last executing test programs: 2m39.648244943s ago: executing program 1 (id=925): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r2, &(0x7f0000000280)=""/172, 0xac, 0xe0) 2m39.590578514s ago: executing program 1 (id=926): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2m39.534458296s ago: executing program 1 (id=928): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x2, 0x0, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 2m39.480595487s ago: executing program 1 (id=930): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x571f68543cec8180) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 2m39.383852459s ago: executing program 1 (id=932): r0 = io_uring_setup(0x3e0d, &(0x7f00000002c0)={0x0, 0x0, 0x400}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.564587947s ago: executing program 1 (id=945): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) pread64(r0, &(0x7f0000003c40)=""/58, 0x3a, 0x0) 2m38.546331607s ago: executing program 32 (id=945): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) pread64(r0, &(0x7f0000003c40)=""/58, 0x3a, 0x0) 2m8.345907926s ago: executing program 0 (id=1563): unshare(0x2a060400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000800)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000440)) 2m8.288826998s ago: executing program 0 (id=1555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x2) 2m8.117516321s ago: executing program 0 (id=1558): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x44, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="008400"], 0x10}}], 0x2, 0xc8844) 2m7.817539188s ago: executing program 0 (id=1565): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x43) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 2m7.72591159s ago: executing program 0 (id=1566): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2m7.434952337s ago: executing program 0 (id=1571): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x41, 0x0, 0x52, 0xfc0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m7.364316738s ago: executing program 33 (id=1571): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x41, 0x0, 0x52, 0xfc0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m56.76782875s ago: executing program 6 (id=1784): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000e86000/0x2000)=nil, &(0x7f000098b000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) 1m56.664727212s ago: executing program 6 (id=1787): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 1m56.563660534s ago: executing program 6 (id=1789): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 1m56.455233906s ago: executing program 6 (id=1790): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m56.339864769s ago: executing program 6 (id=1791): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) unshare(0x28000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 1m56.035928495s ago: executing program 6 (id=1803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0xfffffff3}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001c00)=""/62, 0x3e}], 0x1}, 0x174}], 0x2, 0x10122, 0x0) 1m56.035749406s ago: executing program 34 (id=1803): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0xfffffff3}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001c00)=""/62, 0x3e}], 0x1}, 0x174}], 0x2, 0x10122, 0x0) 1m44.928537978s ago: executing program 7 (id=1990): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x3, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x104, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x6, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x6, 0x7ffffffb, 0x4, 0x7, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x800, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 1m44.854053079s ago: executing program 7 (id=1992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m44.742202422s ago: executing program 7 (id=1996): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2c000010) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3216, 0x40100) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x4, 0x40, 0x2, "", [{{0x9, 0x4, 0x0, 0xfa, 0x0, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xaba, 0x6e9, 0x9}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x7df, 0x5, 0xf, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x1, 0x6}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 1m43.9103402s ago: executing program 7 (id=2005): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 1m43.875478501s ago: executing program 7 (id=2006): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r2, 0x0, 0x0) 1m43.657429296s ago: executing program 7 (id=2012): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1m43.641056486s ago: executing program 35 (id=2012): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1m1.121155335s ago: executing program 2 (id=2616): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0xffffffff}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}, 0xffffffff}}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x4011) 1m1.020030567s ago: executing program 2 (id=2617): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20003f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2af1, 0x7721, 0x16, 0x0, 0x0) 1m0.900518529s ago: executing program 2 (id=2619): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) socket(0x2d, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 59.745924705s ago: executing program 2 (id=2626): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r0, 0x0, 0x0) ftruncate(r0, 0x4a8e) 59.650913027s ago: executing program 2 (id=2628): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 59.213883786s ago: executing program 2 (id=2634): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3aa50a6b0c003e44, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 59.213480366s ago: executing program 36 (id=2634): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x3aa50a6b0c003e44, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 11.517889238s ago: executing program 4 (id=3169): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x1, 0x20002894) 5.303456064s ago: executing program 5 (id=3198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x24014810) 4.860967843s ago: executing program 5 (id=3203): socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='!pu&20\t&&') 4.332274035s ago: executing program 5 (id=3207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c659900", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.607698841s ago: executing program 5 (id=3209): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 3.566267542s ago: executing program 9 (id=3210): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) setresgid(0xee00, 0xee01, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f00000004c0)=""/163, 0xa3) 3.339160876s ago: executing program 5 (id=3212): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="147b0000240006"], 0x14}, 0x1, 0x0, 0x0, 0x480c8}, 0xf440f97201fe76dc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.323518667s ago: executing program 4 (id=3169): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0}}], 0x1, 0x20002894) 3.271125988s ago: executing program 9 (id=3213): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x409, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x80ab}, 0x1c) 3.076087812s ago: executing program 9 (id=3214): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000200)={[{@resgid}, {@errors_remount}, {@data_err_ignore}, {@bh}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0xdea8d000) 3.071763553s ago: executing program 8 (id=3215): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd27, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x9e7e}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.591149173s ago: executing program 8 (id=3217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0x7}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}]}}]}, 0x4c}}, 0x24014810) 2.519027154s ago: executing program 9 (id=3218): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000580)={0xa0002008}) 2.414651007s ago: executing program 4 (id=3219): unshare(0x28000600) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r2, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) 2.213866131s ago: executing program 4 (id=3220): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xffe0}, {0xfff2}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80800", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x2, 0xb}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.134210373s ago: executing program 9 (id=3221): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4, 0x8}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) preadv(r1, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/248, 0xf8}], 0x1, 0x9, 0x5) 1.968380506s ago: executing program 5 (id=3222): sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'macsec0\x00', 0xf4}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 1.921677087s ago: executing program 9 (id=3223): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 1.888324858s ago: executing program 37 (id=3222): sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'macsec0\x00', 0xf4}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 1.318576171s ago: executing program 8 (id=3226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x69) 908.257789ms ago: executing program 4 (id=3228): syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000240)={[{@map_acorn}, {@nojoliet}, {@unhide}]}, 0x1, 0x56d, &(0x7f00000009c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 907.333109ms ago: executing program 3 (id=3229): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x202, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x7, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890446000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$eJzs3U9v2/Ydx/EPZdmWPSAotqEIgjT+NVkBB8sUSW5cGNlhGkXZ7CRRIOXBPhVZY3dB5HRLsmHxpfWl27DtCezWSw/bcxiwc897AjsOKLbbgF008J/+Upbt2E62vl9Gy5/JL8kv/5Tf0hJ/FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkGXXSqWypYbb2t4x09k132seMz1e2rxux43bM9crWeE/KhR0NR519duDyW+G/7qp6/Fv11UIBwUdfuPNN+5/K59L5z8mobPQaRf47MXh4wfd7t7Ts62tZ51lvgsxkYlyJ5hr02m5gec2q5uOcQPPbKyvl+5u1QNTdxtOsBt0nKaxfSfX8Xyzat825Y2NNeMUd73t1mat2nDSke99r1IqrZv3F5PDf/f9YmBvuY2G29qMYsLJYcxi/wxxqk1j9h9199ZmJRkGlU8SVJkVVClVKuVypVJev7dx771SKT8xojRGExGDk/b1Ofi4TOd05QZeXi6s/3+3pIYKamlbOzKZP7Zq8uWpOWV6Iq3/79x1jl3vcP1Pq/zVweRriur/jfi3G9Pq/+9+OSUbE82QNcX6afb4s/080wsd6rEeqKuu9vT0fJa7cn4ZXuzPppSXXAXy5KqpqjblyCRjjDa0rnWV9IG2VFcgo7pcNeQo0K4CdeSoGR5M+XJUVUeefBmtytZtGZW1oQ2tychRUbvytK2WNlVTVf/u9Xr7ehTt97VjclQaVJ4ZtDx8ik4GTav/P/kknuN09R//f/rnjjH5QTM7Bnjlesn9/3RzWSNXLi4jAAAAAABw3qzor+9W9Nn9W5J6qrsNp/Sq0wIAAAAAAOco+uT/ejiYD1tvyZpy/9+7/NwAAAAAAMD5sKJn7CxJy9GX+q3B41In+RJA5sMBAAAAAADg9RJ9/n9jQepFXautyDrV/T8AAAAAAPgf8JuhPvbzaR+7vfRj/ZykoL1o/eWfi/LnraP2znesg2o4pXqQxEx8A6BTv2blFXXU+9mfw8GC9EbUba/tXLeS/oGTTjCtuGNf6av9WX39W/5YAgtz6Z8vMhK4kswdDdbzyW/6vd6OY95O1vvwMKdoSryW5brbcIq217hfVrV6Jddxdjq/ePLoV5Lf3879R9294ocfdx9GuRyFo44Owjw+GUknNyuX51F/C9EzF1lbvKR6usrftprLVrTeUrr9c6oe5IZXdLLt/0w345ibSU+3y4fpEZD1adIoF8NDpsHWR71DWIMsyuNbnnUgpmRRiLK4FcfcWr0VD9L84qNQ+O6cVClOHgN/OIvKcBaz94X1r4l9MSOL8FxYC7P4a7igKVmsnS6LiSMCAK/K/qAKRZ2YT/axP153M65yS8lw6lVudnX/wehanv+xFz9wOCfl1VtMyktvel1ReEVfjcMWFF1Y89cyruilpK4UNOWKXjpbdZtPJ/1p8A6k5G01SVy+n8V/er3e/XK03j+MVdXPwxk+n7reoFGZC3fh3ecHP4s6wA99tPfR3pNKZW299G6pdK+i+WgzkgG1BwCQYfY7dkYjCoN61q/d7/bvqh/+4524NVJ3v9n/SkFRH+pjdfVQd9JXCKxkr3d56GsIdybvWsPY6P86RmPLujP1ri6qpUOxlX5sWrrH7wAHsWsXfRgAALhUN2fU4fH6n3Xvfie97169lnnfPVrLx98QPC22fMl7AgCArw/H/8pa7vza8n23/UF5Y6Nc7Ww5xvfsHxnfrW06xm11HN/eqrY2HdP2vY5new3T9rXo1pzABNvttud3TN3zTdsL3J3oze8mefV74DSrrY5rB+2GUw0cY3utTtXumJob2Ka9/cOGG2w5fjRz0HZst+7a1Y7rtUzgLcl2isYEjjMU6NacVsetu2GzZdq+26z6u+bHXmO76ZiaE9i+2+548QLTdbmtuuc3o8UW1TvuRYcAAHxtPHtx+PhBt7v3dKixkExLxxwpbqTfR0uCvxydK2osZC3wFW4eAADIQJUGAAAAAAAAAAAAAAAAAAAAAOD1l/X836ka6UOB6Zh5ZQRL/TE/v3KiJVsajPniby+V4RkaufExSU+7vdmzfxk38lkxS2FjQVI33f3DMUczE5vLmGtaY+VEW6q4kT//fbgkZZ0JZ2x8OjPm+/uj5+FETDgxc9Jif6/mX/4/h6zGky+mTJp2RhX6W7E4ug8XjtvA0UZe0tOFlzgE41eK5Qu/FgG4XP8NAAD//w3ZNWg=") r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x5, 0x0, 0x3) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) 777.451192ms ago: executing program 3 (id=3230): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000080)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf2a5}}, {@errors_remount}, {@sb={'sb', 0x3d, 0x1}}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) 701.526764ms ago: executing program 8 (id=3231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000000}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, r2, &(0x7f0000000100)={r1, r2, 0x1000000}) 633.195835ms ago: executing program 3 (id=3232): r0 = inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 557.308477ms ago: executing program 3 (id=3233): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1400000}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 524.288558ms ago: executing program 4 (id=3234): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x0, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 249.258504ms ago: executing program 8 (id=3235): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x2, 0x3, 0x1, 