last executing test programs: 1m39.742944248s ago: executing program 0 (id=22): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 1m39.65503956s ago: executing program 0 (id=24): pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000300)="5837f0b5df687be17909644d1517542f88f2996e08c3b11eb6e777bd2181c4e81e6745902597b23d8026af8f366ff8d2d4466abd01624901719870918a31044d81749bdfc0bb1b2486b4fccbe731d8fa4c54d076327760a3475245b2fea673f52c0e82fa125631109a6d94926dc490ba947e5e7a69709a132a05f569b4773e24ddaf3c41b1152b171f518135c762ec1bf772f6d8abd4efe4b6df45ff63ce91ba08398acdf6fb5e77cfc210c2a83fc8fb656195f348178e63c259b8c986fff1ca0929d1aaefde83e5698568385027af9d76bf539ef9064e63dd95f00a077f32edb623e529124bae57a89526cbf055410a8247be", 0xf3}, {&(0x7f0000000400)="6c2c5aa3ef0e85e2f10da37f1c31817141f28ff1013e307c5f13da9caba4f05d20118956", 0x24}, {&(0x7f0000000700)="6b24eca67c692e0b52f9c8e0b158fa4f6b72a036f7d9ca2d55b127d932925537d68a9a2670df515e6b61926e8a92bdd68143b35249d1c1a716f5984c2a40ac6d01f28ad5548dc9d7c2fa3e8b136480dc2755b849cc56a91806c28084c11625ba7c9bd66cb19157b3868f5453174c614af6d3ecd91051a2be3d515f593dc3e5682e30e675771b2cd5099cd0202cba47fe911c5d7e404a6cf3053f857ffeca2f849d230b1afbacd5050d31083b18552635b9805f3b729743394f621009c2009e93690a803cb1553d5483d943bfb970f43d4db270c3cf2b391634e80914c2679ba83d", 0xe1}, {&(0x7f0000000800)="9876e80b0cca97cabf65e740100c3b9c34d103b8c9b9e0c65c5ac708e0b9af2661398ff28a3d18c4cb6bbc99959f07ccba6f524419ae73aba71e13d166a84d3cd3aec7dd5ffa9232650369d3a9965c1771d6067436e0e690c96a9d014a9aaf64a10fdb5f635578b0ab561976e83e078b6423c5a1", 0x74}], 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="18e41dbb2ed7b8c3f09c9f04a4d383dc4f19f21d34bf79ab962e9e70bd4f14bacc0726cfd4be1811d4026e544c6724b37fa1923b3c02f9f5e7a6e865c7060b0d9f7c241603fc82c9d2ae66b8ec07d11c1db3205c31597ed6089354a6b9184a8772db9a79763ee2c78e63c12313d6ec838949eddebbe2fe28bf23d5977d7edd9de83f772213a9765667054ad9bb8dbf25189032872fd4823de0ee4766efab860277fc6959a735b4ee9411e0ed1e0070afcb635a5d9702ba164f55522b5cf6646bf8a2e682873ed41b535d86f6c890275c5b3856477244", 0xd6}, {&(0x7f0000000e40)="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", 0x27f}], 0x2, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 1m39.587751062s ago: executing program 0 (id=27): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}], 0x1, 0x0) 1m39.532711893s ago: executing program 0 (id=30): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x700, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 1m39.447833734s ago: executing program 0 (id=35): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m38.061591836s ago: executing program 0 (id=85): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x80800) 1m38.047179836s ago: executing program 32 (id=85): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7]}, 0x8, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000100)={[0x1]}, 0x8, 0x80800) 1m25.133651056s ago: executing program 1 (id=304): write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) 1m25.102344857s ago: executing program 1 (id=306): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="3de6c73cfcb2c8f3d1bc6918886e202a5ac87eb2653593070741f6db041c85660e6ff949f32d32847e8024159dd0bc0302b3ccb22ddf4d8b6a0d6f51a60d5738c6f7f7fd4898fe70333cfd4e918fcca0bffebaf22b3976a19bebea1d9b5c109377ec709e9213b3a9d4720ea0e5707a6b29823cc9202e0798befd3c7a74d070d5123c644d474008c42e16bd93d28fabdf00361794f6195b86cb13f21e63a0a4b8b2e5e4d7381172cc860c84d5a6de15d4ac9ffa25e5bb965ce2347e587c82cebb4cff7a61656c03effe487c72bd8e4f4b2a10e248e7de6947"], 0x7c}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000020a01030000e6ff00100000020000000900010073797a30"], 0x7c}}, 0x4) 1m25.041455618s ago: executing program 1 (id=307): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x40) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 1m24.98003759s ago: executing program 1 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 1m24.96407249s ago: executing program 1 (id=313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "ed00", "afdc015c0ff3470bcc8c53b3a89926b6", "20ff9b00", "2db940642b545ea2"}, 0x28) 1m24.765704244s ago: executing program 1 (id=321): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m24.765587075s ago: executing program 33 (id=321): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m23.040533123s ago: executing program 5 (id=353): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") timer_gettime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m22.812070139s ago: executing program 5 (id=361): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8904, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x319}, 0x8014, 0x0, 0x9, 0x0, 0x87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x4, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000003247d60b7030000030a00006a0a00fe0000000c850000007a000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35149a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e571f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521f9e3dbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b13fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc90307f5f7a9cb7f1e5ed79dbf92e5d9c3f40a1313db007da349939e8805418029fef1be9f8729d4f1e43572059a7b4564d00"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1m21.837468381s ago: executing program 5 (id=374): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x9) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) 1m21.674087424s ago: executing program 5 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m21.597011776s ago: executing program 5 (id=380): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 1m21.40515075s ago: executing program 5 (id=384): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m21.340295832s ago: executing program 34 (id=384): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 25.471727557s ago: executing program 7 (id=1415): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 24.527919089s ago: executing program 7 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r2, {0xa, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 24.238127125s ago: executing program 7 (id=1436): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001080)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YGhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\xfaz\x00\x00\x00\x00\x00\x00\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\b\x00\x00\x00\x00\x00\x00\x00\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\"\xd8*\xa8\xd2\x94\xa3\x89\xcb\xa0\xc5\xc9=\xa5^\x00\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb1\x98\xe3\xc3Q\xb4+\xec\xf5(\xd6\xf5O\xaf\x1f\xc0\xd2I`\xa2\vsNQ\xc2\xb6q\x1d\x9a\xdc\xefnU\xeb\xa0x\xf4B\xce\f&\x9f\xc9\xeaU\xf3\x01u\x18\xfau\x0fd\xee\xca\xc9\f\xec\xa5\xd2\x1a\xab_)\xcc\x10\x82\xcdxy\xa7\x02-\x13\x8fb\\t\x9c\x16\x95\xde\xaa\xc1\xc3q\x82B\xf7\x8e\xce\xdd\xcd`\xb4;ZU\xa0\x96\tg\xfa\xa4nAn\xfc\x98\x92\xeaS\'\xfb\xd8W2X\x9e\xc6vY@\xfa\xe52\"\x04^\x00\x00\x8d~n+6\f\xbfb\x05\x00\x00\x00\x00\x00\x00\x00\x8b\'\x0f\xa1\xc0\xf6\x1f\xda\xca\a\x95\x93\x06\xdem\x10\x01\xaf$J8T\xf3\xae\xda\x03\xaf-\xc1D\xe6\x80\xdd\xf2\x13\xfc#\nXs\x95\xf9\xb2\x1e\xee\xf6\xbbi\xae.\x9eF\xce\x80\x90mju\x85VUc\xbf\xc6w\"\x179S\fm\x87\xcfU:B\xdc\x91,\xe6\xa3\xd9\x83\xe4\x01\xc7E\x16f\xbeLg\xf9\xa7Ja\xac_\x18P\x9f;\xabI\x02&\x8b\xe6\x1c\x97\xda\x13\xb8px\x1b\xb2\xd3)n\xff\x05\rl\x01G\x04\xae\xc2\x8a;\x8c\xd6\xd3\xc12\xbc`1u,\x80`\x7f\xab\x17\x8a\xf2\x8a\x1aL\t\xe6`\x92\x17?!\xfd\xbeK>\xc3\xee\xce5h\x88T# \x15\xfb\xd7\xa2Q>\xb7A\\\x0e\x7f\\\x14', &(0x7f0000000940)='Yockfs\x00\x01\f\xcc\x0e\xc94\x0f/\xb7~\x10\xf8\xe9\xd71\xc1s}\x9d\xd8\xc0\xb1>\xb4\x7f\xcf\x93\xf3^X\x1e<\xa1\xa992\x88\xd4/\xb9\xb3\xd2,\xa5:\x8d\x0e\x8ei\x03v\xf4\t%\x1aR\x84(\xe0\xb3O\xe2\x96a\xa2O\xa6\x90\xfd;0\\\xb8\x94\rz\x80\xbf{\xf1\xbfP\xd4#\xf1WH\x01#\xf3D\xa8/0T\xed\x92F\xe6&\x88\x83\x10\x83zU\xe4t\xf2\\\b\xa0\xef\x04\xeb\xe4\xbfu\x9a\x0eyb\xfb\x1d\xd6#\xaf\x18\xfa\xa8\xef\x9cm\x9dU\x9cg\xdek\x1fA\xa6\xd9\xc1\xc6a\x94\xec\xa7D\x05;\xd5\x95e\t\xc4y\x90\xbfx\x97\xe0\x04jp(>\xca\xfc\x18C\xa2\xa3aEk\x9f\vo\xe1\x11\xa2\x05\xd7\xd0e|\ns\xb1X\x86\xde\xea\xeaP\xdf\xe4\xe9\xe7\x128\xe9BP\xe0{<\xa8\x91\xa0>\xe1\xceR\x1a\xcd\x8c\x03A\xa1\x81*e\xd9\x06P\x87\x89\xf2\x96\x0f\xb8\x8eBG0\x04\xfd\n\x12\xfa\x01\'\xa8i\xd8\x19Ibm!5j\xd6\xae\xd8\xb5(w\xa9\xcdy\x84\xa0i\xcc\x8e\xba\xab\xd8p#m', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000f40)='\x00\xfb\xd4\xbe\xf0\x93D\x1f\xa9\x06\x00/8\xee\xce\x96*9\xa3/$\xa3\x1b\x92\xfe<\xf0\x94\f\xd6\x16\xbdD\x01y\x1a\xa4\x96\x88\x94K{\x7fs\xc0\xa8c\xe1\xfcH%\xd5\xe43H\xca\xa4!W\xa2@\xfbKgW=\x03\xc6\xdb%W\xfc\xaa\x93\xed\x8d\x86\xb3\x98\xd42\xc0\x95G\xd12\x12\x05}&\x10Y^\xb0\xcew\xc6\x00a2\xc9\x97(4\x05\x86\xd2\xc8\xc6\xb4K\x112\x1a\xd6\xcf\xa9\\j\x91\x9ag\x9e\xba\x87\x8b\"ttQ\n$\x9f\xaa\xf6\x12(\xb1\x84U\xf6M\xadD\xec\xeb\x99\xd1.\xc2\x96\xde\xcb\xcd\xca\xb0CA\x16o}9\xd9\xca_\xeb\x94A\xc8\x97\x88\x1dS\x82\xa7\\\x14\\\xb3\x8d/\x86d3:)S\xef[[|\xd2\xfe\xa9WS]bQ\xd2\x11\xe2\x9ao\xcc\xd4\x9e\xc3\xf0\xd67/\r\xdd*:\xe6w\xdaj\x11z\xe0\x15', &(0x7f00000001c0)='(\x18\x02', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\x7f\fG\xa75\xd8aM!\xe6\xe3\x05\xed.\x90\xae~\x93#*\xcc\xa0aZ-\x16\x1fmO\xfe|\x94\x7f\xf5\x8a\xf4\x83\x16\xf2L\x8b\xc7m\xf3m\xaa[\x03\x00\x00\x00R\xafg\xff\xbc3\xcd\xde\xe9F\xc2&b\xfd\xee3j\xf8\x8a\xa2\xbf\f\xe2Rxn\xa7.BW\xb6\x1bC\x91\x1fW\xaa\xc8z\xc4(\x12\xbc\xaa\x97_\xb8\xa9\xc1\x19ba\xbb\xf2\xe5H\xae\xa4\x05\xb6', 0x0) close(r0) 24.102284858s ago: executing program 7 (id=1439): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 24.069171359s ago: executing program 7 (id=1442): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="680b53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 23.929692143s ago: executing program 7 (id=1445): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000980)=ANY=[], 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 23.929523922s ago: executing program 35 (id=1445): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000980)=ANY=[], 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 5.581232055s ago: executing program 8 (id=1763): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 4.700986634s ago: executing program 8 (id=1770): socket$unix(0x1, 0x1, 0x0) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 4.676110155s ago: executing program 8 (id=1772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0xb, 0x0, "5cffe993aae99297099bf1c5333ea934941af0a50f9989e75c770b8ce74fb8be99b4244f0dcfd392b3fd0e15b43904a1852cfaad90eed14162089f56c3c05b13b5fd11e335d3ed65d88565b4b9d08e39"}, 0xd8) 4.644259096s ago: executing program 8 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 4.621178256s ago: executing program 8 (id=1775): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000180)=0x8) 1.418653698s ago: executing program 6 (id=1784): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.35752815s ago: executing program 8 (id=1786): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.35740893s ago: executing program 36 (id=1786): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.35721761s ago: executing program 6 (id=1788): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffff, 0x9}, {0x3, 0x6}, {0x8, 0xffe0}}}, 0x24}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.35557507s ago: executing program 2 (id=1789): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1.294736601s ago: executing program 3 (id=1790): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074e204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 1.255125022s ago: executing program 6 (id=1791): gettid() r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4dd, 0x20004, 0xfffffffffffffffb, 0x4800, 0xfffffffffffffffa, 0x34}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket(0x1e, 0xa, 0x8) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000000)=""/120, 0x78}) 1.249295562s ago: executing program 3 (id=1792): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.146879294s ago: executing program 2 (id=1794): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x138, 0xb, 0xd0e0011, 0x138, 0xc6, 0x210, 0x1d8, 0x190, 0x210, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x138, 0x7000000, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xff], 0xfffffffc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x2, 0x0, [0x22, 0x18, 0x3e, 0x24, 0x2b, 0x26, 0x29, 0x25, 0x0, 0x3a, 0x26, 0x2c, 0x4, 0x2d, 0x1b, 0x3b], 0x0, 0x1, 0x9}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r0 = socket(0x10, 0x3, 0x9) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x1, 0x4) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010f00000000000000000700000a14000000fa03010000000000000000000300000ae94d"], 0x28}}, 0x20008054) 1.067583496s ago: executing program 2 (id=1795): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 1.045520757s ago: executing program 3 (id=1796): open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xd001, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.020652387s ago: executing program 2 (id=1797): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x2300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.017153787s ago: executing program 3 (id=1798): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) 963.913878ms ago: executing program 3 (id=1799): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 924.315769ms ago: executing program 2 (id=1801): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 793.055712ms ago: executing program 4 (id=1802): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 390.137211ms ago: executing program 6 (id=1803): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000400)='\\[', 0x2, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 390.015511ms ago: executing program 2 (id=1804): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r0, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 389.929071ms ago: executing program 4 (id=1805): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0xc200}, r3}}, 0x30) 285.780083ms ago: executing program 6 (id=1806): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x9, @remote, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)="91", 0x1}], 0x1}}], 0x2, 0x54) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x100ac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) shutdown(r0, 0x1) 285.648054ms ago: executing program 4 (id=1807): r0 = socket$inet(0x2, 0x3, 0x81) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x33, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0x3) 131.510927ms ago: executing program 6 (id=1808): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 119.074668ms ago: executing program 4 (id=1817): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r0, 0x5) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 88.846198ms ago: executing program 3 (id=1809): r0 = socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x3e}, 0x28) open(&(0x7f0000000140)='.