last executing test programs: 5m13.794856945s ago: executing program 32 (id=34): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x4d1a}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000001c0)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 5m1.317813005s ago: executing program 2 (id=388): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 5m0.733946458s ago: executing program 2 (id=391): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x3, 0x800000, 0x40, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xfffffffd, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x48, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfa", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 5m0.691468949s ago: executing program 33 (id=391): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x3, 0x800000, 0x40, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xfffffffd, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x48, 0x0, &(0x7f0000001300)="b461802305624431ed33730100010446b20aed0200000000000000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfa", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x200c2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 4m43.172515345s ago: executing program 34 (id=809): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x4}, 0x8) 4m14.48414904s ago: executing program 35 (id=1544): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc624, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0x0, 0x238, 0x170, 0xd8, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffff00, 0x0, 'veth0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x62, 0x0, 0x50}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xb, 0x4, @ipv4=@loopback, 0x4e24}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x89, 0x6, 0x24}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'ip6_vti0\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x7, 0x1}}}, {{@ip={@loopback, @multicast1, 0xff, 0xff, 'veth0_to_batadv\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x44, 0x1, 0x15}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x55d, 0x3, @multicast1, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xcf8a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="c50f29bd7000004000001100000008000300", @ANYRES32=0x0, @ANYBLOB="0e012a"], 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m2.151741086s ago: executing program 36 (id=1790): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m23.869517885s ago: executing program 37 (id=3862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 1m47.38331537s ago: executing program 0 (id=4540): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000240)=[{r1, 0x2002}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m46.51796344s ago: executing program 0 (id=4567): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffeae, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4000) 1m46.415741553s ago: executing program 0 (id=4569): close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote, 0x2, 0x2, 0xff, 0x6, 0x0, 0xfff6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') readv(r1, &(0x7f0000000400)=[{&(0x7f0000000200)=""/232, 0xe8}], 0x1) 1m46.370813844s ago: executing program 0 (id=4570): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 1m46.231312667s ago: executing program 0 (id=4571): mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, 0xffffffffffffffff, 0x8cee000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000003c0)="ef", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0}, &(0x7f0000000240)=0x40) 1m45.291549168s ago: executing program 0 (id=4602): socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 1m45.25029256s ago: executing program 38 (id=4602): socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 1m43.236287057s ago: executing program 2 (id=4603): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x80, 0x5, 0x9, 0x7, 0x7, "01000000000000c000000000800000e4018780"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x10001) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x98, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) 1m43.176058688s ago: executing program 2 (id=4621): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m43.10433569s ago: executing program 2 (id=4623): socket(0x848000000015, 0x805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m41.593973074s ago: executing program 2 (id=4652): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x8003, 0x4, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) 1m41.593778595s ago: executing program 39 (id=4652): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x8003, 0x4, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000400)={r3, 0x1}, &(0x7f0000000440)=0x8) 1m4.739017979s ago: executing program 3 (id=5310): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000440)=@ethtool_perm_addr={0x20, 0x6, "fbb020b1c236"}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 1m4.647006441s ago: executing program 3 (id=5311): openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x183942, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x42, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m4.612612242s ago: executing program 3 (id=5312): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r2, 0x7) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0x1, 0xb) 1m4.511253494s ago: executing program 3 (id=5323): close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff7f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.028693315s ago: executing program 3 (id=5320): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd6c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\xf0Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m3.974008397s ago: executing program 3 (id=5322): r0 = syz_io_uring_setup(0x7c68, &(0x7f00000002c0)={0x0, 0x8a9e, 0x3000, 0x20000002, 0x197}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x1) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) 48.947894925s ago: executing program 40 (id=5322): r0 = syz_io_uring_setup(0x7c68, &(0x7f00000002c0)={0x0, 0x8a9e, 0x3000, 0x20000002, 0x197}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x1) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) 32.667017832s ago: executing program 4 (id=5754): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) 31.723159224s ago: executing program 4 (id=5773): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}}, 0x20}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@init_itable}]}, 0x1, 0xbb5, &(0x7f0000002480)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000440), 0xc}, 0x0, 0x8, 0x20da, 0x2, 0x0, 0x80000001, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffa99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0xff01, 0x3) 31.340693993s ago: executing program 4 (id=5778): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r2, 0x402, 0x91ea6c16f182517) getdents64(r2, &(0x7f0000000080)=""/41, 0x29) 31.02856688s ago: executing program 4 (id=5784): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f881, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 30.932491272s ago: executing program 4 (id=5785): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000}}, 0xe4) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5, @mcast2, 0x17fff}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000ffffff06000000140008"], 0x34}}, 0x0) 30.61004099s ago: executing program 4 (id=5787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r1, 0x6f6) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 30.582567171s ago: executing program 41 (id=5787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r1, 0x6f6) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 23.482201525s ago: executing program 8 (id=5909): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x70bd2e, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 23.142982383s ago: executing program 8 (id=5917): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x100000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000008c0)=""/195, 0xc3}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r0}, 0x20) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) 23.060182615s ago: executing program 8 (id=5921): r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x6258, &(0x7f0000000040)={0x0, 0x42a2, 0x80, 0x1000}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x39d) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x800) 22.170617456s ago: executing program 8 (id=5935): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000006780)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@errors_continue}, {@mblk_io_submit}, {@nolazytime}]}, 0x1, 0x4ac, &(0x7f0000006800)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x4a7) 21.999346069s ago: executing program 8 (id=5939): io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0xc40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc92e, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x1f, 0x0, 0x0) 21.167838599s ago: executing program 8 (id=5955): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001800010000000000000000001d01060008000a00", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.167733149s ago: executing program 42 (id=5955): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001800010000000000000000001d01060008000a00", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.069326152s ago: executing program 5 (id=6289): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}}, 0x4000050) 4.843510047s ago: executing program 5 (id=6292): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.251537911s ago: executing program 5 (id=6303): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42142, 0x1) close(0x3) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4.157633953s ago: executing program 5 (id=6305): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/prev\x00') readv(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffb2) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 3.892781209s ago: executing program 5 (id=6308): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 2.763495585s ago: executing program 5 (id=6315): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 2.348691605s ago: executing program 9 (id=6320): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.303431376s ago: executing program 9 (id=6322): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e0, 0x0, 0x1a0, 0x2b8, 0x388, 0xd0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1, 0x40}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.217199638s ago: executing program 9 (id=6324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x20000000, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) 2.082268432s ago: executing program 9 (id=6332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x2a, 0x1f}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.979266674s ago: executing program 9 (id=6344): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x7fffffff, 0x4}, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1.836430367s ago: executing program 7 (id=6337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x0, @perf_config_ext={0x10000, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x391, 0xffffffffffffffff, 0x4}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) 1.804719327s ago: executing program 9 (id=6338): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0xfffa, [0x0, 0x3]}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.731225929s ago: executing program 6 (id=6340): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000bc0)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@resgid}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@user_xattr}]}, 0x1, 0x578, &(0x7f0000000500)="$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") mmap$perf(&(0x7f000006f000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x56ac, 0x5}, 0x84c0, 0x7f, 0xf, 0x0, 0x6, 0x1, 0x9001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0xb) mmap(&(0x7f0000118000/0x4000)=nil, 0x4000, 0x1000009, 0x80010, r1, 0x800fb000) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.730984359s ago: executing program 1 (id=6341): capset(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b16000b000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32000000001400000011000100000000000000"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 1.727041469s ago: executing program 7 (id=6342): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1261}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @local, @local, 0x9, 0x0, 0x0, 0x0, 0x4, 0x40208}) 1.670949011s ago: executing program 1 (id=6343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_FDB={0x4}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d7, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000001040), 0x201, 0x0) 1.589215623s ago: executing program 1 (id=6345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000009a80)=@newtfilter={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 1.087770844s ago: executing program 7 (id=6346): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.087348184s ago: executing program 1 (id=6347): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004, 0x1, @perf_bp={0x0, 0x8}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.065611735s ago: executing program 7 (id=6348): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20120, 0x0, 0x0) process_madvise(r1, 0x0, 0x0, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) 1.010214076s ago: executing program 7 (id=6349): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000000c0)="34a6", 0x2}], 0x1}, 0x11) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) 896.411509ms ago: executing program 1 (id=6350): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0xfffffffffffffffb, 0x400, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 859.0026ms ago: executing program 6 (id=6351): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200021000000000000000000000000200080008000000f100000000000000020001000800000000000000000000a0"], 0x80}, 0x1, 0x7}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff1}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 789.998931ms ago: executing program 6 (id=6352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x56f5d276454fa52b}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0xfffffffffffffc53, 0x1, 0x200}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 658.226654ms ago: executing program 6 (id=6353): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x30, 0x25, 0x2, 0x70ff}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 127.205687ms ago: executing program 7 (id=6354): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x2, 0x3}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 126.604227ms ago: executing program 6 (id=6364): openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 24.221019ms ago: executing program 6 (id=6355): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000700)={'broute\x00', 0x0, 0x4, 0x0, [0x9, 0x6, 0xa, 0x9, 0x5, 0x76], 0x0, 0x0, 0x0}, &(0x7f0000000780)=0x78) 0s ago: executing program 1 (id=6356): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) kernel console output (not intermixed with test programs): 24 [ 254.329782][T16909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.403975][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.432371][T16935] loop8: detected capacity change from 0 to 1024 [ 254.469013][T16935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 254.517959][T16935] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.568491][T16935] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.4724: Freeing blocks not in datazone - block = 0, count = 16 [ 254.668890][ T30] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 254.707212][ T30] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 254.738874][ T30] EXT4-fs (loop8): This should not happen!! Data will be lost [ 254.738874][ T30] [ 254.755365][ T7632] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 254.783926][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 255.368248][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.619014][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 255.703336][T17041] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 255.912520][T17063] loop6: detected capacity change from 0 to 256 [ 255.923167][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4755'. [ 256.016246][T17076] netlink: 'syz.8.4756': attribute type 1 has an invalid length. [ 256.071490][T17086] netlink: 'syz.3.4759': attribute type 1 has an invalid length. [ 256.133477][T17086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.163765][T17093] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 256.174200][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 256.245523][ T9865] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 256.408849][ T4684] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 256.501434][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 257.309815][T17161] loop4: detected capacity change from 0 to 512 [ 257.332639][T17161] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 257.341569][T17161] EXT4-fs (loop4): orphan cleanup on readonly fs [ 257.349749][T17161] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.4779: bad orphan inode 15 [ 257.361316][T17161] loop4: lost filesystem error report for type 5 error -117 [ 257.361894][T17161] ext4_test_bit(bit=14, block=5) = 0 [ 257.369696][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 257.369724][ C0] EXT4-fs (loop4): initial error at time 1784402574: ext4_orphan_get:1425 [ 257.369899][ C0] EXT4-fs (loop4): last error at time 1784402574: ext4_orphan_get:1425 [ 257.403666][T17161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 257.428123][T17161] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 257.460589][T16565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.556681][T17176] all: renamed from lo (while UP) [ 258.708709][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 258.708760][ T28] audit: type=1400 audit(1784402576.149:1784): avc: denied { write } for pid=17263 comm="syz.8.4825" path="socket:[48313]" dev="sockfs" ino=48313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 258.974682][T17277] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4830'. [ 259.049767][T17281] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4833'. [ 259.558568][T17307] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 259.587161][T17307] bond0 (unregistering): Released all slaves [ 260.365663][T17354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.374234][T17354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.166893][T17382] loop4: detected capacity change from 0 to 512 [ 261.181533][T17382] EXT4-fs: Ignoring removed bh option [ 261.204312][T17382] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 261.214538][T17382] EXT4-fs (loop4): 1 truncate cleaned up [ 261.220844][T17382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.257734][T16565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.270884][T17392] ip_vti0: entered promiscuous mode [ 261.277542][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4877'. [ 261.343077][T17401] xt_hashlimit: size too large, truncated to 1048576 [ 261.782095][T17407] netlink: 'syz.7.4882': attribute type 1 has an invalid length. [ 261.797036][T17407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.324588][T17438] tmpfs: Bad value for 'mpol' [ 262.561426][T17455] loop6: detected capacity change from 0 to 512 [ 262.571927][T17451] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4900'. [ 262.601574][T17456] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4900'. [ 262.624875][T17455] EXT4-fs: Ignoring removed nobh option [ 262.635893][T17455] EXT4-fs: Ignoring removed bh option [ 262.661125][T17455] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 262.700407][T17455] EXT4-fs (loop6): 1 truncate cleaned up [ 262.731068][T17455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.823234][ T28] audit: type=1400 audit(1784402580.259:1785): avc: denied { write } for pid=17454 comm="syz.6.4912" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.894713][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.941732][ T3412] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 262.950609][ T3412] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.345790][T17493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4916'. [ 263.841985][T17511] loop6: detected capacity change from 0 to 512 [ 263.871876][T17511] EXT4-fs: inline encryption not supported [ 263.885936][T17511] EXT4-fs: Ignoring removed i_version option [ 263.893712][T17511] EXT4-fs (loop6): 1 orphan inode deleted [ 263.901305][T17511] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.935540][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.193742][T17523] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4929'. [ 264.550539][T17499] syz.3.4918 (17499) used greatest stack depth: 8928 bytes left [ 265.112074][T17557] loop4: detected capacity change from 0 to 128 [ 265.143697][T17557] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.163514][T17561] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 265.196796][T17557] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.470925][ T28] audit: type=1326 audit(1784402582.909:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.8.4947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c2a1dde99 code=0x0 [ 265.496586][T17561] infiniband syz1: set down [ 265.501247][T17561] infiniband syz1: added bond0 [ 265.515634][ T4684] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.538777][T17561] RDS/IB: syz1: added [ 265.548018][T17561] smc: adding ib device syz1 with port count 1 [ 265.574064][T17561] smc: ib device syz1 port 1 has no pnetid [ 265.756569][T17575] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.4949'. [ 265.774589][T17575] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.4949'. [ 265.881235][ T28] audit: type=1400 audit(1784402583.319:1787): avc: denied { prog_load } for pid=17576 comm="syz.7.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.901179][ T28] audit: type=1400 audit(1784402583.339:1788): avc: denied { prog_run } for pid=17576 comm="syz.7.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.922634][T17579] netlink: 'syz.4.4950': attribute type 1 has an invalid length. [ 265.947360][T17579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.981613][T17579] bond1: (slave geneve2): making interface the new active one [ 266.013866][T17579] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 266.039994][T17584] netlink: 272 bytes leftover after parsing attributes in process `syz.7.4953'. [ 266.056450][T17584] netlink: 272 bytes leftover after parsing attributes in process `syz.7.4953'. [ 266.236531][ T28] audit: type=1400 audit(1784402583.679:1789): avc: denied { map_create } for pid=17603 comm="syz.3.4963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.269992][ T28] audit: type=1400 audit(1784402583.679:1790): avc: denied { map_read map_write } for pid=17603 comm="syz.3.4963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.303025][ T28] audit: type=1326 audit(1784402583.739:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.4.4964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0c0cde99 code=0x7ffc0000 [ 266.342235][T17612] loop8: detected capacity change from 0 to 128 [ 266.364741][ T28] audit: type=1326 audit(1784402583.739:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.4.4964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0c0cde99 code=0x7ffc0000 [ 266.395381][T17612] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.407725][ T28] audit: type=1326 audit(1784402583.739:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.4.4964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0c0cde99 code=0x7ffc0000 [ 266.433485][T17612] ext4 filesystem being mounted at /677/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.465778][ T28] audit: type=1326 audit(1784402583.739:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.4.4964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0c0cde99 code=0x7ffc0000 [ 266.491518][ T28] audit: type=1326 audit(1784402583.739:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17605 comm="syz.4.4964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fde0c0cde99 code=0x7ffc0000 [ 266.588179][ T7632] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.849258][T17631] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 266.870631][T17631] rdma_rxe: rxe_newlink: failed to add bond0 [ 267.478877][T17692] tmpfs: Bad value for 'mpol' [ 267.568292][T17695] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 267.569181][ T68] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 267.759343][T17700] loop8: detected capacity change from 0 to 1024 [ 267.834063][T17700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 267.849043][T17700] ext4 filesystem being mounted at /695/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.873174][T17700] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4990: corrupted xattr block 128: bad e_name length [ 267.900986][T17700] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 267.914593][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.921987][ C1] bridge0: topology change detected, propagating [ 267.928859][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.936293][ C1] bridge0: topology change detected, propagating [ 267.944275][T17700] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.4990: corrupted xattr block 128: bad e_name length [ 268.028815][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 269.093203][T17737] tmpfs: Bad value for 'mpol' [ 269.613407][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5010'. [ 269.763172][T17791] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5011'. [ 271.278397][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 272.305698][T17942] syz.8.5030 (17942) used greatest stack depth: 8704 bytes left [ 273.289652][T17996] batadv_slave_0: entered promiscuous mode [ 273.304087][T17995] batadv_slave_0: left promiscuous mode [ 273.332206][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 273.332224][ T28] audit: type=1400 audit(1784402590.769:1852): avc: denied { node_bind } for pid=17998 comm="syz.7.5051" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 273.687292][T18015] loop8: detected capacity change from 0 to 256 [ 273.710446][T18019] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 274.103202][T18030] batadv_slave_0: entered promiscuous mode [ 274.119635][T18027] batadv_slave_0: left promiscuous mode [ 274.344662][T18049] erspan0: entered promiscuous mode [ 274.356764][T18049] erspan0: left promiscuous mode [ 274.447641][T18037] loop8: detected capacity change from 0 to 32768 [ 274.554535][T18063] loop6: detected capacity change from 0 to 512 [ 274.573056][T18063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.588755][T18063] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.650129][T18068] loop6: detected capacity change from 0 to 256 [ 274.737418][T18072] bridge_slave_0: left allmulticast mode [ 274.743207][T18072] bridge_slave_0: left promiscuous mode [ 274.751136][T18072] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.921280][T18072] bridge_slave_1: left allmulticast mode [ 274.927922][T18072] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.938473][T18072] bond0: (slave bond_slave_0): Releasing backup interface [ 274.947566][T18072] bond0: (slave bond_slave_1): Releasing backup interface [ 274.958752][T18072] team0: Port device team_slave_1 removed [ 274.965494][T18072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.975342][T18072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.990617][T18072] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 275.014692][T18074] bridge0: port 1(team0) entered blocking state [ 275.021211][T18074] bridge0: port 1(team0) entered disabled state [ 275.034653][T18074] team0: entered allmulticast mode [ 275.040969][T18074] team0: entered promiscuous mode [ 275.050228][T18082] loop6: detected capacity change from 0 to 512 [ 275.677162][T18113] loop8: detected capacity change from 0 to 4096 [ 275.721425][T18084] loop4: detected capacity change from 0 to 512 [ 275.728267][T18113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.746435][ T28] audit: type=1400 audit(1784402593.179:1853): avc: denied { write } for pid=18112 comm="syz.8.5100" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.816007][T18084] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 275.832712][T18084] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.5087: corrupted in-inode xattr: e_value size too large [ 275.864086][T18084] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 275.866345][T18084] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.5087: couldn't read orphan