0x1000004}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 74.052978ms ago: executing program 3 (id=3236): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0xfffffffc}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 8.393579ms ago: executing program 3 (id=3237): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0x1}}, 0x18) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendto$inet_nvme_of_msg(r0, 0x0, 0x6c20, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=3238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) stat(0x0, 0x0) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) kernel console output (not intermixed with test programs): [ 147.375303][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.494774][ T9236] bridge0: port 3(macsec1) entered blocking state [ 147.503857][ T9236] bridge0: port 3(macsec1) entered disabled state [ 147.513052][ T9236] macsec1: entered allmulticast mode [ 147.519408][ T9236] bridge0: entered allmulticast mode [ 147.525604][ T9236] bridge0: entered promiscuous mode [ 147.541505][ T9236] macsec1: left allmulticast mode [ 147.549207][ T9236] bridge0: left allmulticast mode [ 147.617801][ T3413] bridge0: left promiscuous mode [ 148.120837][ T5618] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.132319][ T5618] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.159958][ T5618] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.169429][ T5618] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.520181][ T9270] syz.8.2124 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 148.593481][ T9270] CPU: 1 UID: 0 PID: 9270 Comm: syz.8.2124 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.593557][ T9270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.593571][ T9270] Call Trace: [ 148.593577][ T9270] [ 148.593585][ T9270] __dump_stack+0x1d/0x30 [ 148.593689][ T9270] dump_stack_lvl+0x95/0xd0 [ 148.593713][ T9270] dump_stack+0x15/0x1b [ 148.593736][ T9270] dump_header+0x80/0x240 [ 148.593764][ T9270] oom_kill_process+0x295/0x350 [ 148.593807][ T9270] out_of_memory+0x981/0xbc0 [ 148.593848][ T9270] try_charge_memcg+0x621/0xa00 [ 148.593913][ T9270] ? __rcu_read_unlock+0x4e/0x70 [ 148.593955][ T9270] __memcg_kmem_charge_page+0x199/0x3a0 [ 148.593987][ T9270] __alloc_frozen_pages_noprof+0x18a/0x350 [ 148.594080][ T9270] alloc_pages_mpol+0xa9/0x1d0 [ 148.594111][ T9270] alloc_pages_noprof+0x8f/0x140 [ 148.594143][ T9270] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 148.594244][ T9270] __kvmalloc_node_noprof+0x3a0/0x590 [ 148.594273][ T9270] ? futex_hash_allocate+0x192/0x920 [ 148.594361][ T9270] ? futex_hash_allocate+0x192/0x920 [ 148.594386][ T9270] ? futex_hash_allocate+0x192/0x920 [ 148.594417][ T9270] futex_hash_allocate+0x192/0x920 [ 148.594488][ T9270] ? cap_task_prctl+0x13f/0x6b0 [ 148.594589][ T9270] futex_hash_prctl+0xd8/0xf0 [ 148.594616][ T9270] __se_sys_prctl+0x4f4/0x13b0 [ 148.594653][ T9270] __x64_sys_prctl+0x67/0x80 [ 148.594679][ T9270] x64_sys_call+0x2533/0x3020 [ 148.594733][ T9270] do_syscall_64+0x136/0x3c0 [ 148.594754][ T9270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.594775][ T9270] RIP: 0033:0x7fbbc444de59 [ 148.594848][ T9270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.594873][ T9270] RSP: 002b:00007fbbc2e86028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 148.594910][ T9270] RAX: ffffffffffffffda RBX: 00007fbbc46d6090 RCX: 00007fbbc444de59 [ 148.594928][ T9270] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 148.594942][ T9270] RBP: 00007fbbc44e3e6f R08: 0000000000000000 R09: 0000000000000000 [ 148.594954][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.594968][ T9270] R13: 00007fbbc46d6128 R14: 00007fbbc46d6090 R15: 00007ffcbdf4e5c8 [ 148.595017][ T9270] [ 148.845956][ T9270] memory: usage 245060kB, limit 307200kB, failcnt 167 [ 148.879088][ T9270] memory+swap: usage 155668kB, limit 9007199254740988kB, failcnt 0 [ 148.909708][ T9270] kmem: usage 39320kB, limit 9007199254740988kB, failcnt 0 [ 148.929715][ T9270] Memory cgroup stats for /syz8: [ 148.929965][ T9270] cache 0 [ 148.938119][ T9270] rss 29208576 [ 148.941532][ T9270] shmem 0 [ 148.944491][ T9270] mapped_file 0 [ 148.948219][ T9270] dirty 0 [ 148.951249][ T9270] writeback 0 [ 148.954572][ T9270] workingset_refault_anon 6 [ 148.959120][ T9270] workingset_refault_file 0 [ 148.963640][ T9270] swap 49152 [ 148.967216][ T9270] swapcached 77824 [ 148.971100][ T9270] pgpgin 8642 [ 148.974503][ T9270] pgpgout 1510 [ 148.974785][ T9281] bridge0: port 3(macsec1) entered blocking state [ 148.977953][ T9270] pgfault 9996 [ 148.977964][ T9270] pgmajfault 1 [ 148.977970][ T9270] inactive_anon 0 [ 148.978044][ T9270] active_anon 4096 [ 148.978053][ T9270] inactive_file 0 [ 148.978060][ T9270] active_file 0 [ 148.978066][ T9270] unevictable 29208576 [ 148.978073][ T9270] hierarchical_memory_limit 314572800 [ 148.978162][ T9270] hierarchical_memsw_limit 9223372036854771712 [ 148.978174][ T9270] total_cache 0 [ 148.978182][ T9270] total_rss 29208576 [ 148.978191][ T9270] total_shmem 0 [ 148.978200][ T9270] total_mapped_file 0 [ 148.978209][ T9270] total_dirty 0 [ 148.978218][ T9270] total_writeback 0 [ 148.978228][ T9270] total_workingset_refault_anon 6 [ 148.978239][ T9270] total_workingset_refault_file 0 [ 149.006853][ T9281] bridge0: port 3(macsec1) entered disabled state [ 149.010330][ T9270] total_swap 49152 [ 149.010342][ T9270] total_swapcached 77824 [ 149.010351][ T9270] total_pgpgin 8642 [ 149.010358][ T9270] total_pgpgout 1510 [ 149.010366][ T9270] total_pgfault 9996 [ 149.010400][ T9270] total_pgmajfault 1 [ 149.010409][ T9270] total_inactive_anon 0 [ 149.010418][ T9270] total_active_anon 4096 [ 149.010428][ T9270] total_inactive_file 0 [ 149.010437][ T9270] total_active_file 0 [ 149.010447][ T9270] total_unevictable 29208576 [ 149.010457][ T9270] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2124,pid=9267,uid=0 [ 149.010588][ T9270] Memory cgroup out of memory: Killed process 9267 (syz.8.2124) total-vm:96360kB, anon-rss:29740kB, file-rss:66292kB, shmem-rss:0kB, UID:0 pgtables:252kB oom_score_adj:1000 [ 149.160077][ T9281] macsec1: entered allmulticast mode [ 149.166518][ T9281] bridge0: entered allmulticast mode [ 149.219537][ T9281] macsec1: left allmulticast mode [ 149.225207][ T9281] bridge0: left allmulticast mode [ 149.487562][ T9294] xt_hashlimit: size too large, truncated to 1048576 [ 149.541835][ T9302] loop4: detected capacity change from 0 to 512 [ 149.570165][ T9302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.654565][ T9302] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.692330][ T9312] netlink: 'syz.8.2140': attribute type 18 has an invalid length. [ 149.708893][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 149.708909][ T28] audit: type=1400 audit(1784108138.053:785): avc: denied { write } for pid=9301 comm="syz.4.2138" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.726252][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'. [ 149.765579][ T28] audit: type=1400 audit(1784108138.103:786): avc: denied { write } for pid=9301 comm="syz.4.2138" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.794154][ T9312] netlink: 'syz.8.2140': attribute type 18 has an invalid length. [ 149.802108][ T49] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.815848][ T49] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.826649][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'. [ 149.837787][ T49] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.846977][ T49] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.936824][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.079276][ T8674] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.594059][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2159'. [ 151.396760][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2170'. [ 151.798799][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.818469][ T9395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.859316][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 2304 - 0 [ 151.868805][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.883090][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 2304 - 0 [ 151.903159][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.929186][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 2304 - 0 [ 151.968319][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.004750][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 2304 - 0 [ 152.022103][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.107601][ T4444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.113807][ T3854] Bluetooth: hci0: command 0x1003 tx timeout [ 152.387224][ T28] audit: type=1400 audit(1784108140.733:787): avc: denied { create } for pid=9437 comm="syz.3.