 audit(1781284189.300:2204): avc: denied { shutdown } for pid=15480 comm="syz.4.3732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 254.218953][T15500] syzkaller0: entered promiscuous mode [ 254.236435][T15500] syzkaller0: entered allmulticast mode [ 254.398411][T15530] veth0_vlan: entered allmulticast mode [ 254.454840][T15530] veth0_vlan (unregistering): left allmulticast mode [ 254.719654][T15562] __nla_validate_parse: 1 callbacks suppressed [ 254.719722][T15562] netlink: 4684 bytes leftover after parsing attributes in process `syz.6.3743'. [ 255.540753][ T3413] IPVS: starting estimator thread 0... [ 255.551056][T15594] IPVS: nq: FWM 3 0x00000003 - no destination available [ 255.636094][T15595] IPVS: using max 2400 ests per chain, 120000 per kthread [ 256.584186][ T28] audit: type=1400 audit(1781284191.820:2205): avc: denied { write } for pid=15634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.662899][ T28] audit: type=1400 audit(1781284191.900:2206): avc: denied { write } for pid=15645 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.740229][T15654] veth0_vlan: entered allmulticast mode [ 256.755930][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3773'. [ 256.778133][T15654] veth0_vlan (unregistering): left allmulticast mode [ 257.053859][T15666] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.086816][T15666] bond1: (slave lo): Enslaving as an active interface with an up link [ 257.095532][T15666] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 257.202826][ T28] audit: type=1400 audit(1781284192.440:2207): avc: denied { map } for pid=15677 comm="syz.6.3785" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 257.477663][T15701] hsr0: entered promiscuous mode [ 257.484057][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3794'. [ 257.494692][T15701] hsr_slave_0: left promiscuous mode [ 257.502175][T15701] hsr_slave_1: left promiscuous mode [ 257.510960][T15701] hsr0 (unregistering): left promiscuous mode [ 257.521321][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.535691][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.087248][T15742] veth0_vlan: entered allmulticast mode [ 259.100734][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3811'. [ 259.152810][T15742] veth0_vlan (unregistering): left allmulticast mode [ 259.295025][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3815'. [ 259.605727][T15762] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3820'. [ 259.813856][ T28] audit: type=1400 audit(1781284195.050:2208): avc: denied { write } for pid=15760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.878464][T15776] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3819'. [ 259.893502][ T28] audit: type=1400 audit(1781284195.130:2209): avc: denied { write } for pid=15775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.917159][T15776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.268366][T15799] netlink: 'syz.5.3832': attribute type 12 has an invalid length. [ 260.294169][T15799] netlink: 'syz.5.3832': attribute type 29 has an invalid length. [ 260.314364][T15799] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3832'. [ 260.332730][T15799] netlink: 'syz.5.3832': attribute type 2 has an invalid length. [ 260.344015][T15799] netlink: 'syz.5.3832': attribute type 3 has an invalid length. [ 260.364897][T15799] netlink: 15 bytes leftover after parsing attributes in process `syz.5.3832'. [ 260.932775][ T28] audit: type=1400 audit(1781284196.170:2210): avc: denied { write } for pid=15814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.993588][ T28] audit: type=1400 audit(1781284196.230:2211): avc: denied { write } for pid=15825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.711003][T15834] xt_hashlimit: size too large, truncated to 1048576 [ 262.810900][T15850] loop4: detected capacity change from 0 to 512 [ 262.834475][T15850] EXT4-fs: Ignoring removed bh option [ 262.873636][ T28] audit: type=1400 audit(1781284198.110:2212): avc: denied { write } for pid=15828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.897662][T15850] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 262.926908][T15850] EXT4-fs (loop4): 1 truncate cleaned up [ 262.945800][T15850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.976244][ T9] syz0: Port: 1 Link DOWN [ 262.992803][ T28] audit: type=1400 audit(1781284198.230:2213): avc: denied { write } for pid=15863 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.064861][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.078903][ T4035] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.090960][ T4035] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.153592][ T4035] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.164735][ T4035] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.233515][ T4035] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.252221][ T4035] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.299727][T15878] lo: Caught tx_queue_len zero misconfig [ 263.305648][T15878] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 263.325224][ T4035] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.338304][ T4035] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.388655][T15843] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.401086][T15843] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.408540][T15843] bridge_slave_0: entered allmulticast mode [ 263.415317][T15843] bridge_slave_0: entered promiscuous mode [ 