last executing test programs: 2m43.285990451s ago: executing program 32 (id=203): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10) 2m39.819760271s ago: executing program 33 (id=265): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x0) 2m34.630216546s ago: executing program 34 (id=337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 2m26.360974399s ago: executing program 3 (id=463): socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m26.268792132s ago: executing program 3 (id=466): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000050000000060a010400000000000000000100000208000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000000c080002400000000b14"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 2m25.621760782s ago: executing program 3 (id=472): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000000c0)=0x21, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x6, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0xd209f6d814827b17) 2m25.525786976s ago: executing program 3 (id=477): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 2m25.474491067s ago: executing program 3 (id=478): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m25.249391165s ago: executing program 3 (id=485): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m25.151386208s ago: executing program 35 (id=485): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m21.828848133s ago: executing program 6 (id=527): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000) r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) close(r0) mq_unlink(&(0x7f0000000000)='eth0\x00') 2m21.760722555s ago: executing program 6 (id=532): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) 2m21.716052527s ago: executing program 6 (id=533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000000040)=[{r0, 0x75c1}, {r0, 0x4390}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 2m21.697883948s ago: executing program 0 (id=534): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x346aeffd, 0x0, 0x0, 0x0, 0x3}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m21.569507931s ago: executing program 0 (id=538): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m21.547719822s ago: executing program 0 (id=539): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x7, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 2m21.530154273s ago: executing program 6 (id=540): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x168) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m20.938790932s ago: executing program 0 (id=552): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m20.938068202s ago: executing program 6 (id=553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 2m20.867411934s ago: executing program 0 (id=556): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 2m20.807357086s ago: executing program 0 (id=545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m19.845117707s ago: executing program 6 (id=560): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000440)="64e99d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1}}, 0x40) 2m19.743977309s ago: executing program 36 (id=560): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f0000000440)="64e99d", 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1}}, 0x40) 2m5.699862647s ago: executing program 37 (id=545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.136152876s ago: executing program 8 (id=1521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x26}, 0x94) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16=r1, @ANYRES8=r0], 0xfdef) 1m8.023824039s ago: executing program 8 (id=1526): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m7.941376532s ago: executing program 8 (id=1528): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 1m7.909656612s ago: executing program 8 (id=1530): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 1m7.895831963s ago: executing program 8 (id=1531): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000001c0)=""/195, 0xc3}], 0x2}, 0x7}], 0x1, 0x2, 0x0) 1m7.533714975s ago: executing program 8 (id=1536): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 1m7.533568555s ago: executing program 38 (id=1536): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) 36.415239924s ago: executing program 7 (id=2012): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc79f, 0x830d}, 0x0, 0x2, 0x6d05, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 36.308591516s ago: executing program 7 (id=2015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 36.266100938s ago: executing program 7 (id=2017): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x400}, 0x90) 35.386773636s ago: executing program 7 (id=2027): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x8) 35.338742908s ago: executing program 7 (id=2029): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x20000000000006) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)='u', 0x1}, {&(0x7f0000000300)="ed4c03dc943306d1eac0551678a1567eb412e524dfc4aa81dac53c60df89e3486d3c8c8809ff64b4d8272070f6182769d2436b255e5421ccdd4db22839a8b8f6bdc7e1212fcfeb6ab15aaba7b370356ec1edae7b42df8500e628a4a39a749780126c3f067dad50", 0x67}, {&(0x7f0000000940)="0210f536833081421cac4e6b42b8d2e9a1fcf7043b5f9bde70463f6e28cc0309de398f69f23bc58dae4f5480836674a9f42fe26ea0e81b5438a187b3d37a1992bc0930e9c5b51040f9f223df4f26d239af62e58eb863952cb809b6a464b6e54116c9965970f7c3b0920b62bae97f3997bfde575de7ea297df8024f22c5fa922487ced0658e1c17cdc70638f34908d70a2c82af4132097ec9fa8c156de92fd636ec4b896e1a39d7258b8fbbf01d39334381b40d3c3b5923f911b0bbbbc37b85407b4084eb71c6aeaa54edf86918bc94b33886286e49ea7bc44bb94dfa59b86213b8b34b449d2a9f546e97580f452929f3e1b77db09d8ec4", 0xf7}, {&(0x7f0000000f00)="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", 0xea1}], 0x4, 0x0) 34.61738575s ago: executing program 7 (id=2042): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r2, r1, 0x0, 0xffffffffffffff8f, 0xfffffffffffffffe}, 0x30) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/mnt\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x8b, 0x5, 0x81, 0x4, 0x0, 0x6, 0x100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x3ff, 0xfff}, 0x486, 0xfffffffffffffff7, 0xdbe, 0x7, 0xb5, 0x8, 0x5, 0x0, 0x2, 0x0, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 34.582862892s ago: executing program 39 (id=2042): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r2, r1, 0x0, 0xffffffffffffff8f, 0xfffffffffffffffe}, 0x30) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/mnt\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x8b, 0x5, 0x81, 0x4, 0x0, 0x6, 0x100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x3ff, 0xfff}, 0x486, 0xfffffffffffffff7, 0xdbe, 0x7, 0xb5, 0x8, 0x5, 0x0, 0x2, 0x0, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 3.675027274s ago: executing program 4 (id=2535): syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000100)='./file1\x00', 0x1000000, &(0x7f0000000f40)=ANY=[], 0x25, 0x363, &(0x7f0000000580)="$eJzs3T1sG+UbAPDHvSRO8v+XZECqYDJsSKhqghhgSlQVqSIDFFl8LVg05SM2lWJhKQxxvIAqJhALEkxsHWDsjBgQYmNgpUioBbHQraIRh84+f8U2TQaHVvx+Q/Xoed/n3ufOp94lSt681oyti7Nx6datGzE/X4iZtbNrcbsQy3EikujYi7E+nBufBwDucbfTNP5IO+4+++PFbuTZDwD3r/bz/42T/UTxCMVX/j+NlgCAKTvk1//Pjc1enlpbAMAUjTz/H434sz984Nv8M72fCQAA7l8vvPzKs+sbERdKpfmI2geNcqMcT/fH1y/FW1GNzTgTS7Ef0XlR6LwtZP8+c37j3JlS5uZylLOKRjmi1myUO28K60m7vhgrsRTLeX3aq0+y+pV2fSki9prt9aNWaJRnYzFf/6fF2IzVWIoHR+ojzm+cWy3lByjXuvXNiFbMd08i6/90LMUPr8flqMbFyGr7/e+ulEpn042h+sbVYnseAAAAAAAAAAAAAAAAAAAAAABMw+lSz3Jv/5u01my8f+HghN54sb2/T2c43x+o1dkfKC12d+e5khzcH2h4f55GeSZO/KtnDgAAAAAAAAAAAAAAAAAAAPeO+s5cVKrVze36zntbg0FzIPPOd19+sxDdoZm89O2kXxV5cug43YkDR06it0TaK0+ToTl5kER0J+9Vrl7rdTw4p9g7i5HyLCiODBXynirV6slHfvlsXNVfWbDXziQxclmGg0K+/sBQ7YEsMR8R+5OqJgerd5lzPU3TSeW7n/Yy3bbqUYiYiaO1cfNQk7+98eZDT9RPPdnOfJ1v+vDY40svXv/ki9+2KtVodVqoVue26/vppE8n/yyyTNbr6FrJwP1TyK9zYcydMD5o9TOt7fpOJfnx95ce/uj7A5OT8fdPOph5d/JaXx3MzHWCQsRy9yL8U6uzY27+8cGrd4au2Ng5/+tnFoaGTn2+Vrm2+/Ovh70TBv6TsFEHAAAAAAAAAAAAAAAAAAAci/4v/R6l6qnnp9cRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy//t//HwhaI5nDBHeaMTpU3NyuT1x84VhPFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7C/AwAA//9XBGzc") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80400, 0x17d) fadvise64(r0, 0x7, 0x3, 0x4) 3.558935557s ago: executing program 2 (id=2538): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 3.353328574s ago: executing program 2 (id=2542): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.16557979s ago: executing program 4 (id=2544): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) recvmsg(0xffffffffffffffff, 0x0, 0x10001) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettimeofday(&(0x7f0000000a80), 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x8, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 2.941279257s ago: executing program 4 (id=2548): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.307966917s ago: executing program 2 (id=2563): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x200000, &(0x7f0000000380), 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x890) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7fffffff) 2.276201468s ago: executing program 4 (id=2555): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) 1.90391229s ago: executing program 9 (id=2561): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000880)='./file0\x00', 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 1.803258673s ago: executing program 9 (id=2562): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x25, 0x0, 0x0, 0x1f00, 0x22, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.742598265s ago: executing program 5 (id=2564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.681572377s ago: executing program 5 (id=2565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0xfffffff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.624426389s ago: executing program 9 (id=2567): timerfd_create(0x0, 0x80800) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x25}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x4f4c82, 0x5c, 0x8}, 0x18) 1.624228538s ago: executing program 5 (id=2568): r0 = epoll_create(0x7) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x81) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.596854659s ago: executing program 1 (id=2569): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.58850784s ago: executing program 9 (id=2570): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff09, 0x0) 1.502761913s ago: executing program 1 (id=2571): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.479847203s ago: executing program 9 (id=2572): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) 1.417576275s ago: executing program 5 (id=2573): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x810000a6, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.389808586s ago: executing program 1 (id=2574): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e00001001000000f0ffffff0400000034000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYRES32, @ANYBLOB="0300000001000000040000000e"], 0x50) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 1.28285012s ago: executing program 1 (id=2575): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x9, 0x2, 0xd20, 0x3, 0xfffffffffffffffe, 0x0, 0x9, 0x2, 0x0, 0x802, 0x2000000009, 0x100, 0x3, 0x4, 0x4a, 0x5, 0x100, 0xd, 0xe1, 0x5, 0x6, 0x2aa, 0x7, 0xc39, 0x8, 0x8, 0x0, 0x2, 0xa51, 0x3ff, 0x80401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x933, 0x101, 0x3, 0x8001, 0x8000000000000400, 0x680, 0x0, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x5, 0x0, 0x14, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x2, 0xfffffffffffffffd, 0x1000000000014, 0x0, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x1, 0x6, 0x1, 0x82c, 0x7ff, 0xffff, 0x1fcc, 0x6, 0x3, 0xd, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000000000000000, 0x4, 0x8, 0x0, 0x6, 0x26, 0x9, 0x100000002, 0x0, 0x4, 0x0, 0xf, 0x4, 0x9, 0x1001, 0x16d, 0x6, 0x68d, 0xfffffffffff743b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x2400000003, 0x4, 0x8, 0x6, 0x3, 0x8, 0x2000000000000005, 0x0, 0x3, 0x40, 0x80000000, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.26965329s ago: executing program 4 (id=2576): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x405}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 1.177641763s ago: executing program 1 (id=2577): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 944.87538ms ago: executing program 1 (id=2578): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) close_range(r0, r0, 0x0) 360.901049ms ago: executing program 5 (id=2579): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 353.109259ms ago: executing program 2 (id=2580): socket$netlink(0x10, 0x3, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 277.565761ms ago: executing program 5 (id=2581): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 277.191671ms ago: executing program 2 (id=2582): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x400}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 277.014431ms ago: executing program 9 (id=2583): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 276.661701ms ago: executing program 4 (id=2584): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=@delsa={0x34, 0x11, 0x521, 0x70bd27, 0x25dfdbfb, {@in6=@private0, 0x4d2, 0x2, 0x6c}, [@mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x2, 0x300) removexattr(0x0, 0x0) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 0s ago: executing program 2 (id=2585): bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x2, 0x0, 0xe6}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x420, &(0x7f0000000800)={[{@usrjquota}, {@nodelalloc}, {@test_dummy_encryption_v1}, {@data_journal}]}, 0x2, 0x7b4, &(0x7f0000001740)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x38, 0x1, 0x2, 0xc05, 0x0, 0x0, {0x2, 0x0, 0x83}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): m0: Failed to send options change via netlink (err -105) [ 137.142989][ T8203] team0: Port device netdevsim2 added [ 137.229324][ T28] audit: type=1400 audit(1779658722.751:1245): avc: denied { mounton } for pid=8206 