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.427584][ T28] audit: type=1400 audit(1784108140.763:788): avc: denied { write } for pid=9437 comm="syz.3.2184" path="socket:[24809]" dev="sockfs" ino=24809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.456202][ T9432] loop5: detected capacity change from 0 to 8192 [ 152.488265][ T28] audit: type=1400 audit(1784108140.823:789): avc: denied { mounton } for pid=9430 comm="syz.5.2181" path="/232/file1/bus" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 152.627626][ T5952] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 152.635787][ T5952] FAT-fs (loop5): Filesystem has been set read-only [ 152.660789][ T28] audit: type=1400 audit(1784108141.003:790): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 153.011781][ T28] audit: type=1400 audit(1784108141.353:791): avc: denied { append } for pid=9445 comm="syz.4.2187" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.450219][ T9479] loop4: detected capacity change from 0 to 512 [ 153.451219][ T9472] loop2: detected capacity change from 0 to 8192 [ 153.468524][ T9479] EXT4-fs: Ignoring removed i_version option [ 153.497522][ T9472] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 153.505455][ T9483] netlink: 'syz.8.2203': attribute type 1 has an invalid length. [ 153.511376][ T9472] FAT-fs (loop2): Filesystem has been set read-only [ 153.542843][ T9479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.556547][ T9483] gretap1: entered allmulticast mode [ 153.586934][ T9479] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.762868][ T9503] xt_hashlimit: size too large, truncated to 1048576 [ 153.778056][ T9505] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2211'. [ 154.334245][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.769855][ T9524] loop4: detected capacity change from 0 to 512 [ 154.777081][ T9524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.821569][ T9524] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #11: comm syz.4.2217: corrupted in-inode xattr: invalid ea_ino [ 154.882429][ T9524] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 154.884271][ T9524] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2217: couldn't read orphan inode 11 (err -117) [ 154.893591][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 154.893612][ C1] EXT4-fs (loop4): initial error at time 1784108143: ext4_iget_extra_inode:5180: inode 11 [ 154.893646][ C1] EXT4-fs (loop4): last error at time 1784108143: ext4_iget_extra_inode:5180: inode 11 [ 154.931983][ T9524] loop4: lost filesystem error report for type 5 error -117 [ 154.933823][ T9524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.099216][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.638389][ T28] audit: type=1400 audit(1784108143.973:792): avc: denied { create } for pid=9571 comm="syz.8.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.674035][ T9561] loop5: detected capacity change from 0 to 512 [ 155.687699][ T28] audit: type=1400 audit(1784108143.993:793): avc: denied { ioctl } for pid=9571 comm="syz.8.2239" path="socket:[24980]" dev="sockfs" ino=24980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.719468][ T28] audit: type=1400 audit(1784108143.993:794): avc: denied { bind } for pid=9571 comm="syz.8.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.750733][ T28] audit: type=1400 audit(1784108143.993:795): avc: denied { setopt } for pid=9571 comm="syz.8.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.770452][ T28] audit: type=1400 audit(1784108143.993:796): avc: denied { read } for pid=9571 comm="syz.8.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.831919][ T9561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.849536][ T28] audit: type=1400 audit(1784108144.043:797): avc: denied { write } for pid=9571 comm="syz.8.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.896750][ T9561] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.933037][ T9588] 9p: Bad value for 'source' [ 156.224403][ T28] audit: type=1400 audit(1784108144.563:798): avc: denied { create } for pid=9559 comm="syz.5.