last executing test programs: 8m37.052220976s ago: executing program 32 (id=285): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r0, 0x407, 0x0) write$UHID_CREATE2(r0, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xee9, 0x2, 0x3b40000, 0x6, 0x9, 0x513, "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"}}, 0x1001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7m55.207112066s ago: executing program 33 (id=1419): pipe(&(0x7f0000000d00)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='map=off,session=0x0000000000000017\x00sbsector=0x0000000100000001,sbsector=0x0000000000000005,session=0x0000000000000062,nojolietAiocharset=cp865,iocharset=cp737,session=0x0000000000000058,showassoc,mode=0xffffffaffffffffe,norock,\x00'], 0xfa, 0x69f, &(0x7f0000000840)="$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") mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7m6.734815305s ago: executing program 34 (id=2581): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 6m10.714199264s ago: executing program 35 (id=3929): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m26.209397387s ago: executing program 36 (id=4759): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4m52.60628719s ago: executing program 37 (id=5419): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@broadcast, {0x3, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x900}, 0x10}}, 0x0) 4m38.016042015s ago: executing program 9 (id=5702): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getpid() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x1008a2, 0x7ff, 0x6, 0x3, 0x8, 0x9, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) 4m37.967340377s ago: executing program 9 (id=5706): r0 = socket$netlink(0x10, 0x3, 0x8) syz_clone3(&(0x7f0000000080)={0x4801600, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f00020000000000f307000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m37.875139199s ago: executing program 9 (id=5712): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x80000000, 0x2, 0x8, 0x7}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 4m37.8343506s ago: executing program 9 (id=5715): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") creat(&(0x7f0000000380)='./bus\x00', 0x124) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1005008, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8000000000048005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 4m37.670564453s ago: executing program 9 (id=5721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4m37.40345271s ago: executing program 9 (id=5733): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='f'], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 4m37.38296322s ago: executing program 38 (id=5733): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='f'], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 3m21.718794746s ago: executing program 5 (id=6986): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x1, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) flock(r1, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m21.687001616s ago: executing program 5 (id=6990): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m21.497634961s ago: executing program 5 (id=6998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xaf4, 0x0) shutdown(r0, 0x0) 3m21.311202375s ago: executing program 5 (id=7004): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x900, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 3m21.310833015s ago: executing program 5 (id=7006): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczBSCFMYwYyKEKBiDK2NM3BuX/guudGOMKxO3ujckxLABXNXc9l6mLW1hSkuV/n7JhXPuPZdznp572nPvaQlgbM1kfyQRWyPi94iYamRbC8w0/rp6+ezStctnl5Ko1d7+K6mXu3L57FJRtDhvS56ZTSPSz5LY3aHe1dNnji9Wq5VTeX5+7cQH86unzzx37MTi0crRysn9hw4dPLDw4gv7nx9InFmbruz6eGXPzjfe++rNw1+0xN8Wx4DM9Dr4ZK024OpGa1tTOpkYYUPYkFJEZN1Vro//qSjFeudNxeufjrRxwFDVarXalu6Hz9WAu1gSrXlDHsZF8UGf3f8WW/sk4OXhTT9G7tIrjRugLO6r+dY4MhFpXqbcdn87SDMR8e65v7/JthjOcwgAgBY/ZPOfZzvN/9J4oKncPfna0HRE3BsR2yPivojYERH3R9TLPhgRD22w/vZFkhvnP+nFvgK7Rdn876V8bat1/lfM/mK6lOe21eMvJ0eOVSv78tdkNsqbsvxCjzp+fO23L7sda57/ZVtWfzEXzNtxcWJT6znLi2uLtxNzs0vnI3ZNdIo/ub4SkETEzojY1Wcdx57+bk+3YzePv4cBrDPVvo14qtH/56It/kLSe31y/n9RreybL66KG/3y64W3utV/W/EPQNb//+94/V+PfzppXq9d3XgdF/74vOs9Tb/X/2TyTj09me/7aHFt7dRCxGRyuNHo5v37188t8kX5LP7ZvZ3H//ZYfyV2R0R2ET8cEY9ExKN52x+LiMcjYm+P+H9+9Yn3+49/uLL4lzfU/+uJyWjf0zlROv7T9y2VTt8Q/7Xe/X+wnprN99zK+9+ttKu/qxkAAAD+e9KI2BpJOnc9naZzc43vy++ISKsrq2vPHFn58ORy4zcC01FOiyddU03PQxfy2/pG/nxENL5aUBw/kD83/rq0uZ6fW1qpLo86eBhzW7qM/8yfpVG3Dhg6v9eC8WX8w/gy/mF8Gf8wvjqM/82jaAdw53X6/P9kBO0A7ry28W/ZD8aI+38YX13H/938P/8AdT7/YSytbo6b/0i+Z6L4l/o8/a5NRPlf0YzbT9SSjp0b6agbVjmVuuqGlhjt+xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCg/BMAAP//YzDfZQ==") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3m20.960442913s ago: executing program 5 (id=7013): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) 3m20.899349665s ago: executing program 39 (id=7013): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) 2m5.155300247s ago: executing program 2 (id=8543): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r2, 0x7) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r4, 0x81, 0xb) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f00000003c0)="75a19f758f941c", 0x7}], 0x1, 0x6) 2m5.155102638s ago: executing program 2 (id=8544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$incfs(0xffffffffffffffff, 0x0, 0xc000, 0x1e8) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@orlov}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") ioprio_set$pid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x64) sendfile(r0, r0, 0x0, 0x252c000000000000) 2m5.06221504s ago: executing program 2 (id=8545): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 2m5.008446071s ago: executing program 2 (id=8546): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x82001, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) 2m4.722461917s ago: executing program 2 (id=8550): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 2m3.671249632s ago: executing program 2 (id=8577): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440c4) 2m3.662274562s ago: executing program 40 (id=8577): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300440c4) 1m46.459364386s ago: executing program 7 (id=8887): setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x68) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0) 1m46.367605079s ago: executing program 7 (id=8888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000) 1m46.366962689s ago: executing program 7 (id=8899): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x65f32fcc}, 0x108063, 0x0, 0x983, 0x7, 0xbe, 0x88, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x43, 0x65) lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '(\x0f-@,**^*\x00'}) 1m45.824831311s ago: executing program 7 (id=8902): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 1m45.791609392s ago: executing program 7 (id=8892): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000002, 0x2668}, 0x10edcc, 0x1224, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x9) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1m45.579285717s ago: executing program 7 (id=8895): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket(0x2, 0x3, 0xff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880080354803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1m45.579113837s ago: executing program 41 (id=8895): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket(0x2, 0x3, 0xff) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880080354803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1m33.456808585s ago: executing program 0 (id=9123): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0, 0xfffffffd}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000001c0)='P', 0x1}], 0x1}}], 0x1, 0x40840) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x2, 0x4) 1m33.157097542s ago: executing program 0 (id=9137): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="b80b0000000501040000000000000000010000035402010000000000010000000b0100080200010073797a31000000000000000000000000000000000000000000000000000000008ade085df13ab92c7d9776108dcf1a031eddb822584d38aab012a0aa8e2d71a1680c5e1b717a47b3e8609753bca33dca25bf45544b4f71651898e6d85a3b4ca5070002"], 0xbb8}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 1m33.084793874s ago: executing program 0 (id=9129): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002bc0), 0x2a0, 0x20004840) 1m33.016805585s ago: executing program 0 (id=9144): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80800c, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX], 0x0, 0x254, &(0x7f0000000480)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m32.898153218s ago: executing program 0 (id=9136): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x2000000, 0x0, 0x2000c844}, 0x20000110) 1m32.411631379s ago: executing program 0 (id=9143): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="610306"], 0x10) 1m32.411462559s ago: executing program 42 (id=9143): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="610306"], 0x10) 3.704239875s ago: executing program 6 (id=10810): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000001", @ANYBLOB="0102"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8014) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 3.575648898s ago: executing program 6 (id=10815): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) 3.179939707s ago: executing program 1 (id=10826): sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000140)=0x2200a, 0xffffffffffffffe1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x4fef, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r0, 0x2218, 0x7721, 0x16, 0x0, 0x0) 2.982872942s ago: executing program 1 (id=10831): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) 2.067992173s ago: executing program 1 (id=10837): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf0}}, 0xffc00003}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1.881631477s ago: executing program 1 (id=10840): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1.76136809s ago: executing program 1 (id=10842): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) 1.587529734s ago: executing program 4 (id=10848): setrlimit(0x7, &(0x7f0000000400)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xa, 0x200003c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0x5}}}, 0x24}}, 0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.503075865s ago: executing program 4 (id=10850): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff8e, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x14, 0x0, &(0x7f0000000140)) 1.421417647s ago: executing program 4 (id=10851): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) futimesat(r0, 0x0, &(0x7f0000000140)) 634.778566ms ago: executing program 3 (id=10857): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x401) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8880, 0x81) getdents64(r3, 0x0, 0x4f) 626.755346ms ago: executing program 1 (id=10858): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) kexec_load(0x2, 0x8, &(0x7f0000000140)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x0) 560.466207ms ago: executing program 3 (id=10860): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000140)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) 485.332899ms ago: executing program 8 (id=10861): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040880) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x1, 0x3}) syz_io_uring_setup(0x3bd4, 0x0, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 484.996049ms ago: executing program 3 (id=10862): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = dup(r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x7, 0x3644, 0xf62, 0x4, 0x8}, 0x14) 459.61732ms ago: executing program 3 (id=10863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) close_range(r0, r1, 0x2) 395.865891ms ago: executing program 8 (id=10864): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x20000000}, 0x10) 395.516921ms ago: executing program 3 (id=10865): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) 374.106552ms ago: executing program 8 (id=10866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) 370.514492ms ago: executing program 6 (id=10867): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x8044) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) getrusage(0x0, 0x0) 323.768283ms ago: executing program 6 (id=10868): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "f50000000000"}}}}}}}, 0x0) 308.563283ms ago: executing program 8 (id=10869): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 299.071084ms ago: executing program 4 (id=10870): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0) 188.859086ms ago: executing program 6 (id=10871): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60200) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 178.386856ms ago: executing program 4 (id=10872): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0x9}, 0x8) 173.319976ms ago: executing program 8 (id=10873): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) listen(r1, 0x8) 156.435707ms ago: executing program 6 (id=10874): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000020301020000000000006000070000090800010002000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 100.997048ms ago: executing program 4 (id=10875): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x12, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 100.602688ms ago: executing program 3 (id=10876): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x35c}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 0s ago: executing program 8 (id=10877): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): system error report for type 5 error -117 [ 468.457341][T28204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.522199][T27685] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.567117][T28224] netlink: zone id is out of range [ 468.633770][T28231] xt_hashlimit: size too large, truncated to 1048576 [ 468.784929][T28237] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9045'. [ 469.035636][T28245] bridge0: port 3(vlan2) entered blocking state [ 469.044486][T28245] bridge0: port 3(vlan2) entered disabled state [ 469.057076][T28245] vlan2: entered allmulticast mode [ 469.062591][T28245] geneve0: entered allmulticast mode [ 469.069130][T28245] vlan2: entered promiscuous mode [ 469.074252][T28245] geneve0: entered promiscuous mode [ 469.192638][T28255] netlink: 228 bytes leftover after parsing attributes in