263.423507][T15843] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.432473][T15843] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.439933][T15843] bridge_slave_1: entered allmulticast mode [ 263.446875][T15843] bridge_slave_1: entered promiscuous mode [ 263.467413][T15843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.486159][T15843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.518578][ T4035] batman_adv: batadv0: Interface deactivated: gretap1 [ 263.649124][ T4035] batman_adv: batadv0: Removing interface: gretap1 [ 263.668772][ T4035] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 263.737859][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.756576][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.766646][ T4035] bond0 (unregistering): Released all slaves [ 263.775218][ T4035] bond1 (unregistering): Released all slaves [ 263.786843][ T4035] bond2 (unregistering): (slave bond3): Releasing backup interface [ 263.796709][ T4035] bond2 (unregistering): Released all slaves [ 263.807983][ T4035] bond3 (unregistering): Released all slaves [ 263.817878][ T4035] bond4 (unregistering): (slave lo): Releasing backup interface [ 263.825846][ T4035] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 263.838069][ T4035] bond4 (unregistering): Released all slaves [ 263.848175][ T4035] bond5 (unregistering): Released all slaves [ 263.858833][T15843] team0: Port device team_slave_0 added [ 263.865947][T15843] team0: Port device team_slave_1 added [ 263.905657][T15843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.913401][T15843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.939629][T15843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.951394][T15843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.958472][T15843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.985627][T15843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.001120][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.009739][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.020453][ T4035] veth1_macvtap: left promiscuous mode [ 264.026133][ T4035] veth0_macvtap: left promiscuous mode [ 264.031829][ T4035] veth1_vlan: left promiscuous mode [ 264.037249][ T4035] veth0_vlan: left promiscuous mode [ 264.120042][ T4035] team0 (unregistering): Port device team_slave_1 removed [ 264.146247][ T4035] team0 (unregistering): Port device team_slave_0 removed [ 264.234849][T15843] hsr_slave_0: entered promiscuous mode [ 264.240957][T15843] hsr_slave_1: entered promiscuous mode [ 264.250313][T15843] debugfs: 'hsr0' already exists in 'hsr' [ 264.256284][T15843] Cannot create hsr debugfs directory [ 264.563621][ T4035] IPVS: stop unused estimator thread 0... [ 267.007577][T15977] xt_CT: No such helper "snmp_trap" [ 267.031347][T15980] loop4: detected capacity change from 0 to 512 [ 267.038185][T15980] EXT4-fs: Ignoring removed bh option [ 267.047529][T15980] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3886: corrupted in-inode xattr: e_value size too large [ 267.061800][T15908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.067590][T15980] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 267.070651][T15980] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3886: couldn't read orphan inode 15 (err -117) [ 267.079837][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 267.079852][ C0] EXT4-fs (loop4): initial error at time 1781284202: ext4_iget_extra_inode:5128: inode 15 [ 267.079894][ C0] EXT4-fs (loop4): last error at time 1781284202: ext4_iget_extra_inode:5128: inode 15 [ 267.109422][T15843] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 267.127696][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.149939][T15980] loop4: lost filesystem error report for type 5 error -117 [ 267.150442][T15843] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 267.150466][T15980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.178594][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.196873][T15843] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 267.217458][ T28] audit: type=1400 audit(1781284202.460:2214): avc: denied { watch } for pid=15979 comm="syz.4.3886" path="/240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.361463][ T28] audit: type=1400 audit(1781284202.600:2215): avc: denied { write } for pid=15985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.409669][ T28] audit: type=1400 audit(1781284202.640:2216): avc: denied { write } for pid=16007 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.517821][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.518347][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.535039][T15843] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 267.553234][T15843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.578983][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 267.609479][T16017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3891'. [ 267.641786][T16017] netlink: 'syz.4.3891': attribute type 39 has an invalid length. [ 267.702373][T15843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.717943][T15843] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.733612][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.740749][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.759038][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.766272][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.807851][T16039] lo: Caught tx_queue_len zero misconfig [ 267.937237][ T28] audit: type=1400 audit(1781284203.180:2217): avc: denied { write } for pid=16033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.010753][ T28] audit: type=1400 audit(1781284203.240:2218): avc: denied { write } for pid=16062 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.089439][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 268.136774][T15843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.289222][ T28] audit: type=1400 audit(1781284203.530:2219): avc: denied { write } for pid=16084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.357320][ T28] audit: type=1400 audit(1781284203.600:2220): avc: denied { write } for pid=16108 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.417305][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 268.452772][T15843] veth0_vlan: entered promiscuous mode [ 268.466794][T15843] veth1_vlan: entered promiscuous mode [ 268.498866][T15843] veth0_macvtap: entered promiscuous mode [ 268.515836][T15843] veth1_macvtap: entered promiscuous mode [ 268.559512][T15843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.581182][T15843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.615804][ T4039] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.628109][ T4039] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.651190][ T4039] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.660687][ T4035] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.677332][ T28] audit: type=1400 audit(1781284203.920:2221): avc: denied { write } for pid=16115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.764783][ T28] audit: type=1400 audit(1781284204.000:2222): avc: denied { write } for pid=16136 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.806634][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 268.823000][T16145] veth0_vlan: entered allmulticast mode [ 268.831887][T16145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3839'. [ 268.875980][T16145] veth0_vlan (unregistering): left allmulticast mode [ 268.942099][T16159] sctp: [Deprecated]: syz.5.3919 (pid 16159) Use of int in max_burst socket option. [ 268.942099][T16159] Use struct sctp_assoc_value instead [ 268.989414][ T28] audit: type=1400 audit(1781284204.230:2223): avc: denied { write } for pid=16143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.022406][T16163] netlink: 'syz.1.3918': attribute type 4 has an invalid length. [ 269.447041][T16199] syzkaller0: entered promiscuous mode [ 269.464359][T16199] syzkaller0: entered allmulticast mode [ 269.983228][T16238] xt_CT: No such helper "snmp_trap" [ 270.016556][T16248] netlink: 'syz.4.3935': attribute type 4 has an invalid length. [ 270.447690][T16280] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.455102][T16280] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.610461][T16280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.632779][T16280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.726827][ T4048] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.770791][ T4048] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.804479][ T4048] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.818556][ T4048] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.845084][T16322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3951'. [ 271.255165][T16373] loop4: detected capacity change from 0 to 1024 [ 271.294025][T16373] EXT4-fs: Ignoring removed bh option [ 271.320247][T16380] sctp: [Deprecated]: syz.1.3963 (pid 16380) Use of int in max_burst socket option. [ 271.320247][T16380] Use struct sctp_assoc_value instead [ 271.338965][T16373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.410966][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.503066][T16398] loop4: detected capacity change from 0 to 512 [ 271.526175][T16398] EXT4-fs: Ignoring removed nobh option [ 271.568788][T16398] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3965: Failed to acquire dquot type 0 [ 271.585170][T16398] loop4: lost filesystem error report for type 5 error -5 [ 271.588823][T16398] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.3965: corrupted inode contents [ 271.596137][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 271.596159][ C1] EXT4-fs (loop4): initial error at time 1781284206: ext4_acquire_dquot:7034 [ 271.596186][ C1] EXT4-fs (loop4): last error at time 1781284206: ext4_acquire_dquot:7034 [ 271.664110][T16416] netlink: 'syz.6.3972': attribute type 1 has an invalid length. [ 271.705737][T16416] bond2: entered promiscuous mode [ 271.721221][T16416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.760652][T16398] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 271.760875][T16398] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.3965: mark_inode_dirty error [ 271.798617][T16416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.805312][T16398] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 271.806514][T16398] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.3965: corrupted inode contents [ 271.819326][T16416] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 271.844236][T16398] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 271.846070][T16398] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.3965: mark_inode_dirty error [ 271.874249][T16416] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 271.881271][T16398] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 271.891937][T16398] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.3965: corrupted inode contents [ 271.917882][T16416] bond2: (slave ip6gre1): making interface the new active one [ 271.936011][T16416] ip6gre1: entered promiscuous mode [ 271.944865][T16398] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 271.946367][T16398] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 271.967180][T16398] loop4: lost filesystem error report for type 5 error -117 [ 271.967466][T16398] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.3965: corrupted inode contents [ 271.996726][T16416] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 272.007031][T16398] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 272.007225][T16398] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.3965: mark_inode_dirty error [ 272.044697][T16398] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 272.046680][T16398] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 272.089012][T16398] loop4: lost filesystem error report for type 5 error -117 [ 272.093646][T16398] EXT4-fs (loop4): 1 truncate cleaned up [ 272.119015][T16398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.154160][T16398] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.197303][T16398] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 272.207734][T16398] SELinux: failed to load policy [ 272.330085][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 272.330103][ T28] audit: type=1400 audit(1781284207.570:2345): avc: denied { write } for pid=16449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.336841][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.391381][ T28] audit: type=1400 audit(1781284207.630:2346): avc: denied { write } for pid=16469 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.589679][T16482] sctp: [Deprecated]: syz.4.3978 (pid 16482) Use of int in max_burst socket option. [ 272.589679][T16482] Use struct sctp_assoc_value instead [ 272.641863][T16482] loop4: detected capacity change from 0 to 128 [ 272.654257][T16484] ipip0: entered promiscuous mode [ 272.679542][T16482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 272.696151][T16482] System zones: 1-3, 19-19, 35-36 [ 272.709402][T16482] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.735686][T16482] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 272.781496][T16482] EXT4-fs warning (device loop4): ext4_group_extend:1861: can't shrink FS - resize aborted [ 272.814318][T11919] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.879104][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3982'. [ 273.014917][T16511] loop8: detected capacity change from 0 to 1024 [ 273.025230][T16511] EXT4-fs: Ignoring removed bh option [ 273.039393][T16511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.059603][ T28] audit: type=1400 audit(1781284208.300:2347): avc: denied { write } for pid=16510 comm="syz.8.3995" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 273.292456][ T3392] IPVS: starting estimator thread 0... [ 273.367286][T16540] syzkaller0: entered promiscuous mode [ 273.372949][T16540] syzkaller0: entered allmulticast mode [ 273.395029][T16538] IPVS: using max 2304 ests per chain, 115200 per kthread [ 273.457719][T16549] lo: Caught tx_queue_len zero misconfig [ 273.473745][T16549] sch_tbf: burst 1023 is lower than device lo mtu (1514) ! [ 273.827462][T15843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.853571][ T28] audit: type=1326 audit(1781284209.090:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffb88ce59 code=0x7ffc0000 [ 273.909071][ T28] audit: type=1326 audit(1781284209.090:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffb88ce59 code=0x7ffc0000 [ 273.963774][ T28] audit: type=1326 audit(1781284209.090:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffb88ce59 code=0x7ffc0000 [ 274.018555][ T28] audit: type=1326 audit(1781284209.090:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffb88ce59 code=0x7ffc0000 [ 274.071218][ T28] audit: type=1326 audit(1781284209.090:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5ffb88ce59 code=0x7ffc0000 [ 274.097262][ T28] audit: type=1326 audit(1781284209.090:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffb88ce59 code=0x7ffc0000 [ 274.125390][ T28] audit: type=1326 audit(1781284209.120:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffb88ce59 code=0x7ffc0000 [ 274.257036][T16586] IPVS: fo: FWM 3 0x00000003 - no destination available [ 274.553718][T16608] loop8: detected capacity change from 0 to 512 [ 274.596361][T16608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec19c, mo2=0002] [ 274.626097][T16608] System zones: 1-12 [ 274.636546][T16608] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.4036: corrupted in-inode xattr: e_value size too large [ 274.667589][T16608] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 274.667782][T16608] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.4036: couldn't read orphan inode 15 (err -117) [ 274.676994][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 274.677014][ C0] EXT4-fs (loop8): initial error at time 1781284209: ext4_iget_extra_inode:5128: inode 15 [ 274.677037][ C0] EXT4-fs (loop8): last error at time 1781284209: ext4_iget_extra_inode:5128: inode 15 [ 274.734844][T16608] loop8: lost filesystem error report for type 5 error -117 [ 274.735492][T16608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.763691][T16613] loop4: detected capacity change from 0 to 512 [ 274.775844][T16613] EXT4-fs: Ignoring removed bh option [ 274.794574][T16613] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 274.824063][T15843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.836562][T16613] EXT4-fs (loop4): 1 truncate cleaned up [ 