\x00', 0x88000, 0x114) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x123d, &(0x7f0000001340)="$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") mlockall(0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 36.065529ms ago: executing program 4 (id=1810): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @loopback}}}], 0x20}}], 0x1, 0x4004810) 0s ago: executing program 4 (id=1811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): me="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.915057][ T4782] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.915210][ T4782] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #3: comm syz.6.405: mark_inode_dirty error [ 54.924315][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 54.924350][ C0] EXT4-fs (loop6): initial error at time 3931743234: ext4_do_update_inode:5742: inode 3 [ 54.924383][ C0] EXT4-fs (loop6): last error at time 3931743234: ext4_do_update_inode:5742: inode 3 [ 54.965408][ T4782] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.965881][ T4782] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #3: comm syz.6.405: corrupted inode contents [ 55.004564][ T4782] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 55.004754][ T4782] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.405: mark_inode_dirty error [ 55.032765][ T4774] loop2: detected capacity change from 0 to 1024 [ 55.040443][ T4782] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 55.040677][ T4782] Quota error (device loop6): write_blk: dquota write failed [ 55.057710][ T4782] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 55.068881][ T4782] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.405: Failed to acquire dquot type 0 [ 55.071933][ T4774] EXT4-fs: Ignoring removed nobh option [ 55.081933][ T4782] loop6: lost filesystem error report for type 5 error -117 [ 55.087799][ T4782] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.405: corrupted inode contents [ 55.105981][ T4774] EXT4-fs: Ignoring removed i_version option [ 55.107607][ T4782] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.113271][ T4782] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.405: mark_inode_dirty error [ 55.133955][ T4782] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.134147][ T4782] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.405: corrupted inode contents [ 55.155475][ T4782] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.155590][ T4782] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.405: mark_inode_dirty error [ 55.177263][ T4782] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.177514][ T4782] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.405: corrupted inode contents [ 55.198715][ T4782] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.198861][ T4782] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 55.216922][ T4782] loop6: lost filesystem error report for type 5 error -117 [ 55.218883][ T4782] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.405: corrupted inode contents [ 55.238826][ T4782] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.242444][ T4782] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.405: mark_inode_dirty error [ 55.243699][ T4774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.252125][ T4782] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 55.288664][ T4782] loop6: lost filesystem error report for type 5 error -117 [ 55.289134][ T4782] EXT4-fs (loop6): 1 truncate cleaned up [ 55.305350][ T4782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.318515][ T4782] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.357306][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.387859][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.479184][ T360] team0 (unregistering): Port device team_slave_1 removed [ 55.489251][ T360] team0 (unregistering): Port device team_slave_0 removed [ 55.557938][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 55.600759][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.608049][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.615713][ T4675] bridge_slave_0: entered allmulticast mode [ 55.630089][ T4675] bridge_slave_0: entered promiscuous mode [ 55.639144][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.647158][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.655561][ T4675] bridge_slave_1: entered allmulticast mode [ 55.662122][ T4675] bridge_slave_1: entered promiscuous mode [ 55.695613][ T4675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.717364][ T4675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.737589][ T4675] team0: Port device team_slave_0 added [ 55.744230][ T4675] team0: Port device team_slave_1 added [ 55.765483][ T4675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.778492][ T4675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.804947][ T4675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.826411][ T4675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.841226][ T4675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.867413][ T4675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.928744][ T28] audit: type=1400 audit(3931743235.233:416): avc: denied { write } for pid=4812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.933614][ T4675] hsr_slave_0: entered promiscuous mode [ 55.971837][ T4675] hsr_slave_1: entered promiscuous mode [ 55.977110][ T28] audit: type=1400 audit(3931743235.273:417): avc: denied { write } for pid=4823 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.999013][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 56.139255][ T28] audit: type=1400 audit(3931743235.443:418): avc: denied { write } for pid=4827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.180772][ T4675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 56.189722][ T28] audit: type=1400 audit(3931743235.503:419): avc: denied { write } for pid=4838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.214978][ T4675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.223161][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 56.231075][ T4675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 56.245416][ T4675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.262118][ T4675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 56.271947][ T4675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.280051][ T4675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 56.289341][ T4675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.317406][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.324563][ T4675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.331911][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.339084][ T4675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.366792][ T4848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.413'. [ 56.430623][ T4675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.438486][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.466014][ T2508] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.477435][ T4859] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 56.495627][ T2508] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.514019][ T4675] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.520731][ T28] audit: type=1400 audit(3931743235.823:420): avc: denied { write } for pid=4850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.569606][ T28] audit: type=1400 audit(3931743235.863:421): avc: denied { write } for pid=4865 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.592116][ T4859] bond3: entered promiscuous mode [ 56.597782][ T4859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 56.628605][ T46] net_ratelimit: 2 callbacks suppressed [ 56.628623][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.642439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.651728][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.660764][ T3362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.669459][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.610820][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 57.621029][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.628198][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.653489][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.660588][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.866207][ T4905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'. [ 57.926141][ T4675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.936371][ T4914] loop6: detected capacity change from 0 to 512 [ 57.969212][ T4914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.984921][ T4914] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.015539][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.026955][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 58.040019][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 58.177083][ T4675] veth0_vlan: entered promiscuous mode [ 58.193208][ T4675] veth1_vlan: entered promiscuous mode [ 58.234095][ T4675] veth0_macvtap: entered promiscuous mode [ 58.254689][ T4675] veth1_macvtap: entered promiscuous mode [ 58.285573][ T4675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.339858][ T4675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.403682][ T360] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.414358][ T360] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.424124][ T360] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.433137][ T360] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.479941][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 58.508640][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 58.530485][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 58.597078][ T4967] loop7: detected capacity change from 0 to 128 [ 58.665751][ T4967] vfat filesystem being mounted at /0/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 58.900181][ T4987] netlink: 32 bytes leftover after parsing attributes in process `syz.2.450'. [ 58.976479][ T4994] xt_hashlimit: size too large, truncated to 1048576 [ 59.576004][ T5021] capability: warning: `syz.2.465' uses 32-bit capabilities (legacy support in use) [ 59.686849][ T5032] loop3: detected capacity change from 0 to 256 [ 59.719153][ T5032] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.739494][ T5032] vfat filesystem being mounted at /110/bus supports timestamps until 2107-12-31 (0x10391447e) [ 59.822581][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 59.822596][ T28] audit: type=1400 audit(3931743239.133:436): avc: denied { name_bind } for pid=5039 comm="syz.3.473" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 60.145573][ T5066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 60.166385][ T28] audit: type=1400 audit(3931743239.473:437): avc: denied { connect } for pid=5067 comm="syz.7.484" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.198921][ T2508] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.208031][ T2508] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.231778][ T2508] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.260355][ T2508] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.362078][ T5081] loop4: detected capacity change from 0 to 4096 [ 60.401182][ T5081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.416732][ T28] audit: type=1400 audit(3931743239.723:438): avc: denied { write } for pid=5080 comm="syz.4.490" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.449793][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.683599][ T28] audit: type=1400 audit(3931743239.993:439): avc: denied { connect } for pid=5096 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.735316][ T5100] loop6: detected capacity change from 0 to 164 [ 60.771103][ T5100] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 61.358404][ T5117] loop6: detected capacity change from 0 to 512 [ 61.389308][ T5117] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.433337][ T5117] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.488568][ T5117] EXT4-fs (loop6): 1 truncate cleaned up [ 61.495055][ T5117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.520262][ T28] audit: type=1400 audit(3931743240.823:440): avc: denied { write } for pid=5116 comm="syz.6.505" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.582991][ T5123] batadv1: entered promiscuous mode [ 61.610920][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 61.639498][ T28] audit: type=1400 audit(3931743240.903:441): avc: denied { setattr } for pid=5116 comm="syz.6.505" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.716534][ T28] audit: type=1400 audit(3931743240.903:442): avc: denied { write } for pid=5116 comm="syz.6.505" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.758341][ T28] audit: type=1400 audit(3931743240.993:443): avc: denied { write } for pid=5130 comm="syz.4.509" name="icmp6" dev="proc" ino=4026532639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.798497][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.817543][ T5135] xt_time: unknown flags 0xc [ 61.909089][ T5145] netlink: 'syz.4.514': attribute type 1 has an invalid length. [ 61.998443][ T5156] gretap1: entered allmulticast mode [ 62.069146][ T5156] bond1: (slave gretap1): making interface the new active one [ 62.106902][ T5169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5169 comm=syz.2.516 [ 62.120005][ T5156] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.200456][ T5169] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 62.216790][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 62.225738][ T5182] loop7: detected capacity change from 0 to 1024 [ 62.226524][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 62.241668][ T5182] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.258973][ T5182] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 62.270010][ T5182] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 62.290673][ T5182] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 62.304071][ T5182] EXT4-fs (loop7): journal inode is deleted [ 62.484443][ T28] audit: type=1400 audit(3931743241.783:444): avc: denied { write } for pid=5213 comm="syz.4.525" path="socket:[11138]" dev="sockfs" ino=11138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.516118][ T5198] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.523381][ T5198] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.598870][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.612044][ T5198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.812809][ T5281] loop3: detected capacity change from 0 to 512 [ 62.819181][ T5275] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.845817][ T28] audit: type=1400 audit(3931743242.143:445): avc: denied { ioctl } for pid=5280 comm="syz.6.528" path="socket:[11354]" dev="sockfs" ino=11354 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.879368][ T5275] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.890238][ T5281] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.529: iget: bad i_size value: 38620345925642 [ 62.902984][ T5281] fserror_report: 1 callbacks suppressed [ 62.903001][ T5281] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.910518][ T5281] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.529: couldn't read orphan inode 15 (err -117) [ 62.919725][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.919763][ C0] EXT4-fs (loop3): initial error at time 3931743242: ext4_orphan_get:1399: inode 15 [ 62.919798][ C0] EXT4-fs (loop3): last error at time 3931743242: ext4_orphan_get:1399: inode 15 [ 62.956695][ T5281] loop3: lost filesystem error report for type 5 error -117 [ 62.961643][ T5281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.976519][ T5275] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.029677][ T5275] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.120536][ T5281] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.529: bg 0: block 5: invalid block bitmap [ 63.139429][ T5281] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 63.155712][ T5281] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.155712][ T5281] [ 63.167176][ T5281] EXT4-fs (loop3): Total free blocks count 0 [ 63.196845][ T5281] EXT4-fs (loop3): Free/Dirty block details [ 63.222031][ T5281] EXT4-fs (loop3): free_blocks=0 [ 63.234317][ T5239] loop4: detected capacity change from 0 to 1024 [ 63.236553][ T5281] EXT4-fs (loop3): dirty_blocks=2164 [ 63.264651][ T5281] EXT4-fs (loop3): Block reservation details [ 63.286851][ T5281] EXT4-fs (loop3): i_reserved_data_blocks=2164 [ 63.292098][ T5239] EXT4-fs: Ignoring removed bh option [ 63.317338][ T5239] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 63.366705][ T5311] loop7: detected capacity change from 0 to 1024 [ 63.390671][ T5311] EXT4-fs: Ignoring removed bh option [ 63.401054][ T5239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.448716][ T5311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.482738][ T5254] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 108 with error 28 [ 63.510343][ T5321] loop6: detected capacity change from 0 to 512 [ 63.514372][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.528806][ T5321] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 63.529170][ T3303] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 63.556510][ T5321] msdos filesystem being mounted at /42/bus supports timestamps until 2107-12-31 (0x10391447e) [ 63.608331][ T4675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.646798][ T5254] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 63.707091][ T5327] loop3: detected capacity change from 0 to 256 [ 63.713877][ T5327] vfat: Bad value for 'dmask' [ 63.732108][ T5327] SELinux: failed to load policy [ 63.745676][ T5331] loop6: detected capacity change from 0 to 4096 [ 63.838308][ T5331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.218240][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.269681][ T5254] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.416435][ T5360] loop6: detected capacity change from 0 to 512 [ 64.447193][ T5360] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 64.462040][ T5360] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 64.473621][ T5360] EXT4-fs (loop6): orphan cleanup on readonly fs [ 64.480380][ T5360] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.554: Block bitmap for bg 0 marked uninitialized [ 64.499762][ T5360] loop6: lost filesystem error report for type 5 error -117 [ 64.501163][ T5360] EXT4-fs (loop6): Remounting filesystem read-only [ 64.508589][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 64.508611][ C1] EXT4-fs (loop6): initial error at time 3931743243: ext4_read_block_bitmap_nowait:517 [ 64.508642][ C1] EXT4-fs (loop6): last error at time 3931743243: ext4_read_block_bitmap_nowait:517 [ 64.541467][ T5360] EXT4-fs (loop6): 1 orphan inode deleted [ 64.547703][ T5360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.581775][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.626049][ T5370] netlink: 20 bytes leftover after parsing attributes in process `syz.6.558'. [ 65.300344][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 65.300360][ T28] audit: type=1400 audit(3931743244.603:456): avc: denied { read write } for pid=5414 comm="syz.4.577" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.350925][ T5413] loop7: detected capacity change from 0 to 8192 [ 65.372760][ T5413] vfat filesystem being mounted at /27/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 65.377444][ T28] audit: type=1400 audit(3931743244.603:457): avc: denied { read write open } for pid=5414 comm="syz.4.577" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 65.481551][ T28] audit: type=1400 audit(3931743244.783:458): avc: denied { allowed } for pid=5416 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.899990][ T28] audit: type=1400 audit(3931743245.203:459): avc: denied { cpu } for pid=5426 comm="syz.2.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.971955][ T28] audit: type=1400 audit(3931743245.213:460): avc: denied { getattr } for pid=5428 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.059612][ T28] audit: type=1400 audit(3931743245.223:461): avc: denied { execute } for pid=5426 comm="syz.2.581" path="/113/cpu.stat" dev="tmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.110771][ T28] audit: type=1400 audit(3931743245.263:462): avc: denied { read } for pid=5430 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.183761][ T28] audit: type=1400 audit(3931743245.263:463): avc: denied { open } for pid=5430 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.223906][ T28] audit: type=1400 audit(3931743245.403:464): avc: denied { write } for pid=5425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.247458][ T28] audit: type=1400 audit(3931743245.403:465): avc: denied { create } for pid=5425 comm="dhcpcd-run-hook" name="resolv.conf.eth5.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.292629][ T4052] Bluetooth: hci0: command 0x1003 tx timeout [ 66.293547][ T3783] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.754787][ T5487] loop6: detected capacity change from 0 to 512 [ 66.790619][ T5487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.917117][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.373165][ T5515] netlink: 16 bytes leftover after parsing attributes in process `syz.6.614'. [ 67.391598][ T5515] xfrm1: entered allmulticast mode [ 67.415655][ T5515] ip6gretap1: entered promiscuous mode [ 67.570249][ T5517] loop6: detected capacity change from 0 to 128 [ 67.611566][ T5517] vfat filesystem being mounted at /56/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 67.891249][ T5535] vlan2: entered promiscuous mode [ 67.901161][ T5535] syz_tun: entered promiscuous mode [ 69.913780][ T5771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.650'. [ 69.924659][ T5771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.650'. [ 69.948156][ T5759] loop3: detected capacity change from 0 to 128 [ 70.000963][ T5759] vfat filesystem being mounted at /135/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 70.136704][ T5793] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.220059][ T5804] syzkaller1: entered promiscuous mode [ 70.232628][ T5804] syzkaller1: entered allmulticast mode [ 70.314562][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 70.314578][ T28] audit: type=1400 audit(3931743249.623:509): avc: denied { mount } for pid=5809 comm="syz.4.660" name="/" dev="autofs" ino=12205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 70.466651][ T5812] loop6: detected capacity change from 0 to 1024 [ 70.504718][ T5812] EXT4-fs: Ignoring removed bh option [ 70.515234][ T5812] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 70.552634][ T5812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.590479][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.622162][ T28] audit: type=1400 audit(3931743249.923:510): avc: denied { create } for pid=5817 comm="syz.6.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.645309][ T28] audit: type=1400 audit(3931743249.953:511): avc: denied { bind } for pid=5817 comm="syz.6.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.816063][ T5833] loop6: detected capacity change from 0 to 2048 [ 70.834178][ T5835] 9p: Bad value for 'wfdno' [ 70.838880][ T28] audit: type=1400 audit(3931743250.143:512): avc: denied { mounton } for pid=5834 comm="syz.2.669" path="/126/file0" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.866772][ T5833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.900841][ T5833] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.973005][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.072446][ T28] audit: type=1400 audit(3931743250.373:513): avc: denied { sqpoll } for pid=5847 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.216457][ T28] audit: type=1400 audit(3931743250.523:514): avc: denied { bind } for pid=5857 comm="syz.7.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.280308][ T28] audit: type=1400 audit(3931743250.583:515): avc: denied { bind } for pid=5859 comm="syz.7.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.331840][ T28] audit: type=1400 audit(3931743250.633:516): avc: denied { setopt } for pid=5859 comm="syz.7.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.583505][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.590814][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.665608][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.689133][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.732099][ T5273] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.747406][ T5273] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.762849][ T5273] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.781438][ T5273] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.796960][ T5273] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.807000][ T5273] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.816267][ T5273] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.825499][ T5273] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.882778][ T5902] vlan2: entered promiscuous mode [ 71.903267][ T5902] syz_tun: entered promiscuous mode [ 72.303234][ T5917] netlink: 'syz.6.700': attribute type 2 has an invalid length. [ 72.321149][ T28] audit: type=1400 audit(3931743251.623:517): avc: denied { read } for pid=5918 comm="syz.4.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.368344][ T5273] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.385642][ T28] audit: type=1400 audit(3931743251.693:518): avc: denied { getopt } for pid=5912 comm="syz.7.698" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.919635][ T5969] 9p: Bad value for 'source' [ 74.372598][ T4052] Bluetooth: hci0: command 0x1003 tx timeout [ 74.372805][ T3783] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.495703][ T5983] syzkaller0: entered promiscuous mode [ 74.501501][ T5983] syzkaller0: entered allmulticast mode [ 74.615422][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 74.635397][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.734'. [ 74.700561][ T6004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 74.764796][ T6011] netlink: 100 bytes leftover after parsing attributes in process `syz.4.741'. [ 74.824124][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 74.833360][ T6015] netlink: 'syz.2.744': attribute type 11 has an invalid length. [ 74.845905][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 74.855145][ T2508] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.865109][ T2508] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.874047][ T6015] netlink: 'syz.2.744': attribute type 11 has an invalid length. [ 74.882043][ T2508] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.890998][ T2508] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.956626][ T6024] loop6: detected capacity change from 0 to 1024 [ 74.985918][ T6024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.008693][ T6024] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.024830][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.748'. [ 75.047955][ T6024] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.747: lblock 3 mapped to illegal pblock 3 (length 3) [ 75.059209][ T6031] netlink: 'syz.2.749': attribute type 12 has an invalid length. [ 75.062264][ T6024] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 75.083154][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 75.088500][ T6024] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.088500][ T6024] [ 75.092114][ T6031] netlink: 'syz.2.749': attribute type 12 has an invalid length. [ 75.109827][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 75.120398][ T6024] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.747: lblock 0 mapped to illegal pblock 0 (length 3) [ 75.136631][ T6024] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 75.170830][ T6024] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.170830][ T6024] [ 75.192369][ T6034] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 2: comm syz.6.747: lblock 2 mapped to illegal pblock 2 (length 4) [ 75.251004][ T6034] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 4 with error 117 [ 75.340542][ T6034] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.340542][ T6034] [ 75.359871][ T6054] loop4: detected capacity change from 0 to 1024 [ 75.395783][ T6054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.424397][ T6054] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.448348][ T6054] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.754: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.495914][ T5273] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:18: lblock 8 mapped to illegal pblock 8 (length 8) [ 75.526619][ T6054] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.527984][ T5273] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 75.537091][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 75.537111][ C1] EXT4-fs (loop4): initial error at time 3931743254: ext4_map_blocks:791: inode 3: block 2 [ 75.537147][ C1] EXT4-fs (loop4): last error at time 