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 156.275787][ T5952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.611861][ T28] audit: type=1400 audit(1784108144.953:799): avc: denied { write } for pid=9597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.651923][ T28] audit: type=1400 audit(1784108144.993:800): avc: denied { write } for pid=9608 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 156.698876][ T9617] loop8: detected capacity change from 0 to 256 [ 156.720506][ T9617] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.826509][ T9629] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16385) [ 156.859669][ T9629] FAT-fs (loop8): Filesystem has been set read-only [ 156.882365][ T9629] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16385) [ 156.896500][ T28] audit: type=1400 audit(1784108145.233:801): avc: denied { write } for pid=9621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.762656][ T118] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.859315][ T9671] loop8: detected capacity change from 0 to 512 [ 157.870041][ T118] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.894289][ T9671] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.928156][ T9671] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.113406][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.135670][ T118] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.283159][ T118] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.345293][ T9676] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 158.838963][ T9718] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2270'. [ 159.049151][ T118] bond0 (unregistering): Released all slaves [ 159.066187][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 159.349329][ T118] hsr_slave_0: left promiscuous mode [ 159.357607][ T118] hsr_slave_1: left promiscuous mode [ 159.377695][ T118] veth1_macvtap: left promiscuous mode [ 159.384846][ T118] veth0_macvtap: left promiscuous mode [ 159.391335][ T118] veth1_vlan: left promiscuous mode [ 159.410325][ T118] veth0_vlan: left promiscuous mode [ 159.572703][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 159.722011][ T9783] loop8: detected capacity change from 0 to 8192 [ 159.743889][ T9783] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.773438][ T118] IPVS: stop unused estimator thread 0... [ 159.876826][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 160.097454][ T9719] syz.2.2249 (9719) used greatest stack depth: 8424 bytes left [ 160.157856][ T9831] loop8: detected capacity change from 0 to 512 [ 160.183131][ T9831] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 160.206889][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 160.217082][ T9831] EXT4-fs (loop8): 1 orphan inode deleted [ 160.223578][ T9831] EXT4-fs (loop8): 1 truncate cleaned up [ 160.231130][ T9831] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.254153][ T9831] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.8.2295: path /43/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 160.307659][ T9835] loop2: detected capacity change from 0 to 512 [ 160.322378][ T9831] EXT4-fs (loop8): Remounting filesystem read-only [ 160.414116][ T9835] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 160.425107][ T9835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 160.442715][ T9835] System zones: 0-1, 15-15, 18-18, 34-34 [ 160.453361][ T9835] EXT4-fs (loop2): orphan cleanup on readonly fs [ 160.461790][ T9835] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 160.477990][ T9835] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 160.496695][ T9835] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2296: bg 0: block 40: padding at end of block bitmap is not set [ 160.527492][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.536692][ T9835] loop2: lost filesystem error report for type 5 error -117 [ 160.538907][ T9835] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 160.546670][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 160.546817][ C1] EXT4-fs (loop2): initial error at time 1784108148: ext4_validate_block_bitmap:441 [ 160.546997][ C1] EXT4-fs (loop2): last error at time 1784108148: ext4_validate_block_bitmap:441 [ 160.587614][ T9835] loop2: lost filesystem error report for type 5 error -117 [ 160.593872][ T9835] EXT4-fs (loop2): 1 truncate cleaned up [ 160.650722][ T9835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.718380][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 160.718398][ T28] audit: type=1400 audit(1784108149.053:819): avc: denied { remount } for pid=9834 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 160.719278][ T9835] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 160.845095][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.439574][ T9914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.472634][ T9914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.081857][ T9929] xt_hashlimit: size too large, truncated to 1048576 [ 162.989275][ T9940] xt_socket: unknown flags 0x4c [ 163.000458][ T9943] netlink: 'syz.8.2335': attribute type 1 has an invalid length. [ 163.009901][ T9943] netlink: 'syz.8.2335': attribute type 4 has an invalid length. [ 163.019413][ T9943] netlink: 9491 bytes leftover after parsing attributes in process `syz.8.2335'. [ 163.204885][ T9965] loop4: detected capacity change from 0 to 512 [ 163.212362][ T28] audit: type=1400 audit(1784108151.543:820): avc: denied { read } for pid=9954 comm="syz.5.