comm="syz.9.1409" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 137.307168][ T8210] loop7: detected capacity change from 0 to 512 [ 137.322396][ T8210] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1410: iget: bad i_size value: 38620345925642 [ 137.349648][ T8210] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.349950][ T8210] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1410: couldn't read orphan inode 15 (err -117) [ 137.359178][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 137.359199][ C1] EXT4-fs (loop7): initial error at time 1779658722: ext4_orphan_get:1397: inode 15 [ 137.359224][ C1] EXT4-fs (loop7): last error at time 1779658722: ext4_orphan_get:1397: inode 15 [ 137.396922][ T8210] fserror_report: 20 callbacks suppressed [ 137.396937][ T8210] loop7: lost filesystem error report for type 5 error -117 [ 137.403315][ T8210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.426964][ T28] audit: type=1400 audit(1779658722.951:1246): avc: denied { write } for pid=8209 comm="syz.7.1410" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.502162][ T8213] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1410: bg 0: block 5: invalid block bitmap [ 137.538214][ T8213] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 137.550793][ T8213] EXT4-fs (loop7): This should not happen!! Data will be lost [ 137.550793][ T8213] [ 137.562970][ T8213] EXT4-fs (loop7): Total free blocks count 0 [ 137.569652][ T8213] EXT4-fs (loop7): Free/Dirty block details [ 137.577402][ T8213] EXT4-fs (loop7): free_blocks=0 [ 137.615443][ T8213] EXT4-fs (loop7): dirty_blocks=1784 [ 137.625116][ T8213] EXT4-fs (loop7): Block reservation details [ 137.655197][ T8213] EXT4-fs (loop7): i_reserved_data_blocks=1784 [ 137.692226][ T3799] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1776 with error 28 [ 137.710364][ T28] audit: type=1326 audit(1779658723.231:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.5.1412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 137.749679][ T28] audit: type=1326 audit(1779658723.231:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.5.1412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 140.567604][ T28] kauditd_printk_skb: 500 callbacks suppressed [ 140.567622][ T28] audit: type=1326 audit(1779658726.091:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.5.1412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 140.729069][ T8266] loop7: detected capacity change from 0 to 128 [ 140.747780][ T8266] EXT4-fs: Ignoring removed i_version option [ 140.780124][ T8266] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.823562][ T28] audit: type=1400 audit(1779658726.341:1750): avc: denied { bind } for pid=8272 comm="syz.8.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.848611][ T3385] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 140.859732][ T3385] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.876681][ T8266] ext4 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.001839][ T8287] loop8: detected capacity change from 0 to 256 [ 141.026401][ T28] audit: type=1400 audit(1779658726.551:1751): avc: denied { write } for pid=8265 comm="syz.7.1432" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.084020][ T4654] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.116909][ T8281] loop9: detected capacity change from 0 to 1024 [ 141.152633][ T8281] EXT4-fs: Ignoring removed bh option [ 141.277438][ T8300] loop7: detected capacity change from 0 to 512 [ 141.290373][ T8281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 141.351908][ T8300] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 141.388407][ T8303] netlink: 'syz.8.1445': attribute type 7 has an invalid length. [ 141.420427][ T28] audit: type=1400 audit(1779658726.931:1752): avc: denied { write } for pid=8280 comm="syz.9.1436" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.458267][ T8300] EXT4-fs (loop7): 1 truncate cleaned up [ 141.467978][ T8281] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.1436: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=124 fake=0 [ 141.488352][ T8303] netlink: 'syz.8.1445': attribute type 5 has an invalid length. [ 141.499075][ T8300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.513246][ T8303] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1445'. [ 141.537880][ T28] audit: type=1400 audit(1779658727.061:1753): avc: denied { write } for pid=8292 comm="syz.7.1442" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.597161][ T28] audit: type=1326 audit(1779658727.101:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.5.1447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 141.630103][ T5590] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 141.674345][ T28] audit: type=1326 audit(1779658727.101:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.5.1447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 141.727254][ T28] audit: type=1326 audit(1779658727.101:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.5.1447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 141.755580][ T28] audit: type=1326 audit(1779658727.101:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.5.1447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 141.797310][ T8320] loop2: detected capacity change from 0 to 128 [ 141.810430][ T28] audit: type=1326 audit(1779658727.101:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8307 comm="syz.5.1447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 141.849476][ T8320] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.921103][ T8320] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.995944][ T8331] loop8: detected capacity change from 0 to 512 [ 142.002845][ T8331] EXT4-fs: Ignoring removed nobh option [ 142.010994][ T8331] ------------[ cut here ]------------ [ 142.016622][ T8331] EA inode 11 i_nlink=1026 [ 142.016718][ T8331] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.8.1455/8331 [ 142.031998][ T8331] Modules linked in: [ 142.036169][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: syz.8.1455 Tainted: G W syzkaller #0 PREEMPT(full) [ 142.047154][ T8331] Tainted: [W]=WARN [ 142.050995][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.061179][ T8331] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 142.067938][ T8331] Code: 04 55 98 ff 4c 8d 2d 4d 63 5c 05 49 8d 7e 40 e8 e4 17 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 13 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 8f 28 d8 03 66 66 66 66 66 66 2e [ 142.087701][ T8331] RSP: 0018:ffffc9000358b778 EFLAGS: 00010246 [ 142.093871][ T8331] RAX: ffff888102332d00 RBX: ffff8881005e7b38 RCX: ffffffff81c0deb8 [ 142.102039][ T8331] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d41f0 [ 142.110128][ T8331] RBP: 000000000000000b R08: 00018881005e7aeb R09: 0000000000000000 [ 142.118164][ T8331] R10: ffffc9000358b6a8 R11: 0001c9000358b6a8 R12: ffff8881005e7ae8 [ 142.126238][ T8331] R13: ffffffff871d41f0 R14: ffff8881005e7aa0 R15: 0000000000000001 [ 142.134324][ T8331] FS: 00007fb74b0a76c0(0000) GS:ffff8882ae9f8000(0000) knlGS:0000000000000000 [ 142.143337][ T8331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.150261][ T8331] CR2: 00007fb74c635fc0 CR3: 000000011a1e4000 CR4: 00000000003506f0 [ 142.158324][ T8331] Call Trace: [ 142.161714][ T8331] [ 142.164687][ T8331] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 142.170749][ T8331] ? errseq_check+0x2c/0x50 [ 142.175340][ T8331] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 142.180910][ T8331] ? ext4_truncate+0x89f/0xa10 [ 142.185772][ T8331] ext4_evict_inode+0xb16/0xe30 [ 142.190724][ T8331] ? __pfx_ext4_evict_inode+0x10/0x10 [ 142.196192][ T8331] evict+0x2af/0x510 [ 142.200216][ T8331] ? __dquot_initialize+0x146/0x7c0 [ 142.205504][ T8331] iput+0x41a/0x580 [ 142.209349][ T8331] ext4_process_orphan+0x1a9/0x1c0 [ 142.214532][ T8331] ext4_orphan_cleanup+0x69c/0x9f0 [ 142.219824][ T8331] ext4_fill_super+0x3408/0x37c0 [ 142.224843][ T8331] ? set_blocksize+0x14c/0x270 [ 142.229710][ T8331] ? setup_bdev_super+0x30e/0x370 [ 142.234868][ T8331] ? __pfx_ext4_fill_super+0x10/0x10 [ 142.240344][ T8331] get_tree_bdev_flags+0x291/0x300 [ 142.245626][ T8331] ? __pfx_ext4_fill_super+0x10/0x10 [ 142.250966][ T8331] get_tree_bdev+0x1f/0x30 [ 142.255650][ T8331] ext4_get_tree+0x1c/0x30 [ 142.260331][ T8331] vfs_get_tree+0x57/0x1d0 [ 142.264985][ T8331] do_new_mount+0x288/0x8d0 [ 142.269678][ T8331] path_mount+0x4d0/0xbc0 [ 142.274129][ T8331] __se_sys_mount+0x28c/0x2e0 [ 142.279037][ T8331] __x64_sys_mount+0x67/0x80 [ 142.283694][ T8331] x64_sys_call+0x2d61/0x3020 [ 142.288492][ T8331] do_syscall_64+0x12c/0x3b0 [ 142.293143][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.299145][ T8331] RIP: 0033:0x7fb74c64e0ca [ 142.303604][ T8331] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.323342][ T8331] RSP: 002b:00007fb74b0a6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 142.331913][ T8331] RAX: ffffffffffffffda RBX: 00007fb74b0a6ee0 RCX: 00007fb74c64e0ca [ 142.339950][ T8331] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fb74b0a6ea0 [ 142.348003][ T8331] RBP: 0000200000000180 R08: 00007fb74b0a6ee0 R09: 0000000000800718 [ 142.356052][ T8331] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 142.364064][ T8331] R13: 00007fb74b0a6ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 142.372148][ T8331] [ 142.375224][ T8331] ---[ end trace 0000000000000000 ]--- [ 142.381103][ T8331] EXT4-fs (loop8): 1 orphan inode deleted [ 142.389364][ T4654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.402601][ T8331] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.446878][ T6155] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.601770][ T8344] loop7: detected capacity change from 0 to 1024 [ 142.637746][ T8344] EXT4-fs: Ignoring removed bh option [ 142.707935][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 142.741642][ T8344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 142.829326][ T8344] EXT4-fs error (device loop7): ext4_check_all_de:659: inode #12: block 7: comm syz.7.1459: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=124 fake=0 [ 142.875747][ T4654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 143.002056][ T8331] EXT4-fs error (device loop8): ext4_find_dest_de:2050: inode #2: block 13: comm syz.8.1455: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 143.053709][ T5209] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.109051][ T8380] loop8: detected capacity change from 0 to 128 [ 143.349722][ T8388] loop2: detected capacity change from 0 to 1024 [ 143.364821][ T8388] EXT4-fs: Ignoring removed bh option [ 143.430608][ T8388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 143.481315][ T8388] EXT4-fs error (device loop2): ext4_check_all_de:659: inode #12: block 7: comm syz.2.1476: bad entry in directory: inode out of bounds - offset=0, inode=1073741837, rec_len=16, size=124 fake=0 [ 143.542910][ T6155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 143.986113][ T8434] loop8: detected capacity change from 0 to 512 [ 144.008222][ T8434] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.031354][ T8434] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.142013][ T5209] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.260832][ T8450] netlink: 'syz.2.1499': attribute type 8 has an invalid length. [ 144.397820][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 144.418309][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 144.427687][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 144.440101][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 144.449604][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 144.479533][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 144.503157][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 144.577644][ T8474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.650383][ T8473] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 144.681030][ T8473] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 144.694545][ T8473] EXT4-fs (loop7): This should not happen!! Data will be lost [ 144.694545][ T8473] [ 144.708980][ T8466] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1505'. [ 144.719258][ T8473] EXT4-fs (loop7): Total free blocks count 0 [ 144.745750][ T8473] EXT4-fs (loop7): Free/Dirty block details [ 144.757748][ T8473] EXT4-fs (loop7): free_blocks=4096 [ 144.763373][ T8473] EXT4-fs (loop7): dirty_blocks=32 [ 144.779688][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.787364][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.819290][ T8473] EXT4-fs (loop7): Block reservation details [ 144.830228][ T8473] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 144.913158][ T8487] netlink: 'syz.5.1511': attribute type 39 has an invalid length. [ 144.946539][ T8466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.967209][ T8466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.013608][ T4654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.064694][ T971] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.087709][ T971] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.105471][ T3810] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.118501][ T3810] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.294233][ T8516] netlink: 'syz.5.1523': attribute type 7 has an invalid length. [ 145.302350][ T8516] netlink: 'syz.5.1523': attribute type 5 has an invalid length. [ 145.345277][ T8518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.368404][ T8518] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 145.402990][ T5590] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.524109][ T8535] netlink: 'syz.9.1532': attribute type 1 has an invalid length. [ 145.543033][ T8535] gretap1: entered allmulticast mode [ 145.551260][ T8535] bond1: (slave gretap1): making interface the new active one [ 145.559404][ T8535] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.807279][ T3810] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.907720][ T3810] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.947166][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 145.947186][ T28] audit: type=1400 audit(1779658731.471:1782): avc: denied { append } for pid=8555 comm="syz.9.1539" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 145.987943][ T3810] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.077330][ T3810] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.177687][ T3810] bridge_slave_1: left allmulticast mode [ 146.183485][ T3810] bridge_slave_1: left promiscuous mode [ 146.189676][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.197439][ T3810] bridge_slave_0: left allmulticast mode [ 146.203290][ T3810] bridge_slave_0: left promiscuous mode [ 146.209264][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.240783][ T3810] bond1 (unregistering): (slave geneve2): Releasing active interface [ 146.287717][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.297423][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.308118][ T3810] bond0 (unregistering): Released all slaves [ 146.320478][ T3810] bond2 (unregistering): Released all slaves [ 146.330231][ T3810] bond1 (unregistering): Released all slaves [ 146.366753][ T3810] hsr_slave_0: left promiscuous mode [ 146.372600][ T3810] hsr_slave_1: left promiscuous mode [ 146.379012][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.386971][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.431627][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 146.443179][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 146.465582][ T28] audit: type=1400 audit(1779658731.981:1783): avc: denied { write } for pid=8572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.506210][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.513386][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.514181][ T28] audit: type=1400 audit(1779658732.031:1784): avc: denied { write } for pid=8583 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.520900][ T8547] bridge_slave_0: entered allmulticast mode [ 146.549990][ T8547] bridge_slave_0: entered promiscuous mode [ 146.557052][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.564213][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.571596][ T8547] bridge_slave_1: entered allmulticast mode [ 146.578345][ T8547] bridge_slave_1: entered promiscuous mode [ 146.588141][ T3026] 8021q: adding VLAN 0 to HW filter on device eth21 [ 146.607398][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.617930][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.639799][ T8547] team0: Port device team_slave_0 added [ 146.646668][ T8547] team0: Port device team_slave_1 added [ 146.663512][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.670599][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.696745][ T8547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.708410][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.715484][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.741519][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.770895][ T8547] hsr_slave_0: entered promiscuous mode [ 146.777273][ T8547] hsr_slave_1: entered promiscuous mode [ 146.859518][ T3810] IPVS: stop unused estimator thread 0... [ 146.895172][ T28] audit: type=1400 audit(1779658732.411:1785): avc: denied { write } for pid=8588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.931103][ T28] audit: type=1400 audit(1779658732.451:1786): avc: denied { write } for pid=8599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.965623][ T3026] 8021q: adding VLAN 0 to HW filter on device eth22 [ 147.048643][ T28] audit: type=1400 audit(1779658732.571:1787): avc: denied { write } for pid=8602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.083507][ T28] audit: type=1400 audit(1779658732.601:1788): avc: denied { write } for pid=8613 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.116243][ T3026] 8021q: adding VLAN 0 to HW filter on device eth23 [ 147.200931][ T28] audit: type=1400 audit(1779658732.721:1789): avc: denied { write } for pid=8616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.233923][ T28] audit: type=1400 audit(1779658732.751:1790): avc: denied { write } for pid=8627 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.267537][ T3026] 8021q: adding VLAN 0 to HW filter on device eth24 [ 147.334945][ T28] audit: type=1400 audit(1779658732.851:1791): avc: denied { write } for pid=8629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.136196][ T8547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.146743][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 148.154667][ T8547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.163902][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 148.171944][ T8547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.182144][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 148.190119][ T8547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.199576][ T8547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.238622][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.252518][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.263525][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.270666][ T3810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.290479][ T8547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.300970][ T8547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.314084][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.321227][ T3810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.442512][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.524974][ T8547] veth0_vlan: entered promiscuous mode [ 148.535633][ T8547] veth1_vlan: entered promiscuous mode [ 148.552899][ T8547] veth0_macvtap: entered promiscuous mode [ 148.561395][ T8547] veth1_macvtap: entered promiscuous mode [ 148.573810][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.587710][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.598890][ T3820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.616327][ T3820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.630804][ T3820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.650322][ T3820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.638552][ T8858] __nla_validate_parse: 134 callbacks suppressed [ 149.638632][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1549'. [ 149.664819][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1555'. [ 149.877514][ T3385] kernel read not supported for file /rfkill (pid: 3385 comm: kworker/1:3) [ 150.035799][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 150.237644][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1577'. [ 150.252862][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1577'. [ 150.262412][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1577'. [ 150.277393][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1577'. [ 150.287687][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1577'. [ 150.318977][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1577'. [ 150.330014][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1577'. [ 150.345677][ T8917] set_capacity_and_notify: 2 callbacks suppressed [ 150.345700][ T8917] loop2: detected capacity change from 0 to 512 [ 150.400089][ T8917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 150.424446][ T8917] EXT4-fs (loop2): 1 truncate cleaned up [ 150.434716][ T8917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.481249][ T8911] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.488792][ T8911] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.650063][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.663820][ T8911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.807044][ T971] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.827321][ T971] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.847694][ T971] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.881002][ T971] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.074278][ T6155] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.140951][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 151.140971][ T28] audit: type=1400 audit(1779658736.661:1824): avc: denied { create } for pid=8958 comm="syz.2.1597" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.232339][ T28] audit: type=1400 audit(1779658736.671:1825): avc: denied { write } for pid=8958 comm="syz.2.1597" name="file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.281273][ T28] audit: type=1400 audit(1779658736.671:1826): avc: denied { open } for pid=8958 comm="syz.2.1597" path="/157/file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.304245][ T28] audit: type=1400 audit(1779658736.671:1827): avc: denied { ioctl } for pid=8958 comm="syz.2.1597" path="/157/file0" dev="tmpfs" ino=843 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.344938][ T28] audit: type=1400 audit(1779658736.721:1828): avc: denied { unlink } for pid=6155 comm="syz-executor" name="file0" dev="tmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.694771][ T8972] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.702555][ T8972] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.863413][ T9001] tmpfs: Too few inodes for current use [ 151.903016][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.950308][ T8972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.978942][ T28] audit: type=1326 audit(1779658737.501:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.9.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aaf5ce59 code=0x7ffc0000 [ 152.040408][ T28] audit: type=1326 audit(1779658737.501:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.9.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aaf5ce59 code=0x7ffc0000 [ 152.071185][ T28] audit: type=1326 audit(1779658737.501:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.9.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aaf5ce59 code=0x7ffc0000 [ 152.102060][ T28] audit: type=1326 audit(1779658737.501:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.9.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aaf5ce59 code=0x7ffc0000 [ 152.141869][ T28] audit: type=1326 audit(1779658737.501:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.9.1611" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94aaf5ce59 code=0x7ffc0000 [ 152.231073][ T9022] loop9: detected capacity change from 0 to 2048 [ 152.259003][ T3810] bridge_slave_1: left allmulticast mode [ 152.265038][ T3810] bridge_slave_1: left promiscuous mode [ 152.271644][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.281929][ T9022] Alternate GPT is invalid, using primary GPT. [ 152.288655][ T9022] loop9: p1 p2 p3 [ 152.301460][ T3810] bridge_slave_0: left allmulticast mode [ 152.308380][ T3810] bridge_slave_0: left promiscuous mode [ 152.323836][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.498342][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.586679][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.651772][ T3810] bond0 (unregistering): Released all slaves [ 152.670107][ T2198] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.688790][ T2198] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.708863][ T2198] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.725099][ T2198] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.758632][ T3810] hsr_slave_0: left promiscuous mode [ 153.247059][ T9101] xt_hashlimit: size too large, truncated to 1048576 [ 155.745396][ T3810] hsr_slave_1: left promiscuous mode [ 155.751130][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.759202][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.573736][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.581463][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.597833][ T3810] veth1_macvtap: left promiscuous mode [ 156.606931][ T3810] veth0_macvtap: left promiscuous mode [ 156.619157][ T3810] veth1_vlan: left promiscuous mode [ 156.626691][ T3810] veth0_vlan: left promiscuous mode [ 156.671549][ T9114] __nla_validate_parse: 279 callbacks suppressed [ 156.671577][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'. [ 156.695659][ T9117] syz.5.1630: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 156.711524][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: syz.5.1630 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.711615][ T9117] Tainted: [W]=WARN [ 156.711622][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.711635][ T9117] Call Trace: [ 156.711641][ T9117] [ 156.711648][ T9117] __dump_stack+0x1d/0x30 [ 156.711672][ T9117] dump_stack_lvl+0x95/0xd0 [ 156.711725][ T9117] dump_stack+0x15/0x1b [ 156.711796][ T9117] warn_alloc+0x145/0x1c0 [ 156.711849][ T9117] ? futex_unqueue+0xc5/0xf0 [ 156.711884][ T9117] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 156.711911][ T9117] ? __pfx_futex_wake_mark+0x10/0x10 [ 156.712001][ T9117] ? __rcu_read_unlock+0x4e/0x70 [ 156.712024][ T9117] ? avc_has_perm_noaudit+0xab/0x130 [ 156.712053][ T9117] ? should_fail_ex+0x30/0x280 [ 156.712096][ T9117] vmalloc_user_noprof+0x7d/0xb0 [ 156.712124][ T9117] ? xskq_create+0x80/0xe0 [ 156.712218][ T9117] xskq_create+0x80/0xe0 [ 156.712323][ T9117] xsk_init_queue+0x70/0xb0 [ 156.712363][ T9117] xsk_setsockopt+0x477/0x640 [ 156.712421][ T9117] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.712456][ T9117] __sys_setsockopt+0x184/0x200 [ 156.712486][ T9117] __x64_sys_setsockopt+0x64/0x80 [ 156.712597][ T9117] x64_sys_call+0x2327/0x3020 [ 156.712688][ T9117] do_syscall_64+0x12c/0x3b0 [ 156.712724][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.712755][ T9117] RIP: 0033:0x7f472d4dce59 [ 156.712773][ T9117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.712867][ T9117] RSP: 002b:00007f472bf37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.712943][ T9117] RAX: ffffffffffffffda RBX: 00007f472d755fa0 RCX: 00007f472d4dce59 [ 156.712959][ T9117] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 156.712975][ T9117] RBP: 00007f472d572d6f R08: 0000000000000004 R09: 0000000000000000 [ 156.713046][ T9117] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 156.713062][ T9117] R13: 00007f472d756038 R14: 00007f472d755fa0 R15: 00007fff21cedb58 [ 156.713086][ T9117] [ 156.713205][ T9117] Mem-Info: [ 156.925559][ T9117] active_anon:40268 inactive_anon:0 isolated_anon:0 [ 156.925559][ T9117] active_file:27492 