process `syz.0.9050'. [ 469.339166][T28271] loop0: detected capacity change from 0 to 512 [ 469.372478][T28271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.844240][T27685] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.916943][T28317] vcan0 speed is unknown, defaulting to 1000 [ 469.972936][T28325] xt_hashlimit: size too large, truncated to 1048576 [ 470.180569][T28347] vcan0 speed is unknown, defaulting to 1000 [ 470.571839][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 470.571854][ T28] audit: type=1400 audit(1784945797.940:3825): avc: denied { setopt } for pid=28362 comm="syz.3.9062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 470.687518][T28367] syzkaller1: entered promiscuous mode [ 470.701796][T28367] syzkaller1: entered allmulticast mode [ 471.010894][T28379] netlink: 228 bytes leftover after parsing attributes in process `syz.4.9067'. [ 471.070181][T28383] netlink: 'syz.4.9069': attribute type 4 has an invalid length. [ 471.106753][T28383] netlink: 'syz.4.9069': attribute type 4 has an invalid length. [ 471.152396][T28385] loop0: detected capacity change from 0 to 512 [ 471.193661][T28385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.221267][ T28] audit: type=1400 audit(1784945798.548:3826): avc: denied { write } for pid=28384 comm="syz.0.9070" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 471.383095][T27685] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.833686][T28430] __nla_validate_parse: 1 callbacks suppressed [ 471.833747][T28430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9089'. [ 471.875356][T28430] netlink: 'syz.6.9089': attribute type 5 has an invalid length. [ 472.044927][T28448] batadv_slave_1: entered promiscuous mode [ 472.064894][T28447] batadv_slave_1: left promiscuous mode [ 472.106295][ T28] audit: type=1400 audit(1784945799.381:3827): avc: denied { map } for pid=28427 comm="syz.1.9090" path="socket:[86661]" dev="sockfs" ino=86661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.225959][T28464] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.9105'. [ 472.318639][T28472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9108'. [ 472.750896][T28482] netlink: 228 bytes leftover after parsing attributes in process `syz.6.9112'. [ 472.810971][T28491] netlink: 'syz.4.9116': attribute type 3 has an invalid length. [ 472.927368][T28498] bridge0: port 3(vlan2) entered blocking state [ 472.933810][T28498] bridge0: port 3(vlan2) entered disabled state [ 472.940833][T28498] vlan2: entered allmulticast mode [ 472.946286][T28498] geneve0: entered allmulticast mode [ 472.952514][T28498] vlan2: entered promiscuous mode [ 472.958189][T28498] geneve0: entered promiscuous mode [ 472.985017][ T28] audit: type=1400 audit(1784945800.205:3828): avc: denied { watch watch_reads } for pid=28502 comm="syz.3.9120" path="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 473.054961][ T28] audit: type=1400 audit(1784945800.270:3829): avc: denied { remount } for pid=28510 comm="syz.3.9124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 473.088371][T28516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9135'. [ 473.105919][T28516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9135'. [ 473.121662][T28516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9135'. [ 473.139593][T28516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9135'. [ 473.335465][T28526] netlink: 228 bytes leftover after parsing attributes in process `syz.1.9126'. [ 473.335517][T28524] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.9137'. [ 473.472111][T28536] loop0: detected capacity change from 0 to 128 [ 473.832763][ T28] audit: type=1400 audit(1784945801.000:3830): avc: denied { bind } for pid=28554 comm="syz.1.9141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 473.954620][T28560] netlink: 'syz.1.9142': attribute type 5 has an invalid length. [ 474.039136][T18402] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.125217][T18402] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.145422][ T28] audit: type=1326 audit(1784945801.290:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28568 comm="syz.3.9147" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3c8c4de99 code=0x0 [ 474.226026][T18402] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.297754][T28565] vcan0 speed is unknown, defaulting to 1000 [ 474.364225][ T28] audit: type=1400 audit(1784945801.487:3832): avc: denied { write } for pid=28575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.415540][ T28] audit: type=1400 audit(1784945801.543:3833): avc: denied { write } for pid=28593 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.591579][T18402] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.707406][T28604] xt_hashlimit: size too large, truncated to 1048576 [ 474.723362][T28565] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.730706][T28565] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.738059][T28565] bridge_slave_0: entered allmulticast mode [ 474.745208][T28565] bridge_slave_0: entered promiscuous mode [ 474.757841][T18402] vlan2: left allmulticast mode [ 474.763749][T18402] geneve0: left allmulticast mode [ 474.782117][T18402] vlan2: left promiscuous mode [ 474.801578][T18402] geneve0: left promiscuous mode [ 474.822211][T18402] bridge0: port 3(vlan2) entered disabled state [ 474.840733][ T28] audit: type=1400 audit(1784945801.945:3834): avc: denied { write } for pid=28600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.867810][T18402] bridge_slave_1: left allmulticast mode [ 474.873663][T18402] bridge_slave_1: left promiscuous mode [ 474.879822][T18402] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.889862][T18402] bridge_slave_0: left allmulticast mode [ 474.895624][T18402] bridge_slave_0: left promiscuous mode [ 474.901668][T18402] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.046486][T18402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.086536][T18402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.101633][T18402] bond0 (unregistering): Released all slaves [ 475.126364][T28565] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.135622][T28565] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.152899][T28565] bridge_slave_1: entered allmulticast mode [ 475.167597][T28565] bridge_slave_1: entered promiscuous mode [ 475.241932][T28565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.261369][T28565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.333508][T28565] team0: Port device team_slave_0 added [ 475.363230][T28565] team0: Port device team_slave_1 added [ 475.370688][T28654] netlink: 'syz.1.9163': attribute type 4 has an invalid length. [ 475.443784][T28669] netlink: 'syz.1.9163': attribute type 4 has an invalid length. [ 476.339337][T18402] hsr_slave_0: left promiscuous mode [ 476.346101][T18402] hsr_slave_1: left promiscuous mode [ 476.351836][T18402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.352850][T28676] futex_wake_op: syz.6.9167 tries to shift op by 32; fix this program [ 476.359387][T18402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.376713][T18402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.384203][T18402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.397990][T18402] veth1_macvtap: left promiscuous mode [ 476.403531][T18402] veth0_macvtap: left promiscuous mode [ 476.409744][T18402] veth1_vlan: left promiscuous mode [ 476.415104][T18402] veth0_vlan: left promiscuous mode [ 476.533636][T18402] team0 (unregistering): Port device team_slave_1 removed [ 476.544884][T18402] team0 (unregistering): Port device team_slave_0 removed [ 476.586523][T28694] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 476.593138][T28694] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 476.601784][T28694] vhci_hcd vhci_hcd.0: Device attached [ 476.611501][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 476.643495][T28695] vhci_hcd: connection closed [ 476.644089][ T353] vhci_hcd vhci_hcd.4: stop threads [ 476.646049][T28565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.648933][ T353] vhci_hcd vhci_hcd.4: release socket [ 476.654216][T28565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.696316][ T353] vhci_hcd vhci_hcd.4: disconnect device [ 476.718584][T28565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.748639][T28565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.765354][T28565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.814781][T28565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.900420][T28565] hsr_slave_0: entered promiscuous mode [ 476.907044][T28565] hsr_slave_1: entered promiscuous mode [ 476.938293][T28565] debugfs: 'hsr0' already exists in 'hsr' [ 476.959690][T28565] Cannot create hsr debugfs directory [ 476.983913][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 476.983928][ T28] audit: type=1400 audit(1784945803.939:3838): avc: denied { write } for pid=28704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.072637][ T28] audit: type=1400 audit(1784945804.032:3839): avc: denied { write } for pid=28718 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.356992][T28739] vcan0 speed is unknown, defaulting to 1000 [ 477.410075][ T28] audit: type=1400 audit(1784945804.341:3840): avc: denied { write } for pid=28721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.479299][T28565] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.499488][ T28] audit: type=1400 audit(1784945804.406:3841): avc: denied { write } for pid=28751 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.532419][T28565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.572563][T28565] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 477.600460][T28565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.615178][T28565] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 477.644752][T28565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.677985][T28565] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 477.702736][T28565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.917586][T28565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.967503][T28565] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.992240][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.999396][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.053933][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.061048][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.159597][ T28] audit: type=1400 audit(1784945805.043:3842): avc: denied { write } for pid=28789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.192889][T28565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.332922][ T28] audit: type=1400 audit(1784945805.211:3843): avc: denied { write } for pid=28838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.424010][ T28] audit: type=1400 audit(1784945805.295:3844): avc: denied { write } for pid=28842 comm="syz.3.9191" name="file0" dev="tmpfs" ino=10507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 478.480600][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 478.508755][ T28] audit: type=1400 audit(1784945805.295:3845): avc: denied { ioctl } for pid=28842 comm="syz.3.9191" path="/2037/file0" dev="tmpfs" ino=10507 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 478.717879][T28565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.760141][ T28] audit: type=1400 audit(1784945805.614:3846): avc: denied { write } for pid=28857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.858390][ T28] audit: type=1400 audit(1784945805.698:3847): avc: denied { write } for pid=28888 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.983387][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 479.297547][T28565] veth0_vlan: entered promiscuous mode [ 479.326588][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 479.335632][T28565] veth1_vlan: entered promiscuous mode [ 479.356523][T28565] veth0_macvtap: entered promiscuous mode [ 479.365656][T28565] veth1_macvtap: entered promiscuous mode [ 479.411074][T28565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.435081][T28565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.469832][T18344] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.485951][T18344] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.518593][T18344] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.529911][T18344] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.798081][T28968] xt_hashlimit: size too large, truncated to 1048576 [ 480.352177][T29026] __nla_validate_parse: 1 callbacks suppressed [ 480.352202][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9232'. [ 480.386837][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9232'. [ 480.405510][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9232'. [ 480.654101][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9239'. [ 480.672662][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9239'. [ 481.596173][T29150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9245'. [ 481.636883][T29150] macvtap2: entered promiscuous mode [ 481.652818][T29150] macvtap2: entered allmulticast mode [ 481.665664][T29150] erspan0: entered allmulticast mode [ 481.733431][T29150] erspan0: left allmulticast mode [ 481.782173][T29150] macvtap2: left promiscuous mode [ 481.803255][T29150] macvtap2: left allmulticast mode [ 482.091454][T29203] netlink: 'syz.3.9261': attribute type 1 has an invalid length. [ 482.140841][T29203] bond9: entered promiscuous mode [ 482.173500][T29203] 8021q: adding VLAN 0 to HW filter on device bond9 [ 482.324009][T29220] netlink: 7 bytes leftover after parsing attributes in process `syz.4.9265'. [ 482.415831][T29203] 8021q: adding VLAN 0 to HW filter on device bond9 [ 482.424571][T29203] bond9: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 482.436698][T29203] bond9: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 482.467988][T29203] bond9: (slave ip6gre3): making interface the new active one [ 482.480044][T29203] ip6gre3: entered promiscuous mode [ 482.490684][T29203] bond9: (slave ip6gre3): Enslaving as an active interface with an up link [ 482.829096][T29237] netlink: 'syz.4.9272': attribute type 4 has an invalid length. [ 482.849794][T29233] loop1: detected capacity change from 0 to 1024 [ 482.895544][T29242] xt_hashlimit: size too large, truncated to 1048576 [ 482.915838][T29233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.935125][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 482.935143][ T28] audit: type=1400 audit(1784945809.516:3875): avc: denied { write } for pid=29230 comm="syz.1.9270" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 482.973118][ T28] audit: type=1400 