inode 15 (err -117) [ 275.876483][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 275.876654][ C0] EXT4-fs (loop4): initial error at time 1784402593: ext4_iget_extra_inode:5180: inode 15 [ 275.876753][ C0] EXT4-fs (loop4): last error at time 1784402593: ext4_iget_extra_inode:5180: inode 15 [ 275.938916][T18084] loop4: lost filesystem error report for type 5 error -117 [ 275.944621][T18084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.986301][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.086094][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5106'. [ 276.111530][T16565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.140722][ T28] audit: type=1400 audit(1784402593.579:1854): avc: denied { read } for pid=18130 comm="syz.7.5109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 276.818924][ T28] audit: type=1400 audit(1784402594.259:1855): avc: denied { accept } for pid=18157 comm="syz.6.5118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.118938][T18221] loop6: detected capacity change from 0 to 512 [ 278.138759][T18221] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.5145: corrupted in-inode xattr: invalid ea_ino [ 278.152423][T18221] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 278.152580][T18221] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5145: couldn't read orphan inode 15 (err -117) [ 278.162090][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 278.162118][ C0] EXT4-fs (loop6): initial error at time 1784402595: ext4_iget_extra_inode:5180: inode 15 [ 278.162145][ C0] EXT4-fs (loop6): last error at time 1784402595: ext4_iget_extra_inode:5180: inode 15 [ 278.206195][T18221] loop6: lost filesystem error report for type 5 error -117 [ 278.206776][T18221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.243717][ T28] audit: type=1400 audit(1784402595.679:1856): avc: denied { write } for pid=18220 comm="syz.6.5145" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.291463][T18229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 278.322005][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.389473][T18230] team0: Port device xfrm0 added [ 278.631260][T18251] loop8: detected capacity change from 0 to 512 [ 278.680561][T18251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.693385][T18251] ext4 filesystem being mounted at /733/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.709526][T18247] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5151'. [ 278.730212][ T28] audit: type=1400 audit(1784402596.169:1857): avc: denied { write } for pid=18250 comm="syz.8.5153" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.737717][T18247] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5151'. [ 278.763804][ T28] audit: type=1400 audit(1784402596.169:1858): avc: denied { write } for pid=18250 comm="syz.8.5153" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.808005][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.062238][ T28] audit: type=1400 audit(1784402596.499:1859): avc: denied { getopt } for pid=18275 comm="syz.3.5162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.434487][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 279.757003][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5165'. [ 279.963515][ T28] audit: type=1326 audit(1784402597.399:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18298 comm="syz.6.5171" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8301a0de99 code=0x0 [ 280.547268][T18327] ipip1: entered promiscuous mode [ 280.557008][T18327] ipip1: entered allmulticast mode [ 280.973851][ T28] audit: type=1400 audit(1784402598.409:1861): avc: denied { append } for pid=18340 comm="syz.3.5188" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 281.212336][T18356] loop8: detected capacity change from 0 to 512 [ 281.313859][T18356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.388598][T18356] ext4 filesystem being mounted at /749/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.467680][ T28] audit: type=1400 audit(1784402598.909:1862): avc: denied { write } for pid=18355 comm="syz.8.5195" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.609703][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.161021][T18388] syzkaller1: entered promiscuous mode [ 282.195999][T18388] syzkaller1: entered allmulticast mode [ 282.384705][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5218'. [ 282.443184][T18410] netlink: 'syz.6.5218': attribute type 10 has an invalid length. [ 282.476321][T18410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5218'. [ 282.505153][T18410] geneve2: entered promiscuous mode [ 282.513630][T18410] geneve2: entered allmulticast mode [ 282.979412][T18446] loop6: detected capacity change from 0 to 512 [ 283.002341][ C1] vcan0: j1939_tp_rxtimer: 0xffff888140102000: rx timeout, send abort [ 283.018871][T18446] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.046174][T18446] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.072181][ T28] audit: type=1400 audit(1784402600.509:1863): avc: denied { write } for pid=18445 comm="syz.6.5234" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.185358][T18459] loop4: detected capacity change from 0 to 128 [ 283.267491][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.404042][T18478] loop8: detected capacity change from 0 to 512 [ 283.418191][T18478] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.434195][T18478] ext4 filesystem being mounted at /755/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.468324][ T28] audit: type=1400 audit(1784402600.909:1864): avc: denied { write } for pid=18477 comm="syz.8.5248" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.499948][ T28] audit: type=1400 audit(1784402600.939:1865): avc: denied { write } for pid=18477 comm="syz.8.5248" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.521859][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b045600: rx timeout, send abort [ 283.521888][ C1] vcan0: j1939_tp_rxtimer: 0xffff888140102000: abort rx timeout. Force session deactivation [ 283.561261][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.886268][T18510] loop4: detected capacity change from 0 to 128 [ 283.936035][T18510] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.957735][T18510] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.975966][ T28] audit: type=1400 audit(1784402601.419:1866): avc: denied { write } for pid=18509 comm="syz.4.5259" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.003477][ T28] audit: type=1400 audit(1784402601.439:1867): avc: denied { write } for pid=18509 comm="syz.4.5259" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.025400][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b045600: abort rx timeout. Force session deactivation [ 284.064792][T16565] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.167575][T18531] loop6: detected capacity change from 0 to 128 [ 284.186229][T18531] syz.6.5269: attempt to access beyond end of device [ 284.186229][T18531] loop6: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 284.216226][T18531] syz.6.5269: attempt to access beyond end of device [ 284.216226][T18531] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 284.232842][T18531] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 284.247657][T18531] syz.6.5269: attempt to access beyond end of device [ 284.247657][T18531] loop6: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 284.261635][T18531] syz.6.5269: attempt to access beyond end of device [ 284.261635][T18531] loop6: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 284.275428][T18531] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 284.286236][T18531] syz.6.5269: attempt to access beyond end of device [ 284.286236][T18531] loop6: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 284.314769][T18531] syz.6.5269: attempt to access beyond end of device [ 284.314769][T18531] loop6: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 284.328799][T18531] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 284.337755][T18531] syz.6.5269: attempt to access beyond end of device [ 284.337755][T18531] loop6: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 284.352039][T18531] syz.6.5269: attempt to access beyond end of device [ 284.352039][T18531] loop6: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 284.367796][T18531] Buffer I/O error on dev loop6, logical block 100, lost async page write [ 284.378404][T18531] syz.6.5269: attempt to access beyond end of device [ 284.378404][T18531] loop6: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 284.392534][T18531] syz.6.5269: attempt to access beyond end of device [ 284.392534][T18531] loop6: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 284.411296][T18531] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 284.424163][T18531] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 284.440729][T18531] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 284.457445][T18531] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 284.480716][T18531] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 284.490119][T18531] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 284.699100][T18549] loop8: detected capacity change from 0 to 128 [ 284.745310][T18549] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 284.773251][T18549] ext4 filesystem being mounted at /759/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.788263][ T28] audit: type=1400 audit(1784402602.229:1868): avc: denied { write } for pid=18548 comm="syz.8.5277" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.855777][ T7632] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.894625][ T28] audit: type=1400 audit(1784402602.259:1869): avc: denied { write } for pid=18548 comm="syz.8.5277" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.994161][T18565] loop6: detected capacity change from 0 to 512 [ 285.080322][T18565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.100644][T18565] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.143857][ T28] audit: type=1400 audit(1784402602.579:1870): avc: denied { write } for pid=18564 comm="syz.6.5282" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.184854][ T28] audit: type=1400 audit(1784402602.589:1871): avc: denied { write } for pid=18564 comm="syz.6.5282" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.214553][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.238822][T18577] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5288'. [ 285.439511][ T28] audit: type=1400 audit(1784402602.879:1872): avc: denied { bind } for pid=18588 comm="syz.6.5293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 286.137513][ T28] audit: type=1400 audit(1784402603.579:1873): avc: denied { setopt } for pid=18616 comm="syz.3.5305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 286.687259][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5316'. [ 287.093583][T18661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5321'. [ 287.961170][T18690] netlink: 6392 bytes leftover after parsing attributes in process `syz.4.5337'. [ 287.987055][T18690] netlink: 6392 bytes leftover after parsing attributes in process `syz.4.5337'. [ 289.531669][T18716] geneve2: left promiscuous mode [ 289.555543][T18716] geneve3: left promiscuous mode [ 289.581518][T18716] vxlan0: left promiscuous mode [ 289.592335][T18716] vxlan1: left promiscuous mode [ 289.603049][T18721] loop4: detected capacity change from 0 to 128 [ 289.614187][T18716] ip6gre1: left promiscuous mode [ 289.631305][T18716] geneve1: left promiscuous mode [ 289.644315][T18721] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.657400][T18716] team1: left promiscuous mode [ 289.666555][T18716] ip6gre2: left promiscuous mode [ 289.677998][T18721] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.691319][T18716] ipip1: left promiscuous mode [ 289.706807][ T9873] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.726010][ T9873] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.752508][ T28] audit: type=1400 audit(1784402607.189:1874): avc: denied { write } for pid=18720 comm="syz.4.5351" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.790791][ T9873] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 33941 - 0 [ 289.825700][ T9873] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.837699][T16565] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.843268][ T28] audit: type=1400 audit(1784402607.189:1875): avc: denied { execute } for pid=18720 comm="syz.4.5351" path="/107/file1/cpu.stat" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 289.871874][ T9873] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.885340][ T9873] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 33941 - 0 [ 289.911005][ T9873] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.942530][ T9873] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.976355][ T9873] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 33941 - 0 [ 289.977060][T18727] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5353'. [ 289.995225][ T9873] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.995268][ T9873] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.995305][ T9873] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 33941 - 0 [ 290.543631][T18752] loop4: detected capacity change from 0 to 8192 [ 291.415443][ T28] audit: type=1400 audit(1784402608.859:1876): avc: denied { setopt } for pid=18764 comm="syz.8.5368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 292.261836][T18781] loop8: detected capacity change from 0 to 512 [ 292.298317][T18785] loop4: detected capacity change from 0 to 128 [ 292.333894][T18785] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.339150][T18781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.347865][T18785] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.435911][T18781] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 292.469988][T16565] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.523493][T18781] EXT4-fs (loop8): 1 truncate cleaned up [ 292.697900][T18781] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.778349][T18809] loop6: detected capacity change from 0 to 512 [ 292.778434][ T28] audit: type=1400 audit(1784402610.209:1877): avc: denied { write } for pid=18780 comm="syz.8.5375" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 292.838117][T18809] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 292.860349][T18809] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 