274.845376][T16613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.933609][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4040'. [ 274.952207][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4040'. [ 274.973247][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.041222][T16635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4046'. [ 275.657491][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4076'. [ 275.668015][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4076'. [ 275.677137][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4076'. [ 276.091982][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4096'. [ 276.205095][T16754] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4099'. [ 276.606642][T16781] ip6tnl0: Caught tx_queue_len zero misconfig [ 276.606821][T16779] random: crng reseeded on system resumption [ 276.629468][T16779] Unrecognized hibernate image header format! [ 276.641378][T16779] PM: hibernation: Image mismatch: architecture specific data [ 276.949116][T16800] futex_wake_op: syz.6.4118 tries to shift op by 32; fix this program [ 277.074551][T16804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4120'. [ 277.297874][T16815] xt_hashlimit: size too large, truncated to 1048576 [ 277.421795][T16822] syzkaller1: entered promiscuous mode [ 277.437985][T16822] syzkaller1: entered allmulticast mode [ 277.572154][T16828] loop4: detected capacity change from 0 to 1024 [ 277.585876][T16828] EXT4-fs: Mount option(s) incompatible with ext3 [ 277.659203][T16832] loop4: detected capacity change from 0 to 512 [ 277.686883][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 277.686899][ T28] audit: type=1400 audit(1781284212.930:2396): avc: denied { cmd } for pid=16834 comm="syz.6.4131" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=io_uring permissive=1 [ 277.742754][T16832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.768189][T16832] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.776532][T16843] IPVS: nq: FWM 3 0x00000003 - no destination available [ 277.808684][ T28] audit: type=1400 audit(1781284213.030:2397): avc: denied { write } for pid=16831 comm="syz.4.4132" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.853426][T16846] netlink: 'syz.6.4136': attribute type 1 has an invalid length. [ 277.873500][T16846] netlink: 'syz.6.4136': attribute type 4 has an invalid length. [ 277.902653][T16846] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4136'. [ 278.142156][T16865] lo: Caught tx_queue_len zero misconfig [ 278.158350][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'. [ 278.209357][T16871] team_slave_1: Caught tx_queue_len zero misconfig [ 278.216073][ T28] audit: type=1400 audit(1781284213.450:2398): avc: denied { accept } for pid=16869 comm="syz.6.4147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 278.296680][ T28] audit: type=1326 audit(1781284213.530:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.4149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04aab7ce59 code=0x7ffc0000 [ 278.379269][T16875] netem: change failed [ 278.393007][ T28] audit: type=1326 audit(1781284213.530:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.4149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04aab7ce59 code=0x7ffc0000 [ 278.485118][ T28] audit: type=1326 audit(1781284213.570:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.4149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04aab7ce59 code=0x7ffc0000 [ 278.520273][T16878] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 278.564697][ T28] audit: type=1326 audit(1781284213.570:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.4149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04aab7ce59 code=0x7ffc0000 [ 278.619346][ T28] audit: type=1326 audit(1781284213.580:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.4149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f04aab7ce59 code=0x7ffc0000 [ 278.668791][ T28] audit: type=1326 audit(1781284213.580:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.4149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04aab7ce59 code=0x7ffc0000 [ 278.720956][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4153'. [ 278.730133][ T28] audit: type=1326 audit(1781284213.580:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16872 comm="syz.1.4149" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04aab7ce59 code=0x7ffc0000 [ 278.767140][T16889] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4153'. [ 278.840474][T16893] program syz.5.4156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.904996][T11919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.001071][T16904] random: crng reseeded on system resumption [ 279.020941][T16902] policy can only be matched on NF_INET_PRE_ROUTING [ 279.020957][T16902] unable to load match [ 279.203930][T16908] syzkaller0: entered promiscuous mode [ 279.219388][T16908] syzkaller0: entered allmulticast mode [ 279.348725][T16927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.367393][T16929] lo: entered allmulticast mode [ 279.369414][T16927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.387492][T16928] lo: left allmulticast mode [ 279.410933][T16932] loop8: detected capacity change from 0 to 128 [ 279.437544][T16932] EXT4-fs: Ignoring removed orlov option [ 279.448728][ T3292] udevd[3292]: incorrect ext4 checksum on /dev/loop8 [ 279.458017][T16932] EXT4-fs (loop8): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 279.466560][T16934] netem: change failed [ 279.600048][T16946] netlink: 'syz.1.4179': attribute