inactive_file:2695 isolated_file:0 [ 156.925559][ T9117] unevictable:0 dirty:316 writeback:0 [ 156.925559][ T9117] slab_reclaimable:3732 slab_unreclaimable:21954 [ 156.925559][ T9117] mapped:29259 shmem:33229 pagetables:3678 [ 156.925559][ T9117] sec_pagetables:0 bounce:0 [ 156.925559][ T9117] kernel_misc_reclaimable:0 [ 156.925559][ T9117] free:1818077 free_pcp:4018 free_cma:0 [ 156.972560][ T9117] Node 0 active_anon:161072kB inactive_anon:0kB active_file:109968kB inactive_file:10780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117036kB dirty:1264kB writeback:0kB shmem:132916kB kernel_stack:4528kB pagetables:14712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 157.003880][ T9117] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.033763][ T9117] lowmem_reserve[]: 0 2878 7857 7857 [ 157.039918][ T9117] Node 0 DMA32 free:2944384kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948012kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 157.071672][ T9117] lowmem_reserve[]: 0 0 4978 4978 [ 157.077111][ T9117] Node 0 Normal free:4312564kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:160956kB inactive_anon:0kB active_file:109968kB inactive_file:10780kB unevictable:0kB writepending:1264kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:12728kB local_pcp:9664kB free_cma:0kB [ 157.110553][ T9117] lowmem_reserve[]: 0 0 0 0 [ 157.115347][ T9117] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.128593][ T9117] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944384kB [ 157.145727][ T9117] Node 0 Normal: 2753*4kB (UME) 1478*8kB (UME) 983*16kB (UME) 591*32kB (UME) 480*64kB (UME) 394*128kB (UME) 276*256kB (UME) 180*512kB (UME) 137*1024kB (UME) 96*2048kB (UME) 897*4096kB (UM) = 4312452kB [ 157.166187][ T9117] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 157.175638][ T9117] 63412 total pagecache pages [ 157.180704][ T9117] 0 pages in swap cache [ 157.185259][ T9117] Free swap = 124996kB [ 157.198607][ T9117] Total swap = 124996kB [ 157.204997][ T9117] 2097051 pages RAM [ 157.212457][ T9117] 0 pages HighMem/MovableOnly [ 157.217304][ T9117] 81649 pages reserved [ 157.385061][ T9144] tipc: Started in network mode [ 157.393283][ T9144] tipc: Node identity ac14140f, cluster identity 4711 [ 157.406956][ T9144] tipc: New replicast peer: 255.255.255.255 [ 157.417116][ T9144] tipc: Enabled bearer , priority 10 [ 157.440552][ T9149] pimreg: entered allmulticast mode [ 157.447734][ T9149] pimreg: left allmulticast mode [ 157.515461][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 157.515527][ T28] audit: type=1400 audit(1779658743.041:1844): avc: denied { setopt } for pid=9153 comm="syz.1.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.440266][ T9218] loop7: detected capacity change from 0 to 128 [ 158.461656][ T9218] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 158.491789][ T9218] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.546512][ T3385] tipc: Node number set to 2886997007 [ 158.557387][ T28] audit: type=1400 audit(1779658744.071:1845): avc: denied { write } for pid=9217 comm="syz.7.1657" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.582119][ T9218] EXT4-fs error (device loop7): ext4_check_dx_root:2201: inode #2: comm syz.7.1657: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 158.597629][ T28] audit: type=1400 audit(1779658744.071:1846): avc: denied { write } for pid=9203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.650829][ T4654] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.656028][ T28] audit: type=1400 audit(1779658744.101:1847): avc: denied { write } for pid=9217 comm="syz.7.1657" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.726858][ T28] audit: type=1400 audit(1779658744.101:1848): avc: denied { write } for pid=9217 comm="syz.7.1657" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.763126][ T28] audit: type=1400 audit(1779658744.101:1849): avc: denied { write } for pid=9217 comm="syz.7.1657" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.794426][ T28] audit: type=1400 audit(1779658744.251:1850): avc: denied { write } for pid=9236 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.960967][ T28] audit: type=1400 audit(1779658744.481:1851): avc: denied { write } for pid=9250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.030293][ T28] audit: type=1400 audit(1779658744.551:1852): avc: denied { write } for pid=9277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.173842][ T9309] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1663'. [ 159.234807][ T9313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1665'. [ 159.263017][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1667'. [ 159.313541][ T9319] sctp: [Deprecated]: syz.5.1669 (pid 9319) Use of int in max_burst socket option. [ 159.313541][ T9319] Use struct sctp_assoc_value instead [ 159.398613][ T9333] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 159.453504][ T28] audit: type=1400 audit(1779658744.971:1853): avc: denied { write } for pid=9320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.707369][ T9367] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 159.721119][ T9371] loop7: detected capacity change from 0 to 512 [ 159.759009][ T9367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.774302][ T9371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.822308][ T9371] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.839407][ T9382] bond2: (slave gretap1): making interface the new active one [ 159.883914][ T9382] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 159.911226][ T9396] loop9: detected capacity change from 0 to 128 [ 159.934198][ T9396] msdos: Unknown parameter 'ÿÿÿ1844674407370955161500000000000000000000' [ 159.977381][ T4654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.136437][ T9416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9416 comm=syz.2.1682 [ 160.180395][ T9416] netlink: 'syz.2.1682': attribute type 2 has an invalid length. [ 160.194012][ T9416] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 160.202444][ T9416] netlink: 'syz.2.1682': attribute type 8 has an invalid length. [ 160.220229][ T9416] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1682'. [ 160.232102][ T9349] Set syz1 is full, maxelem 65536 reached [ 160.338281][ T9443] vlan2: entered allmulticast mode [ 160.343678][ T9443] bond0: entered allmulticast mode [ 160.351730][ T9443] bond_slave_0: entered allmulticast mode [ 160.362968][ T9443] bond_slave_1: entered allmulticast mode [ 160.373169][ T9443] dummy0: entered allmulticast mode [ 160.401902][ T9443] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1691'. [ 160.519385][ T9478] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1694'. [ 160.528950][ T9443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.545725][ T9443] bond_slave_0: left allmulticast mode [ 160.555845][ T9443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.587271][ T9443] bond_slave_1: left allmulticast mode [ 160.607423][ T9443] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 160.629234][ T9443] dummy0: left allmulticast mode [ 160.639925][ T9443] bond0 (unregistering): Released all slaves [ 160.741704][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1697'. [ 160.759192][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1697'. [ 160.784881][ T9495] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1697'. [ 160.972275][ T9523] loop7: detected capacity change from 0 to 512 [ 160.980603][ T9523] EXT4-fs: Ignoring removed bh option [ 160.994883][ T9523] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 161.007103][ T9523] EXT4-fs (loop7): 1 truncate cleaned up [ 161.018398][ T9523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.113596][ T4654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.381978][ T9571] pimreg: entered allmulticast mode [ 162.251713][ T9699] __nla_validate_parse: 141 callbacks suppressed [ 162.251756][ T9699] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1716'. [ 162.546149][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 162.546167][ T28] audit: type=1326 audit(1779658748.071:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.5.1713" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 162.908187][ T9770] loop1: detected capacity change from 0 to 512 [ 162.928895][ T9770] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1726: iget: bad i_size value: 38620345925642 [ 162.989343][ T9770] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.989567][ T9770] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1726: couldn't read orphan inode 15 (err -117) [ 162.998821][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 162.998863][ C1] EXT4-fs (loop1): initial error at time 1779658748: ext4_orphan_get:1397: inode 15 [ 162.998888][ C1] EXT4-fs (loop1): last error at time 1779658748: ext4_orphan_get:1397: inode 15 [ 163.070693][ T9770] loop1: lost filesystem error report for type 5 error -117 [ 163.073715][ T9770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.130183][ T28] audit: type=1400 audit(1779658748.651:1880): avc: denied { write } for pid=9769 comm="syz.1.1726" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.171251][ T9777] loop7: detected capacity change from 0 to 1024 [ 163.200269][ T9777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.217672][ T9781] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1726: bg 0: block 5: invalid block bitmap [ 163.245272][ T9777] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.264202][ T9781] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 163.264852][ T9777] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1729: bg 0: block 112: padding at end of block bitmap is not set [ 163.276609][ T9781] EXT4-fs (loop1): This should not happen!! Data will be lost [ 163.276609][ T9781] [ 163.300607][ T9781] EXT4-fs (loop1): Total free blocks count 0 [ 163.306783][ T9781] EXT4-fs (loop1): Free/Dirty block details [ 163.314704][ T9781] EXT4-fs (loop1): free_blocks=0 [ 163.319843][ T9781] EXT4-fs (loop1): dirty_blocks=1272 [ 163.325260][ T9781] EXT4-fs (loop1): Block reservation details [ 163.331311][ T9781] EXT4-fs (loop1): i_reserved_data_blocks=1272 [ 163.341420][ T9777] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 3: comm syz.7.1729: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.357252][ T9777] EXT4-fs error (device loop7): ext4_ext_remove_space:2969: inode #15: comm syz.7.1729: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 163.392849][ T9777] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: block 8: comm syz.7.1729: lblock 8 mapped to illegal pblock 8 (length 1) [ 163.416419][ T36] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 1264 with error 28 [ 163.444395][ T9777] EXT4-fs error (device loop7): ext4_ext_remove_space:2969: inode #15: comm syz.7.1729: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 163.483618][ T8547] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 163.504176][ T4654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.729017][ T9792] loop7: detected capacity change from 0 to 8192 [ 163.746398][ T9792] vfat: Unknown parameter '' [ 163.857832][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1739'. [ 164.002714][ T9818] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 164.054416][ T9820] netlink: 'syz.5.1744': attribute type 83 has an invalid length. [ 164.124931][ T9831] vhci_hcd vhci_hcd.0: invalid port number 23 [ 164.311940][ T9856] futex_wake_op: syz.5.1759 tries to shift op by 36; fix this program [ 164.386405][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1760'. [ 164.460952][ T9864] loop9: detected capacity change from 0 to 512 [ 164.497197][ T9864] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.516265][ T28] audit: type=1400 audit(1779658750.041:1881): avc: denied { ioctl } for pid=9865 comm="syz.1.1763" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.541987][ T9864] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.623890][ T9875] loop1: detected capacity change from 0 to 1024 [ 164.679853][ T6401] IPVS: starting estimator thread 0... [ 164.711825][ T9875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.729101][ T9875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.795775][ T9881] IPVS: using max 1824 ests per chain, 91200 per kthread [ 164.921150][ T28] audit: type=1400 audit(1779658750.441:1882): avc: denied { write } for pid=9863 comm="syz.9.1764" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.958153][ T9896] loop7: detected capacity change from 0 to 512 [ 164.976684][ T9896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.008757][ T9896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.049981][ T9896] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.290309][ T9902] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 165.300157][ T4654] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.338890][ T5590] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.413194][ T9906] loop9: detected capacity change from 0 to 512 [ 165.438707][ T9906] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.544853][ T28] audit: type=1400 audit(1779658751.061:1883): avc: denied { write } for pid=9905 comm="syz.9.1776" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.797109][ T5590] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.906726][ T9928] loop9: detected capacity change from 0 to 512 [ 165.932717][ T9928] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 165.966939][ T9928] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 165.990362][ T9928] EXT4-fs (loop9): orphan cleanup on readonly fs [ 166.008362][ T9928] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.1785: bad orphan inode 3 [ 166.025599][ T9928] loop9: lost filesystem error report for type 5 error -117 [ 166.026777][ T9928] EXT4-fs (loop9): Remounting filesystem read-only [ 166.040678][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 166.040699][ C1] EXT4-fs (loop9): initial error at time 1779658751: ext4_orphan_get:1423 [ 166.040728][ C1] EXT4-fs (loop9): last error at time 1779658751: ext4_orphan_get:1423 [ 166.073046][ T9935] loop1: detected capacity change from 0 to 512 [ 166.146240][ T9935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0400-000000000000 r/w without journal. Quota mode: writeback. [ 166.200613][ T9935] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.216941][ T9928] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 166.259492][ T28] audit: type=1400 audit(1779658751.781:1884): avc: denied { write } for pid=9934 comm="syz.1.1788" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.292090][ T9928] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.1785: dx entry: limit 0 != root limit 125 [ 166.329507][ T9928] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1785: Corrupt directory, running e2fsck is recommended [ 166.428570][ T5590] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 166.430963][ T8547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0400-000000000000. [ 166.864233][ T3423] IPVS: starting estimator thread 0... [ 166.870484][ T9991] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 166.953043][ T28] audit: type=1326 audit(1779658752.471:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d83e6ce59 code=0x7ffc0000 [ 166.965397][ T9992] IPVS: using max 2304 ests per chain, 115200 per kthread [ 166.987698][ T28] audit: type=1326 audit(1779658752.501:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d83e6ce59 code=0x7ffc0000 [ 167.016909][ T28] audit: type=1326 audit(1779658752.501:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d83e6ce59 code=0x7ffc0000 [ 167.044371][ T28] audit: type=1326 audit(1779658752.501:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.2.1813" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f0d83e6ce59 code=0x7ffc0000 [ 167.136488][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.165105][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.183497][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.212800][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.223373][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.240826][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.253078][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.278922][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.292297][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.303202][T10013] netlink: 'syz.7.1817': attribute type 1 has an invalid length. [ 167.507653][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.518329][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.720806][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1832'. [ 167.751721][ T2198] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 167.760692][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1832'. [ 167.775789][ T2198] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 167.785507][ T2198] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 167.804945][ T2198] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 167.932414][T10051] syzkaller1: entered promiscuous mode [ 167.938113][T10051] syzkaller1: entered allmulticast mode [ 167.963654][T10059] sctp: [Deprecated]: syz.5.1838 (pid 10059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.963654][T10059] Use struct sctp_sack_info instead [ 168.452505][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 168.452521][ T28] audit: type=1326 audit(1779658753.971:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10101 comm="syz.1.1846" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a3620ce59 code=0x0 [ 168.822575][T10155] vlan2: entered allmulticast mode [ 168.832051][T10155] bond0: entered allmulticast mode [ 168.840167][T10155] bond_slave_0: entered allmulticast mode [ 168.852097][T10155] bond_slave_1: entered allmulticast mode [ 168.861678][T10155] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1848'. [ 168.881830][T10155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.899493][T10155] bond_slave_0: left allmulticast mode [ 168.906421][T10155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.915967][T10155] bond_slave_1: left allmulticast mode [ 168.921898][T10155] bond0 (unregistering): Released all slaves [ 169.163829][ T28] audit: type=1400 audit(1779658754.681:1904): avc: denied { name_connect } for pid=10194 comm="syz.7.1853" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 169.267726][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1854'. [ 170.775858][ T28] audit: type=1400 audit(1779658756.301:1905): avc: denied { mount } for pid=10346 comm="syz.2.1885" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 171.129529][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1895'. [ 171.188400][T10372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.208193][T10374] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 171.235297][T10368] loop1: detected capacity change from 0 to 512 [ 171.253218][T10374] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 171.302771][T10374] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 171.415289][ T28] audit: type=1400 audit(1779658756.931:1906): avc: denied { name_bind } for pid=10382 comm="syz.9.1899" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 171.472072][T10368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.523456][T10368] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.618086][T10392] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1902'. [ 171.696877][T10368] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.1893: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 171.738316][T10368] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 12: comm syz.1.1893: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 171.773302][T10368] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz.1.1893: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 171.818761][T10368] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 16: comm syz.1.1893: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 171.848203][T10368] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 18: comm syz.1.1893: lblock 23 mapped to illegal pblock 18 (length 1) [ 171.953201][ T8547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.157843][ T28] audit: type=1400 audit(1779658757.681:1907): avc: denied { listen } for pid=10411 comm="syz.2.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.200537][T10414] loop1: detected capacity change from 0 to 4096 [ 172.240413][T10414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.280683][ T28] audit: type=1400 audit(1779658757.801:1908): avc: denied { write } for pid=10412 comm="syz.1.1911" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.422574][ T8547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.639328][T10434] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1920'. [ 172.665294][T10434] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1920'. [ 173.314578][T10469] validate_nla: 44 callbacks suppressed [ 173.314660][T10469] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 173.334647][T10469] bond1: entered promiscuous mode [ 173.340287][T10469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.359478][T10469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.366886][T10469] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 173.377375][T10469] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 173.390515][T10469] bond1: (slave ip6gre1): making interface the new active one [ 173.403104][T10469] ip6gre1: entered promiscuous mode [ 173.410771][T10469] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 173.538668][T10483] loop1: detected capacity change from 0 to 128 [ 173.556078][T10483] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 173.564852][T10483] FAT-fs (loop1): Filesystem has been set read-only [ 173.577256][T10483] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 173.666887][ T28] audit: type=1326 audit(1779658759.191:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 173.710018][ T28] audit: type=1326 audit(1779658759.211:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 173.736226][ T28] audit: type=1326 audit(1779658759.211:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 173.762417][ T28] audit: type=1326 audit(1779658759.211:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 173.795909][ T28] audit: type=1326 audit(1779658759.211:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 173.849613][ T28] audit: type=1326 audit(1779658759.211:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 173.889909][ T28] audit: type=1326 audit(1779658759.211:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 173.915944][ T28] audit: type=1326 audit(1779658759.211:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a361ae1d9 code=0x7ffc0000 [ 173.941573][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1944'. [ 173.955877][T10499] netlink: 'syz.5.1944': attribute type 12 has an invalid length. [ 173.972184][ T3813] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 173.981142][ T3813] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 173.990143][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1944'. [ 173.999296][ T28] audit: type=1326 audit(1779658759.211:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 174.025184][ T3813] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 174.026020][T10499] netlink: 'syz.5.1944': attribute type 12 has an invalid length. [ 174.042120][ T28] audit: type=1326 audit(1779658759.211:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.1.1940" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3620ce59 code=0x7ffc0000 [ 174.045427][ T3813] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 174.819962][T10550] loop7: detected capacity change from 0 to 2048 [ 174.877031][T10550] Alternate GPT is invalid, using primary GPT. [ 174.883467][T10550] loop7: p1 p2 p3 [ 174.894934][T10550] loop7: partition table partially beyond EOD, truncated [ 174.920468][ T2987] Alternate GPT is invalid, using primary GPT. [ 174.932406][ T2987] loop7: p1 p2 p3 [ 174.939682][ T2987] loop7: partition table partially beyond EOD, truncated [ 174.963779][T10550] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.737928][T10573] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.745199][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.752472][T10573] bridge_slave_0: entered allmulticast mode [ 175.759743][T10573] bridge_slave_0: entered promiscuous mode [ 175.766979][T10573] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.774542][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.782233][T10573] bridge_slave_1: entered allmulticast mode [ 175.789213][T10573] bridge_slave_1: entered promiscuous mode [ 175.820564][T10573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.840195][T10573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.882462][T10573] team0: Port device team_slave_0 added [ 175.895271][T10573] team0: Port device team_slave_1 added [ 175.932056][T10573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.940362][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.969728][T10573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.981676][T10573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.988867][T10573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.015291][T10573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.045183][T10573] hsr_slave_0: entered promiscuous mode [ 176.051376][T10573] hsr_slave_1: entered promiscuous mode [ 176.067216][T10573] debugfs: 'hsr0' already exists in 'hsr' [ 176.073069][T10573] Cannot create hsr debugfs directory [ 176.460190][T10573] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.485681][T10573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.493989][T10573] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.519712][T10573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.529354][T10573] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.541869][T10573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.553036][T10573] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.565951][T10573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.709831][T10573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.729417][T10573] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.741329][ T3813] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.748476][ T3813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.794192][ T3813] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.801332][ T3813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.952016][T10689] netlink: 'syz.5.2010': attribute type 1 has an invalid length. [ 176.974187][T10635] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.984636][T10689] netlink: 'syz.5.2010': attribute type 4 has an invalid length. [ 176.992614][T10689] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2010'. [ 177.007148][T10635] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.019188][T10635] bridge_slave_0: entered allmulticast mode [ 177.026140][T10635] bridge_slave_0: entered promiscuous mode [ 177.037187][T10635] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.044398][T10635] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.051772][T10635] bridge_slave_1: entered allmulticast mode [ 177.058396][T10635] bridge_slave_1: entered promiscuous mode [ 177.095440][T10635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.119275][T10635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.165764][T10635] team0: Port device team_slave_0 added [ 177.172805][T10635] team0: Port device team_slave_1 added [ 177.197271][T10635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.204384][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.230624][T10635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.252550][T10573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.266600][T10635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.273871][T10635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.300524][T10635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.344227][T10635] hsr_slave_0: entered promiscuous mode [ 177.350999][T10635] hsr_slave_1: entered promiscuous mode [ 177.357440][T10635] debugfs: 'hsr0' already exists in 'hsr' [ 177.363258][T10635] Cannot create hsr debugfs directory [ 177.439708][T10573] veth0_vlan: entered promiscuous mode [ 177.501942][T10573] veth1_vlan: entered promiscuous mode [ 177.531571][T10573] veth0_macvtap: entered promiscuous mode [ 177.541885][T10573] veth1_macvtap: entered promiscuous mode [ 177.553616][T10573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.566576][T10573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.578990][ T2122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.588751][ T2122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.606089][T10635] team0: Port device netdevsim2 removed [ 177.619130][ T2122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.633272][ T2122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.690913][T10735] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 177.715215][T10735] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.735257][T10735] vhci_hcd vhci_hcd.4: invalid port number 55 [ 177.742948][T10735] vhci_hcd vhci_hcd.4: default hub control req: 0031 v0014 i0037 l0 [ 177.796939][T10635] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 177.809178][T10635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.821409][T10635] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 177.838992][T10635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.847897][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2024'. [ 177.858638][T10743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2024'. [ 177.868820][T10635] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 177.884017][T10635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.903498][T10635] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 177.924582][T10635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.954156][T10745] tipc: Started in network mode [ 177.964442][T10745] tipc: Node identity ac14140f, cluster identity 4711 [ 177.985518][T10745] tipc: New replicast peer: 255.255.255.255 [ 177.998091][T10745] tipc: Enabled bearer , priority 10 [ 178.049710][T10635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.104027][T10635] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.119727][ T2122] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.127012][ T2122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.145480][T10762] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.166393][ T1881] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.173552][ T1881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.380531][T10782] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 178.403937][T10635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.410911][ T3085] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 178.586338][T10796] loop1: detected capacity change from 0 to 1024 [ 178.599446][T10796] EXT4-fs: Ignoring removed i_version option [ 178.612820][T10796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.638791][T10796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.722946][T10573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.780350][T10635] veth0_vlan: entered promiscuous mode [ 178.792863][T10635] veth1_vlan: entered promiscuous mode [ 178.817521][T10635] veth0_macvtap: entered promiscuous mode [ 178.825956][T10635] veth1_macvtap: entered promiscuous mode [ 178.852271][T10635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.874890][T10635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.964358][ T3808] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.002964][ T3803] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.043749][ T3803] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.082103][ T3803] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.116733][ T6401] tipc: Node number set to 2886997007 [ 179.501184][T10810] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.520807][T10810] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.535382][T10810] bridge_slave_0: entered allmulticast mode [ 179.562695][T10810] bridge_slave_0: entered promiscuous mode [ 179.584378][T10810] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.601923][T10779] kexec: Could not allocate control_code_buffer [ 179.608418][T10810] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.615800][T10810] bridge_slave_1: entered allmulticast mode [ 179.632790][T10810] bridge_slave_1: entered promiscuous mode [ 179.673103][T10842] netlink: 'syz.9.2049': attribute type 1 has an invalid length. [ 179.689564][T10810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.707090][T10810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.728211][T10810] team0: Port device team_slave_0 added [ 179.735074][T10810] team0: Port device team_slave_1 added [ 179.759539][T10810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.768906][T10810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.795027][T10810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.806459][T10810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.813456][T10810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.839559][T10810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.871421][T10810] hsr_slave_0: entered promiscuous mode [ 179.877684][T10810] hsr_slave_1: entered promiscuous mode [ 179.883638][T10810] debugfs: 'hsr0' already exists in 'hsr' [ 179.889467][T10810] Cannot create hsr debugfs directory [ 180.024920][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 180.024938][ T28] audit: type=1400 audit(1779658765.541:1936): avc: denied { write } for pid=10844 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.077621][ T28] audit: type=1400 audit(1779658765.601:1937): avc: denied { write } for pid=10855 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.125504][T10810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.134328][T10810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.142253][T10810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.157915][T10810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.167460][T10810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.176921][T10810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.185447][T10810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.194335][T10810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.273454][T10810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.289897][T10810] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.302627][ T2198] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.309787][ T2198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.324989][ T3803] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.332133][ T3803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.339473][ T28] audit: type=1400 audit(1779658765.861:1938): avc: denied { write } for pid=10857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.384697][T10810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.396679][T10810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.418365][ T28] audit: type=1400 audit(1779658765.941:1939): avc: denied { write } for pid=10874 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.549851][ T28] audit: type=1400 audit(1779658766.071:1940): avc: denied { write } for pid=10878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.593441][ T28] audit: type=1400 audit(1779658766.111:1941): avc: denied { write } for pid=10897 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.618773][T10810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.715196][ T28] audit: type=1400 audit(1779658766.231:1942): avc: denied { write } for pid=10900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.765653][ T28] audit: type=1400 audit(1779658766.291:1943): avc: denied { write } for pid=10918 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.834397][T10810] veth0_vlan: entered promiscuous mode [ 180.844627][T10810] veth1_vlan: entered promiscuous mode [ 180.868655][T10810] veth0_macvtap: entered promiscuous mode [ 180.877326][T10810] veth1_macvtap: entered promiscuous mode [ 180.893389][T10810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.908062][T10810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.917032][ T28] audit: type=1400 audit(1779658766.441:1944): avc: denied { write } for pid=10923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.945790][ T2403] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.954593][ T2403] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.979254][ T28] audit: type=1400 audit(1779658766.501:1945): avc: denied { write } for pid=10935 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.005667][ T2403] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.022833][ T2403] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.077190][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2061'. [ 181.102133][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2061'. [ 181.188274][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2052'. [ 182.024366][T11051] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.055900][T11051] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 182.431055][T11087] random: crng reseeded on system resumption [ 183.393677][T11083] loop9: detected capacity change from 0 to 1024 [ 183.424032][T11160] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2099'. [ 183.717884][T11083] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.803823][ T3385] IPVS: starting estimator thread 0... [ 183.821285][T10635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.916207][T11190] IPVS: using max 2208 ests per chain, 110400 per kthread [ 184.291979][T11224] loop1: detected capacity change from 0 to 2048 [ 184.316034][T11224] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.348557][T11228] syz_tun: entered allmulticast mode [ 184.355802][T11224] EXT4-fs: Ignoring removed i_version option [ 184.369488][T11228] syz_tun: left allmulticast mode [ 184.471944][T11224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.659051][T11239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2130'. [ 184.917826][T11249] loop4: detected capacity change from 0 to 4096 [ 184.962741][T11249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.065296][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 185.065313][ T28] audit: type=1400 audit(1779658770.581:1975): avc: denied { write } for pid=11248 comm="syz.4.2134" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 185.169710][T11217] Set syz1 is full, maxelem 65536 reached [ 185.207780][T10573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.233083][T10810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.276954][T11262] random: crng reseeded on system resumption [ 185.355747][T11265] loop1: detected capacity change from 0 to 1024 [ 185.407103][T11265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.426650][ T28] audit: type=1400 audit(1779658770.921:1976): avc: denied { write } for pid=11266 comm="syz.4.2142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 185.768845][T10573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.860241][T11271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.867536][T11271] IPv6: NLM_F_CREATE should be set when creating new route [ 185.874804][T11271] IPv6: NLM_F_CREATE should be set when creating new route [ 185.886984][T11271] sit0: entered promiscuous mode [ 185.929308][T11271] netlink: 'syz.1.2143': attribute type 1 has an invalid length. [ 185.951339][T11271] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2143'. [ 186.274948][T11290] loop1: detected capacity change from 0 to 512 [ 186.285489][T11290] ext4: Unknown parameter 'euid' [ 187.007062][T11319] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2166'. [ 187.105994][ T28] audit: type=1400 audit(1779658772.631:1977): avc: denied { getopt } for pid=11326 comm="syz.5.2168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.173140][T11330] loop9: detected capacity change from 0 to 4096 [ 187.191837][T11330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.216421][T11333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=11333 comm=syz.4.2170 [ 187.267703][ T28] audit: type=1400 audit(1779658772.781:1978): avc: denied { write } for pid=11329 comm="syz.9.2169" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.554811][T10635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.617558][T11359] loop9: detected capacity change from 0 to 256 [ 187.732165][T11362] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2182'. [ 187.950042][ T2041] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.990957][ T2041] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.024284][ T2041] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 188.098936][ T2041] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.142370][ T2041] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.173824][ T2041] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 188.263549][T11397] loop1: detected capacity change from 0 to 128 [ 188.283791][ T2041] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.320111][ T2041] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.336524][T11397] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.336954][ T2041] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 188.425502][ T2041] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.437969][T11397] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.445311][ T2041] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.480088][ T2041] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 188.503779][ T28] audit: type=1400 audit(1779658774.021:1979): avc: denied { write } for pid=11396 comm="syz.1.2197" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.541123][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'. [ 188.555414][T10573] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.589843][ T28] audit: type=1400 audit(1779658774.051:1980): avc: denied { write } for pid=11396 comm="syz.1.2197" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.626214][ T28] audit: type=1400 audit(1779658774.051:1981): avc: denied { write } for pid=11396 comm="syz.1.2197" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.649617][ T28] audit: type=1400 audit(1779658774.051:1982): avc: denied { write } for pid=11396 comm="syz.1.2197" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.671464][ T28] audit: type=1400 audit(1779658774.051:1983): avc: denied { write } for pid=11396 comm="syz.1.2197" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.789252][ T2041] bridge_slave_1: left allmulticast mode [ 188.806291][ T2041] bridge_slave_1: left promiscuous mode [ 188.826033][ T2041] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.856341][ T2041] bridge_slave_0: left allmulticast mode [ 188.863894][ T2041] bridge_slave_0: left promiscuous mode [ 188.870071][ T28] audit: type=1400 audit(1779658774.381:1984): avc: denied { setopt } for pid=11413 comm="syz.1.