292.919415][T18809] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.5382: Failed to acquire dquot type 1 [ 292.961739][T18809] loop6: lost filesystem error report for type 5 error -117 [ 292.963462][T18809] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 292.970892][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 292.970910][ C0] EXT4-fs (loop6): last error at time 1784402610: ext4_acquire_dquot:7041 [ 293.025227][T18809] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 293.044691][T18809] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.5382: Failed to acquire dquot type 1 [ 293.064453][T18809] loop6: lost filesystem error report for type 5 error -117 [ 293.064929][T18809] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5382: bg 0: block 248: padding at end of block bitmap is not set [ 293.096864][T18809] loop6: lost filesystem error report for type 5 error -117 [ 293.097042][T18809] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 293.120304][T18809] loop6: lost filesystem error report for type 5 error -117 [ 293.120641][T18809] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 293.151827][T18809] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 293.171491][T18809] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.5382: Failed to acquire dquot type 1 [ 293.200416][T18809] loop6: lost filesystem error report for type 5 error -117 [ 293.201265][T18809] EXT4-fs (loop6): 1 orphan inode deleted [ 293.232118][T18809] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.259427][T18809] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.289523][T18809] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.5382: deleted inode referenced: 12 [ 293.431199][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.568046][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.879872][T18895] loop6: detected capacity change from 0 to 2048 [ 293.911139][T18895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.936068][T18895] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.000270][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5395'. [ 294.032155][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.137824][ T30] tipc: Subscription rejected, illegal request [ 294.297312][T18909] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5400'. [ 294.722767][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5409'. [ 294.731910][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5409'. [ 296.397048][T18970] loop6: detected capacity change from 0 to 128 [ 296.422029][T18970] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.435331][T18970] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.475379][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 296.475398][ T28] audit: type=1400 audit(1784402613.919:1879): avc: denied { write } for pid=18969 comm="syz.6.5426" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.506639][T18970] Invalid argument reading file caps for ./file0 [ 296.515184][ T28] audit: type=1400 audit(1784402613.949:1880): avc: denied { execute_no_trans } for pid=18969 comm="syz.6.5426" path="/249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 296.565337][T14686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.697768][T19041] vhci_hcd vhci_hcd.3: default hub control req: 020b v0000 i0000 l0 [ 297.763479][T19047] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5460'. [ 297.787583][T19047] netlink: 'syz.7.5460': attribute type 7 has an invalid length. [ 297.807125][T19047] netlink: 'syz.7.5460': attribute type 8 has an invalid length. [ 297.827402][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5460'. [ 298.365141][T19061] loop4: detected capacity change from 0 to 1024 [ 298.434239][T19061] EXT4-fs: Ignoring removed nobh option [ 298.447607][T19061] EXT4-fs: Ignoring removed i_version option [ 298.805171][T19061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.931648][T16565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.045897][T19071] loop6: detected capacity change from 0 to 32768 [ 299.095698][T19071] loop6: p1 p3 < > [ 299.307184][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 299.319079][ T4023] udevd[4023]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 299.384756][T19080] loop4: detected capacity change from 0 to 1024 [ 299.414220][T19080] EXT4-fs: Ignoring removed orlov option [ 299.442871][T19080] EXT4-fs: inline encryption not supported [ 299.467946][T19080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.471522][T19084] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5471'. [ 299.492062][ T28] audit: type=1400 audit(1784402616.929:1881): avc: denied { write } for pid=19077 comm="syz.4.5478" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.514780][T19080] EXT4-fs error (device loop4): __ext4_new_inode:1287: comm syz.4.5478: failed to insert inode 12: doubly allocated? [ 299.517283][ T28] audit: type=1400 audit(1784402616.949:1882): avc: denied { write } for pid=19077 comm="syz.4.5478" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.555149][ T28] audit: type=1400 audit(1784402616.959:1883): avc: denied { write } for pid=19077 comm="syz.4.5478" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.577917][ T28] audit: type=1400 audit(1784402617.019:1884): avc: denied { write } for pid=19077 comm="syz.4.5478" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.599976][ T28] audit: type=1400 audit(1784402617.019:1885): avc: denied { write } for pid=19077 comm="syz.4.5478" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.633159][ T28] audit: type=1400 audit(1784402617.019:1886): avc: denied { rename } for pid=19077 comm="syz.4.5478" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.686111][T16565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.759244][ T8003] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 299.773867][ T8003] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.542296][T19134] loop6: detected capacity change from 0 to 512 [ 300.583937][T19134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.627326][ T28] audit: type=1400 audit(1784402618.069:1887): avc: denied { write } for pid=19133 comm="syz.6.5493" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 300.853627][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.918405][T19156] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5501'. [ 300.970542][T19161] loop6: detected capacity change from 0 to 256 [ 301.008062][T19164] netlink: 'syz.8.5504': attribute type 1 has an invalid length. [ 301.046766][T19164] bond4: entered promiscuous mode [ 301.061047][T19164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.084494][T19170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.100908][T19170] bond4: (slave bond5): making interface the new active one [ 301.108482][T19170] bond5: entered promiscuous mode [ 301.120135][T19170] bond4: (slave bond5): Enslaving as an active interface with an up link [ 301.275014][T19181] loop6: detected capacity change from 0 to 1024 [ 301.308127][T19181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.326102][T19187] netlink: 'syz.8.5513': attribute type 8 has an invalid length. [ 301.341306][T19181] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.353071][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5513'. [ 301.369529][T19187] bond0: entered promiscuous mode [ 301.379724][T19187] gretap0: entered promiscuous mode [ 301.397988][T19187] bond0: left promiscuous mode [ 301.407404][T19187] gretap0: left promiscuous mode [ 301.413203][ T28] audit: type=1400 audit(1784402618.849:1888): avc: denied { write } for pid=19180 comm="syz.6.5511" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.441608][T19181] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.5511: lblock 0 mapped to illegal pblock 0 (length 1) [ 301.494489][T19181] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 301.507123][T19181] EXT4-fs (loop6): This should not happen!! Data will be lost [ 301.507123][T19181] [ 301.557844][T19192] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5511: bg 0: block 112: padding at end of block bitmap is not set [ 301.616552][T19192] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 28 with error 28 [ 301.669615][T19192] EXT4-fs (loop6): This should not happen!! Data will be lost [ 301.669615][T19192] [ 301.692472][T19192] EXT4-fs (loop6): Total free blocks count 0 [ 301.706080][T19192] EXT4-fs (loop6): Free/Dirty block details [ 301.721051][T19192] EXT4-fs (loop6): free_blocks=0 [ 301.731471][T19192] EXT4-fs (loop6): dirty_blocks=64 [ 301.743256][T19192] EXT4-fs (loop6): Block reservation details [ 301.785333][T14686] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 302.338002][ T4687] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.390865][ T4687] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.458919][ T4687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.523177][ T4687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.904141][ T4687] team0: Port device xfrm0 removed [ 302.928885][ T4687] bond2 (unregistering): (slave gretap1): Removing an active aggregator [ 302.939531][ T4687] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 302.963859][ T295] smc: removing ib device syz1 [ 302.969286][ T4687] bond0 (unregistering): Released all slaves [ 302.977410][ T4687] bond1 (unregistering): Released all slaves [ 302.986746][ T4687] bond2 (unregistering): Released all slaves [ 302.996119][T19221] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.003412][T19221] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.011028][T19221] bridge_slave_0: entered allmulticast mode [ 303.018198][T19221] bridge_slave_0: entered promiscuous mode [ 303.059770][T19221] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.084781][T19221] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.107973][T19221] bridge_slave_1: entered allmulticast mode [ 303.125342][T19221] bridge_slave_1: entered promiscuous mode [ 303.240178][T19221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.263558][T19221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.281189][ T28] audit: type=1400 audit(1784402620.719:1889): avc: denied { write } for pid=19268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.382905][ T28] audit: type=1400 audit(1784402620.819:1890): avc: denied { write } for pid=19285 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.405794][T19221] team0: Port device team_slave_0 added [ 303.495414][T19221] team0: Port device team_slave_1 added [ 303.533512][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 303.668913][T19221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.683619][T19221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.752112][T19221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.791481][T19221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.836618][T19221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.915825][T19221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.983542][T19221] hsr_slave_0: entered promiscuous mode [ 303.999056][T19221] hsr_slave_1: entered promiscuous mode [ 304.011243][T19221] debugfs: 'hsr0' already exists in 'hsr' [ 304.024432][T19221] Cannot create hsr debugfs directory [ 304.199073][ T4687] hsr_slave_0: left promiscuous mode [ 304.205724][ T28] audit: type=1400 audit(1784402621.639:1891): avc: denied { write } for pid=19308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.241540][ T4687] hsr_slave_1: left promiscuous mode [ 304.259105][ T4687] veth1_macvtap: left promiscuous mode [ 304.274576][ T4687] veth0_macvtap: left promiscuous mode [ 304.281246][ T4687] veth1_vlan: left promiscuous mode [ 304.291677][ T4687] veth0_vlan: left promiscuous mode [ 304.314786][ T28] audit: type=1400 audit(1784402621.759:1892): avc: denied { write } for pid=19319 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.359847][ T4684] Bluetooth: hci0: Frame reassembly failed (-84) [ 304.506807][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5554'. [ 304.515838][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5554'. [ 304.538922][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 304.691075][ T28] audit: type=1400 audit(1784402622.129:1893): avc: denied { write } for pid=19328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.758704][ T28] audit: type=1400 audit(1784402622.199:1894): avc: denied { write } for pid=19343 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.788447][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 304.925572][T19221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.946440][T19221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.974769][T19221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.002424][T19221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.025253][T19221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.028967][ T28] audit: type=1400 audit(1784402622.459:1895): avc: denied { write } for pid=19346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.070664][T19221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.085932][T19221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.098931][T19221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.114179][ T28] audit: type=1400 audit(1784402622.549:1896): avc: denied { write } for pid=19358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.158296][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 305.263265][T19221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.295945][T19221] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.317724][ T4684] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.324873][ T4684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.336768][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.343918][ T4687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.353183][ T28] audit: type=1400 audit(1784402622.789:1897): avc: denied { write } for pid=19366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.405246][ T28] audit: type=1400 audit(1784402622.839:1898): avc: denied { write } for pid=19377 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.573646][T19221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.697243][T19221] veth0_vlan: entered promiscuous mode [ 305.708179][T19221] veth1_vlan: entered promiscuous mode [ 305.740435][T19221] veth0_macvtap: entered promiscuous mode [ 305.755319][T19221] veth1_macvtap: entered promiscuous mode [ 305.771613][T19221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.791798][T19221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.808741][ T4684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.818191][ T4684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.832970][ T4684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.842402][ T4684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.378136][T19461] loop4: detected capacity change from 0 to 512 [ 306.394899][ T5832] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 306.397164][ T3656] Bluetooth: hci0: command 0x1003 tx timeout [ 306.443959][T19461] EXT4-fs (loop4): 1 truncate cleaned up [ 306.461303][T19461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.105735][T16565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.237739][T19586] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5572'. [ 308.247745][T19589] loop4: detected capacity change from 0 to 1024 [ 308.276491][T19589] EXT4-fs: Ignoring removed bh option [ 308.293126][T19589] EXT4-fs (loop4): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 308.321539][T19589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.338112][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 308.338130][ T28] audit: type=1400 audit(1784402625.779:1924): avc: denied { write } for pid=19587 comm="syz.4.5580" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.427460][T19601] loop6: detected capacity change from 0 to 1024 [ 308.436982][T19601] EXT4-fs (loop6): bad geometry: first data block 0 is beyond end of filesystem (0) [ 308.557127][ T3412] Process accounting resumed [ 308.671563][ T28] audit: type=1326 audit(1784402626.039:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19611 comm="syz.1.5583" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62c8c2de99 code=0x0 [ 308.923348][T19620] loop8: detected capacity change from 0 to 512 [ 308.946698][T19620] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 308.967254][T19620] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.5586: corrupted in-inode xattr: e_value size too large [ 308.982524][T19620] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 308.982661][T19620] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5586: couldn't read orphan inode 15 (err -117) [ 308.991940][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 308.991976][ C1] EXT4-fs (loop8): initial error at time 1784402626: ext4_iget_extra_inode:5180: inode 15 [ 308.992023][ C1] EXT4-fs (loop8): last error at time 1784402626: ext4_iget_extra_inode:5180: inode 15 [ 309.030781][T19620] loop8: lost filesystem error report for type 5 error -117 [ 309.031338][T19620] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.055621][ T28] audit: type=1326 audit(1784402626.499:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19619 comm="syz.8.5586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2a1dde99 code=0x7ffc0000 [ 309.086044][ T28] audit: type=1326 audit(1784402626.499:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19619 comm="syz.8.5586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2a1dde99 code=0x7ffc0000 [ 309.112431][ T28] audit: type=1326 audit(1784402626.499:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19619 comm="syz.8.5586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2a1dde99 code=0x7ffc0000 [ 309.114096][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.138920][ T28] audit: type=1326 audit(1784402626.499:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19619 comm="syz.8.5586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c2a1dde99 code=0x7ffc0000 [ 309.172922][ T28] audit: type=1326 audit(1784402626.499:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19619 comm="syz.8.5586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2a1dde99 code=0x7ffc0000 [ 309.218071][ T28] audit: type=1326 audit(1784402626.499:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19619 comm="syz.8.5586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2a1dde99 code=0x7ffc0000 [ 309.254570][ T28] audit: type=1326 audit(1784402626.499:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19619 comm="syz.8.5586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c2a1dde99 code=0x7ffc0000 [ 309.281037][ T28] audit: type=1326 audit(1784402626.499:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19619 comm="syz.8.5586" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f8c2a1dde99 code=0x7ffc0000 [ 309.317058][T16565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.468050][T19642] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5595'. [ 309.486305][T19642] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5595'. [ 309.547062][T19645] netlink: 'syz.1.5596': attribute type 10 has an invalid length. [ 309.837224][T19687] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5609'. [ 310.040143][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5615'. [ 310.059607][T19710] netlink: 'syz.7.5615': attribute type 9 has an invalid length. [ 310.811713][ T7999] Process accounting resumed [ 311.099208][T19736] loop6: detected capacity change from 0 to 512 [ 311.117519][T19736] EXT4-fs (loop6): 1 truncate cleaned up [ 311.123640][T19736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.186779][T19736] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5624: bg 0: block 465: padding at end of block bitmap is not set [ 311.213330][T19736] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 8 with max blocks 4 with error 28 [ 311.255816][T19736] EXT4-fs (loop6): This should not happen!! Data will be lost [ 311.255816][T19736] [ 311.274493][T19736] EXT4-fs (loop6): Total free blocks count 0 [ 311.282220][T19736] EXT4-fs (loop6): Free/Dirty block details [ 311.289741][T19736] EXT4-fs (loop6): free_blocks=0 [ 311.302018][T19736] EXT4-fs (loop6): dirty_blocks=4 [ 311.323999][T19745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.340917][T19736] EXT4-fs (loop6): Block reservation details [ 311.347974][T19736] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 311.348564][T19745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.406958][T19749] veth3: entered promiscuous mode [ 311.412134][T19749] veth3: entered allmulticast mode [ 311.418794][T14686] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 311.435879][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.493918][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5630'. [ 311.908198][T19780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5642'. [ 312.164997][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5648'. [ 312.620532][T19814] loop8: detected capacity change from 0 to 512 [ 312.673828][T19814] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.5655: inode has both inline data and extents flags [ 312.697281][T19814] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 312.698089][T19814] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5655: couldn't read orphan inode 15 (err -117) [ 312.704459][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 312.725640][ C1] EXT4-fs (loop8): initial error at time 1784402630: ext4_orphan_get:1399: inode 15 [ 312.735162][ C1] EXT4-fs (loop8): last error at time 1784402630: ext4_orphan_get:1399: inode 15 [ 312.748262][T19814] loop8: lost filesystem error report for type 5 error -117 [ 312.748854][T19814] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.925399][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.043735][T19844] loop6: detected capacity change from 0 to 164 [ 313.079341][T19844] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 313.112956][T19844] isofs_fill_super: root inode is not a directory. Corrupted media? [ 313.114475][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5670'. [ 313.367207][T19866] loop8: detected capacity change from 0 to 512 [ 313.383080][T19866] EXT4-fs: Ignoring removed nobh option [ 313.407262][T19866] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 313.419001][T19866] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5677: invalid indirect mapped block 256 (level 1) [ 313.465156][T19866] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 313.465378][T19866] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5677: invalid indirect mapped block 2683928664 (level 1) [ 313.474669][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 313.474689][ C0] EXT4-fs (loop8): initial error at time 1784402630: ext4_free_branches:1023: inode 13 [ 313.474715][ C0] EXT4-fs (loop8): last error at time 1784402630: ext4_free_branches:1023: inode 13 [ 313.566336][T19872] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.573628][T19872] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.620615][T19866] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 313.622082][T19866] EXT4-fs (loop8): 1 truncate cleaned up [ 313.641660][T19866] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.668576][T19872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.689985][T19872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.706727][ T7632] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.820572][ T408] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.837823][ T408] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.866117][ T408] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.904878][ T408] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.254346][T19904] loop1: detected capacity change from 0 to 1024 [ 314.286487][T19904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 314.304243][T19904] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.340279][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 314.340296][ T28] audit: type=1400 audit(1784402631.779:1961): avc: denied { write } for pid=19903 comm="syz.1.5694" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.509044][T19904] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.5694: Freeing blocks not in datazone - block = 0, count = 16 [ 314.599103][ T408] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 314.622047][ T408] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 314.639975][ T408] EXT4-fs (loop1): This should not happen!! Data will be lost [ 314.639975][ T408] [ 314.678662][ T408] EXT4-fs (loop1): Total free blocks count 0 [ 314.696130][ T408] EXT4-fs (loop1): Free/Dirty block details [ 314.720191][ T408] EXT4-fs (loop1): free_blocks=16 [ 314.745971][ T408] EXT4-fs (loop1): dirty_blocks=16 [ 314.762499][ T408] EXT4-fs (loop1): Block reservation details [ 314.786296][ T408] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 314.809504][T19221] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 314.840020][T19221] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 314.856483][T19914] netlink: 'syz.4.5707': attribute type 1 has an invalid length. [ 314.905788][T19914] bond2: entered promiscuous mode [ 314.923644][T19914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.027257][T19919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.055147][T19919] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 315.072613][T19919] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 315.112743][T19919] bond2: (slave ip6gre2): making interface the new active one [ 315.140270][T19919] ip6gre2: entered promiscuous mode [ 315.167670][T19919] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 315.682389][T19938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5705'. [ 316.813781][ T28] audit: type=1400 audit(1784402634.249:1962): avc: denied { write } for pid=20057 comm="syz.4.5725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 316.900612][ T28] audit: type=1400 audit(1784402634.339:1963): avc: denied { write } for pid=20031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.990104][ T28] audit: type=1400 audit(1784402634.409:1964): avc: denied { write } for pid=20071 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.544531][T20107] loop1: detected capacity change from 0 to 8192 [ 317.559698][T20107] bio_check_eod: 18 callbacks suppressed [ 317.559719][T20107] syz.1.5735: attempt to access beyond end of device [ 317.559719][T20107] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 317.682347][T20133] team0: Port device syz_tun added [ 317.795937][ T28] audit: type=1400 audit(1784402891.292:1965): avc: denied { read } for pid=20152 comm="syz.7.5744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.318347][T20234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5753'. [ 318.729945][T20260] loop6: detected capacity change from 0 to 1024 [ 318.737986][T20260] EXT4-fs: Ignoring removed bh option [ 318.753361][T20260] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 318.772103][T20260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.788407][ T28] audit: type=1400 audit(1784402892.282:1966): avc: denied { write } for pid=20259 comm="syz.6.5761" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.826209][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.260370][ T28] audit: type=1400 audit(1784402892.752:1967): avc: denied { write } for pid=20282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.337599][ T28] audit: type=1400 audit(1784402892.832:1968): avc: denied { write } for pid=20301 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.445377][T20306] loop4: detected capacity change from 0 to 4096 [ 319.471229][T20306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.518234][ T28] audit: type=1400 audit(1784402893.012:1969): avc: denied { write } for pid=20305 comm="syz.4.5773" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.612106][ T3383] IPVS: starting estimator thread 0... [ 319.672931][T20321] loop8: detected capacity change from 0 to 2048 [ 319.694281][T16565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.731457][T20321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 319.744585][T20322] IPVS: using max 2208 ests per chain, 110400 per kthread [ 319.762281][ T28] audit: type=1400 audit(1784402893.252:1970): avc: denied { write } for pid=20310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.822176][ T9863] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 319.866353][ T9873] IPVS: stop unused estimator thread 0... [ 319.895047][ T9863] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 40 with error 28 [ 319.937565][ T28] audit: type=1400 audit(1784402893.302:1971): avc: denied { write } for pid=20316 comm="syz.8.5776" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.938538][ T9863] EXT4-fs (loop8): This should not happen!! Data will be lost [ 319.938538][ T9863] [ 320.033916][ T28] audit: type=1400 audit(1784402893.402:1972): avc: denied { write } for pid=20342 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.051014][ T9863] EXT4-fs (loop8): Total free blocks count 0 [ 320.063368][ T28] audit: type=1400 audit(1784402893.432:1973): avc: denied { watch watch_reads } for pid=20344 comm="syz.4.5778" path="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.096553][ T9863] EXT4-fs (loop8): Free/Dirty block details [ 320.102698][ T9863] EXT4-fs (loop8): free_blocks=2415919104 [ 320.108777][ T9863] EXT4-fs (loop8): dirty_blocks=816 [ 320.114203][ T9863] EXT4-fs (loop8): Block reservation details [ 320.120507][ T9863] EXT4-fs (loop8): i_reserved_data_blocks=51 [ 320.130158][ T9863] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 776 with error 28 [ 320.224456][ T28] audit: type=1400 audit(1784402893.712:1974): avc: denied { write } for pid=20354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.308039][ T28] audit: type=1400 audit(1784402893.802:1975): avc: denied { write } for pid=20368 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 320.335069][ T9863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.400414][ T9863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.495870][ T9863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.688389][ T9863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.702269][ T7632] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 320.834522][ T9863] bridge_slave_1: left allmulticast mode [ 320.841406][ T9863] bridge_slave_1: left promiscuous mode [ 320.861868][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.903276][T20396] xt_bpf: check failed: parse error [ 320.921824][T20396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.931452][ T9863] bridge_slave_0: left allmulticast mode [ 320.940640][ T9863] bridge_slave_0: left promiscuous mode [ 320.957512][T20396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.966526][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.130285][ T28] audit: type=1400 audit(1784402894.622:1976): avc: denied { write } for pid=20395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.174325][ T28] audit: type=1326 audit(1784402894.642:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.1.5798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c8c2de99 code=0x7ffc0000 [ 321.222100][ T9863] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 321.232929][ T28] audit: type=1326 audit(1784402894.642:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20408 comm="syz.1.5798" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c8c2de99 code=0x7ffc0000 [ 321.246444][ T9863] ip6gre2 (unregistering): left promiscuous mode [ 321.309214][ T9863] bond1 (unregistering): (slave geneve2): Releasing active interface [ 321.364808][ T9863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.388272][ T9863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.399745][ T9863] bond0 (unregistering): Released all slaves [ 321.411812][ T9863] bond1 (unregistering): Released all slaves [ 321.437511][ T9863] bond2 (unregistering): Released all slaves [ 321.466783][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 321.493370][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5802'. [ 321.552818][ T9863] hsr_slave_0: left promiscuous mode [ 321.575307][ T9863] hsr_slave_1: left promiscuous mode [ 321.586696][ T9863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.604849][ T9863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.612987][ T9863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.621754][ T9863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.642549][ T9863] veth1_vlan: left promiscuous mode [ 321.650890][ T9863] veth0_vlan: left promiscuous mode [ 321.909096][T20426] loop8: detected capacity change from 0 to 32768 [ 321.916021][ T9863] team0 (unregistering): Port device team_slave_1 removed [ 321.962543][ T9863] team0 (unregistering): Port device team_slave_0 removed [ 321.986917][T20426] loop8: p1 p3 < > [ 322.001551][ T2982] loop8: p1 p3 < > [ 322.019566][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 322.036540][ T4023] udevd[4023]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 322.158566][T20456] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5817'. [ 322.192006][T20454] loop1: detected capacity change from 0 to 512 [ 322.322926][T20454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.342533][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 322.343996][ T4023] udevd[4023]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 322.453578][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 322.470477][ T4023] udevd[4023]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 322.501154][T20454] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.542629][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 322.566295][T20376] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.575107][T20376] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.610892][T20376] bridge_slave_0: entered allmulticast mode [ 322.617761][T20376] bridge_slave_0: entered promiscuous mode [ 322.626397][T20376] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.633571][T20376] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.641035][T20376] bridge_slave_1: entered allmulticast mode [ 322.647541][T20376] bridge_slave_1: entered promiscuous mode [ 322.671992][T20376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.693302][T20376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.735597][T20376] team0: Port device team_slave_0 added [ 322.742379][T20376] team0: Port device team_slave_1 added [ 322.797976][T19221] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.812302][T20376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.829299][T20376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.862350][T20503] loop8: detected capacity change from 0 to 128 [ 322.889903][T20503] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.904995][T20376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.921602][T20376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.929374][T20503] ext4 filesystem being mounted at /851/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 322.961631][T20376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.988167][T20376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.020807][T20376] hsr_slave_0: entered promiscuous mode [ 323.027266][T20376] hsr_slave_1: entered promiscuous mode [ 323.033265][T20376] debugfs: 'hsr0' already exists in 'hsr' [ 323.039116][T20376] Cannot create hsr debugfs directory [ 323.063803][ T7632] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 323.249798][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 323.450857][T20376] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 323.469800][T20376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 323.492173][T20376] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 323.731019][T20376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 323.739513][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 323.747377][T20376] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.758515][T20376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 323.777016][T20376] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.796804][T20376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 323.880759][T20582] netlink: zone id is out of range [ 323.923359][T20376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.941718][T20376] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.956783][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.963977][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.998444][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.005576][ T4687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.504838][T20376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.525796][T20652] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5853'. [ 324.759711][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 324.759778][ T28] audit: type=1400 audit(1784402898.252:2019): avc: denied { write } for pid=20659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.790902][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5860'. [ 324.826418][ T28] audit: type=1400 audit(1784402898.322:2020): avc: denied { write } for pid=20696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.903832][T20376] veth0_vlan: entered promiscuous mode [ 324.916387][T20376] veth1_vlan: entered promiscuous mode [ 324.952918][T20376] veth0_macvtap: entered promiscuous mode [ 324.970296][T20376] veth1_macvtap: entered promiscuous mode [ 325.017082][T20376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.028978][T20376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.049798][ T3450] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.061766][ T3450] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.078255][ T28] audit: type=1400 audit(1784402898.562:2021): avc: denied { write } for pid=20701 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.126573][ T28] audit: type=1400 audit(1784402898.622:2022): avc: denied { write } for pid=20722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.186856][ T3450] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.207949][ T3450] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.310451][ T28] audit: type=1400 audit(1784402898.802:2023): avc: denied { name_bind } for pid=20731 comm="syz.8.5867" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 325.373793][ T28] audit: type=1400 audit(1784402898.852:2024): avc: denied { write } for pid=20725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.434430][ T28] audit: type=1400 audit(1784402898.922:2025): avc: denied { write } for pid=20746 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.577604][T20763] netlink: 'syz.6.5872': attribute type 39 has an invalid length. [ 325.708588][ T28] audit: type=1400 audit(1784402899.202:2026): avc: denied { write } for pid=20756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.778834][ T28] audit: type=1400 audit(1784402899.272:2027): avc: denied { write } for pid=20782 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.002795][T20801] loop6: detected capacity change from 0 to 128 [ 326.028135][ T28] audit: type=1400 audit(1784402899.512:2028): avc: denied { write } for pid=20784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 326.078431][T20801] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.124892][T20801] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 326.184144][T14686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.495900][T20841] loop6: detected capacity change from 0 to 512 [ 326.505959][ T7999] IPVS: starting estimator thread 0... [ 326.552218][T20841] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.5889: inode has both inline data and extents flags [ 326.579622][T20841] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 326.583749][T20841] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5889: couldn't read orphan inode 15 (err -117) [ 326.592968][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 326.592987][ C0] EXT4-fs (loop6): initial error at time 1784402900: ext4_orphan_get:1399: inode 15 [ 326.593023][ C0] EXT4-fs (loop6): last error at time 1784402900: ext4_orphan_get:1399: inode 15 [ 326.625959][T20843] IPVS: using max 1776 ests per chain, 88800 per kthread [ 326.743458][T20841] loop6: lost filesystem error report for type 5 error -117 [ 326.744042][T20841] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.018045][T20884] netlink: 'syz.5.5895': attribute type 1 has an invalid length. [ 327.031523][T20884] netlink: 'syz.5.5895': attribute type 4 has an invalid length. [ 327.045638][T20884] netlink: 9491 bytes leftover after parsing attributes in process `syz.5.5895'. [ 327.218092][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.552057][T20931] netlink: 'syz.8.5909': attribute type 1 has an invalid length. [ 327.579750][T20935] futex_wake_op: syz.6.5907 tries to shift op by 32; fix this program [ 327.584287][T20931] bond6: entered promiscuous mode [ 327.600615][T20931] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.678586][T20931] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.709037][T20931] bond6: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 327.756224][T20931] bond6: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 327.781977][T20947] netlink: 180904 bytes leftover after parsing attributes in process `syz.7.5914'. [ 327.794304][T20931] bond6: (slave ip6gre3): making interface the new active one [ 327.798167][T20947] netlink: zone id is out of range [ 327.802809][T20931] ip6gre3: entered promiscuous mode [ 327.821904][T20931] bond6: (slave ip6gre3): Enslaving as an active interface with an up link [ 327.973734][T20961] loop5: detected capacity change from 0 to 512 [ 328.003942][T20961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.026800][T20961] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.058285][T20969] netlink: 22 bytes leftover after parsing attributes in process `syz.6.5923'. [ 328.101326][T20376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.108254][T20971] netlink: 'syz.6.5923': attribute type 4 has an invalid length. [ 328.182945][T20967] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.197178][T20967] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.208819][T20967] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37571 - 0 [ 328.441512][T20967] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.442475][T20990] loop6: detected capacity change from 0 to 1024 [ 328.445549][T20990] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.458349][T20990] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8042c01c, mo2=0002] [ 328.465737][T20967] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.473956][T20990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.540996][T20967] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37571 - 0 [ 328.603040][T20990] EXT4-fs error (device loop6) in ext4_setattr:6172: error 28 [ 328.628540][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.677866][T20997] netlink: 'syz.5.5934': attribute type 1 has an invalid length. [ 328.868123][T20967] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.878972][T20967] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.879818][T21001] loop8: detected capacity change from 0 to 512 [ 328.890370][T20967] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37571 - 0 [ 