type 30 has an invalid length. [ 279.602023][T16927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.611057][T16946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4179'. [ 279.621728][T16927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.633857][T16946] netlink: 'syz.1.4179': attribute type 30 has an invalid length. [ 279.642659][ T4035] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.652352][ T4035] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.662074][ T4035] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.671569][T16946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4179'. [ 279.682023][ T4035] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.781259][T16954] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 279.789688][T16953] loop8: detected capacity change from 0 to 512 [ 279.799589][ T3378] IPVS: starting estimator thread 0... [ 279.851391][T16953] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 279.894927][T16953] EXT4-fs (loop8): 1 truncate cleaned up [ 279.895624][T16955] IPVS: using max 2304 ests per chain, 115200 per kthread [ 279.906382][T16953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.080290][T16950] ================================================================== [ 280.088476][T16950] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 280.096345][T16950] [ 280.098692][T16950] write to 0xffffea0004bbd718 of 8 bytes by task 16824 on cpu 0: [ 280.106432][T16950] __filemap_remove_folio+0x201/0x2e0 [ 280.111858][T16950] filemap_remove_folio+0x6d/0x1d0 [ 280.117008][T16950] truncate_inode_folio+0x42/0x50 [ 280.122061][T16950] shmem_undo_range+0x27f/0xb60 [ 280.126939][T16950] shmem_evict_inode+0x132/0x550 [ 280.131927][T16950] evict+0x2a5/0x510 [ 280.135858][T16950] iput+0x430/0x5a0 [ 280.139687][T16950] dentry_unlink_inode+0x26a/0x280 [ 280.144835][T16950] __dentry_kill+0x142/0x4c0 [ 280.149453][T16950] finish_dput+0x2b/0x210 [ 280.153835][T16950] dput+0x52/0x60 [ 280.157502][T16950] __fput+0x43e/0x630 [ 280.161518][T16950] ____fput+0x1c/0x30 [ 280.165532][T16950] task_work_run+0x130/0x1a0 [ 280.170152][T16950] do_exit+0x4a4/0x1500 [ 280.174333][T16950] do_group_exit+0xfe/0x140 [ 280.178864][T16950] get_signal+0xe07/0xf10 [ 280.183223][T16950] arch_do_signal_or_restart+0x96/0x480 [ 280.188797][T16950] exit_to_user_mode_loop+0x6f/0x870 [ 280.194104][T16950] do_syscall_64+0x23c/0x3c0 [ 280.198725][T16950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.204634][T16950] [ 280.206974][T16950] read to 0xffffea0004bbd718 of 8 bytes by task 16950 on cpu 1: [ 280.214626][T16950] folio_mapping+0xa1/0xe0 [ 280.219079][T16950] evict_folios+0x2dd2/0x37d0 [ 280.223784][T16950] try_to_shrink_lruvec+0x7ac/0xb40 [ 280.229011][T16950] shrink_lruvec+0x24e/0x1bc0 [ 280.233710][T16950] shrink_node+0x699/0x2080 [ 280.238244][T16950] do_try_to_free_pages+0x408/0xc90 [ 280.243478][T16950] try_to_free_mem_cgroup_pages+0x201/0x420 [ 280.249397][T16950] try_charge_memcg+0x375/0xa00 [ 280.254278][T16950] __memcg_kmem_charge_page+0x199/0x3a0 [ 280.259848][T16950] __alloc_frozen_pages_noprof+0x18a/0x350 [ 280.265674][T16950] alloc_pages_mpol+0xa9/0x1d0 [ 280.270466][T16950] alloc_pages_noprof+0x8f/0x140 [ 280.275430][T16950] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 280.281342][T16950] __kvmalloc_node_noprof+0x3d4/0x640 [ 280.286733][T16950] futex_hash_allocate+0x18d/0x960 [ 280.291873][T16950] futex_hash_prctl+0xd8/0xf0 [ 280.296578][T16950] __se_sys_prctl+0x4f4/0x1400 [ 280.301370][T16950] __x64_sys_prctl+0x67/0x80 [ 280.305985][T16950] x64_sys_call+0x2533/0x3020 [ 280.310690][T16950] do_syscall_64+0x136/0x3c0 [ 280.315314][T16950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.321229][T16950] [ 280.323569][T16950] value changed: 0xffff888103d72780 -> 0x0000000000000000 [ 280.330684][T16950] [ 280.333020][T16950] Reported by Kernel Concurrency Sanitizer on: [ 280.339201][T16950] CPU: 1 UID: 0 PID: 16950 Comm: syz.8.4180 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 280.350191][T16950] Tainted: [W]=WARN [ 280.354011][T16950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.364148][T16950] ================================================================== [ 280.661074][T15843] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.525844][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 283.525862][ T28] audit: type=1400 audit(1781284218.770:2430): avc: denied { write } for pid=16971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.562807][ T28] audit: type=1400 audit(1781284218.800:2431): avc: denied { write } for pid=16982 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.168683][ T28] audit: type=1400 audit(1781284219.410:2432): avc: denied { write } for pid=16985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.202541][ T28] audit: type=1400 audit(1781284219.440:2433): avc: denied { write } for pid=16996 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.690859][ T28] audit: type=1400 audit(1781284219.930:2434): avc: denied { write } for pid=16999 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.723980][ T28] audit: type=1400 audit(1781284219.960:2435): avc: denied { write } for pid=17010 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.815023][ T28] audit: type=1400 audit(1781284220.060:2436): avc: denied { write } for pid=17013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.850575][ T28] audit: type=1400 audit(1781284220.090:2437): avc: denied { write } for pid=17024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1