audit(1784945809.516:3876): avc: denied { map } for pid=29230 comm="syz.1.9270" path="/335/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 483.031916][ T28] audit: type=1400 audit(1784945809.516:3877): avc: denied { execute } for pid=29230 comm="syz.1.9270" path="/335/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 483.085652][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.211142][T29267] loop1: detected capacity change from 0 to 512 [ 483.232526][T29267] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 483.255765][T29267] EXT4-fs (loop1): 1 truncate cleaned up [ 483.278376][T29267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.309210][ T28] audit: type=1400 audit(1784945809.862:3878): avc: denied { write } for pid=29266 comm="syz.1.9280" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 483.442002][ T28] audit: type=1400 audit(1784945809.993:3879): avc: denied { bind } for pid=29283 comm="syz.3.9287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 483.500329][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.205992][T29336] netlink: 'syz.6.9303': attribute type 11 has an invalid length. [ 484.214336][T29336] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9303'. [ 484.296861][T29343] loop1: detected capacity change from 0 to 512 [ 484.351532][T29343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.368391][T29343] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 484.384312][ T28] audit: type=1400 audit(1784945810.873:3880): avc: denied { write } for pid=29342 comm="syz.1.9307" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.569409][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.398732][T29374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=29374 comm=syz.1.9316 [ 485.492629][ T28] audit: type=1326 audit(1784945811.902:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.1.9323" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x0 [ 485.553225][T29392] loop8: detected capacity change from 0 to 512 [ 485.569954][T29392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.591012][T29392] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 485.606143][ T28] audit: type=1400 audit(1784945812.015:3882): avc: denied { write } for pid=29391 comm="syz.8.9325" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.761159][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.786639][T29416] loop8: detected capacity change from 0 to 1024 [ 485.794023][T29416] EXT4-fs: Ignoring removed bh option [ 485.823272][T29416] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.882831][ T28] audit: type=1326 audit(1784945812.267:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29415 comm="syz.8.9335" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f442d8ede99 code=0x0 [ 486.399607][T29481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9360'. [ 486.411495][T29481] bridge_slave_1 (unregistering): left allmulticast mode [ 486.418726][T29481] bridge_slave_1 (unregistering): left promiscuous mode [ 486.432257][T29481] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.611837][T29496] vcan0 speed is unknown, defaulting to 1000 [ 486.713230][T29502] vcan0 speed is unknown, defaulting to 1000 [ 486.722789][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.998658][T29522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.013323][T29522] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.053372][T29522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.199245][T29522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.227064][T29522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.257306][T29522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.270985][T29522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.297454][T29522] veth1_vlan: left promiscuous mode [ 487.305044][T29522] veth0_vlan: left promiscuous mode [ 487.312536][T29522] veth0_vlan: entered promiscuous mode [ 487.326210][T29522] veth1_vlan: entered promiscuous mode [ 487.352382][T29522] veth1_macvtap: left promiscuous mode [ 487.373329][T29522] veth0_macvtap: left promiscuous mode [ 487.393023][T29522] veth0_macvtap: entered promiscuous mode [ 487.405561][T29522] veth1_macvtap: entered promiscuous mode [ 487.439328][T29522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.461196][T29522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.478833][T29522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 487.509953][T29522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.536899][T29522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.559222][T29522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.593022][T29522] erspan0: entered promiscuous mode [ 487.694433][T12332] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 487.703264][T12332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.713735][T12332] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 487.736350][T12332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.756312][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 487.836127][T18416] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 487.865916][T18416] bond3: (slave veth3): making interface the new active one [ 487.890899][T18416] bond3: active interface up! [ 487.901234][T12332] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 487.922370][T12332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.944574][T12332] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 487.958634][T12332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.357715][T29568] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9396'. [ 488.397354][T29568] netlink: zone id is out of range [ 488.423050][T29571] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 488.444892][T29571] SELinux: failed to load policy [ 488.602808][T29576] loop8: detected capacity change from 0 to 512 [ 488.693034][T29586] xt_hashlimit: size too large, truncated to 1048576 [ 488.735432][T29576] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 488.745605][T29594] loop1: detected capacity change from 0 to 1024 [ 488.757357][T29594] EXT4-fs: Ignoring removed bh option [ 488.788891][T29594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.818429][ T28] audit: type=1326 audit(1784945815.018:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29593 comm="syz.1.9405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x0 [ 489.166795][T29609] loop8: detected capacity change from 0 to 512 [ 489.209136][T29609] EXT4-fs: Ignoring removed bh option [ 489.224417][T29609] EXT4-fs (loop8): invalid first ino: 0 [ 489.281755][ T28] audit: type=1400 audit(1784945815.449:3885): avc: denied { read write } for pid=29608 comm="syz.8.9408" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 489.318529][ T28] audit: type=1400 audit(1784945815.449:3886): avc: denied { open } for pid=29608 comm="syz.8.9408" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 489.414175][T29619] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9413'. [ 489.632606][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.308601][T29687] sctp: [Deprecated]: syz.4.9439 (pid 29687) Use of int in max_burst socket option. [ 490.308601][T29687] Use struct sctp_assoc_value instead [ 490.391360][T29693] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9441'. [ 490.572521][ T28] audit: type=1400 audit(1784945816.665:3887): avc: denied { read } for pid=29719 comm="syz.1.9456" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 491.468085][T29754] loop1: detected capacity change from 0 to 1024 [ 491.482292][T29754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.506810][ T28] audit: type=1400 audit(1784945817.545:3888): avc: denied { write } for pid=29753 comm="syz.1.9467" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.596335][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.881827][ T28] audit: type=1326 audit(1784945817.882:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29779 comm="syz.3.9478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c8c4de99 code=0x7ffc0000 [ 491.954058][ T28] audit: type=1326 audit(1784945817.882:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29779 comm="syz.3.9478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c8c4de99 code=0x7ffc0000 [ 491.980974][ T28] audit: type=1326 audit(1784945817.882:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29779 comm="syz.3.9478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c8c4de99 code=0x7ffc0000 [ 492.007125][ T28] audit: type=1326 audit(1784945817.882:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29779 comm="syz.3.9478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa3c8c4de99 code=0x7ffc0000 [ 492.033358][ T28] audit: type=1326 audit(1784945817.929:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29779 comm="syz.3.9478" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3c8c4de99 code=0x7ffc0000 [ 492.325465][T29802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9486'. [ 492.336693][T29802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9486'. [ 492.387401][T29802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9486'. [ 492.396515][T18421] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.405213][T18421] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.413577][T18421] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.423209][T29802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9486'. [ 492.433856][T18421] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.807831][T29834] xt_hashlimit: size too large, truncated to 1048576 [ 493.229520][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 494.402064][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 494.402084][ T28] audit: type=1400 audit(1784945820.240:3920): avc: denied { write } for pid=29914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.480299][ T28] audit: type=1400 audit(1784945820.324:3921): avc: denied { write } for pid=29926 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.731773][T29915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.746331][T29915] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.757339][T29915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.800791][T29915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.810777][T29915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.822937][T29915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.833512][T29915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.847458][T29915] veth1_vlan: left promiscuous mode [ 494.854514][T29915] veth0_vlan: left promiscuous mode [ 494.864424][T29915] veth0_vlan: entered promiscuous mode [ 494.871995][T29915] veth1_vlan: entered promiscuous mode [ 494.881629][T29915] veth1_macvtap: left promiscuous mode [ 494.888076][T29915] veth0_macvtap: left promiscuous mode [ 494.894815][T29915] veth0_macvtap: entered promiscuous mode [ 494.901583][T29915] veth1_macvtap: entered promiscuous mode [ 494.912258][T29915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.921164][T29915] 8021q: adding VLAN 0 to HW filter on device eth0 [ 494.930764][T29915] 8021q: adding VLAN 0 to HW filter on device eth1 [ 494.939662][T29915] 8021q: adding VLAN 0 to HW filter on device eth2 [ 494.948530][T29915] 8021q: adding VLAN 0 to HW filter on device eth3 [ 494.959699][T29915] bridge0: port 3(vlan2) entered blocking state [ 494.966097][T29915] bridge0: port 3(vlan2) entered forwarding state [ 494.976919][T12334] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.984048][T12334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.043969][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 495.055700][T18386] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.075314][T18386] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.094457][T18386] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.105941][T18386] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.163214][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 495.235795][ T28] audit: type=1400 audit(1784945821.017:3922): avc: denied { write } for pid=29936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.270473][T29956] netlink: 168864 bytes leftover after parsing attributes in process `syz.8.9541'. [ 495.301329][T29956] netlink: zone id is out of range [ 495.307607][T29961] netlink: 'syz.3.9542': attribute type 1 has an invalid length. [ 495.325041][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 495.381388][T29961] bond10: entered promiscuous mode [ 495.391569][ T28] audit: type=1400 audit(1784945821.176:3923): avc: denied { write } for pid=29964 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.429258][T29961] 8021q: adding VLAN 0 to HW filter on device bond10 [ 495.436832][T29970] loop8: detected capacity change from 0 to 512 [ 495.499130][T29973] 8021q: adding VLAN 0 to HW filter on device bond10 [ 495.516709][T29970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.541688][T29973] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 495.569275][T29970] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.589338][T29973] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 495.629376][ T28] audit: type=1400 audit(1784945821.391:3924): avc: denied { write } for pid=29969 comm="syz.8.9544" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 495.654569][T29973] bond10: (slave vti0): making interface the new active one [ 495.690927][T29973] vti0: entered promiscuous mode [ 495.704013][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.717391][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 495.734626][T29973] bond10: (slave vti0): Enslaving as an active interface with an up link [ 495.752746][ T28] audit: type=1400 audit(1784945821.429:3925): avc: denied { write } for pid=29969 comm="syz.8.9544" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 496.007097][ T28] audit: type=1400 audit(1784945821.747:3926): avc: denied { write } for pid=29978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.096170][ T28] audit: type=1400 audit(1784945821.822:3927): avc: denied { write } for pid=29999 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.220146][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 496.288783][T30019] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9557'. [ 496.314179][T30019] xfrm1: entered allmulticast mode [ 496.331872][T30023] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.9558'. [ 496.349397][T30019] ip6gretap1: entered promiscuous mode [ 496.370662][T30023] netlink: zone id is out of range [ 496.396026][ T28] audit: type=1400 audit(1784945822.112:3928): avc: denied { write } for pid=30006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.476971][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 