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 188.899377][ T2041] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.936678][ T2041] pimreg: left allmulticast mode [ 188.947605][T11418] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 189.151945][T11436] random: crng reseeded on system resumption [ 189.177417][ T2041] bond2 (unregistering): (slave geneve4): Releasing active interface [ 189.220591][ T2041] bond1 (unregistering): (slave geneve2): Releasing active interface [ 189.237399][T11437] loop4: detected capacity change from 0 to 1024 [ 189.263681][T11441] netlink: 'syz.1.2207': attribute type 8 has an invalid length. [ 189.296374][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 189.322481][ T2041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.337563][T11437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.356340][ T2041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.379377][ T2041] bond0 (unregistering): Released all slaves [ 189.402420][ T2041] bond1 (unregistering): Released all slaves [ 189.419727][T10810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.433950][ T2041] bond2 (unregistering): Released all slaves [ 189.468208][T11411] batadv_slave_1: entered promiscuous mode [ 189.505410][ T3026] 8021q: adding VLAN 0 to HW filter on device eth1 [ 189.520678][T11441] veth1_to_team: entered promiscuous mode [ 189.537047][T11441] gretap0: entered promiscuous mode [ 189.553297][T11441] veth1_to_team: left promiscuous mode [ 189.569483][T11441] gretap0: left promiscuous mode [ 189.590102][T11410] batadv_slave_1: left promiscuous mode [ 189.635259][ T2041] hsr_slave_0: left promiscuous mode [ 189.655303][ T2041] hsr_slave_1: left promiscuous mode [ 189.676323][ T2041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.693253][ T2041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.802274][T11470] loop9: detected capacity change from 0 to 4096 [ 189.829593][T11470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.010773][ T2041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.018649][ T2041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.036498][ T2041] veth1_macvtap: left promiscuous mode [ 190.044459][ T2041] veth0_macvtap: left promiscuous mode [ 190.054436][ T2041] veth1_vlan: left promiscuous mode [ 190.063077][ T2041] veth0_vlan: left promiscuous mode [ 190.223587][T11486] loop4: detected capacity change from 0 to 1024 [ 190.237738][T11486] EXT4-fs: Ignoring removed bh option [ 190.251377][ T2041] team0 (unregistering): Port device team_slave_1 removed [ 190.270136][T11486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.283705][ T2041] team0 (unregistering): Port device team_slave_0 removed [ 190.358652][T10635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.501057][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 190.501074][ T28] audit: type=1400 audit(1779658776.021:1990): avc: denied { write } for pid=11495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.588312][ T2041] IPVS: stop unused estimator thread 0... [ 190.621458][ T28] audit: type=1400 audit(1779658776.141:1991): avc: denied { write } for pid=11513 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.692432][ T3026] 8021q: adding VLAN 0 to HW filter on device eth2 [ 190.812427][T11525] loop9: detected capacity change from 0 to 128 [ 190.898344][T11525] syz.9.2230: attempt to access beyond end of device [ 190.898344][T11525] loop9: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 190.934916][T11525] syz.9.2230: attempt to access beyond end of device [ 190.934916][T11525] loop9: rw=0, sector=97, nr_sectors = 32 limit=128 [ 190.951885][ T28] audit: type=1400 audit(1779658776.471:1992): avc: denied { write } for pid=11522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.968992][T11525] syz.9.2230: attempt to access beyond end of device [ 190.968992][T11525] loop9: rw=0, sector=145, nr_sectors = 88 limit=128 [ 191.062165][ T3813] kworker/u8:20: attempt to access beyond end of device [ 191.062165][ T3813] loop9: rw=1, sector=233, nr_sectors = 808 limit=128 [ 191.076826][T11539] loop1: detected capacity change from 0 to 1024 [ 191.089582][T11539] EXT4-fs: Ignoring removed orlov option [ 191.092941][ T28] audit: type=1400 audit(1779658776.601:1993): avc: denied { write } for pid=11535 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.152401][ T3026] 8021q: adding VLAN 0 to HW filter on device eth3 [ 191.162289][T11539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.204380][T10810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.259928][ T28] audit: type=1400 audit(1779658776.781:1994): avc: denied { write } for pid=11538 comm="syz.1.2231" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.359877][T10573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.443311][T11562] netlink: 'syz.4.2233': attribute type 4 has an invalid length. [ 191.480495][ T28] audit: type=1400 audit(1779658777.001:1995): avc: denied { write } for pid=11546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.553246][ T28] audit: type=1400 audit(1779658777.071:1996): avc: denied { write } for pid=11566 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.612504][ T3026] 8021q: adding VLAN 0 to HW filter on device eth4 [ 191.647020][T11567] loop9: detected capacity change from 0 to 1024 [ 191.680701][T11567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 191.695207][T11567] System zones: 0-1, 3-36 [ 191.710284][T11567] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.2237: bad orphan inode 134217728 [ 191.737779][T11577] loop1: detected capacity change from 0 to 128 [ 191.768867][T11567] loop9: lost filesystem error report for type 5 error -117 [ 191.769496][T11567] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.804575][T11577] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.847505][ T28] audit: type=1400 audit(1779658777.361:1997): avc: denied { write } for pid=11565 comm="syz.9.2237" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.897030][T11577] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.958774][T11577] EXT4-fs warning (device loop1): __ext4_ioctl:1558: Setting inode version is not supported with metadata_csum enabled. [ 191.973539][ T28] audit: type=1400 audit(1779658777.471:1998): avc: denied { write } for pid=11576 comm="syz.1.2240" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.044637][T10573] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.469035][ T28] audit: type=1326 audit(1779658777.991:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11607 comm="syz.1.2253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d71d2ce59 code=0x7ffc0000 [ 192.716600][T10635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.725778][T11611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2254'. [ 193.393777][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 193.544872][T11641] loop4: detected capacity change from 0 to 512 [ 193.596327][T11641] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 193.644035][T11654] netlink: 'syz.5.2271': attribute type 1 has an invalid length. [ 193.657449][T11641] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 193.666981][T11654] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2271'. [ 193.879360][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2275'. [ 193.900255][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2275'. [ 193.968956][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2275'. [ 194.054220][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'. [ 194.087843][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'. [ 194.113787][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2283'. [ 194.197334][T11681] loop9: detected capacity change from 0 to 2048 [ 194.231349][T11681] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.254415][T11681] EXT4-fs: Ignoring removed i_version option [ 194.284942][T11681] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.510830][T11711] loop4: detected capacity change from 0 to 164 [ 194.612955][T11674] Set syz1 is full, maxelem 65536 reached [ 194.694545][T10635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.751081][T11718] loop4: detected capacity change from 0 to 1024 [ 194.808843][T11718] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 194.847432][T11718] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 194.874246][T11718] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #2: comm syz.4.2294: casefold flag without casefold feature [ 194.888697][T11718] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 194.891998][T11718] EXT4-fs (loop4): no journal found [ 194.901998][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 194.902163][ C1] EXT4-fs (loop4): initial error at time 1779658780: ext4_get_journal_inode:5896: inode 2 [ 194.902363][ C1] EXT4-fs (loop4): last error at time 1779658780: ext4_get_journal_inode:5896: inode 2 [ 194.952615][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2297'. [ 194.961869][T11718] EXT4-fs (loop4): can't get journal size [ 195.004229][T11718] EXT4-fs error (device loop4): __ext4_fill_super:5596: inode #2: comm syz.4.2294: casefold flag without casefold feature [ 195.021660][T11718] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 195.024812][T11718] EXT4-fs (loop4): get root inode failed [ 195.046724][T11718] EXT4-fs (loop4): mount failed [ 196.254461][T11781] loop4: detected capacity change from 0 to 512 [ 196.274727][T11776] Process accounting resumed [ 196.281517][T11781] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.297333][T11781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 196.322006][T11781] System zones: 1-12 [ 196.336954][T11781] EXT4-fs (loop4): 1 truncate cleaned up [ 196.384410][T11781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.495412][T10810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.594274][T11806] loop1: detected capacity change from 0 to 512 [ 196.603666][T11806] EXT4-fs: Ignoring removed nobh option [ 196.617417][T11806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.630150][T11806] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.642771][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 196.642786][ T28] audit: type=1400 audit(1779658782.171:2016): avc: denied { getopt } for pid=11805 comm="syz.1.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.699891][ T28] audit: type=1400 audit(1779658782.191:2017): avc: denied { read } for pid=11805 comm="syz.1.2341" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 196.757858][ T28] audit: type=1400 audit(1779658782.191:2018): avc: denied { open } for pid=11805 comm="syz.1.2341" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 196.836045][ T28] audit: type=1400 audit(1779658782.191:2019): avc: denied { ioctl } for pid=11805 comm="syz.1.2341" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 196.985642][T10573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.359627][ T28] audit: type=1400 audit(1779658782.881:2020): avc: denied { setopt } for pid=11820 comm="syz.9.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.509939][T11827] sctp: [Deprecated]: syz.5.2337 (pid 11827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.509939][T11827] Use struct sctp_sack_info instead [ 197.922661][T11846] dvmrp1: entered allmulticast mode [ 197.947547][T11850] netlink: 'syz.2.2349': attribute type 1 has an invalid length. [ 198.038453][T11850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.157961][T11858] macvlan2: entered promiscuous mode [ 198.164270][T11858] macvlan2: entered allmulticast mode [ 198.174661][T11858] bond3: entered promiscuous mode [ 198.181047][T11858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.189127][T11858] bond3: left promiscuous mode [ 198.202661][T11862] dvmrp1: left allmulticast mode [ 198.212277][ T2041] bridge_slave_1: left allmulticast mode [ 198.218251][ T2041] bridge_slave_1: left promiscuous mode [ 198.224107][ T2041] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.233272][ T2041] bridge_slave_0: left allmulticast mode [ 198.239842][ T2041] bridge_slave_0: left promiscuous mode [ 198.249263][ T2041] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.291683][ T2041] bond1 (unregistering): (slave gretap1): Releasing active interface [ 198.321791][T11866] __nla_validate_parse: 3 callbacks suppressed [ 198.321810][T11866] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2354'. [ 198.596601][ T2041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.619986][ T2041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.646873][ T2041] bond0 (unregistering): Released all slaves [ 198.664717][ T2041] bond1 (unregistering): Released all slaves [ 198.750509][T11874] loop9: detected capacity change from 0 to 512 [ 198.800244][T11874] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.819458][ T2041] hsr_slave_0: left promiscuous mode [ 198.830760][T11874] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.841881][ T2041] hsr_slave_1: left promiscuous mode [ 198.858401][ T28] audit: type=1400 audit(1779658784.371:2021): avc: denied { write } for pid=11873 comm="syz.9.2356" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.886612][ T2041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.899566][T10635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.922045][ T2041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.043107][T11876] loop4: detected capacity change from 0 to 512 [ 199.068363][ T2041] team0 (unregistering): Port device team_slave_1 removed [ 199.190678][T11876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.239812][T11876] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.306127][T11896] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2363'. [ 199.330048][T11876] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.2357: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 199.374211][T11876] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 12: comm syz.4.2357: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 199.404273][T11876] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 13: comm syz.4.2357: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 199.428850][T11876] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz.4.2357: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 199.452764][T11876] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 18: comm syz.4.2357: lblock 23 mapped to illegal pblock 18 (length 1) [ 199.500756][ T2041] team0 (unregistering): Port device team_slave_0 removed [ 199.628531][T10810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.660944][ T28] audit: type=1326 audit(1779658785.181:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11903 comm="syz.2.