3931743254: ext4_map_blocks:791: inode 3: block 2 [ 75.563823][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 75.563837][ T28] audit: type=1400 audit(3931743254.873:525): avc: denied { write } for pid=6072 comm="syz.7.757" path="socket:[14015]" dev="sockfs" ino=14015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.565912][ T6054] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 75.612936][ T6054] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.754: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.626987][ T5273] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.626987][ T5273] [ 75.637147][ T4388] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 75.648340][ T6054] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.649177][ T6054] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 75.671609][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.693191][ T6054] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.754: Failed to acquire dquot type 0 [ 75.718465][ T6054] loop4: lost filesystem error report for type 5 error -117 [ 75.718975][ T6054] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 75.756770][ T6054] loop4: lost filesystem error report for type 5 error -117 [ 75.757077][ T6054] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.754: mark_inode_dirty error [ 75.797374][ T6054] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.797864][ T6054] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 75.818551][ T6054] EXT4-fs (loop4): 1 orphan inode deleted [ 75.827404][ T6054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.840337][ T5273] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.857308][ T5273] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 75.871368][ T5273] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:18: Failed to release dquot type 0 [ 75.962177][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.980357][ T3296] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 75.995047][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 75.995241][ T3296] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 76.013514][ T3296] loop4: lost filesystem error report for type 5 error -117 [ 76.013643][ T3296] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 76.032481][ T3296] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.163113][ T28] audit: type=1400 audit(3931743255.473:526): avc: denied { write } for pid=6143 comm="syz.6.763" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.208785][ T28] audit: type=1400 audit(3931743255.473:527): avc: denied { add_name } for pid=6143 comm="syz.6.763" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.229301][ T28] audit: type=1400 audit(3931743255.473:528): avc: denied { create } for pid=6143 comm="syz.6.763" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 76.430341][ T28] audit: type=1400 audit(3931743255.733:529): avc: denied { write } for pid=6163 comm="syz.7.771" name="cgroup.subtree_control" dev="cgroup2" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.469434][ T28] audit: type=1400 audit(3931743255.733:530): avc: denied { open } for pid=6163 comm="syz.7.771" path="" dev="cgroup2" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.531102][ T28] audit: type=1400 audit(3931743255.833:531): avc: denied { read write } for pid=6172 comm="syz.3.775" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 76.706766][ T6190] VFS: Mount too revealing [ 76.721132][ T6195] loop3: detected capacity change from 0 to 512 [ 76.756946][ T6195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.784405][ T6195] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.801272][ T6196] loop7: detected capacity change from 0 to 4096 [ 76.830032][ T6196] EXT4-fs: inline encryption not supported [ 76.907956][ T6196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.918613][ T6195] EXT4-fs (loop3): shut down requested (0) [ 76.961229][ T6196] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 76.990952][ T6196] EXT4-fs error (device loop7): ext4_quota_enable:7232: comm syz.7.783: inode #4096: comm syz.7.783: iget: illegal inode # [ 77.037018][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.052600][ T5260] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.076394][ T6196] loop7: lost filesystem error report for type 5 error -117 [ 77.076657][ T6196] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.783: Bad quota inode: 4096, type: 2 [ 77.084011][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 77.084029][ C0] EXT4-fs (loop7): initial error at time 3931743256: ext4_quota_enable:7232 [ 77.084049][ C0] EXT4-fs (loop7): last error at time 3931743256: ext4_quota_enable:7232 [ 77.119260][ T5260] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 77.131836][ T5260] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 77.140722][ T6196] loop7: lost filesystem error report for type 5 error -117 [ 77.149418][ T6196] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=4096). Please run e2fsck to fix. [ 77.287988][ T6196] EXT4-fs (loop7): mount failed [ 77.691573][ T6268] netlink: 'syz.2.808': attribute type 10 has an invalid length. [ 77.733221][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.744079][ T6268] bond0: (slave team0): Enslaving as an active interface with an up link [ 78.033924][ T6223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.283178][ T6291] loop3: detected capacity change from 0 to 256 [ 78.302621][ T6291] vfat filesystem being mounted at /173/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 78.389970][ T3303] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 78.413449][ T3303] FAT-fs (loop3): Filesystem has been set read-only [ 78.434984][ T3303] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 78.453883][ T6299] syzkaller1: entered promiscuous mode [ 78.472035][ T6299] syzkaller1: entered allmulticast mode [ 78.553134][ T3362] IPVS: starting estimator thread 0... [ 78.652564][ T6307] IPVS: using max 2400 ests per chain, 120000 per kthread [ 79.477331][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.484599][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.508395][ T6365] bridge_slave_0: entered allmulticast mode [ 79.517536][ T6365] bridge_slave_0: entered promiscuous mode [ 79.524326][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.531553][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.539369][ T6365] bridge_slave_1: entered allmulticast mode [ 79.546826][ T6365] bridge_slave_1: entered promiscuous mode [ 79.627703][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.685321][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.752370][ T6365] team0: Port device team_slave_0 added [ 79.766090][ T6365] team0: Port device team_slave_1 added [ 79.799122][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.811425][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.844540][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.856444][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.864157][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.890518][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.935546][ T6365] hsr_slave_0: entered promiscuous mode [ 79.961299][ T6365] hsr_slave_1: entered promiscuous mode [ 79.968545][ T6365] debugfs: 'hsr0' already exists in 'hsr' [ 79.975308][ T6365] Cannot create hsr debugfs directory [ 80.442885][ T6465] hub 5-0:1.0: USB hub found [ 80.455943][ T6465] hub 5-0:1.0: 8 ports detected [ 80.561398][ T6365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.582811][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.591777][ T6365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.603705][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.611879][ T6480] netlink: 'syz.4.853': attribute type 4 has an invalid length. [ 80.624621][ T6365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.633742][ T6480] netlink: 'syz.4.853': attribute type 4 has an invalid length. [ 80.643434][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.651162][ T6365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.660436][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.729401][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.758275][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.776407][ T2508] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.783516][ T2508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.803967][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.811051][ T5254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.898861][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 81.029929][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 81.030025][ T28] audit: type=1400 audit(3931743260.333:557): avc: denied { read } for pid=6512 comm="syz.4.863" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.068254][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.199380][ T6365] veth0_vlan: entered promiscuous mode [ 81.214610][ T6365] veth1_vlan: entered promiscuous mode [ 81.247561][ T6365] veth0_macvtap: entered promiscuous mode [ 81.274678][ T6365] veth1_macvtap: entered promiscuous mode [ 81.302328][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.329053][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.360985][ T5254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.370096][ T2508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.383981][ T2508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.418506][ T2508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.168842][ T28] audit: type=1400 audit(3931743261.473:558): avc: denied { mounton } for pid=6365 comm="syz-executor" path="/root/syzkaller.IbBLjs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.263487][ T28] audit: type=1400 audit(3931743261.513:559): avc: denied { mount } for pid=6365 comm="syz-executor" name="/" dev="gadgetfs" ino=3987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.336187][ T6690] loop6: detected capacity change from 0 to 512 [ 82.367949][ T6690] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.448758][ T6690] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.497385][ T28] audit: type=1400 audit(3931743261.803:560): avc: denied { write } for pid=6689 comm="syz.6.890" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.526071][ T6690] mmap: syz.6.890 (6690) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.571931][ T6710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.887'. [ 82.655812][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.679414][ T28] audit: type=1400 audit(3931743261.983:561): avc: denied { append } for pid=6720 comm="syz.6.891" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.709543][ T6716] tap0: tun_chr_ioctl cmd 1074025675 [ 82.716289][ T6716] tap0: persist disabled [ 82.816451][ T28] audit: type=1400 audit(3931743262.123:562): avc: denied { listen } for pid=6730 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.853863][ T28] audit: type=1400 audit(3931743262.123:563): avc: denied { accept } for pid=6730 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.876693][ T28] audit: type=1400 audit(3931743262.123:564): avc: denied { read } for pid=6730 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.023199][ T28] audit: type=1400 audit(3931743262.323:565): avc: denied { watch_reads } for pid=6757 comm="syz.7.904" path="/84" dev="tmpfs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 83.229568][ T6783] loop7: detected capacity change from 0 to 256 [ 83.245719][ T28] audit: type=1400 audit(3931743262.553:566): avc: denied { relabelfrom } for pid=6780 comm="syz.6.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 83.276229][ T6783] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.319619][ T6783] vfat filesystem being mounted at /86/bus supports timestamps until 2107-12-31 (0x10391447e) [ 83.396596][ T6797] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16385) [ 83.404701][ T6797] FAT-fs (loop7): Filesystem has been set read-only [ 83.411383][ T6797] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16385) [ 83.591274][ T6829] netlink: 'syz.7.911': attribute type 3 has an invalid length. [ 83.769955][ T6864] loop4: detected capacity change from 0 to 512 [ 83.777149][ T6864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.796611][ T6864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.809457][ T6864] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.842948][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.868050][ T6914] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.936'. [ 85.099148][ T5268] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.342028][ T6940] IPVS: persistence engine module ip_vs_pe_s not found [ 85.645159][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 85.887105][ T6904] kexec: Could not allocate control_code_buffer [ 86.061091][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 86.061109][ T28] audit: type=1400 audit(3931743265.363:571): avc: denied { listen } for pid=6957 comm="syz.7.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.108490][ T28] audit: type=1400 audit(3931743265.403:572): avc: denied { accept } for pid=6957 comm="syz.7.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.384322][ T6970] loop3: detected capacity change from 0 to 1024 [ 86.393613][ T6970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 86.405859][ T6970] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.443088][ T28] audit: type=1400 audit(3931743265.753:573): avc: denied { write } for pid=6968 comm="syz.3.956" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.477063][ T6969] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.956: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.491190][ T6969] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 86.503588][ T6969] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.503588][ T6969] [ 86.547881][ T30] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 86.561575][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 86.574225][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.574225][ T30] [ 86.577358][ T28] audit: type=1400 audit(3931743265.893:574): avc: denied { write } for pid=6975 comm="syz.2.