496.514177][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 496.537006][ T28] audit: type=1400 audit(1784945822.243:3929): avc: denied { write } for pid=30041 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.829005][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 496.985088][T30069] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 497.565277][T30113] erspan0: left promiscuous mode [ 497.631085][T30113] ip6gretap0: left promiscuous mode [ 497.662655][T30113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.702742][T30113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.778555][T30113] veth1_macvtap: left promiscuous mode [ 497.806868][T30113] veth0_macvtap: left promiscuous mode [ 497.841872][T30113] veth0_macvtap: entered promiscuous mode [ 497.857055][T30113] veth1_macvtap: entered promiscuous mode [ 497.915757][T30126] loop1: detected capacity change from 0 to 512 [ 497.936467][T30126] EXT4-fs: Ignoring removed bh option [ 497.968283][T30129] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9597'. [ 497.968523][T30126] EXT4-fs (loop1): invalid first ino: 0 [ 498.203312][T30113] ip6gretap0: entered promiscuous mode [ 498.217721][T30113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.232885][T30113] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.252010][T30113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 498.266636][T30113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 498.277417][T30132] loop8: detected capacity change from 0 to 1024 [ 498.279940][T30113] veth0_to_team: entered promiscuous mode [ 498.288516][T30132] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.304390][T30113] 8021q: adding VLAN 0 to HW filter on device bond4 [ 498.319483][ T3386] vcan0 speed is unknown, defaulting to 1000 [ 498.345845][T12334] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.357732][ T3386] syz1: Port: 1 Link ACTIVE [ 498.362334][T12334] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.377540][T12334] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.382633][T30132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.400829][T12334] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.422790][ T8197] vcan0 speed is unknown, defaulting to 1000 [ 498.429732][T12334] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.465580][T12334] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.474473][T12334] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.482734][T12334] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 498.492559][T18421] ip6_tunnel:  xmit: Local address not yet configured! [ 498.518398][T18421] ip6_tunnel:  xmit: Local address not yet configured! [ 498.525510][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 498.557605][T30142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9601'. [ 498.645118][T30142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9601'. [ 498.660131][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.986698][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 499.278842][T30192] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.9623'. [ 499.471938][ T8180] ip6_tunnel:  xmit: Local address not yet configured! [ 500.664570][ C1] net_ratelimit: 3 callbacks suppressed [ 500.664592][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 500.780298][T30245] 8021q: adding VLAN 0 to HW filter on device  [ 500.793141][T26266] syz_tun: tun_net_xmit 110 [ 500.812840][T30245] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.881915][T30245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.004575][T30245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.039924][T30245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.075678][T30245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 501.107596][T30245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.149891][T30245] veth1_macvtap: left promiscuous mode [ 501.159679][T30245] veth0_macvtap: left promiscuous mode [ 501.181283][T30245] veth0_macvtap: entered promiscuous mode [ 501.190677][T30245] veth1_macvtap: entered promiscuous mode [ 501.225215][T30245] gretap0: entered promiscuous mode [ 501.239584][T30245] batman_adv: batadv0: Interface activated: macvtap1 [ 501.368191][T30245] 8021q: adding VLAN 0 to HW filter on device eth0 [ 501.382869][T30245] 8021q: adding VLAN 0 to HW filter on device eth1 [ 501.391491][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 501.412617][T30245] 8021q: adding VLAN 0 to HW filter on device eth2 [ 501.422200][T30245] 8021q: adding VLAN 0 to HW filter on device eth3 [ 501.459501][T18396] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.466654][T18396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.486074][T18396] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.493397][T18396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.546137][T18421] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 501.564013][T18421] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 501.585395][T18421] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 501.613588][T18421] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 501.656119][T18421] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 501.675387][T18421] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 501.690297][T26266] syz_tun: tun_net_xmit 110 [ 501.697997][T18421] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 501.710448][T18421] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 501.750637][T30269] loop8: detected capacity change from 0 to 2048 [ 501.776761][T18386] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 501.787144][T18386] bond4: (slave veth0_to_bond): making interface the new active one [ 501.806777][T18386] bond4: active interface up! [ 501.829380][T30269] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.846018][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 501.846095][ T28] audit: type=1400 audit(1784945827.212:3955): avc: denied { write } for pid=30268 comm="syz.8.9654" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 501.875983][T30292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9663'. [ 501.906092][T30295] netlink: 'syz.4.9664': attribute type 1 has an invalid length. [ 501.923123][T30295] netlink: 'syz.4.9664': attribute type 4 has an invalid length. [ 501.945126][T30295] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9664'. [ 502.031808][T12332] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 502.060274][T12332] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 502.080328][T12332] EXT4-fs (loop8): This should not happen!! Data will be lost [ 502.080328][T12332] [ 502.102790][T12332] EXT4-fs (loop8): Total free blocks count 0 [ 502.119757][T12332] EXT4-fs (loop8): Free/Dirty block details [ 502.125733][T12332] EXT4-fs (loop8): free_blocks=4096 [ 502.131093][T12332] EXT4-fs (loop8): dirty_blocks=576 [ 502.136335][T12332] EXT4-fs (loop8): Block reservation details [ 502.171132][T12332] EXT4-fs (loop8): i_reserved_data_blocks=36 [ 502.178321][T12332] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 544 with error 28 [ 502.200158][T28565] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 502.246749][T26266] ip6_tunnel:  xmit: Local address not yet configured! [ 502.260769][T30304] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 502.377242][T30311] netlink: 'syz.8.9671': attribute type 1 has an invalid length. [ 502.389317][T30311] netlink: 101600 bytes leftover after parsing attributes in process `syz.8.9671'. [ 502.389997][ T8180] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 502.556376][ T8197] ip6_tunnel:  xmit: Local address not yet configured! [ 502.579555][T30318] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9675'. [ 502.603672][T30318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.648157][T30318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.972838][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 503.188790][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 503.402091][T30346] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 503.464347][ T9] syz_tun: tun_net_xmit 110 [ 503.540306][ T8180] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 503.640087][T30358] vcan0 speed is unknown, defaulting to 1000 [ 503.688461][ T28] audit: type=1326 audit(1784945828.934:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 503.764622][ T28] audit: type=1326 audit(1784945828.934:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 503.841360][ T28] audit: type=1326 audit(1784945828.934:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 503.884643][ T28] audit: type=1326 audit(1784945828.934:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 503.889211][T30373] VFS: Mount too revealing [ 503.923015][ T28] audit: type=1326 audit(1784945828.934:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 503.968630][ T28] audit: type=1326 audit(1784945828.990:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94f8dfe6ce code=0x7ffc0000 [ 504.027445][ T28] audit: type=1326 audit(1784945828.990:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94f8dfe6ce code=0x7ffc0000 [ 504.088705][ T28] audit: type=1326 audit(1784945828.990:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94f8dfe6ce code=0x7ffc0000 [ 504.144827][ T28] audit: type=1326 audit(1784945828.990:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30362 comm="syz.4.9694" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94f8dfe6ce code=0x7ffc0000 [ 504.171561][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 504.181452][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 504.225485][T30395] netlink: 'syz.1.9705': attribute type 1 has an invalid length. [ 504.232020][T30397] loop8: detected capacity change from 0 to 512 [ 504.252467][T30397] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.9704: iget: bad i_size value: 38620345925642 [ 504.261697][T30395] bond4: entered promiscuous mode [ 504.277644][T30397] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 504.277814][T30397] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.9704: couldn't read orphan inode 15 (err -117) [ 504.287108][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 504.287136][ C0] EXT4-fs (loop8): initial error at time 1784945829: ext4_orphan_get:1399: inode 15 [ 504.287177][ C0] EXT4-fs (loop8): last error at time 1784945829: ext4_orphan_get:1399: inode 15 [ 504.292264][T30395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.332337][T30397] loop8: lost filesystem error report for type 5 error -117 [ 504.334820][T30397] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.341997][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 504.391918][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.403817][T30395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.412811][T30395] bond4: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 504.432298][T30395] bond4: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 504.456998][T30395] bond4: (slave ip6gre4): making interface the new active one [ 504.480523][T30395] ip6gre4: entered promiscuous mode [ 504.494644][T30395] bond4: (slave ip6gre4): Enslaving as an active interface with an up link [ 504.566901][T30418] loop1: detected capacity change from 0 to 1764 [ 504.601490][ T9] syz_tun: tun_net_xmit 110 [ 505.630886][T30432] loop1: detected capacity change from 0 to 512 [ 505.657885][T30432] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.9718: iget: bad i_size value: 38620345925642 [ 505.676055][T30432] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 505.677152][T30432] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.9718: couldn't read orphan inode 15 (err -117) [ 505.698324][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 505.698365][ C0] EXT4-fs (loop1): initial error at time 1784946086: ext4_orphan_get:1399: inode 15 [ 505.698396][ C0] EXT4-fs (loop1): last error at time 1784946086: ext4_orphan_get:1399: inode 15 [ 505.781378][T30437] netlink: 'syz.3.9720': attribute type 1 has an invalid length. [ 505.789273][T30437] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.9720'. [ 505.802676][T30432] loop1: lost filesystem error report for type 5 error -117 [ 505.803496][T30432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.901951][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.018932][T30449] netlink: 'syz.6.9725': attribute type 1 has an invalid length. [ 506.062271][T30449] bond2: entered promiscuous mode [ 506.077021][T30449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.123625][T30449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 506.131424][T30449] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 506.145809][T30449] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 506.161921][T30449] bond2: (slave ip6gre1): making interface the new active one [ 506.169747][T30449] ip6gre1: entered promiscuous mode [ 506.177386][T30449] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 506.354692][T30477] netlink: 'syz.3.9747': attribute type 4 has an invalid length. [ 506.409304][T30478] netlink: 'syz.3.9747': attribute type 4 has an invalid length. [ 506.530824][T30485] bond3: entered allmulticast mode [ 507.281724][T30497] netlink: 'syz.6.9745': attribute type 1 has an invalid length. [ 507.376980][T30506] gretap1: entered allmulticast mode [ 507.424977][T30506] bond3: (slave gretap1): making interface the new active one [ 507.466423][T30506] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 508.053200][T30556] IPVS: Error connecting to the multicast addr [ 508.357954][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 508.358071][ T28] audit: type=1326 audit(1784946089.353:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.406746][ T28] audit: type=1326 audit(1784946089.400:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.432837][ T28] audit: type=1326 audit(1784946089.400:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.458973][ T28] audit: type=1326 audit(1784946089.400:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.510403][ T28] audit: type=1326 audit(1784946089.400:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.543762][ T28] audit: type=1326 audit(1784946089.400:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.619928][ T28] audit: type=1326 audit(1784946089.400:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.674142][ T28] audit: type=1326 audit(1784946089.400:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.732541][ T28] audit: type=1326 audit(1784946089.400:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 508.818592][ T28] audit: type=1326 audit(1784946089.484:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30582 