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d83e6ce59 code=0x7ffc0000 [ 199.699842][ T28] audit: type=1326 audit(1779658785.211:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11903 comm="syz.2.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f0d83e6ce59 code=0x7ffc0000 [ 199.726324][ T28] audit: type=1326 audit(1779659041.230:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11903 comm="syz.2.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d83e6ce59 code=0x7ffc0000 [ 199.752545][ T28] audit: type=1326 audit(1779659041.230:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11903 comm="syz.2.2368" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d83e2d68e code=0x7ffc0000 [ 200.152059][T11922] infiniband syz2: set active [ 200.162983][T11922] infiniband syz2: added bond_slave_1 [ 200.190105][ T2041] IPVS: stop unused estimator thread 0... [ 200.239283][T11922] RDS/IB: syz2: added [ 200.245280][T11922] smc: adding ib device syz2 with port count 1 [ 200.262073][T11922] smc: ib device syz2 port 1 has no pnetid [ 200.269390][T11933] syzkaller0: entered allmulticast mode [ 200.291551][T11933] syzkaller0: entered promiscuous mode [ 200.390856][T11933] syzkaller0 (unregistering): left allmulticast mode [ 200.398378][T11933] syzkaller0 (unregistering): left promiscuous mode [ 200.444408][T11937] netlink: 'syz.2.2380': attribute type 1 has an invalid length. [ 200.452462][T11937] netlink: 'syz.2.2380': attribute type 4 has an invalid length. [ 200.461819][T11937] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2380'. [ 200.736992][T11949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2386'. [ 200.796186][T11947] loop4: detected capacity change from 0 to 8192 [ 201.048634][T11962] netlink: 'syz.5.2392': attribute type 1 has an invalid length. [ 201.063621][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.084062][T11962] bond0: (slave ip6erspan0): making interface the new active one [ 201.094910][T11962] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 201.164775][T11967] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2394'. [ 201.264705][T11978] loop1: detected capacity change from 0 to 1024 [ 201.304499][T11978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.596993][T10573] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.668114][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 201.668130][ T28] audit: type=1400 audit(1779659043.190:2074): avc: denied { write } for pid=12017 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.699606][T12023] netem: change failed [ 201.716222][ T28] audit: type=1326 audit(1779659043.190:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.2405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f472d4dce59 code=0x7ffc0000 [ 201.791584][T12028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2412'. [ 202.605180][ T28] audit: type=1400 audit(1779659044.120:2076): avc: denied { write } for pid=12043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.718708][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2421'. [ 202.729004][ T28] audit: type=1400 audit(1779659044.250:2077): avc: denied { write } for pid=12060 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.006194][T12073] bridge0: port 3(batadv1) entered blocking state [ 203.040328][T12073] bridge0: port 3(batadv1) entered disabled state [ 203.062534][T12073] batadv1: entered allmulticast mode [ 203.080501][T12073] batadv1: entered promiscuous mode [ 203.497234][ T76] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 203.506648][ T76] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 203.980526][ T28] audit: type=1400 audit(1779659045.490:2078): avc: denied { write } for pid=12077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.048183][ T28] audit: type=1400 audit(1779659045.570:2079): avc: denied { write } for pid=12104 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.371546][ T28] audit: type=1400 audit(1779659045.890:2080): avc: denied { write } for pid=12114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.465720][ T28] audit: type=1400 audit(1779659045.980:2081): avc: denied { write } for pid=12137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.736524][T12141] loop4: detected capacity change from 0 to 1024 [ 204.777464][T12141] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 204.786858][T12141] System zones: 0-1, 3-36 [ 204.799390][T12141] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2441: bad orphan inode 134217728 [ 204.810531][T12141] loop4: lost filesystem error report for type 5 error -117 [ 204.822244][T12141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.901464][ T28] audit: type=1400 audit(1779659046.420:2082): avc: denied { write } for pid=12140 comm="syz.4.2441" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.975496][T12152] loop9: detected capacity change from 0 to 512 [ 204.997907][ T28] audit: type=1326 audit(1779659046.510:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.2.2444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d83e6ce59 code=0x0 [ 205.033350][T12152] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.051927][T12152] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 205.313306][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2450'. [ 205.524480][T10810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.620461][T12182] netlink: 'syz.4.2457': attribute type 39 has an invalid length. [ 205.742586][T12188] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2460'. [ 205.813214][T12191] loop4: detected capacity change from 0 to 128 [ 206.164742][T12205] loop1: detected capacity change from 0 to 512 [ 206.234884][T12205] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 206.267531][T12205] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 206.413520][T12226] loop4: detected capacity change from 0 to 4096 [ 206.425793][T12226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.462733][T12238] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 206.958455][T12263] loop1: detected capacity change from 0 to 128 [ 207.072260][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 207.072317][ T28] audit: type=1400 audit(1779659304.595:2113): avc: denied { read } for pid=12266 comm="syz.5.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.179917][T12271] netlink: 'syz.9.2489': attribute type 4 has an invalid length. [ 207.312675][T10810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.419572][T12285] loop4: detected capacity change from 0 to 512 [ 207.433803][T12285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 207.442580][T12285] System zones: 1-12 [ 207.447254][T12285] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2495: corrupted in-inode xattr: e_value size too large [ 207.461922][T12285] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 207.465130][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 207.475501][T12285] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2495: couldn't read orphan inode 15 (err -117) [ 207.480785][ C0] EXT4-fs (loop4): initial error at time 1779659304: ext4_iget_extra_inode:5128: inode 15 [ 207.502586][ C0] EXT4-fs (loop4): last error at time 1779659304: ext4_iget_extra_inode:5128: inode 15 [ 207.522548][T12285] loop4: lost filesystem error report for type 5 error -117 [ 207.525731][T12285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.553109][ T28] audit: type=1400 audit(1779659305.075:2114): avc: denied { write } for pid=12284 comm="syz.4.2495" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.648852][T10810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.686168][T12326] loop9: detected capacity change from 0 to 512 [ 208.703110][ T28] audit: type=1400 audit(1779659306.225:2115): avc: denied { mounton } for pid=12325 comm="syz.9.2511" path="/94/file0" dev="tmpfs" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 208.731677][T12326] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 208.760266][T12326] EXT4-fs (loop9): 1 truncate cleaned up [ 208.766518][T12326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.836343][T12326] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.324448][ T28] audit: type=1400 audit(1779659306.845:2116): avc: denied { unmount } for pid=12351 comm="syz.5.2521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 209.349943][T12352] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2520'. [ 209.639891][T12376] lo: Caught tx_queue_len zero misconfig [ 209.731629][T12382] loop4: detected capacity change from 0 to 256 [ 209.781137][T12382] FAT-fs (loop4): Directory bread(block 64) failed [ 209.804066][T12382] FAT-fs (loop4): Directory bread(block 65) failed [ 209.843119][T12382] FAT-fs (loop4): Directory bread(block 66) failed [ 209.867308][T12382] FAT-fs (loop4): Directory bread(block 67) failed [ 209.884157][T12382] FAT-fs (loop4): Directory bread(block 68) failed [ 209.906999][T12382] FAT-fs (loop4): Directory bread(block 69) failed [ 209.934485][T12382] FAT-fs (loop4): Directory bread(block 70) failed [ 209.953879][T12382] FAT-fs (loop4): Directory bread(block 71) failed [ 209.972267][T12382] FAT-fs (loop4): Directory bread(block 72) failed [ 210.000535][T12378] loop9: detected capacity change from 0 to 512 [ 210.014073][T12382] FAT-fs (loop4): Directory bread(block 73) failed [ 210.091652][T12378] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 210.124216][T12378] EXT4-fs (loop9): invalid journal inode [ 210.132598][T12378] EXT4-fs (loop9): can't get journal size [ 210.151343][T12378] EXT4-fs (loop9): 1 truncate cleaned up [ 210.171348][T12378] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.244211][ T28] audit: type=1400 audit(1779659307.765:2117): avc: denied { write } for pid=12377 comm="syz.9.2531" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.342853][ T28] audit: type=1400 audit(1779659307.825:2118): avc: denied { write } for pid=12377 comm="syz.9.2531" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.404850][ T28] audit: type=1400 audit(1779659307.865:2119): avc: denied { write } for pid=12377 comm="syz.9.2531" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.462119][ T28] audit: type=1400 audit(1779659307.895:2120): avc: denied { write } for pid=12377 comm="syz.9.2531" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.496034][T12413] loop1: detected capacity change from 0 to 512 [ 210.512678][T10635] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.525302][ T28] audit: type=1400 audit(1779659307.915:2121): avc: denied { write } for pid=12377 comm="syz.9.2531" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.562489][T12413] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.612685][T12413] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 212.461935][ T76] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.125082][T12497] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2583'. [ 213.144868][T12497] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.152121][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.705323][T12491] ================================================================== [ 213.713505][T12491] BUG: KCSAN: data-race in touch_atime / touch_atime [ 213.720228][T12491] [ 213.722580][T12491] write to 0xffff8881650633f8 of 4 bytes by task 12498 on cpu 0: [ 213.730325][T12491] touch_atime+0x1d7/0x330 [ 213.734793][T12491] shmem_file_read_iter+0x3f4/0x4b0 [ 213.740040][T12491] copy_splice_read+0x471/0x6c0 [ 213.744948][T12491] splice_direct_to_actor+0x28f/0x670 [ 213.750371][T12491] do_splice_direct+0x119/0x1a0 [ 213.755269][T12491] do_sendfile+0x382/0x650 [ 213.759715][T12491] __x64_sys_sendfile64+0x105/0x150 [ 213.764953][T12491] x64_sys_call+0x2dc4/0x3020 [ 213.769669][T12491] do_syscall_64+0x12c/0x3b0 [ 213.774309][T12491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.780273][T12491] [ 213.782641][T12491] read to 0xffff8881650633f8 of 4 bytes by task 12491 on cpu 1: [ 213.790333][T12491] touch_atime+0x16c/0x330 [ 213.795359][T12491] shmem_file_read_iter+0x3f4/0x4b0 [ 213.800604][T12491] copy_splice_read+0x471/0x6c0 [ 213.805506][T12491] splice_direct_to_actor+0x28f/0x670 [ 213.810921][T12491] do_splice_direct+0x119/0x1a0 [ 213.815831][T12491] do_sendfile+0x382/0x650 [ 213.820288][T12491] __x64_sys_sendfile64+0x105/0x150 [ 213.825518][T12491] x64_sys_call+0x2dc4/0x3020 [ 213.830249][T12491] do_syscall_64+0x12c/0x3b0 [ 213.834874][T12491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.840799][T12491] [ 213.843145][T12491] value changed: 0x0d6f3ba6 -> 0x0e07d226 [ 213.848883][T12491] [ 213.851232][T12491] Reported by Kernel Concurrency Sanitizer on: [ 213.857410][T12491] CPU: 1 UID: 0 PID: 12491 Comm: syz.5.2581 Tainted: G W syzkaller #0 PREEMPT(full) [ 213.868367][T12491] Tainted: [W]=WARN [ 213.872192][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 213.882277][T12491] ================================================================== [ 214.485208][ T4933] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 214.485208][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 214.485364][ T3536] Bluetooth: hci1: command 0x1003 tx timeout