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.585038][ T6365] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 86.615776][ T6365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 86.668749][ T6986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.961'. [ 86.680282][ T6986] ip6gre1: entered promiscuous mode [ 86.695445][ T6986] ip6gre1: entered allmulticast mode [ 86.803078][ T28] audit: type=1400 audit(3931743266.103:575): avc: denied { mount } for pid=7006 comm="syz.4.966" name="/" dev="hugetlbfs" ino=16276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 87.100807][ T7054] loop7: detected capacity change from 0 to 512 [ 87.116384][ T7054] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.131630][ T7054] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 87.149679][ T7054] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.976: Corrupt directory, running e2fsck is recommended [ 87.163546][ T7054] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 87.171812][ T7054] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.976: corrupted in-inode xattr: invalid ea_ino [ 87.185326][ T4052] Bluetooth: hci0: command 0x1003 tx timeout [ 87.191421][ T3783] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.207199][ T7054] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.207420][ T7054] EXT4-fs (loop7): Remounting filesystem read-only [ 87.216632][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 87.216654][ C1] EXT4-fs (loop7): initial error at time 3931743266: ext4_iget_extra_inode:5180: inode 15 [ 87.216688][ C1] EXT4-fs (loop7): last error at time 3931743266: ext4_iget_extra_inode:5180: inode 15 [ 87.263569][ T7054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.322673][ T4675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.397266][ T28] audit: type=1400 audit(3931743266.703:576): avc: denied { watch } for pid=7096 comm="syz.4.983" path="/223/file0" dev="tmpfs" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.609229][ T28] audit: type=1400 audit(3931743266.913:577): avc: denied { execute } for pid=7140 comm="syz.3.990" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 87.618267][ T7144] random: crng reseeded on system resumption [ 87.680732][ T28] audit: type=1400 audit(3931743266.923:578): avc: denied { write } for pid=7140 comm="syz.3.990" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.709750][ T28] audit: type=1400 audit(3931743266.923:579): avc: denied { open } for pid=7140 comm="syz.3.990" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 87.767186][ T28] audit: type=1400 audit(3931743267.003:580): avc: denied { bind } for pid=7145 comm="syz.4.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.793871][ T7156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=7156 comm=syz.7.994 [ 87.833258][ T7153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7153 comm=syz.6.996 [ 87.882896][ T7163] sch_fq: defrate 0 ignored. [ 87.950243][ T7172] loop7: detected capacity change from 0 to 2048 [ 87.984924][ T7172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.004121][ T7172] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 88.019368][ T7172] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 88.031886][ T7172] EXT4-fs (loop7): This should not happen!! Data will be lost [ 88.031886][ T7172] [ 88.041850][ T7172] EXT4-fs (loop7): Total free blocks count 0 [ 88.048182][ T7172] EXT4-fs (loop7): Free/Dirty block details [ 88.054421][ T7172] EXT4-fs (loop7): free_blocks=2415919504 [ 88.060348][ T7172] EXT4-fs (loop7): dirty_blocks=32 [ 88.065704][ T7172] EXT4-fs (loop7): Block reservation details [ 88.071802][ T7172] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 88.094765][ T4675] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 88.106800][ T4675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.959030][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 88.995106][ T7282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.030123][ T7282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.164945][ T7317] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 89.198650][ T7317] netlink: 'syz.3.1030': attribute type 4 has an invalid length. [ 89.233692][ T7320] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 89.240649][ T7317] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1030'. [ 89.252315][ T7320] netlink: 'syz.3.1030': attribute type 4 has an invalid length. [ 89.276046][ T7320] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1030'. [ 89.406252][ T7222] loop6: detected capacity change from 0 to 8192 [ 89.458349][ T7222] vfat filesystem being mounted at /136/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 90.095121][ T7348] loop2: detected capacity change from 0 to 7 [ 90.180007][ T7353] loop4: detected capacity change from 0 to 512 [ 90.202148][ T7353] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.222975][ T7353] EXT4-fs (loop4): 1 truncate cleaned up [ 90.236707][ T7353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.271456][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 90.333814][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.814160][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1058'. [ 91.109819][ T7457] loop6: detected capacity change from 0 to 256 [ 91.120114][ T7457] msdos filesystem being mounted at /142/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 91.369410][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 91.369424][ T28] audit: type=1400 audit(3931743270.673:589): avc: denied { create } for pid=7497 comm="syz.6.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.401835][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 91.471830][ T7503] IPVS: Scheduler module ip_vs_ not found [ 91.777864][ T7535] netlink: 'syz.2.1084': attribute type 4 has an invalid length. [ 91.827488][ T7535] netlink: 'syz.2.1084': attribute type 4 has an invalid length. [ 91.849384][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 91.858691][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 91.869346][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 91.878623][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1086'. [ 91.928284][ T7550] loop3: detected capacity change from 0 to 512 [ 91.950346][ T7550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.965442][ T7550] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.977973][ T28] audit: type=1400 audit(3931743271.293:590): avc: denied { write } for pid=7549 comm="syz.3.1090" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.999881][ T28] audit: type=1400 audit(3931743271.293:591): avc: denied { write } for pid=7549 comm="syz.3.1090" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.021978][ T28] audit: type=1400 audit(3931743271.293:592): avc: denied { ioctl } for pid=7549 comm="syz.3.1090" path="/31/bus/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.071486][ T6365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.114543][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1095'. [ 92.157134][ T7567] netlink: 'syz.2.1098': attribute type 3 has an invalid length. [ 92.165717][ T7567] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1098'. [ 92.179562][ T7561] team0: Port device team_slave_0 removed [ 92.188921][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1099'. [ 92.208101][ T7571] bridge0: port 3(vlan3) entered blocking state [ 92.214543][ T7571] bridge0: port 3(vlan3) entered disabled state [ 92.221082][ T7571] vlan3: entered allmulticast mode [ 92.226470][ T7571] geneve0: entered allmulticast mode [ 92.232536][ T7571] vlan3: entered promiscuous mode [ 92.244933][ T7571] geneve0: entered promiscuous mode [ 92.300853][ T7579] loop3: detected capacity change from 0 to 256 [ 92.330542][ T7579] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.354839][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1105'. [ 92.368613][ T7579] vfat filesystem being mounted at /34/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 92.407276][ T7586] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1106'. [ 92.474369][ T7573] pimreg: entered allmulticast mode [ 92.481587][ T7592] netlink: 'syz.6.1110': attribute type 1 has an invalid length. [ 92.506346][ T7573] pimreg: left allmulticast mode [ 92.538795][ T7592] bond1: entered promiscuous mode [ 92.544022][ T7592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.561356][ T7599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.568626][ T7599] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 92.585156][ T7599] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 92.604061][ T7599] bond1: (slave ipip0): making interface the new active one [ 92.638199][ T7599] ipip0: entered promiscuous mode [ 92.645948][ T7599] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 92.701867][ T28] audit: type=1400 audit(3931743272.003:593): avc: denied { ioctl } for pid=7601 comm="syz.4.1112" path="socket:[17313]" dev="sockfs" ino=17313 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.779398][ T7614] sch_fq: defrate 0 ignored. [ 93.339398][ T7630] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.350310][ T7630] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.414167][ T7630] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.443501][ T7630] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.528617][ T7630] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.539041][ T7630] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.584902][ T7630] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.610740][ T7630] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.715344][ T7657] sch_fq: defrate 0 ignored. [ 93.734670][ T5254] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.743233][ T5254] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.756244][ T310] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.764609][ T310] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.776723][ T310] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.785129][ T310] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.797513][ T310] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.806250][ T310] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.038315][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.052375][ T7683] random: crng reseeded on system resumption [ 94.061789][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.522537][ T7721] syzkaller0: entered promiscuous mode [ 94.529500][ T7721] syzkaller0: entered allmulticast mode [ 95.152589][ T7789] loop3: detected capacity change from 0 to 128 [ 95.167585][ T7789] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.189515][ T7789] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.210010][ T7794] IPVS: Scheduler module ip_vs_ not found [ 95.236408][ T28] audit: type=1400 audit(3931743274.533:594): avc: denied { write } for pid=7788 comm="syz.3.1150" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.261226][ T6365] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.280692][ T28] audit: type=1400 audit(3931743274.533:595): avc: denied { watch watch_reads } for pid=7788 comm="syz.3.1150" path="/44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.511638][ T7806] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1155'. [ 95.641280][ T7829] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 95.647853][ T7829] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.657087][ T7829] vhci_hcd vhci_hcd.0: Device attached [ 95.790231][ T7846] veth1_to_bond: entered allmulticast mode [ 95.791858][ T7830] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 95.800205][ T7846] veth1_to_bond: entered promiscuous mode [ 95.809971][ T5262] vhci_hcd vhci_hcd.6: stop threads [ 95.815665][ T5262] vhci_hcd vhci_hcd.6: release socket [ 95.831945][ T5262] vhci_hcd vhci_hcd.6: disconnect device [ 95.843230][ T3391] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 96.197557][ T7861] random: crng reseeded on system resumption [ 96.289849][ T4388] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 96.302599][ T4388] CPU: 1 UID: 0 PID: 4388 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 96.302630][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 96.302644][ T4388] Call Trace: [ 96.302651][ T4388] [ 96.302695][ T4388] __dump_stack+0x1d/0x30 [ 96.302785][ T4388] dump_stack_lvl+0x95/0xd0 [ 96.302809][ T4388] dump_stack+0x15/0x1b [ 96.302831][ T4388] dump_header+0x80/0x240 [ 96.302856][ T4388] oom_kill_process+0x295/0x350 [ 96.302938][ T4388] out_of_memory+0x981/0xbc0 [ 96.302973][ T4388] try_charge_memcg+0x621/0xa00 [ 96.303015][ T4388] charge_memcg+0x6d/0x120 [ 96.303109][ T4388] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 96.303175][ T4388] swap_cache_alloc_folio+0x47b/0x5e0 [ 96.303210][ T4388] swap_cluster_readahead+0x2b1/0x460 [ 96.303247][ T4388] swapin_readahead+0xd8/0x8a0 [ 96.303334][ T4388] ? _raw_spin_unlock+0x9/0x30 [ 96.303357][ T4388] ? swap_put_entries_cluster+0x49c/0x4c0 [ 96.303392][ T4388] ? __entry_text_end+0xf208/0x102179 [ 96.303490][ T4388] ? __rcu_read_unlock+0x4e/0x70 [ 96.303516][ T4388] ? swap_cache_get_folio+0x1f7/0x200 [ 96.303644][ T4388] do_swap_page+0x2a2/0x1ec0 [ 96.303679][ T4388] ? __css_rstat_updated+0xbb/0x280 [ 96.303706][ T4388] ? __rcu_read_lock+0x36/0x50 [ 96.303762][ T4388] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 96.303851][ T4388] handle_mm_fault+0xb3c/0x2da0 [ 96.303889][ T4388] do_user_addr_fault+0x634/0x1060 [ 96.303964][ T4388] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 96.303996][ T4388] ? trace_page_fault_user+0x1f/0xa0 [ 96.304027][ T4388] exc_page_fault+0x62/0xa0 [ 96.304058][ T4388] asm_exc_page_fault+0x26/0x30 [ 96.304105][ T4388] RIP: 0033:0x7f6a9d97b212 [ 96.304130][ T4388] Code: d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 10 48 63 d2 48 63 ff 45 31 c9 6a 3d 45 31 c0 19 de f8 ff 48 83 c4 18 c3 0f 1f 40 00 48 83 ec 58 64 48 8b 34 [ 96.304149][ T4388] RSP: 002b:00007ffd621b4000 EFLAGS: 00010246 [ 96.304167][ T4388] RAX: 0000000000000000 RBX: 000000000000017b RCX: 0000000000000000 [ 96.304181][ T4388] RDX: 0000000040000001 RSI: 00007ffd621b405c RDI: ffffffffffffffff [ 96.304197][ T4388] RBP: 00007ffd621b405c R08: 0000000000000000 R09: 0000000000000000 [ 96.304282][ T4388] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 96.304297][ T4388] R13: 00000000000927c0 R14: 0000000000017690 R15: 00007ffd621b40b0 [ 96.304318][ T4388] [ 96.306548][ T4388] memory: usage 307200kB, limit 307200kB, failcnt 182 [ 96.506120][ T7647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.556550][ T4388] memory+swap: usage 318888kB, limit 9007199254740988kB, failcnt 0 [ 96.564699][ T4388] kmem: usage 277084kB, limit 9007199254740988kB, failcnt 0 [ 96.572184][ T4388] Memory cgroup stats for /syz6: [ 96.572482][ T4388] cache 0 [ 96.580577][ T4388] rss 0 [ 96.583998][ T4388] shmem 0 [ 96.587221][ T4388] mapped_file 0 [ 96.590678][ T4388] dirty 0 [ 96.597529][ T4388] writeback 0 [ 96.603345][ T4388] workingset_refault_anon 74 [ 96.609327][ T4388] workingset_refault_file 1 [ 96.617329][ T7867] team0: Port device team_slave_0 removed [ 96.624937][ T4388] swap 11968512 [ 96.629450][ T4388] swapcached 20557824 [ 96.633710][ T4388] pgpgin 57713 [ 96.637159][ T4388] pgpgout 57712 [ 