328.925689][T21001] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.945942][T21001] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 328.958734][T21001] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 328.974771][T21001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.005754][ T7632] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 329.043805][T20967] bridge0: port 1(vlan2) entered disabled state [ 329.054112][ T7632] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -EUCLEAN reading directory block [ 329.088971][T20967] vlan2 (unregistering): left promiscuous mode [ 329.113001][T20967] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 329.131559][T20967] bridge0: port 1(vlan2) entered disabled state [ 329.157338][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5941'. [ 329.169294][T20967] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.171691][T21018] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21018 comm=syz.1.5942 [ 329.179878][T20967] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.227019][T20967] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 37571 - 0 [ 329.263297][T21017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.287335][T21017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.507956][ T3450] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.530917][ T3450] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.551672][ T3450] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 37571 - 0 [ 329.575134][T16650] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.581918][ T3450] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.599898][ T3450] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.621400][ T3450] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 37571 - 0 [ 329.656119][T21040] netlink: 'syz.5.5952': attribute type 1 has an invalid length. [ 329.656780][ T3450] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.677011][ T3450] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.685763][ T3450] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 37571 - 0 [ 329.709617][ T9873] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.718163][ T9873] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.728466][T21038] loop1: detected capacity change from 0 to 1024 [ 329.731321][ T9873] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 37571 - 0 [ 329.751919][T21038] EXT4-fs: Ignoring removed bh option [ 329.762796][T21038] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.774184][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 329.774202][ T28] audit: type=1400 audit(1784402903.252:2054): avc: denied { recv } for pid=21041 comm="syz.6.5953" saddr=10.128.0.163 src=40932 daddr=10.128.0.217 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 329.812058][T21038] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 329.832198][T21038] System zones: 0-1, 3-12 [ 329.889149][T21038] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #3: block 1: comm syz.1.5951: lblock 1 mapped to illegal pblock 1 (length 1) [ 329.924687][T21038] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 329.925374][T21038] EXT4-fs (loop1): Remounting filesystem read-only [ 329.934650][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 329.934714][ C1] EXT4-fs (loop1): initial error at time 1784402903: ext4_map_blocks:833: inode 3: block 1 [ 329.934909][ C1] EXT4-fs (loop1): last error at time 1784402903: ext4_map_blocks:833: inode 3: block 1 [ 329.971472][T21038] Quota error (device loop1): write_blk: dquota write failed [ 329.980915][T21038] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 329.997525][ T3412] IPVS: starting estimator thread 0... [ 330.019499][T21038] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 330.030930][T21038] EXT4-fs (loop1): 1 orphan inode deleted [ 330.040243][T21038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.101707][T19221] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.123671][T21061] IPVS: using max 1344 ests per chain, 67200 per kthread [ 330.249613][T21076] loop1: detected capacity change from 0 to 512 [ 330.270622][T21076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.284044][T21076] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.296439][T21070] netlink: 'syz.6.5963': attribute type 15 has an invalid length. [ 330.308150][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5963'. [ 330.313110][ T28] audit: type=1400 audit(1784402903.802:2055): avc: denied { write } for pid=21075 comm="syz.1.5966" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.319263][T21070] netlink: 'syz.6.5963': attribute type 15 has an invalid length. [ 330.347010][T21070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5963'. [ 330.383322][T19221] EXT4-fs error (device loop1): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 330.413773][T19221] EXT4-fs (loop1): Remounting filesystem read-only [ 330.427192][ T28] audit: type=1400 audit(1784402903.872:2056): avc: denied { write } for pid=19221 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.450464][T21084] loop6: detected capacity change from 0 to 128 [ 330.462049][T21084] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 330.476127][T19221] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.492576][ T28] audit: type=1400 audit(1784402903.872:2057): avc: denied { rmdir } for pid=19221 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.516866][ T28] audit: type=1400 audit(1784402903.872:2058): avc: denied { write } for pid=19221 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.525899][ T49] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 330.540398][ T28] audit: type=1400 audit(1784402903.922:2059): avc: denied { write } for pid=19221 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.572154][ T28] audit: type=1400 audit(1784402903.922:2060): avc: denied { write } for pid=19221 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.573450][T21084] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.595160][ T49] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 330.691802][T14686] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 330.755396][T21096] loop6: detected capacity change from 0 to 1024 [ 330.841646][T21096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.937692][T21052] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.957256][T21052] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.982134][T21052] bridge_slave_0: entered allmulticast mode [ 331.002423][T21052] bridge_slave_0: entered promiscuous mode [ 331.016617][T21052] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.025474][T21052] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.046066][T21052] bridge_slave_1: entered allmulticast mode [ 331.052832][T21052] bridge_slave_1: entered promiscuous mode [ 331.078346][T21052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.092215][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.094189][T21052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.113738][T21113] loop1: detected capacity change from 0 to 128 [ 331.145654][T21113] syz.1.5976: attempt to access beyond end of device [ 331.145654][T21113] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 331.164881][T21113] syz.1.5976: attempt to access beyond end of device [ 331.164881][T21113] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 331.181930][T21052] team0: Port device team_slave_0 added [ 331.196132][T21052] team0: Port device team_slave_1 added [ 331.222277][T21113] buffer_io_error: 4 callbacks suppressed [ 331.222293][T21113] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 331.250396][T21052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.254460][T21113] syz.1.5976: attempt to access beyond end of device [ 331.254460][T21113] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 331.266040][T21052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.295019][T21113] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 331.309359][T21120] loop6: detected capacity change from 0 to 2048 [ 331.337092][T21120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.364777][T21052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.378881][T21120] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 331.402620][T21052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.411444][T21052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.440122][T21120] EXT4-fs (loop6): Remounting filesystem read-only [ 331.447620][T21052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.472092][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.485809][T21052] hsr_slave_0: entered promiscuous mode [ 331.495829][T21052] hsr_slave_1: entered promiscuous mode [ 331.507749][T21052] debugfs: 'hsr0' already exists in 'hsr' [ 331.528183][T21052] Cannot create hsr debugfs directory [ 331.555889][T21129] netlink: 22 bytes leftover after parsing attributes in process `syz.1.5981'. [ 331.578373][T21129] netlink: 'syz.1.5981': attribute type 4 has an invalid length. [ 331.642303][T21137] loop6: detected capacity change from 0 to 8192 [ 331.872754][T21158] netlink: 'syz.7.5989': attribute type 12 has an invalid length. [ 331.954709][T21052] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 331.998402][T21052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.015324][T21052] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 332.054200][T21052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.084026][T21052] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 332.107165][T21052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.145452][T21052] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 332.172317][T21052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.218948][T21194] gre1: entered promiscuous mode [ 332.402798][T21052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.433372][T21211] netlink: 'syz.5.6004': attribute type 12 has an invalid length. [ 332.486517][T21052] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.521314][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.528476][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.555682][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.562882][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.624688][T21139] Set syz1 is full, maxelem 6117 reached [ 332.956432][T21052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.093930][T21280] loop1: detected capacity change from 0 to 512 [ 333.167089][T21280] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.219626][T21280] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.6014: invalid indirect mapped block 32768 (level 2) [ 333.274522][T21280] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 333.277306][T21280] EXT4-fs (loop1): Remounting filesystem read-only [ 333.286626][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 333.286645][ C1] EXT4-fs (loop1): initial error at time 1784402906: ext4_free_branches:1023: inode 16 [ 333.286684][ C1] EXT4-fs (loop1): last error at time 1784402906: ext4_free_branches:1023: inode 16 [ 333.319637][T21280] EXT4-fs (loop1): 1 orphan inode deleted [ 333.325551][T21280] EXT4-fs (loop1): 1 truncate cleaned up [ 333.331737][T21280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.390873][T19221] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.458581][T21052] veth0_vlan: entered promiscuous mode [ 333.487465][T21052] veth1_vlan: entered promiscuous mode [ 333.533801][T21052] veth0_macvtap: entered promiscuous mode [ 333.545643][T21052] veth1_macvtap: entered promiscuous mode [ 333.582581][T21052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.612035][T21052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.648417][ T9873] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.660860][ T9873] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.678529][ T9873] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.692916][ T9873] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.621332][T21417] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6039'. [ 334.760719][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6044'. [ 334.770112][T21436] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6044'. [ 334.822897][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 334.822915][ T28] audit: type=1400 audit(1784402908.312:2088): avc: denied { write } for pid=21424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.887578][ T28] audit: type=1400 audit(1784402908.382:2089): avc: denied { write } for pid=21445 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.975337][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6046'. [ 335.094576][T21425] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6041'. [ 335.174528][ T28] audit: type=1400 audit(1784402908.662:2090): avc: denied { write } for pid=21453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.251755][ T28] audit: type=1400 audit(1784402908.742:2091): avc: denied { write } for pid=21476 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.298109][T21449] vlan2: entered promiscuous mode [ 335.306400][T21449] bridge0: entered promiscuous mode [ 335.409406][ T28] audit: type=1400 audit(1784402908.902:2092): avc: denied { lock } for pid=21484 comm="syz.6.6054" path="socket:[59951]" dev="sockfs" ino=59951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 335.526537][ T28] audit: type=1400 audit(1784402909.022:2093): avc: denied { write } for pid=21479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.544141][T21496] loop6: detected capacity change from 0 to 128 [ 335.609331][T21496] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.624416][ T28] audit: type=1400 audit(1784402909.102:2094): avc: denied { write } for pid=21498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.648640][T21496] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 335.835666][ T28] audit: type=1400 audit(1784402909.332:2095): avc: denied { write } for pid=21500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.896346][ T28] audit: type=1400 audit(1784402909.392:2096): avc: denied { write } for pid=21515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.021172][T21522] netlink: 'syz.1.6060': attribute type 12 has an invalid length. [ 336.348499][ T28] audit: type=1400 audit(1784402909.822:2097): avc: denied { write } for pid=21531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.564961][T21559] loop1: detected capacity change from 0 to 512 [ 336.584236][T21559] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.677106][T21559] EXT4-fs (loop1): 1 truncate cleaned up [ 336.690879][T21559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.877325][T19221] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.157056][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6092'. [ 337.223577][T21602] loop9: detected capacity change from 0 to 512 [ 337.252441][T21602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.278311][T21602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.299989][T21602] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.334938][T21616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6089'. [ 337.391185][T21616] vlan2: entered promiscuous mode [ 337.398470][T21616] bridge0: entered promiscuous mode [ 337.459048][T21623] loop5: detected capacity change from 0 to 128 [ 337.921053][T21052] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.063342][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6105'. [ 338.385278][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6112'. [ 338.398411][T21660] vlan2: entered promiscuous mode [ 338.420173][T21660] bridge0: entered promiscuous mode [ 338.786056][T21714] loop5: detected capacity change from 0 to 512 [ 338.819801][T21714] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 338.859970][T21714] EXT4-fs (loop5): 1 truncate cleaned up [ 338.885896][T21714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.008268][T20376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.407208][T21771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6137'. [ 339.466376][ T9869] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.502895][ T9869] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.540156][ T9869] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.564392][ T9869] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.882274][T21781] vlan2: entered promiscuous mode [ 339.894408][T21781] bridge0: entered promiscuous mode [ 340.139410][T21802] xt_hashlimit: size too large, truncated to 1048576 [ 340.666108][T21835] __nla_validate_parse: 2 callbacks suppressed [ 340.666246][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6160'. [ 340.742084][T21835] vlan2: entered promiscuous mode [ 340.748773][T21835] bridge0: entered promiscuous mode [ 340.806209][T21843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6165'. [ 340.877818][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 340.877835][ T28] audit: type=1400 audit(1784402914.372:2108): avc: denied { cmd } for pid=21847 comm="syz.6.6170" path="socket:[59331]" dev="sockfs" ino=59331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 340.980469][T21853] xt_hashlimit: max too large, truncated to 1048576 [ 341.011652][T21860] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 341.433838][T21889] loop9: detected capacity change from 0 to 128 [ 341.970870][T21862] Set syz1 is full, maxelem 6117 reached [ 342.023850][T21912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21912 comm=syz.5.6205 [ 342.416434][T21954] loop6: detected capacity change from 0 to 512 [ 342.467668][T21954] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 342.500021][T21954] EXT4-fs (loop6): 1 truncate cleaned up [ 342.518603][T21954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.563911][ T28] audit: type=1400 audit(1784402916.052:2109): avc: denied { write } for pid=21952 comm="syz.6.6215" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.608052][T21969] loop5: detected capacity change from 0 to 512 [ 342.656760][T21969] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 342.688261][T21959] loop9: detected capacity change from 0 to 512 [ 342.704466][T21969] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #17: comm syz.5.6221: corrupted in-inode xattr: e_name out of bounds [ 342.729461][T21969] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 342.731481][T21969] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6221: couldn't read orphan inode 17 (err -117) [ 342.740800][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 342.740826][ C1] EXT4-fs (loop5): initial error at time 1784402916: ext4_iget_extra_inode:5180: inode 17 [ 342.740862][ C1] EXT4-fs (loop5): last error at time 1784402916: ext4_iget_extra_inode:5180: inode 17 [ 342.809293][T21969] loop5: lost filesystem error report for type 5 error -117 [ 342.809962][T21969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.896759][ T28] audit: type=1400 audit(1784402916.372:2110): avc: denied { write } for pid=21968 comm="syz.5.6221" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.957667][T20376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.033674][T21987] loop5: detected capacity change from 0 to 1024 [ 343.056989][T21987] EXT4-fs: Ignoring removed bh option [ 343.081378][T21987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.133020][ T28] audit: type=1400 audit(1784402916.622:2111): avc: denied { write } for pid=21986 comm="syz.5.6237" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.185187][T21959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.201033][ T28] audit: type=1400 audit(1784402916.652:2112): avc: denied { write } for pid=21986 comm="syz.5.6237" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.201143][ T28] audit: type=1400 audit(1784402916.652:2113): avc: denied { write } for pid=21986 comm="syz.5.6237" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.201177][ T28] audit: type=1400 audit(1784402916.652:2114): avc: denied { write } for pid=21986 comm="syz.5.6237" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.201220][ T28] audit: type=1400 audit(1784402916.652:2115): avc: denied { write } for pid=21986 comm="syz.5.6237" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.201282][ T28] audit: type=1400 audit(1784402916.652:2116): avc: denied { write } for pid=21986 comm="syz.5.6237" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.370849][T20376] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.382440][T21959] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.427658][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.442823][T21996] netlink: 88 bytes leftover after parsing attributes in process `syz.5.6239'. [ 343.712251][ T28] audit: type=1326 audit(1784402917.202:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22012 comm="syz.7.6236" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630950de99 code=0x7ffc0000 [ 343.940954][T22028] loop5: detected capacity change from 0 to 128 [ 343.960668][T22028] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.996136][T21052] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.010407][T22028] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 344.027396][T22031] veth1_to_bond: entered allmulticast mode [ 344.065331][T22031] veth1_to_bond: entered promiscuous mode [ 344.145440][T20376] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.205750][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6250'. [ 344.588252][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6265'. [ 344.610429][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6265'. [ 344.724859][T22088] netlink: 'syz.9.6271': attribute type 1 has an invalid length. [ 344.728608][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6267'. [ 344.779512][T22088] bond1: entered promiscuous mode [ 344.789519][T22088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.902833][T22088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.920600][T22088] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 344.964508][T22088] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 344.992189][T22088] bond1: (slave vti0): making interface the new active one [ 345.001631][T22088] vti0: entered promiscuous mode [ 345.009279][T22088] bond1: (slave vti0): Enslaving as an active interface with an up link [ 345.205205][T22059] Set syz1 is full, maxelem 6117 reached [ 346.115452][T22137] Set syz1 is full, maxelem 6117 reached [ 346.452608][T22141] loop9: detected capacity change from 0 to 32768 [ 346.498954][T22141] loop9: p1 p3 < > [ 346.808093][ T4023] udevd[4023]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 346.810317][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 346.880471][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6302'. [ 347.397923][T22167] vlan2: entered promiscuous mode [ 347.627895][T22182] xt_hashlimit: max too large, truncated to 1048576 [ 347.682852][T22183] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 347.862077][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 347.862094][ T28] audit: type=1400 audit(1784402921.352:2153): avc: denied { search } for pid=22186 comm="syz.9.6311" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 347.924088][ T28] audit: type=1400 audit(1784402921.382:2154): avc: denied { search } for pid=22186 comm="syz.9.6311" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 347.963762][ T28] audit: type=1400 audit(1784402921.392:2155): avc: denied { read } for pid=22186 comm="syz.9.6311" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 348.029206][ T28] audit: type=1400 audit(1784402921.392:2156): avc: denied { read open } for pid=22186 comm="syz.9.6311" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 348.163794][T22194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22194 comm=syz.1.6313 [ 348.942225][T22233] loop6: detected capacity change from 0 to 128 [ 349.099207][T22243] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.6344'. [ 349.267881][ T4687] Bluetooth: hci0: Frame reassembly failed (-84) [ 349.301049][T22263] lo: entered allmulticast mode [ 349.329581][T22263] tunl0: entered allmulticast mode [ 349.348601][T22263] gre0: entered allmulticast mode [ 349.366339][T22263] gretap0: entered allmulticast mode [ 349.381303][T22263] erspan0: entered allmulticast mode [ 349.403356][T22263] ip_vti0: left promiscuous mode [ 349.438118][T22263] ip_vti0: entered allmulticast mode [ 349.443173][T22268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6345'. [ 349.452562][T22263] ip6_vti0: entered allmulticast mode [ 349.468353][T22263] sit0: entered allmulticast mode [ 349.478407][T22259] loop6: detected capacity change from 0 to 1024 [ 349.488535][T22263] ip6tnl0: entered allmulticast mode [ 349.493999][T22269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6345'. [ 349.497263][T22263] ip6gre0: entered allmulticast mode [ 349.533618][T22263] syz_tun: entered allmulticast mode [ 349.561025][T22263] team0: Port device syz_tun removed [ 349.578557][T22263] ip6gretap0: entered allmulticast mode [ 349.590495][T22263] bridge0: entered allmulticast mode [ 349.606298][T22263] vcan0: entered allmulticast mode [ 349.611576][T22259] EXT4-fs: Ignoring removed bh option [ 349.618934][T22263] : entered allmulticast mode [ 349.637457][T22263] team0: entered allmulticast mode [ 349.645170][T22263] dummy0: entered allmulticast mode [ 349.651718][T22263] nlmon0: entered allmulticast mode [ 349.654015][T22259] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 349.661019][T22263] batadv0: entered allmulticast mode [ 349.679193][T22263] wg0: entered allmulticast mode [ 349.685571][T22263] wg2: entered allmulticast mode [ 349.692042][T22263] veth0_to_bridge: entered allmulticast mode [ 349.699756][T22263] bridge_slave_0: entered allmulticast mode [ 349.707420][T22263] veth1_to_bridge: entered allmulticast mode [ 349.714906][T22263] bridge_slave_1: entered allmulticast mode [ 349.722391][T22263] veth0_to_bond: entered allmulticast mode [ 349.729922][T22263] bond_slave_0: entered allmulticast mode [ 349.731187][T22259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.737515][T22263] veth1_to_bond: left promiscuous mode [ 349.757970][T22263] bond_slave_1: entered allmulticast mode [ 349.765332][T22263] veth0_to_team: entered allmulticast mode [ 349.772730][T22263] team_slave_0: entered allmulticast mode [ 349.779932][T22263] veth1_to_team: entered allmulticast mode [ 349.789542][T22263] team_slave_1: entered allmulticast mode [ 349.796498][T22263] veth1_to_batadv: entered allmulticast mode [ 349.803584][T22263] batadv_slave_1: entered allmulticast mode [ 349.810808][T22263] xfrm0: entered allmulticast mode [ 349.817500][T22263] veth0_to_hsr: entered allmulticast mode [ 349.824829][T22263] hsr_slave_0: entered allmulticast mode [ 349.831961][T22263] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.856467][T22268] macvtap1: entered promiscuous mode [ 349.867738][T22268] erspan0: entered promiscuous mode [ 349.879375][T22268] macvtap1: entered allmulticast mode [ 349.893632][T22268] erspan0: entered allmulticast mode [ 350.160009][T14686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.267756][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6352'. [ 351.043286][T22294] ================================================================== [ 351.051446][T22294] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 351.060100][T22294] [ 351.062463][T22294] write to 0xffff88810aee8460 of 8 bytes by task 22296 on cpu 1: [ 351.070201][T22294] shmem_file_splice_read+0x401/0x590 [ 351.075621][T22294] splice_direct_to_actor+0x261/0x680 [ 351.081027][T22294] do_splice_direct+0x119/0x1a0 [ 351.085915][T22294] do_sendfile+0x37d/0x640 [ 351.090379][T22294] __x64_sys_sendfile64+0x105/0x150 [ 351.095625][T22294] x64_sys_call+0x2dc4/0x3020 [ 351.100342][T22294] do_syscall_64+0x136/0x3c0 [ 351.104977][T22294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.110910][T22294] [ 351.113252][T22294] write to 0xffff88810aee8460 of 8 bytes by task 22294 on cpu 0: [ 351.121002][T22294] shmem_file_splice_read+0x401/0x590 [ 351.126418][T22294] splice_direct_to_actor+0x261/0x680 [ 351.131827][T22294] do_splice_direct+0x119/0x1a0 [ 351.136722][T22294] do_sendfile+0x37d/0x640 [ 351.141183][T22294] __x64_sys_sendfile64+0x105/0x150 [ 351.146414][T22294] x64_sys_call+0x2dc4/0x3020 [ 351.151131][T22294] do_syscall_64+0x136/0x3c0 [ 351.155753][T22294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.161681][T22294] [ 351.164041][T22294] value changed: 0x0000000000000e8e -> 0x0000000000000e91 [ 351.171259][T22294] [ 351.173605][T22294] Reported by Kernel Concurrency Sanitizer on: [ 351.179799][T22294] CPU: 0 UID: 0 PID: 22294 Comm: syz.7.6354 Not tainted syzkaller #0 PREEMPT(lazy) [ 351.189208][T22294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.199347][T22294] ================================================================== [ 351.276416][ T3656] Bluetooth: hci0: command 0x1003 tx timeout [ 351.282509][ T5832] Bluetooth: hci0: Opcode 0x1003 failed: -110