comm="syz.1.9790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 509.317269][T30622] vcan0 speed is unknown, defaulting to 1000 [ 509.482543][ T8197] IPVS: starting estimator thread 0... [ 509.588461][T30625] IPVS: using max 1776 ests per chain, 88800 per kthread [ 509.642572][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 509.756417][T30644] loop8: detected capacity change from 0 to 128 [ 509.788742][T30644] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 509.805554][T30646] netlink: 'syz.6.9806': attribute type 83 has an invalid length. [ 509.816469][T30644] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.003538][T30655] vcan0 speed is unknown, defaulting to 1000 [ 510.086444][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9811'. [ 510.212300][T18386] IPVS: stop unused estimator thread 0... [ 510.665779][T28565] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 511.356182][T30754] 9pnet_fd: Insufficient options for proto=fd [ 511.443955][T30763] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 512.247891][T30865] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9861'. [ 512.376681][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 512.695009][T30894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9871'. [ 513.002121][T30921] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9884'. [ 513.281176][T30947] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9894'. [ 513.302044][T30947] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9894'. [ 513.388541][T30955] netlink: 'syz.8.9897': attribute type 5 has an invalid length. [ 514.657444][T31010] loop8: detected capacity change from 0 to 512 [ 514.668444][T31010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 514.682885][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 514.682903][ T28] audit: type=1400 audit(1784946095.277:4033): avc: denied { remount } for pid=31009 comm="syz.8.9919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 514.683275][T31010] EXT4-fs (loop8): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 514.734574][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.853789][ T28] audit: type=1400 audit(1784946095.436:4034): avc: denied { kexec_image_load } for pid=31023 comm="syz.6.9925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 515.020352][T31040] netlink: 2024 bytes leftover after parsing attributes in process `syz.6.9929'. [ 515.033469][T31040] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9929'. [ 515.439808][T31046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9934'. [ 515.837791][T31071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9944'. [ 515.926728][T31062] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.934082][T31062] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.028326][T31062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.183032][T31062] xfrm1: left allmulticast mode [ 516.191709][T31071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.206914][T31071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.232595][T31071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.251474][T31071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.271135][T31071] batman_adv: batadv0: Interface deactivated: macvtap1 [ 516.278615][T31071] batman_adv: batadv0: Removing interface: macvtap1 [ 516.305229][T31071] batadv0 (unregistering): left promiscuous mode [ 516.325001][T18332] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.334574][T18332] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.360110][T18332] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.385802][T18332] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.795532][T31113] vcan0 speed is unknown, defaulting to 1000 [ 516.921484][T31103] netlink: zone id is out of range [ 516.934130][T31103] netlink: zone id is out of range [ 516.947203][T31103] netlink: zone id is out of range [ 516.960213][T31103] netlink: zone id is out of range [ 516.994591][T31103] netlink: zone id is out of range [ 517.014100][T31103] netlink: zone id is out of range [ 517.029211][T31103] netlink: zone id is out of range [ 517.046541][T31103] netlink: zone id is out of range [ 517.060168][T31103] netlink: zone id is out of range [ 517.069243][T31103] netlink: zone id is out of range [ 517.108012][T31124] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9964'. [ 517.154902][T31124] xfrm1: entered allmulticast mode [ 517.186234][T31124] ip6gretap1: entered promiscuous mode [ 517.373186][ T28] audit: type=1400 audit(1784946097.794:4035): avc: denied { bind } for pid=31138 comm="syz.3.9970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 517.516715][T31137] loop8: detected capacity change from 0 to 164 [ 517.572461][T31137] rock: directory entry would overflow storage [ 517.583296][T31137] rock: sig=0x5252, size=5, remaining=3 [ 517.613347][T31152] netlink: 'syz.6.9976': attribute type 1 has an invalid length. [ 517.665624][T31152] 8021q: adding VLAN 0 to HW filter on device bond4 [ 517.713552][T31158] bond4: (slave dummy0): making interface the new active one [ 517.754852][T31158] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 518.060548][T31184] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 518.510238][T31214] netlink: 'syz.8.10000': attribute type 10 has an invalid length. [ 518.521132][T31214] __nla_validate_parse: 1 callbacks suppressed [ 518.521152][T31214] netlink: 16154 bytes leftover after parsing attributes in process `syz.8.10000'. [ 518.619709][ T28] audit: type=1400 audit(1784946098.955:4036): avc: denied { mounton } for pid=31217 comm="syz.3.10002" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 518.878166][T31232] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 519.076576][ T28] audit: type=1400 audit(1784946099.385:4037): avc: denied { write } for pid=3411 comm="kworker/1:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=97747 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 519.114596][T31253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10015'. [ 519.342277][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10022'. [ 519.352272][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10022'. [ 519.371470][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10022'. [ 519.382265][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10022'. [ 519.392838][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10022'. [ 519.402339][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10022'. [ 519.411859][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10022'. [ 519.421411][T31271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10022'. [ 520.189652][T31301] loop1: detected capacity change from 0 to 164 [ 520.214749][T31301] rock: directory entry would overflow storage [ 520.222877][T31301] rock: sig=0x5252, size=5, remaining=3 [ 521.265240][T31354] loop1: detected capacity change from 0 to 256 [ 521.687990][T31365] 9pnet: p9_errstr2errno: server reported unknown error Ð [ 521.798297][T31376] syzkaller1: entered promiscuous mode [ 521.804764][T31376] syzkaller1: entered allmulticast mode [ 521.975038][T31392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.009012][T31392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.031463][ T28] audit: type=1400 audit(1784946102.155:4038): avc: denied { getattr } for pid=31391 comm="syz.8.10072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 522.532013][T31418] bridge0: port 3(vlan2) entered disabled state [ 522.538459][T31418] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.578711][T31418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.590206][T31418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.647639][T31418] bond2: left promiscuous mode [ 522.655741][T31418] ip6gre1: left promiscuous mode [ 522.668593][T31418] gretap1: left allmulticast mode [ 522.679874][T31418] xfrm1: left allmulticast mode [ 522.694969][T18388] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.703628][T18388] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.714023][T18388] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.729716][T18388] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.746967][T18388] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.762063][T18388] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.779487][T18388] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.798429][T18388] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.225474][T31493] 9pnet_fd: Insufficient options for proto=fd [ 525.098599][T31530] loop8: detected capacity change from 0 to 256 [ 525.582916][T31551] __nla_validate_parse: 41 callbacks suppressed [ 525.582973][T31551] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10137'. [ 525.683381][ T28] audit: type=1326 audit(1784946105.571:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442d8ede99 code=0x7ffc0000 [ 525.733840][ T28] audit: type=1326 audit(1784946105.571:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442d8ede99 code=0x7ffc0000 [ 525.760533][ T28] audit: type=1326 audit(1784946105.571:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442d8ede99 code=0x7ffc0000 [ 525.786939][ T28] audit: type=1326 audit(1784946105.571:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f442d8ede99 code=0x7ffc0000 [ 525.855621][ T28] audit: type=1326 audit(1784946105.627:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f442d8ae6ce code=0x7ffc0000 [ 525.916542][ T28] audit: type=1326 audit(1784946105.627:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f442d8ae6ce code=0x7ffc0000 [ 525.946475][ T28] audit: type=1326 audit(1784946105.627:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f442d8ae6ce code=0x7ffc0000 [ 525.990972][ T28] audit: type=1326 audit(1784946105.627:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f442d8ae6ce code=0x7ffc0000 [ 526.019444][ T28] audit: type=1326 audit(1784946105.627:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31563 comm="syz.8.10141" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f442d8ae6ce code=0x7ffc0000 [ 526.062891][ T54] bridge_slave_1: left allmulticast mode [ 526.070080][ T54] bridge_slave_1: left promiscuous mode [ 526.088789][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.116322][ T54] bridge_slave_0: left allmulticast mode [ 526.147531][ T54] bridge_slave_0: left promiscuous mode [ 526.167145][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.221827][T31587] loop8: detected capacity change from 0 to 4096 [ 526.262204][T31587] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.321951][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.356714][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.405452][T31603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10155'. [ 526.424226][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.436871][T31605] netlink: 'syz.8.10156': attribute type 1 has an invalid length. [ 526.439937][ T54] bond0 (unregistering): Released all slaves [ 526.453197][T31605] netlink: 16179 bytes leftover after parsing attributes in process `syz.8.10156'. [ 526.599715][T31619] loop1: detected capacity change from 0 to 256 [ 526.647581][T31615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.676425][T31615] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.723323][T31615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.777836][T31615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.805597][T31615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.829786][T31615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 526.853067][T31615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.880362][T31615] veth1_vlan: left promiscuous mode [ 526.894277][T31615] veth0_vlan: left promiscuous mode [ 526.909862][T31615] veth0_vlan: entered promiscuous mode [ 526.924100][T31615] veth1_vlan: entered promiscuous mode [ 526.955313][T31615] veth1_macvtap: left promiscuous mode [ 526.966538][T31615] veth0_macvtap: left promiscuous mode [ 526.979793][T31615] veth0_macvtap: entered promiscuous mode [ 526.987114][T31615] veth1_macvtap: entered promiscuous mode [ 526.999208][T31615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.008405][T31642] netlink: 'syz.8.10168': attribute type 4 has an invalid length. [ 527.008436][T31615] 8021q: adding VLAN 0 to HW filter on device eth0 [ 527.024860][T31615] 8021q: adding VLAN 0 to HW filter on device eth1 [ 527.033599][T31615] 8021q: adding VLAN 0 to HW filter on device eth2 [ 527.044882][T31615] 8021q: adding VLAN 0 to HW filter on device eth3 [ 527.060213][T31615] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.067755][T31644] netlink: 'syz.8.10168': attribute type 4 has an invalid length. [ 527.085783][T31615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.103729][T31615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 527.131612][ T54] hsr_slave_0: left promiscuous mode [ 527.137793][ T54] hsr_slave_1: left promiscuous mode [ 527.143693][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.152765][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.164206][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.172247][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.185657][ T54] veth1_macvtap: left promiscuous mode [ 527.191377][ T54] veth0_macvtap: left promiscuous mode [ 527.196988][ T54] veth1_vlan: left promiscuous mode [ 527.202684][ T54] veth0_vlan: left promiscuous mode [ 527.333279][ T54] team0 (unregistering): Port device team_slave_1 removed [ 527.345337][ T54] team0 (unregistering): Port device team_slave_0 removed [ 527.394694][T18332] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.401826][T18332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.434904][T18332] bridge0: port 3(vlan2) entered blocking state [ 527.441322][T18332] bridge0: port 3(vlan2) entered forwarding state [ 527.457252][T12330] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.465926][T12330] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.474529][T12330] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.483045][T12330] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.511511][T12330] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.524789][T12330] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.538861][T12330] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.552386][T12330] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.589932][T31671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10178'. [ 527.634554][T31673] netlink: 'syz.1.10179': attribute type 1 has an invalid length. [ 527.649930][T31673] bond5: entered promiscuous mode [ 527.655424][T31673] 8021q: adding VLAN 0 to HW filter on device bond5 [ 