96.640678][ T4388] pgfault 51843 [ 96.645773][ T4388] pgmajfault 27 [ 96.649328][ T4388] inactive_anon 0 [ 96.659230][ T4388] active_anon 4096 [ 96.670370][ T4388] inactive_file 0 [ 96.678824][ T4388] active_file 0 [ 96.692537][ T4388] unevictable 0 [ 96.711456][ T4388] hierarchical_memory_limit 314572800 [ 96.725851][ T4388] hierarchical_memsw_limit 9223372036854771712 [ 96.754641][ T4388] total_cache 0 [ 96.758169][ T4388] total_rss 0 [ 96.761510][ T4388] total_shmem 0 [ 96.765308][ T4388] total_mapped_file 0 [ 96.769442][ T4388] total_dirty 0 [ 96.773368][ T4388] total_writeback 0 [ 96.777261][ T4388] total_workingset_refault_anon 74 [ 96.782923][ T4388] total_workingset_refault_file 1 [ 96.788139][ T4388] total_swap 11968512 [ 96.792294][ T4388] total_swapcached 20557824 [ 96.831533][ T4388] total_pgpgin 57713 [ 96.846958][ T4388] total_pgpgout 57712 [ 96.852650][ T4388] total_pgfault 51843 [ 96.858237][ T4388] total_pgmajfault 27 [ 96.871538][ T4388] total_inactive_anon 0 [ 96.891195][ T4388] total_active_anon 4096 [ 96.910429][ T7892] __nla_validate_parse: 1 callbacks suppressed [ 96.910446][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 96.911001][ T4388] total_inactive_file 0 [ 96.934153][ T4388] total_active_file 0 [ 96.938171][ T4388] total_unevictable 0 [ 96.951523][ T4388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1166,pid=7828,uid=0 [ 96.966837][ T4388] Memory cgroup out of memory: Killed process 7828 (syz.6.1166) total-vm:96360kB, anon-rss:1236kB, file-rss:22392kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 97.045192][ T7895] loop3: detected capacity change from 0 to 512 [ 97.073487][ T7895] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.090822][ T7895] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #11: comm syz.3.1191: corrupted in-inode xattr: invalid ea_ino [ 97.119760][ T7895] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 97.119923][ T7895] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1191: couldn't read orphan inode 11 (err -117) [ 97.129102][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 97.129119][ C0] EXT4-fs (loop3): initial error at time 3931743276: ext4_iget_extra_inode:5180: inode 11 [ 97.129148][ C0] EXT4-fs (loop3): last error at time 3931743276: ext4_iget_extra_inode:5180: inode 11 [ 97.172457][ T7895] loop3: lost filesystem error report for type 5 error -117 [ 97.173133][ T7895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.267394][ T6365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.399915][ T7917] loop4: detected capacity change from 0 to 128 [ 97.425558][ T7917] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.449458][ T7917] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.514271][ T28] audit: type=1400 audit(3931743276.803:596): avc: denied { write } for pid=7915 comm="syz.4.1198" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.579270][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 97.591400][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.695304][ T7938] sch_fq: defrate 0 ignored. [ 98.265134][ T7966] loop7: detected capacity change from 0 to 4096 [ 98.299110][ T7966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.325380][ T28] audit: type=1400 audit(3931743277.633:597): avc: denied { write } for pid=7965 comm="syz.7.1222" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.364437][ T28] audit: type=1400 audit(3931743277.633:598): avc: denied { map } for pid=7965 comm="syz.7.1222" path="/133/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.366390][ T4675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.401703][ T28] audit: type=1400 audit(3931743277.633:599): avc: denied { execute } for pid=7965 comm="syz.7.1222" path="/133/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.426204][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 98.464053][ T7975] random: crng reseeded on system resumption [ 98.663236][ T7992] loop7: detected capacity change from 0 to 512 [ 98.684322][ T7992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.699792][ T7992] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 98.720965][ T4675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.840005][ T8008] loop6: detected capacity change from 0 to 128 [ 98.867330][ T8008] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.884986][ T8008] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.950653][ T28] audit: type=1400 audit(3931743278.253:600): avc: denied { write } for pid=8007 comm="syz.6.1239" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.954978][ T8008] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 63: comm syz.6.1239: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 98.991345][ T28] audit: type=1400 audit(3931743278.263:601): avc: denied { write } for pid=8007 comm="syz.6.1239" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.013312][ T28] audit: type=1400 audit(3931743278.263:602): avc: denied { ioctl } for pid=8007 comm="syz.6.1239" path="/180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.056680][ T8008] EXT4-fs error (device loop6) in do_split:2027: Corrupt filesystem [ 99.079356][ T28] audit: type=1400 audit(3931743278.263:603): avc: denied { write } for pid=8007 comm="syz.6.1239" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.110083][ T28] audit: type=1400 audit(3931743278.263:604): avc: denied { create } for pid=8007 comm="syz.6.1239" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 99.148095][ T8016] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 63: comm syz.6.1239: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 99.152423][ T28] audit: type=1400 audit(3931743278.263:605): avc: denied { write } for pid=8007 comm="syz.6.1239" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.231355][ T4388] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.278364][ T8015] loop4: detected capacity change from 0 to 1024 [ 99.307342][ T8015] EXT4-fs: Ignoring removed bh option [ 99.316791][ T8015] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 99.342342][ T8015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.917709][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1258'. [ 99.935966][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1260'. [ 99.946723][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1260'. [ 99.955530][ T8015] syz.4.1251 (8015) used greatest stack depth: 9600 bytes left [ 99.964932][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.258411][ T8081] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 100.277906][ T8081] bond2: (slave geneve2): making interface the new active one [ 100.286129][ T8081] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 100.295070][ T5254] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.303633][ T5254] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.312069][ T5254] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.320472][ T5254] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 100.798893][ T8094] sch_fq: defrate 0 ignored. [ 100.865581][ T8098] loop7: detected capacity change from 0 to 1024 [ 100.890643][ T8098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.906295][ T8098] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.921725][ T8098] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1275: bg 0: block 112: padding at end of block bitmap is not set [ 100.936602][ T8098] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 100.949406][ T8098] EXT4-fs (loop7): This should not happen!! Data will be lost [ 100.949406][ T8098] [ 100.959163][ T8098] EXT4-fs (loop7): Total free blocks count 0 [ 100.965369][ T8098] EXT4-fs (loop7): Free/Dirty block details [ 100.971666][ T8098] EXT4-fs (loop7): free_blocks=0 [ 100.973747][ T8102] EXT4-fs (loop7): shut down requested (2) [ 100.976760][ T8098] EXT4-fs (loop7): dirty_blocks=64 [ 100.987799][ T8098] EXT4-fs (loop7): Block reservation details [ 100.993874][ T8098] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 101.032140][ T8104] random: crng reseeded on system resumption [ 101.531993][ T8121] loop6: detected capacity change from 0 to 512 [ 101.543791][ T8121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.561195][ T8121] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.652641][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.678677][ T8126] loop7: detected capacity change from 0 to 512 [ 101.689324][ T8126] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 101.716130][ T8126] EXT4-fs (loop7): 1 truncate cleaned up [ 101.747355][ T8126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.777555][ T8139] random: crng reseeded on system resumption [ 101.787662][ T3362] IPVS: starting estimator thread 0... [ 101.892450][ T8140] IPVS: using max 2400 ests per chain, 120000 per kthread [ 102.829337][ T4675] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.918718][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 103.005103][ T8173] random: crng reseeded on system resumption [ 103.035492][ T8164] vlan4: entered promiscuous mode [ 103.041471][ T8164] bridge0: entered promiscuous mode [ 103.186223][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 103.186240][ T28] audit: type=1400 audit(3931743538.499:614): avc: denied { shutdown } for pid=8186 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.262178][ T8197] loop4: detected capacity change from 0 to 128 [ 103.293126][ T8197] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.316566][ T8197] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.341253][ T28] audit: type=1400 audit(3931743538.649:615): avc: denied { write } for pid=8196 comm="syz.4.1315" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.145067][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.361887][ T8228] hub 5-0:1.0: USB hub found [ 104.374395][ T8228] hub 5-0:1.0: 8 ports detected [ 105.117053][ T8252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8252 comm=syz.2.1337 [ 105.344945][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1347'. [ 105.959495][ T28] audit: type=1400 audit(3931743541.269:616): avc: denied { write } for pid=8277 comm="syz.3.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.228549][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 106.352639][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 106.369876][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 106.383599][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1371'. [ 106.383660][ T310] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.392751][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 106.411521][ T310] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.421039][ T30] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.435978][ T30] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.655011][ T8336] loop3: detected capacity change from 0 to 512 [ 106.770065][ T8336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.821606][ T8336] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.199000][ T8345] netlink: 146340 bytes leftover after parsing attributes in process `syz.7.1378'. [ 107.233469][ T8345] openvswitch: netlink: Key type 386 is out of range max 32 [ 107.334981][ T28] audit: type=1400 audit(3931743542.649:617): avc: denied { create } for pid=8347 comm="syz.7.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.407852][ T28] audit: type=1400 audit(3931743542.649:618): avc: denied { bind } for pid=8347 comm="syz.7.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.480375][ T28] audit: type=1400 audit(3931743542.789:619): avc: denied { open } for pid=8357 comm="syz.7.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.531039][ T28] audit: type=1400 audit(3931743542.789:620): avc: denied { kernel } for pid=8357 comm="syz.7.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.584697][ T28] audit: type=1400 audit(3931743542.889:621): avc: denied { write } for pid=8339 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.736084][ T28] audit: type=1400 audit(3931743543.049:622): avc: denied { tracepoint } for pid=8371 comm="syz.6.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 107.900218][ T28] audit: type=1400 audit(3931743543.209:623): avc: denied { create } for pid=8335 comm="syz.3.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.995379][ T8387] loop4: detected capacity change from 0 to 2048 [ 108.047100][ T8387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.068826][ T6365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.090584][ T8387] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 108.181801][ T8387] EXT4-fs (loop4): Remounting filesystem read-only [ 108.258557][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.364071][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 108.364087][ T28] audit: type=1400 audit(3931743543.679:626): avc: denied { bind } for pid=8404 comm="syz.4.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.539253][ T8409] netlink: 'syz.4.1403': attribute type 4 has an invalid length. [ 108.746878][ T8393] loop7: detected capacity change from 0 to 8192 [ 108.803265][ T8393] vfat filesystem being mounted at /162/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 109.345757][ T8445] loop4: detected capacity change from 0 to 128 [ 109.359112][ T8445] vfat filesystem being mounted at /327/bus supports timestamps until 2107-12-31 (0x10391447e) [ 109.993631][ T28] audit: type=1400 audit(3931743545.299:627): avc: denied { shutdown } for pid=8458 comm="syz.2.