527.672381][T31673] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 527.690075][T31673] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 527.702597][T31673] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 527.765333][T31677] loop8: detected capacity change from 0 to 256 [ 528.724821][T31772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10194'. [ 528.750133][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 528.750153][ T28] audit: type=1400 audit(1784946108.444:4074): avc: denied { write } for pid=31773 comm="syz.1.10184" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 528.915929][T31772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10194'. [ 529.073790][T31805] vcan0 speed is unknown, defaulting to 1000 [ 529.247916][T31813] loop8: detected capacity change from 0 to 512 [ 529.276600][T31813] EXT4-fs error (device loop8): __ext4_iget:5533: inode #11: block 1: comm syz.8.10199: invalid block [ 529.308249][T31813] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 529.308601][T31813] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.10199: couldn't read orphan inode 11 (err -117) [ 529.317918][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 529.317936][ C1] EXT4-fs (loop8): initial error at time 1784946108: __ext4_iget:5533: inode 11: block 1 [ 529.317994][ C1] EXT4-fs (loop8): last error at time 1784946108: __ext4_iget:5533: inode 11: block 1 [ 529.397011][T31813] loop8: lost filesystem error report for type 5 error -117 [ 529.398846][T31813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.485225][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.539779][T31811] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.547064][T31811] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.010641][T31811] veth1_to_bond: left promiscuous mode [ 530.016227][T31811] veth1_to_bond: left allmulticast mode [ 530.403763][ T28] audit: type=1400 audit(1784946109.997:4075): avc: denied { append } for pid=31841 comm="syz.8.10209" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.553863][T31848] netlink: 'syz.1.10198': attribute type 4 has an invalid length. [ 530.609935][T31851] netlink: 'syz.1.10198': attribute type 4 has an invalid length. [ 530.841938][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 530.912838][T31811] gtp0: left allmulticast mode [ 530.970590][T31811] bond1: left promiscuous mode [ 530.975494][T31811] ip6gre1: left promiscuous mode [ 530.986527][T31811] bridge1: left promiscuous mode [ 531.009238][T31811] geneve5: left promiscuous mode [ 531.014721][T31811] geneve5: left allmulticast mode [ 531.023809][T31811] ip6gre2: left promiscuous mode [ 531.029574][T31811] ip6gre2: left allmulticast mode [ 531.047193][T31811] sit3: left allmulticast mode [ 531.053788][T31811] gretap1: left promiscuous mode [ 531.062422][T31811] bond3: left promiscuous mode [ 531.116992][T18386] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.140767][T18386] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.163217][T18386] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 531.192538][T18386] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 531.220040][T18386] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.246958][T18386] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.270960][T18386] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 531.288028][T18386] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 531.571631][T18386] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.581301][T18386] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.591823][T18386] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 531.600157][T18386] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 531.617206][T18386] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.626043][T18386] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.634753][T18386] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 531.644887][T18386] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 531.721188][T31897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10213'. [ 532.215868][T31951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.228737][T31951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.318120][T31951] bond1: left promiscuous mode [ 532.338138][T31951] bond2: left promiscuous mode [ 532.349756][T31951] ip6gre1: left promiscuous mode [ 532.366949][T31951] ip6gre2: left promiscuous mode [ 532.381643][T31951] ip6gre2: left allmulticast mode [ 532.418140][T31951] bond4: left promiscuous mode [ 532.430737][T31951] ip6gre4: left promiscuous mode [ 532.451909][T31951] bond5: left promiscuous mode [ 532.474756][T18386] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2304 - 0 [ 532.504617][T18386] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 532.526380][T18386] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.544910][T18386] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2304 - 0 [ 532.565162][T18386] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 532.621695][T18386] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.668778][T18386] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2304 - 0 [ 532.697123][T18386] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 532.735256][T18386] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.762354][T18386] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2304 - 0 [ 532.782513][T18386] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 532.804619][T18386] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.954470][ T28] audit: type=1326 audit(1784946112.374:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.10231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 532.985594][ T28] audit: type=1326 audit(1784946112.374:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.10231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 533.012201][ T28] audit: type=1326 audit(1784946112.374:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.10231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 533.072722][ T28] audit: type=1326 audit(1784946112.374:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.10231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 533.104212][ T28] audit: type=1326 audit(1784946112.374:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.10231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 533.136991][ T28] audit: type=1326 audit(1784946112.374:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.10231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 533.189774][T32046] syz_tun: entered allmulticast mode [ 533.200141][ T28] audit: type=1326 audit(1784946112.374:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.10231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 533.207457][T32046] syz_tun: left allmulticast mode [ 533.243189][ T28] audit: type=1326 audit(1784946112.374:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32037 comm="syz.4.10231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 533.370702][T32057] netlink: 'syz.1.10238': attribute type 1 has an invalid length. [ 533.409108][T32057] gretap1: entered allmulticast mode [ 533.434795][T32057] bond6: (slave gretap1): making interface the new active one [ 533.453796][T32057] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 534.208418][T32165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10241'. [ 534.209064][T32166] netlink: 'syz.6.10250': attribute type 7 has an invalid length. [ 534.226651][T32166] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10250'. [ 534.583762][T32170] team0: left promiscuous mode [ 534.598769][T32170] team0: left allmulticast mode [ 534.617106][T32170] bond2: left promiscuous mode [ 534.624321][T32170] bond2: left allmulticast mode [ 534.639367][T32196] loop8: detected capacity change from 0 to 512 [ 534.648459][T32170] ip6gre1: left promiscuous mode [ 534.654478][T32196] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 534.665659][T32170] ip6gre1: left allmulticast mode [ 534.686307][T32196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.700526][T32196] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.709391][T32170] gre3: left promiscuous mode [ 534.718029][T32170] bond7: left promiscuous mode [ 534.726479][T32170] macvtap1: left promiscuous mode [ 534.733923][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 534.733941][ T28] audit: type=1400 audit(1784946114.040:4085): avc: denied { write } for pid=32194 comm="syz.8.10248" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 534.735687][T32170] macvtap1: left allmulticast mode [ 534.748353][ T28] audit: type=1400 audit(1784946114.040:4086): avc: denied { write } for pid=32194 comm="syz.8.10248" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 534.791589][ T28] audit: type=1400 audit(1784946114.040:4087): avc: denied { rename } for pid=32194 comm="syz.8.10248" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 534.791645][T32170] bond9: left promiscuous mode [ 534.819213][T32170] ip6gre3: left promiscuous mode [ 534.824933][ T28] audit: type=1400 audit(1784946114.124:4088): avc: denied { read write } for pid=32194 comm="syz.8.10248" name="file1" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 534.850361][T32196] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 534.852981][ T28] audit: type=1400 audit(1784946114.124:4089): avc: denied { open } for pid=32194 comm="syz.8.10248" path="/179/file0/file1" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 534.882263][T32170] bond10: left promiscuous mode [ 534.900301][T32170] vti0: left promiscuous mode [ 534.906394][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.925925][T31086] vcan0 speed is unknown, defaulting to 1000 [ 534.932471][T31086] syz1: Port: 1 Link DOWN [ 534.939787][ T54] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.949532][ T54] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.958910][ T54] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 534.967827][ T54] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.976357][ T54] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.985477][ T54] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 534.994711][T31086] vcan0 speed is unknown, defaulting to 1000 [ 535.004216][ T54] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.013091][ T54] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.026740][ T54] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 535.039844][ T54] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.050837][ T54] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.062175][ T54] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 535.196484][T32219] vcan0 speed is unknown, defaulting to 1000 [ 535.505561][T32242] 9pnet_fd: Insufficient options for proto=fd [ 535.518147][T32242] loop1: detected capacity change from 0 to 256 [ 535.583470][T32246] vcan0 speed is unknown, defaulting to 1000 [ 535.632644][T32252] loop1: detected capacity change from 0 to 512 [ 535.665266][T32252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.693404][T32252] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.732707][ T28] audit: type=1400 audit(1784946114.976:4090): avc: denied { write } for pid=32250 comm="syz.1.10271" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.785792][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.800660][ T28] audit: type=1400 audit(1784946114.976:4091): avc: denied { write } for pid=32250 comm="syz.1.10271" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.037963][ T8184] IPVS: starting estimator thread 0... [ 536.142461][T32273] IPVS: using max 2400 ests per chain, 120000 per kthread [ 536.264142][ T54] IPVS: stop unused estimator thread 0... [ 536.443693][ T28] audit: type=1400 audit(1784946115.631:4092): avc: denied { read } for pid=32299 comm="syz.1.10289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 536.538127][ T28] audit: type=1400 audit(1784946115.724:4093): avc: denied { connect } for pid=32303 comm="syz.1.10290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.655826][T32311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10293'. [ 536.677984][T32312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10292'. [ 536.949798][T32326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10298'. [ 537.656338][T32379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10318'. [ 537.701339][T32381] netlink: 6 bytes leftover after parsing attributes in process `syz.3.10319'. [ 537.710723][T32381] net_ratelimit: 134 callbacks suppressed [ 537.710743][T32381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.018794][ T28] audit: type=1326 audit(1784946118.054:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.6.10328" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937a3de99 code=0x7ffc0000 [ 539.256166][T32422] netlink: 'syz.6.10348': attribute type 11 has an invalid length. [ 539.264282][T32422] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10348'. [ 539.273854][T32275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.378138][T32432] PM: suspend entry (deep) [ 539.565741][T18396] Filesystems sync: 0.168 seconds [ 539.616429][T32432] Freezing user space processes [ 539.620805][T32448] ip6erspan0: entered allmulticast mode [ 539.632605][T32432] Freezing user space processes completed (elapsed 0.010 seconds) [ 539.640753][T32432] OOM killer disabled. [ 539.644848][T32432] Freezing remaining freezable tasks [ 539.654482][T32432] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 539.663202][T32432] printk: Suspending console(s) (use no_console_suspend to debug) [ 539.713528][T32432] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 539.713714][T32432] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 539.713837][T32432] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 539.713958][T32432] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 539.714000][T32432] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 539.714117][T32432] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 539.714152][T32432] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 539.714183][T32432] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 539.714222][T32432] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 539.714362][T32432] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 539.714448][T32432] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 539.714479][T32432] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 539.714519][T32432] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 539.714552][T32432] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 539.714581][T32432] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 