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.052458][ T28] audit: type=1400 audit(3931743545.329:628): avc: denied { read } for pid=8460 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.057093][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1428'. [ 110.107049][ T28] audit: type=1326 audit(3931743545.419:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.1429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 110.177487][ T28] audit: type=1326 audit(3931743545.419:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.1429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 110.252181][ T28] audit: type=1326 audit(3931743545.419:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.1429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 110.338127][ T28] audit: type=1326 audit(3931743545.449:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.1429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 110.365169][ T28] audit: type=1326 audit(3931743545.469:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.1429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf2eeae6ce code=0x7ffc0000 [ 110.405386][ T28] audit: type=1326 audit(3931743545.479:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.1429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdf2eeae6ce code=0x7ffc0000 [ 110.438336][ T28] audit: type=1326 audit(3931743545.479:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8470 comm="syz.2.1429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 110.637344][ T8502] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 110.706042][ T8502] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1444'. [ 110.731248][ T8502] openvswitch: netlink: Message has 6 unknown bytes. [ 110.826526][ T8521] loop3: detected capacity change from 0 to 1024 [ 110.828046][ T8525] bridge_slave_0: left allmulticast mode [ 110.838930][ T8525] bridge_slave_0: left promiscuous mode [ 110.859076][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.864498][ T8521] EXT4-fs: Ignoring removed bh option [ 110.881585][ T8521] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.897012][ T8521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 110.906078][ T8521] System zones: 0-1, 3-12 [ 110.908523][ T8525] bridge_slave_1: left allmulticast mode [ 110.918463][ T8521] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.1450: lblock 1 mapped to illegal pblock 1 (length 1) [ 110.928984][ T8525] bridge_slave_1: left promiscuous mode [ 110.933969][ T8521] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 110.938227][ T8521] EXT4-fs (loop3): Remounting filesystem read-only [ 110.947349][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 110.947401][ C0] EXT4-fs (loop3): initial error at time 3931743546: ext4_map_blocks:833: inode 3: block 1 [ 110.947483][ C0] EXT4-fs (loop3): last error at time 3931743546: ext4_map_blocks:833: inode 3: block 1 [ 110.947557][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.988468][ T8521] EXT4-fs (loop3): 1 orphan inode deleted [ 110.995413][ T8521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.010886][ T8525] bond0: (slave bond_slave_0): Releasing backup interface [ 111.020805][ T8525] bond0: (slave bond_slave_1): Releasing backup interface [ 111.035532][ T8525] team0: Port device team_slave_1 removed [ 111.043086][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.050704][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.059526][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.067687][ T8525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.075770][ T6365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.090685][ T8525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.153527][ T8529] bridge1: entered promiscuous mode [ 111.352190][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.359361][ T8511] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.366626][ T8511] bridge_slave_0: entered allmulticast mode [ 111.373202][ T8511] bridge_slave_0: entered promiscuous mode [ 111.380254][ T8511] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.387391][ T8511] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.394733][ T8511] bridge_slave_1: entered allmulticast mode [ 111.401417][ T8511] bridge_slave_1: entered promiscuous mode [ 111.419828][ T8511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.430458][ T8511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.450737][ T8511] team0: Port device team_slave_0 added [ 111.457586][ T8511] team0: Port device team_slave_1 added [ 111.474187][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.481424][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.507420][ T8511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.518665][ T8511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.525646][ T8511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.551656][ T8511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.578757][ T8541] loop3: detected capacity change from 0 to 8192 [ 111.583366][ T8511] hsr_slave_0: entered promiscuous mode [ 111.591592][ T8511] hsr_slave_1: entered promiscuous mode [ 111.594016][ T8541] vfat filesystem being mounted at /103/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 111.597983][ T8511] debugfs: 'hsr0' already exists in 'hsr' [ 111.614130][ T8511] Cannot create hsr debugfs directory [ 111.695482][ T8511] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 111.704950][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.713033][ T8511] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 111.722200][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.730434][ T8511] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 111.739610][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.747580][ T8511] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 111.757244][ T8511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.799960][ T8511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.813982][ T8511] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.827218][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.834329][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.843958][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.851038][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.976022][ T8511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.195911][ T8511] veth0_vlan: entered promiscuous mode [ 112.215911][ T8511] veth1_vlan: entered promiscuous mode [ 112.233544][ T8511] veth0_macvtap: entered promiscuous mode [ 112.241062][ T8511] veth1_macvtap: entered promiscuous mode [ 112.252870][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.264141][ T8511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.275283][ T310] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.284327][ T310] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.295223][ T310] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.305061][ T310] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.415174][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 113.415189][ T28] audit: type=1400 audit(3931743548.719:641): avc: denied { ioctl } for pid=8639 comm="syz.2.1483" path="socket:[22054]" dev="sockfs" ino=22054 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.479430][ T28] audit: type=1326 audit(3931743548.789:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.533472][ T28] audit: type=1326 audit(3931743548.789:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.591461][ T28] audit: type=1326 audit(3931743548.789:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.595687][ T8653] loop6: detected capacity change from 0 to 128 [ 113.626242][ T28] audit: type=1326 audit(3931743548.789:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.652454][ T28] audit: type=1326 audit(3931743548.789:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.688700][ T8657] netlink: 'syz.8.1490': attribute type 1 has an invalid length. [ 113.699683][ T8657] netlink: 101600 bytes leftover after parsing attributes in process `syz.8.1490'. [ 113.712618][ T28] audit: type=1326 audit(3931743548.789:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.738908][ T28] audit: type=1326 audit(3931743548.789:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.764403][ T28] audit: type=1326 audit(3931743548.789:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.767395][ T8653] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.789914][ T28] audit: type=1326 audit(3931743548.839:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8645 comm="syz.8.1485" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 113.875827][ T8653] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.963383][ T8644] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1484'. [ 113.997530][ T4388] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.113840][ T8668] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1494'. [ 114.141675][ T8668] openvswitch: netlink: Message has 6 unknown bytes. [ 114.948918][ T8688] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 115.082011][ T8712] loop2: detected capacity change from 0 to 7 [ 115.101032][ T8712] loop2: [ 115.240890][ T8714] loop4: detected capacity change from 0 to 512 [ 115.286264][ T8714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.327960][ T8714] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #11: comm syz.4.1508: corrupted in-inode xattr: invalid ea_ino [ 115.344652][ T8714] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.345697][ T8714] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1508: couldn't read orphan inode 11 (err -117) [ 115.355178][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 115.355206][ C0] EXT4-fs (loop4): initial error at time 3931743550: ext4_iget_extra_inode:5180: inode 11 [ 115.355336][ C0] EXT4-fs (loop4): last error at time 3931743550: ext4_iget_extra_inode:5180: inode 11 [ 115.379104][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 115.381827][ T8714] loop4: lost filesystem error report for type 5 error -117 [ 115.430154][ T8714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.500773][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.537755][ T8741] loop8: detected capacity change from 0 to 512 [ 115.555818][ T8741] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.575314][ T8741] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 115.620595][ T8511] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.633794][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1525'. [ 115.657261][ T23] kernel read not supported for file /ppp (pid: 23 comm: kworker/1:0) [ 116.070710][ T8766] loop6: detected capacity change from 0 to 8192 [ 116.079492][ T8766] vfat filesystem being mounted at /236/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 116.097517][ T8766] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 116.110755][ T8766] FAT-fs (loop6): Filesystem has been set read-only [ 116.126736][ T8766] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 116.150946][ T8771] syz.6.1532: attempt to access beyond end of device [ 116.150946][ T8771] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 116.172506][ T8771] Buffer I/O error on dev loop6, logical block 57847, async page read [ 116.457033][ T8777] raw_sendmsg: syz.6.1537 forgot to set AF_INET. Fix it! [ 117.473240][ T8826] loop6: detected capacity change from 0 to 512 [ 117.497074][ T8826] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.510263][ T8826] ext4 filesystem being mounted at /246/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.540042][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.580120][ T8832] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.1559'. [ 117.595423][ T8832] netlink: zone id is out of range [ 117.640988][ T8836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1560'. [ 118.338026][ T8856] loop6: detected capacity change from 0 to 512 [ 118.360982][ T8856] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 118.410056][ T8856] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #11: comm syz.6.1579: corrupted in-inode xattr: invalid ea_ino [ 118.462112][ T8856] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 118.462512][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 118.478781][ C0] EXT4-fs (loop6): initial error at time 3931743553: ext4_iget_extra_inode:5180: inode 11 [ 118.488972][ C0] EXT4-fs (loop6): last error at time 3931743553: ext4_iget_extra_inode:5180: inode 11 [ 118.512785][ T8856] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1579: couldn't read orphan inode 11 (err -117) [ 118.572009][ T8856] loop6: lost filesystem error report for type 5 error -117 [ 118.572628][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 118.615116][ T8856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.684413][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.161036][ T8921] loop8: detected capacity change from 0 to 512 [ 119.170152][ T8921] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 119.189966][ T8921] EXT4-fs (loop8): 1 truncate cleaned up [ 119.203665][ T8921] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.418795][ T8511] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.180163][ T23] kernel read not supported for file /ppp (pid: 23 comm: kworker/1:0) [ 120.582326][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 120.582340][ T28] audit: type=1400 audit(3931743555.889:675): avc: denied { write } for pid=8994 comm="syz.6.1637" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 120.666180][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 120.687457][ T28] audit: type=1326 audit(3931743555.989:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.8.1633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 120.723754][ T9006] loop4: detected capacity change from 0 to 8192 [ 120.734232][ T9006] vfat filesystem being mounted at /362/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 120.747617][ T28] audit: type=1326 audit(3931743555.989:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.8.1633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 120.774628][ T28] audit: type=1326 audit(3931743555.989:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.8.1633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 120.799136][ T9002] vlan2: entered promiscuous mode [ 120.802265][ T28] audit: type=1326 audit(3931743555.989:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.8.1633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdd365bde99 code=0x7ffc0000 [ 120.823042][ T9002] bridge0: entered promiscuous mode [ 120.831987][ T28] audit: type=1326 audit(3931743556.049:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.8.1633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd3657e6ce code=0x7ffc0000 [ 120.862038][ T28] audit: type=1326 audit(3931743556.059:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.8.1633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd3657e6ce code=0x7ffc0000 [ 120.887914][ T28] audit: type=1326 audit(3931743556.059:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.8.1633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd3657e6ce code=0x7ffc0000 [ 120.927913][ T28] audit: type=1326 audit(3931743556.059:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9003 comm="syz.8.1633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd3657e6ce code=0x7ffc0000 [ 120.979267][ T9012] syzkaller0: entered promiscuous mode [ 120.991544][ T9012] syzkaller0: entered allmulticast mode [ 120.997093][ T28] audit: type=1400 audit(3931743556.089:684): avc: denied { mounton } for pid=9005 comm="syz.4.1632" path="/362/file0/bus" dev="loop4" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 121.084352][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1639'. [ 121.117636][ T9023] netlink: 'syz.2.1641': attribute type 12 has an invalid length. [ 121.166269][ T9030] loop3: detected capacity change from 0 to 128 [ 121.179875][ T9030] vfat filesystem being mounted at /133/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 121.466159][ T9058] loop8: detected capacity change from 0 to 128 [ 121.473926][ T9058] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842e018, mo2=0002] [ 121.482118][ T9058] System zones: 1-3, 19-19, 35-36 [ 121.488092][ T9058] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.500683][ T9058] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.553424][ T8511] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.543993][ T9104] xt_hashlimit: size too large, truncated to 1048576 [ 122.651621][ T9111] loop4: detected capacity change from 0 to 512 [ 122.670790][ T9111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.714031][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.977123][ T9138] loop6: detected capacity change from 0 to 512 [ 122.986968][ T9138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.004991][ T9138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.017656][ T9138] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.030192][ T9138] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.1690: iget: bad i_size value: 2533274857506816 [ 123.043795][ T9138] EXT4-fs (loop6): Remounting filesystem read-only [ 123.059911][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.332461][ T3783] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.333633][ T4052] Bluetooth: hci0: command 0x1003 tx timeout [ 123.758209][ T9148] loop6: detected capacity change from 0 to 4096 [ 123.778439][ T9148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.809355][ T4388] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.985927][ T9177] netlink: 'syz.6.1708': attribute type 15 has an invalid length. [ 124.001512][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1708'. [ 124.032590][ T9177] netlink: 'syz.6.1708': attribute type 15 has an invalid length. [ 124.033359][ T5260] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 2304 - 0 [ 124.040505][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1708'. [ 124.058245][ T9184] loop4: detected capacity change from 0 to 512 [ 124.083916][ T5260] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 2304 - 0 [ 124.096287][ T9184] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.107728][ T5260] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 2304 - 0 [ 124.116816][ T5260] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 2304 - 0 [ 124.126752][ T9184] EXT4-fs (loop4): 1 truncate cleaned up [ 124.135742][ T9184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.284788][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.571661][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 124.646846][ T9221] vlan3: entered promiscuous mode [ 124.661647][ T9221] bridge0: entered promiscuous mode [ 125.988662][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1739'. [ 125.997824][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1739'. [ 126.022339][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1739'. [ 126.022503][ T310] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.031506][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1739'. [ 126.045843][ T310] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.058313][ T310] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.069950][ T310] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.105873][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1740'. [ 126.122372][ T9371] vlan2: entered promiscuous mode [ 126.127890][ T9371] bridge0: entered promiscuous mode [ 126.185883][ T9379] netlink: 'syz.8.1743': attribute type 4 has an invalid length. [ 129.003474][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1753'. [ 129.170516][ T9404] vlan2: entered promiscuous mode [ 129.181373][ T9404] bridge0: entered promiscuous mode [ 129.281349][ T9423] netlink: 'syz.4.1762': attribute type 12 has an invalid length. [ 129.299300][ T9404] syz.6.1753 (9404) used greatest stack depth: 9536 bytes left [ 133.210432][ T310] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.220549][ T9595] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 133.228811][ T9595] netlink: 'syz.2.1789': attribute type 4 has an invalid length. [ 133.236475][ T310] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.236885][ T9595] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1789'. [ 133.299975][ T9602] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 133.321596][ T9602] netlink: 'syz.2.1789': attribute type 4 has an invalid length. [ 133.332231][ T310] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.337950][ T9602] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1789'. [ 133.347038][ T310] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.379080][ T9606] bridge0: port 3(vlan3) entered blocking state [ 133.399212][ T9606] bridge0: port 3(vlan3) entered disabled state [ 133.408052][ T9606] vlan3: entered allmulticast mode [ 133.414077][ T9606] geneve0: entered allmulticast mode [ 133.420912][ T9606] vlan3: entered promiscuous mode [ 133.426445][ T9606] geneve0: entered promiscuous mode [ 133.429517][ T9617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9617 comm=syz.2.1794 [ 133.444733][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 133.444764][ T28] audit: type=1400 audit(3931743568.759:775): avc: denied { nlmsg_write } for pid=9616 comm="syz.2.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 133.497416][ T310] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.521800][ T310] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.571778][ T28] audit: type=1326 audit(3931743568.879:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 133.619274][ T310] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.621685][ T28] audit: type=1326 audit(3931743568.879:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 133.629966][ T310] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.668652][ T9635] netlink: 'syz.3.1799': attribute type 13 has an invalid length. [ 133.668858][ T28] audit: type=1326 audit(3931743568.879:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 133.709718][ T28] audit: type=1326 audit(3931743568.879:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 133.739052][ T28] audit: type=1326 audit(3931743568.889:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 133.806488][ T28] audit: type=1326 audit(3931743568.899:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 133.838241][ T28] audit: type=1326 audit(3931743568.909:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 133.867325][ T28] audit: type=1326 audit(3931743568.919:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 133.894410][ T28] audit: type=1326 audit(3931743568.919:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9626 comm="syz.2.1797" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdf2eeede99 code=0x7ffc0000 [ 134.013283][ T310] bridge_slave_1: left allmulticast mode [ 134.019023][ T310] bridge_slave_1: left promiscuous mode [ 134.025016][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.034019][ T310] bridge_slave_0: left allmulticast mode [ 134.040245][ T310] bridge_slave_0: left promiscuous mode [ 134.046890][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.140582][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.151335][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.161510][ T310] bond0 (unregistering): Released all slaves [ 134.174884][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 134.236783][ T9662] netlink: 'syz.6.1803': attribute type 12 has an invalid length. [ 134.254529][ T310] hsr_slave_0: left promiscuous mode [ 134.261805][ T310] hsr_slave_1: left promiscuous mode [ 134.270703][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.285796][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.295751][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.306022][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.342082][ T310] veth1_macvtap: left promiscuous mode [ 134.351899][ T310] veth0_macvtap: left promiscuous mode [ 134.361518][ T310] veth1_vlan: left promiscuous mode [ 134.368291][ T310] veth0_vlan: left promiscuous mode [ 134.565795][ T310] team0 (unregistering): Port device team_slave_1 removed [ 134.785270][ T310] team0 (unregistering): Port device team_slave_0 removed [ 134.895360][ T9693] ================================================================== [ 134.903490][ T9693] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 134.912119][ T9693] [ 134.914441][ T9693] write to 0xffff88810ca7aa60 of 8 bytes by task 9694 on cpu 0: [ 134.922060][ T9693] shmem_file_splice_read+0x401/0x590 [ 134.927442][ T9693] splice_direct_to_actor+0x261/0x680 [ 134.932832][ T9693] do_splice_direct+0x119/0x1a0 [ 134.937680][ T9693] do_sendfile+0x37d/0x640 [ 134.942097][ T9693] __x64_sys_sendfile64+0x105/0x150 [ 134.947297][ T9693] x64_sys_call+0x2dc4/0x3020 [ 134.951974][ T9693] do_syscall_64+0x136/0x3c0 [ 134.956552][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.962450][ T9693] [ 134.964771][ T9693] write to 0xffff88810ca7aa60 of 8 bytes by task 9693 on cpu 1: [ 134.972393][ T9693] shmem_file_splice_read+0x401/0x590 [ 134.977778][ T9693] splice_direct_to_actor+0x261/0x680 [ 134.983146][ T9693] do_splice_direct+0x119/0x1a0 [ 134.987999][ T9693] do_sendfile+0x37d/0x640 [ 134.992416][ T9693] __x64_sys_sendfile64+0x105/0x150 [ 134.999187][ T9693] x64_sys_call+0x2dc4/0x3020 [ 135.003875][ T9693] do_syscall_64+0x136/0x3c0 [ 135.008459][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.014348][ T9693] [ 135.016660][ T9693] value changed: 0x0000000000003a48 -> 0x0000000000003a4f [ 135.023752][ T9693] [ 135.026063][ T9693] Reported by Kernel Concurrency Sanitizer on: [ 135.032199][ T9693] CPU: 1 UID: 0 PID: 9693 Comm: syz.4.1811 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.041486][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 135.051541][ T9693] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.181279][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 135.210632][ T9689] bridge0: port 3(vlan3) entered blocking state [ 135.244360][ T9689] bridge0: port 3(vlan3) entered disabled state [ 135.265371][ T9689] vlan3: entered allmulticast mode [ 135.270970][ T9689] geneve0: entered allmulticast mode [ 135.277800][ T9689] vlan3: entered promiscuous mode [ 135.285031][ T9689] geneve0: entered promiscuous mode [ 135.311778][ T9596] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 135.569819][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 135.655409][ T310] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.665969][ T310] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.676909][ T310] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.728953][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 135.755393][ T310] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.765897][ T310] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.776202][ T310] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.855511][ T310] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.866191][ T310] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.876673][ T310] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 135.924853][ T310] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.938932][ T310] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.949654][ T310] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 136.126118][ T310] bond2 (unregistering): (slave geneve2): Releasing active interface [ 136.145716][ T310] bond0 (unregistering): (slave team0): Releasing backup interface [ 136.154632][ T310] bond0 (unregistering): Released all slaves [ 136.162645][ T310] bond1 (unregistering): Released all slaves [ 136.171797][ T310] bond2 (unregistering): Released all slaves [ 136.193401][ T310] bond0 (unregistering): Released all slaves [ 136.242355][ T310] hsr_slave_0: left promiscuous mode [ 136.248206][ T310] hsr_slave_1: left promiscuous mode [ 136.257136][ T310] veth1_macvtap: left promiscuous mode [ 136.262786][ T310] veth0_macvtap: left promiscuous mode [ 136.268371][ T310] veth1_vlan: left promiscuous mode [ 136.273839][ T310] veth0_vlan: left promiscuous mode [ 136.379100][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 136.505414][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 136.608732][ T310] IPVS: stop unused estimator thread 0... [ 136.632440][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 136.688924][ T310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.700136][ T310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.737741][ T310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.748818][ T310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.761390][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 136.826516][ T310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.836989][ T310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.885609][ T310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.895958][ T310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.973921][ T310] vlan3: left allmulticast mode [ 136.979076][ T310] geneve0: left allmulticast mode [ 136.984234][ T310] vlan3: left promiscuous mode [ 136.989021][ T310] geneve0: left promiscuous mode [ 136.994199][ T310] bridge0: port 3(vlan3) entered disabled state [ 137.001323][ T310] bridge_slave_1: left allmulticast mode [ 137.007061][ T310] bridge_slave_1: left promiscuous mode [ 137.013343][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.021453][ T310] bridge_slave_0: left allmulticast mode [ 137.027207][ T310] bridge_slave_0: left promiscuous mode [ 137.033160][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.093751][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.105507][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.115133][ T310] bond0 (unregistering): Released all slaves [ 137.130691][ T310] hsr_slave_0: left promiscuous mode [ 137.136582][ T310] hsr_slave_1: left promiscuous mode [ 137.142205][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.149630][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.160257][ T310] veth1_macvtap: left promiscuous mode [ 137.165808][ T310] veth0_macvtap: left promiscuous mode [ 137.171447][ T310] veth1_vlan: left promiscuous mode [ 137.177138][ T310] veth0_vlan: left promiscuous mode [ 137.241392][ T310] team0 (unregistering): Port device team_slave_1 removed [ 137.251728][ T310] team0 (unregistering): Port device team_slave_0 removed [ 137.405384][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 137.537045][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 137.662912][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 137.789627][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24