539.714615][T32432] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 539.775250][T18396] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 540.456302][T32432] ACPI: PM: Preparing to enter system sleep state S3 [ 540.456451][T32432] ACPI: PM: Saving platform NVS memory [ 540.456539][T32432] Disabling non-boot CPUs ... [ 540.461490][T32432] smpboot: CPU 1 is now offline [ 540.469134][T32432] PM: suspend debug: Waiting for 0 second(s). [ 540.487784][T32432] Enabling non-boot CPUs ... [ 540.487992][T32432] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 540.493218][T32432] CPU1 is up [ 540.493441][T32432] ACPI: PM: Waking up from system sleep state S3 [ 540.551428][T18356] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 540.754803][T32432] OOM killer enabled. [ 540.755446][T32432] Restarting tasks: Starting [ 540.792746][T32432] Restarting tasks: Done [ 540.800825][T32432] random: crng reseeded on system resumption [ 540.812843][T32432] PM: suspend exit [ 540.944459][T32475] loop8: detected capacity change from 0 to 1024 [ 540.972255][T32475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 540.983428][T32475] System zones: 0-1, 3-12 [ 540.989246][T32475] EXT4-fs (loop8): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.028430][T28565] EXT4-fs (loop8): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 541.085808][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 541.085825][ T28] audit: type=1400 audit(1784946119.989:4107): avc: denied { name_bind 0x1000000 } for pid=32494 comm="syz.1.10368" path="socket:[100175]" dev="sockfs" ino=100175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 541.349270][ T28] audit: type=1400 audit(1784946120.232:4108): avc: denied { getopt } for pid=32525 comm="syz.4.10380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 541.592343][T32549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10392'. [ 541.919204][T32562] loop1: detected capacity change from 0 to 512 [ 541.949138][T32562] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 541.959340][T32562] EXT4-fs: error: could not find journal device path [ 542.253877][T32576] loop8: detected capacity change from 0 to 764 [ 542.310026][T32576] netlink: zone id is out of range [ 542.311552][T32576] netlink: zone id is out of range [ 542.312909][T32576] netlink: zone id is out of range [ 542.324219][T32576] netlink: zone id is out of range [ 542.339708][T32576] netlink: zone id is out of range [ 542.342121][T32576] netlink: zone id is out of range [ 542.344466][T32576] netlink: zone id is out of range [ 542.347321][T32576] netlink: zone id is out of range [ 542.349738][T32576] netlink: zone id is out of range [ 542.386158][T32594] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10410'. [ 542.447756][T32596] loop1: detected capacity change from 0 to 2048 [ 542.477692][T32596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.485768][T32596] ext4 filesystem being mounted at /521/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.495697][T32596] tmpfs: Bad value for 'nr_blocks' [ 542.496701][ T28] audit: type=1400 audit(1784946121.308:4109): avc: denied { write } for pid=32595 comm="syz.1.10411" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.503325][ T28] audit: type=1400 audit(1784946121.308:4110): avc: denied { mounton } for pid=32595 comm="syz.1.10411" path="/521/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.608624][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.739502][ T28] audit: type=1400 audit(1784946121.533:4111): avc: denied { write } for pid=32606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.767460][ T28] audit: type=1400 audit(1784946121.561:4112): avc: denied { write } for pid=32630 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.934735][ T28] audit: type=1400 audit(1784946121.711:4113): avc: denied { write } for pid=32642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.961966][ T28] audit: type=1400 audit(1784946121.748:4114): avc: denied { write } for pid=32658 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.138158][ T28] audit: type=1326 audit(1784946121.907:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.1.10430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 543.143224][ T28] audit: type=1326 audit(1784946121.907:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.1.10430" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff594f9de99 code=0x7ffc0000 [ 543.199904][T32676] netlink: 'syz.1.10431': attribute type 1 has an invalid length. [ 543.208762][T32676] 8021q: adding VLAN 0 to HW filter on device bond7 [ 543.219624][T32676] macvlan3: entered promiscuous mode [ 543.220706][T32676] macvlan3: entered allmulticast mode [ 543.222714][T32676] bond7: entered promiscuous mode [ 543.223970][T32676] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 543.227273][T32676] bond7: left promiscuous mode [ 543.303018][T32681] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10432'. [ 543.311047][T32681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 543.321970][T32681] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 543.329529][T32681] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 543.332593][T32681] bond1 (unregistering): Released all slaves [ 544.269111][T32764] loop1: detected capacity change from 0 to 256 [ 544.292110][T32764] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 544.313372][ T301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10467'. [ 544.411521][ T302] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 544.413604][ T302] FAT-fs (loop1): Filesystem has been set read-only [ 544.414769][ T302] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 544.950813][ T316] erspan0: left promiscuous mode [ 544.964831][ T316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.979010][ T316] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.989020][ T316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.015399][ T316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.024099][ T316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.030380][ T316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.032397][ T316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.036378][ T316] veth1_vlan: left promiscuous mode [ 545.038254][ T316] veth0_vlan: left promiscuous mode [ 545.041124][ T316] veth0_vlan: entered promiscuous mode [ 545.044095][ T316] veth1_vlan: entered promiscuous mode [ 545.058857][ T316] veth1_macvtap: left promiscuous mode [ 545.061334][ T316] veth1_macvtap: entered promiscuous mode [ 545.069670][ T316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 545.072942][ T316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 545.075836][ T316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 545.078792][ T316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.084871][ T316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.099057][ T316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.159052][ T316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 545.170302][ T316] erspan0: entered promiscuous mode [ 545.178608][ T316] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.198950][ T316] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.204882][ T316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.263256][T31086] bridge0: entered promiscuous mode [ 545.336669][T18341] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.338281][T18341] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2304 - 0 [ 545.352907][T18341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.354781][T18341] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.360800][T18341] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2304 - 0 [ 545.362688][T18341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.374279][ T334] netlink: 'syz.3.10476': attribute type 1 has an invalid length. [ 545.393218][T18341] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.399201][T18341] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2304 - 0 [ 545.401563][T18341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.403355][T18341] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.405063][T18341] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2304 - 0 [ 545.407234][T18341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.431709][ T334] bond11: entered promiscuous mode [ 545.432904][ T340] netlink: 'syz.4.10478': attribute type 1 has an invalid length. [ 545.433138][ T334] 8021q: adding VLAN 0 to HW filter on device bond11 [ 545.458695][ T340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 545.476592][ T343] loop1: detected capacity change from 0 to 512 [ 545.480392][ T334] bond11: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 545.484347][ T343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 545.486688][ T334] bond11: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 545.490247][ T334] bond11: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 545.515908][ T343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.518563][ T343] ext4 filesystem being mounted at /541/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 545.539445][ T340] bond5: (slave veth5): Enslaving as an active interface with a down link [ 545.541780][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.550854][ T347] bond5: (slave dummy0): making interface the new active one [ 545.557324][ T347] dummy0: entered promiscuous mode [ 545.558535][ T347] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 545.759761][ T364] vcan0 speed is unknown, defaulting to 1000 [ 546.054428][ T382] netlink: 'syz.3.10495': attribute type 1 has an invalid length. [ 546.067901][ T382] 8021q: adding VLAN 0 to HW filter on device bond12 [ 546.091692][ T382] bond12: (slave gretap3): Enslaving as a backup interface with an up link [ 546.128602][ T382] bond12 (unregistering): (slave gretap3): Releasing backup interface [ 546.136353][ T382] bond12 (unregistering): Released all slaves [ 546.223232][ T392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10497'. [ 546.253596][ T391] vcan0 speed is unknown, defaulting to 1000 [ 547.322379][ T455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10521'. [ 547.350642][ T455] 8021q: adding VLAN 0 to HW filter on device bond12 [ 547.373597][ T455] bond12: (slave macvlan1): Enslaving as an active interface with an up link [ 547.387514][ T454] vcan0 speed is unknown, defaulting to 1000 [ 547.426152][ T455] bond12 (unregistering): (slave macvlan1): Releasing backup interface [ 547.439879][ T455] bond12 (unregistering): Released all slaves [ 547.836737][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 547.836757][ T28] audit: type=1400 audit(1784946126.306:4127): avc: denied { create } for pid=480 comm="syz.4.10532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 547.877537][ T481] bond5: (slave dummy0): Releasing active interface [ 547.878813][ T481] dummy0: left promiscuous mode [ 547.980474][T31086] IPVS: starting estimator thread 0... [ 548.078637][ T489] IPVS: using max 2448 ests per chain, 122400 per kthread [ 548.122042][ T502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10538'. [ 548.835621][ C1] vcan0: j1939_tp_rxtimer: 0xffff88815e5fd200: rx timeout, send abort [ 548.837203][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88815e5fd200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 548.868589][ T523] loop1: detected capacity change from 0 to 128 [ 548.871443][ T523] EXT4-fs: Ignoring removed orlov option [ 548.882515][ T523] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 548.885134][ T523] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.891128][ T28] audit: type=1400 audit(1784946127.298:4128): avc: denied { write } for pid=522 comm="syz.1.10546" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.020636][T23709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.108622][ T28] audit: type=1400 audit(1784946127.494:4129): avc: denied { write } for pid=533 comm="syz.1.10550" name="c.1" dev="configfs" ino=32089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 549.113153][ T28] audit: type=1400 audit(1784946127.494:4130): avc: denied { write } for pid=533 comm="syz.1.10550" name="c.1" dev="configfs" ino=32089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 549.333803][ T545] loop1: detected capacity change from 0 to 512 [ 549.362049][ T545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.382001][ T28] audit: type=1400 audit(1784946127.756:4131): avc: denied { write } for pid=544 comm="syz.1.10555" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.393552][T18341] IPVS: stop unused estimator thread 0... [ 549.470138][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.486220][ T28] audit: type=1400 audit(1784946127.840:4132): avc: denied { unmount } for pid=28565 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 549.920190][ T598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10584'. [ 549.945806][ T598] loop1: detected capacity change from 0 to 512 [ 549.961645][ T598] EXT4-fs: Ignoring removed bh option [ 549.973292][ T598] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 549.976500][ T598] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 549.986882][ T598] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 549.990104][ T598] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 549.992329][ T598] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.014530][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.151196][ T606] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10576'. [ 550.153908][ T611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10578'. [ 550.156820][ T606] net_ratelimit: 135 callbacks suppressed [ 550.156847][ T606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.743109][ T642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10592'. [ 550.788812][ T28] audit: type=1326 audit(1784946129.066:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=643 comm="syz.4.10593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 550.799570][ T28] audit: type=1326 audit(1784946129.066:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=643 comm="syz.4.10593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 550.809379][ T28] audit: type=1326 audit(1784946129.076:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=643 comm="syz.4.10593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 550.818860][ T28] audit: type=1326 audit(1784946129.076:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=643 comm="syz.4.10593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f8e3de99 code=0x7ffc0000 [ 551.268078][ T679] netlink: 'syz.6.10608': attribute type 10 has an invalid length. [ 551.284901][ T679] team0 (unregistering): Port device team_slave_0 removed [ 551.292019][ T679] team0 (unregistering): Port device team_slave_1 removed [ 551.517764][ T688] netlink: 'syz.6.10612': attribute type 1 has an invalid length. [ 551.538520][ T688] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.561439][ T688] bond4: (slave dummy0): Releasing active interface [ 551.572717][ T688] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 551.576916][ T688] netlink: 'syz.6.10612': attribute type 10 has an invalid length. [ 551.578590][ T688] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10612'. [ 551.584251][ T688] dummy0: entered promiscuous mode [ 551.590238][ T688] bond5: (slave dummy0): Releasing backup interface [ 552.257845][ T712] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10619'. [ 552.530922][ T739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10632'. [ 552.666728][ T746] loop1: detected capacity change from 0 to 128 [ 553.184640][ T765] netlink: 'syz.6.10643': attribute type 1 has an invalid length. [ 553.205142][ T765] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.269098][ T765] bond6: (slave veth9): Enslaving as an active interface with a down link [ 553.312458][ T765] dummy0: left promiscuous mode [ 553.328004][ T765] bond6: (slave dummy0): making interface the new active one [ 553.339568][ T765] dummy0: entered promiscuous mode [ 553.340753][ T765] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 553.359233][ T772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10649'. [ 553.453730][T18341] bridge_slave_1: left allmulticast mode [ 553.454777][T18341] bridge_slave_1: left promiscuous mode [ 553.455923][T18341] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.467886][T18341] bridge_slave_0: left allmulticast mode [ 553.469150][T18341] bridge_slave_0: left promiscuous mode [ 553.472024][T18341] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.584171][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 553.584189][ T28] audit: type=1326 audit(1784946131.686:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=780 comm="syz.1.10652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff594f9de99 code=0x0 [ 553.623983][ T28] audit: type=1400 audit(1784946131.715:4185): avc: denied { name_bind } for pid=789 comm="syz.6.10655" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 553.706557][T18341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.716813][T18341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.723897][T18341] bond0 (unregistering): Released all slaves [ 553.810381][T18341] hsr_slave_0: left promiscuous mode [ 553.814965][T18341] hsr_slave_1: left promiscuous mode [ 553.818944][T18341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.820356][T18341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.828700][T18341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.830070][T18341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.842899][T18341] veth1_macvtap: left promiscuous mode [ 553.843971][T18341] veth0_macvtap: left promiscuous mode [ 553.844968][T18341] veth1_vlan: left promiscuous mode [ 553.845965][T18341] veth0_vlan: left promiscuous mode [ 553.847213][ T28] audit: type=1400 audit(1784946131.911:4186): avc: denied { getopt } for pid=802 comm="syz.3.10659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 553.994832][T18341] team0 (unregistering): Port device team_slave_1 removed [ 554.000120][T18341] team0 (unregistering): Port device team_slave_0 removed [ 554.351175][ T825] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10669'. [ 554.849894][ T28] audit: type=1400 audit(1784946132.866:4187): avc: denied { accept } for pid=860 comm="syz.4.10697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 555.218673][ T894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10701'. [ 555.554669][ T28] audit: type=1400 audit(1784946133.521:4188): avc: denied { write } for pid=899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.602002][ T28] audit: type=1400 audit(1784946133.567:4189): avc: denied { write } for pid=910 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 556.594329][T25109] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 556.892363][ T943] netlink: 'syz.6.10712': attribute type 1 has an invalid length. [ 556.909038][ T943] bond7: entered promiscuous mode [ 556.916629][ T943] 8021q: adding VLAN 0 to HW filter on device bond7 [ 556.942690][ T943] bond7: (slave veth11): making interface the new active one [ 556.950281][ T943] veth11: entered promiscuous mode [ 556.958588][ T943] bond7: (slave veth11): Enslaving as an active interface with an up link [ 557.767331][ T975] netlink: 'syz.1.10726': attribute type 10 has an invalid length. [ 557.781321][ T975] team0 (unregistering): Port device team_slave_0 removed [ 557.791786][ T975] team0 (unregistering): Port device team_slave_1 removed [ 558.033491][ T28] audit: type=1400 audit(1784946135.841:4190): avc: denied { write } for pid=985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.076598][ T1006] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1006 comm=syz.3.10736 [ 558.111646][ T28] audit: type=1326 audit(1784946135.869:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.6.10724" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937a3de99 code=0x7fc00000 [ 558.161529][ T28] audit: type=1400 audit(1784946135.954:4192): avc: denied { write } for pid=1010 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.448597][ T1023] vcan0 speed is unknown, defaulting to 1000 [ 558.495298][ T1028] netlink: 'syz.8.10742': attribute type 10 has an invalid length. [ 558.529905][ T1028] team0 (unregistering): Port device team_slave_0 removed [ 558.549042][ T1028] team0 (unregistering): Port device team_slave_1 removed [ 558.604870][ T1033] loop1: detected capacity change from 0 to 2048 [ 558.632728][ T1033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.678964][ T1033] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 558.708764][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.932948][ T28] audit: type=1400 audit(1784946136.684:4193): avc: denied { append } for pid=1050 comm="syz.4.10749" name="icmp6" dev="proc" ino=4026532832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 560.394331][ T1115] netlink: 'syz.6.10776': attribute type 1 has an invalid length. [ 560.402824][ T1115] netlink: 'syz.6.10776': attribute type 4 has an invalid length. [ 560.411611][ T1115] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.10776'. [ 560.473674][ T1118] vcan0 speed is unknown, defaulting to 1000 [ 560.527040][ T1123] bridge0: port 4(team0) entered blocking state [ 560.533660][ T1123] bridge0: port 4(team0) entered disabled state [ 560.540937][ T1123] team0: entered allmulticast mode [ 560.546250][ T1123] team_slave_1: entered allmulticast mode [ 560.552718][ T1123] syz_tun: entered allmulticast mode [ 560.560453][ T1123] team0: entered promiscuous mode [ 560.565852][ T1123] team_slave_1: entered promiscuous mode [ 560.572502][ T1123] syz_tun: entered promiscuous mode [ 561.977087][ T1159] netlink: 'syz.4.10796': attribute type 10 has an invalid length. [ 561.987168][ T28] audit: type=1400 audit(1784946139.538:4194): avc: denied { watch watch_reads } for pid=1156 comm="syz.3.10795" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 562.487038][ T1159] team0 (unregistering): left allmulticast mode [ 562.494822][ T1159] team_slave_1: left allmulticast mode [ 562.500456][ T1159] syz_tun: left allmulticast mode [ 562.507553][ T1159] team0 (unregistering): left promiscuous mode [ 562.516976][ T1159] team_slave_1: left promiscuous mode [ 562.527540][ T1159] syz_tun: left promiscuous mode [ 562.536198][ T1159] bridge0: port 4(team0) entered disabled state [ 562.548935][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 562.567066][ T1159] team0 (unregistering): Port device syz_tun removed [ 562.628279][ T28] audit: type=1400 audit(1784946140.146:4195): avc: denied { setopt } for pid=1175 comm="syz.1.10804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 562.651297][ T1178] vcan0 speed is unknown, defaulting to 1000 [ 562.712572][ T1185] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10807'. [ 562.844706][ T1198] netlink: 'syz.1.10813': attribute type 26 has an invalid length. [ 562.890862][ T28] audit: type=1400 audit(1784946140.399:4196): avc: denied { read } for pid=1199 comm="syz.6.10815" path="socket:[104163]" dev="sockfs" ino=104163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 563.120888][ T1213] netlink: 'syz.3.10820': attribute type 10 has an invalid length. [ 563.316913][ T1229] vcan0 speed is unknown, defaulting to 1000 [ 563.430303][ T1235] vcan0 speed is unknown, defaulting to 1000 [ 563.539415][ T1241] loop1: detected capacity change from 0 to 512 [ 563.669814][ T1241] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.10831: corrupted inode contents [ 563.777779][ T1241] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 563.777992][ T1241] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #16: comm syz.1.10831: mark_inode_dirty error [ 563.787201][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 563.787238][ C1] EXT4-fs (loop1): initial error at time 1784946141: ext4_do_update_inode:5742: inode 16 [ 563.787276][ C1] EXT4-fs (loop1): last error at time 1784946141: ext4_do_update_inode:5742: inode 16 [ 563.852192][ T1241] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 563.852599][ T1241] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.10831: corrupted inode contents [ 563.901036][ T1241] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 563.901305][ T1241] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.10831: mark_inode_dirty error [ 563.934061][ T1241] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 563.935506][ T1241] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.10831: corrupted inode contents [ 563.984721][ T1241] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 563.984945][ T1241] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 564.036694][ T1241] loop1: lost filesystem error report for type 5 error -117 [ 564.036908][ T1241] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #16: comm syz.1.10831: corrupted inode contents [ 564.082565][ T1241] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 564.083087][ T1241] EXT4-fs error (device loop1): ext4_truncate:4691: inode #16: comm syz.1.10831: mark_inode_dirty error [ 564.134314][ T1241] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 564.134486][ T1241] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 564.162146][ T1241] loop1: lost filesystem error report for type 5 error -117 [ 564.162722][ T1241] EXT4-fs (loop1): 1 truncate cleaned up [ 564.179868][ T1241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.194315][ T1241] ext4 filesystem being mounted at /610/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.206548][T18365] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 564.218127][T18365] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:94: Failed to release dquot type 1 [ 564.338635][ T28] audit: type=1400 audit(1784946141.746:4197): avc: denied { write } for pid=1240 comm="syz.1.10831" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.421118][T23709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.492667][ T1258] loop4: detected capacity change from 0 to 7 [ 564.514605][ T1258] loop4: [ 564.547297][ T1260] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10839'. [ 565.814294][ T1315] netlink: 'syz.8.10856': attribute type 26 has an invalid length. [ 565.837737][T18365] dummy0: left promiscuous mode [ 566.001701][ T1327] SELinux: policydb version 0 does not match my version range 15-35 [ 566.025987][ T1327] SELinux: failed to load policy [ 566.099023][ T28] audit: type=1326 audit(1784946143.393:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1333 comm="syz.6.10867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937a3de99 code=0x7ffc0000 [ 566.162133][ T1340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10868'. [ 566.180677][ T28] audit: type=1326 audit(1784946143.393:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1333 comm="syz.6.10867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937a3de99 code=0x7ffc0000 [ 566.243057][ T28] audit: type=1326 audit(1784946143.393:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1333 comm="syz.6.10867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937a3de99 code=0x7ffc0000 [ 566.324384][ T28] audit: type=1326 audit(1784946143.393:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1333 comm="syz.6.10867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937a3de99 code=0x7ffc0000 [ 566.388779][ T28] audit: type=1326 audit(1784946143.393:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1333 comm="syz.6.10867" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9379fe6ce code=0x7ffc0000 [ 566.644615][ T1360] ================================================================== [ 566.653413][ T1360] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 566.662725][ T1360] [ 566.665265][ T1360] write to 0xffff888104e225e0 of 8 bytes by task 1362 on cpu 1: [ 566.673233][ T1360] shmem_file_splice_read+0x401/0x590 [ 566.678914][ T1360] splice_direct_to_actor+0x261/0x680 [ 566.684886][ T1360] do_splice_direct+0x119/0x1a0 [ 566.690030][ T1360] do_sendfile+0x37d/0x640 [ 566.694543][ T1360] __x64_sys_sendfile64+0x105/0x150 [ 566.699815][ T1360] x64_sys_call+0x2dc4/0x3020 [ 566.704548][ T1360] do_syscall_64+0x136/0x3c0 [ 566.709231][ T1360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.715179][ T1360] [ 566.717544][ T1360] write to 0xffff888104e225e0 of 8 bytes by task 1360 on cpu 0: [ 566.725219][ T1360] shmem_file_splice_read+0x401/0x590 [ 566.730647][ T1360] splice_direct_to_actor+0x261/0x680 [ 566.736263][ T1360] do_splice_direct+0x119/0x1a0 [ 566.741201][ T1360] do_sendfile+0x37d/0x640 [ 566.746471][ T1360] __x64_sys_sendfile64+0x105/0x150 [ 566.752677][ T1360] x64_sys_call+0x2dc4/0x3020 [ 566.757530][ T1360] do_syscall_64+0x136/0x3c0 [ 566.762241][ T1360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.768186][ T1360] [ 566.770544][ T1360] value changed: 0x00000000000010cb -> 0x00000000000010d3 [ 566.777698][ T1360] [ 566.780074][ T1360] Reported by Kernel Concurrency Sanitizer on: [ 566.786302][ T1360] CPU: 0 UID: 0 PID: 1360 Comm: syz.8.10877 Not tainted syzkaller #0 PREEMPT(lazy) [ 566.795741][ T1360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 566.805931][ T1360] ================================================================== [ 567.834442][ T1319] kexec: Could not allocate control_code_buffer