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 163.239115][ T9965] EXT4-fs: test_dummy_encryption option not supported [ 163.272190][ T9965] tipc: Started in network mode [ 163.278779][ T9965] tipc: Node identity ac14140f, cluster identity 4711 [ 163.297601][ T9965] tipc: Enabled bearer , priority 10 [ 163.512630][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2352'. [ 163.920187][T10024] loop2: detected capacity change from 0 to 512 [ 163.957540][T10024] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2370: iget: bad i_size value: 38620345925642 [ 163.976056][T10024] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.978995][T10024] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2370: couldn't read orphan inode 15 (err -117) [ 163.988192][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 163.988227][ C0] EXT4-fs (loop2): initial error at time 1784108152: ext4_orphan_get:1399: inode 15 [ 163.988256][ C0] EXT4-fs (loop2): last error at time 1784108152: ext4_orphan_get:1399: inode 15 [ 164.111482][T10030] loop8: detected capacity change from 0 to 4096 [ 164.130937][T10030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.135100][T10024] loop2: lost filesystem error report for type 5 error -117 [ 164.161595][ T28] audit: type=1400 audit(1784108152.503:821): avc: denied { write } for pid=10029 comm="syz.8.2372" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.223305][T10024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.280110][ T28] audit: type=1400 audit(1784108152.623:822): avc: denied { write } for pid=10023 comm="syz.2.2370" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.313772][ T28] audit: type=1400 audit(1784108152.623:823): avc: denied { create } for pid=10023 comm="syz.2.2370" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 164.374612][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.384950][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.415946][ T3378] tipc: Node number set to 2886997007 [ 164.480131][T10049] IPVS: persistence engine module ip_vs_pe_s not found [ 164.646193][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2386'. [ 164.912629][ T28] audit: type=1400 audit(1784108153.253:824): avc: denied { append } for pid=10096 comm="syz.8.2408" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 164.965663][ T8674] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.630319][ T28] audit: type=1400 audit(1784108153.973:825): avc: denied { connect } for pid=10169 comm="syz.2.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.286396][T10240] netlink: 'syz.4.2409': attribute type 3 has an invalid length. [ 166.295710][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2409'. [ 166.306977][T10240] netlink: 'syz.4.2409': attribute type 3 has an invalid length. [ 166.316135][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2409'. [ 166.444474][T10237] loop5: detected capacity change from 0 to 32768 [ 166.507869][T10237] loop5: p1 [ 166.889158][ T28] audit: type=1400 audit(1784108155.233:826): avc: denied { accept } for pid=10272 comm="syz.2.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 166.985988][ T4444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.986451][ T3854] Bluetooth: hci0: command 0x1003 tx timeout [ 167.382177][T10284] syz.3.2428 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 167.393209][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.3.2428 Not tainted syzkaller #0 PREEMPT(lazy) [ 167.393276][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.393290][T10284] Call Trace: [ 167.393297][T10284] [ 167.393305][T10284] __dump_stack+0x1d/0x30 [ 167.393368][T10284] dump_stack_lvl+0x95/0xd0 [ 167.393391][T10284] dump_stack+0x15/0x1b [ 167.393417][T10284] dump_header+0x80/0x240 [ 167.393444][T10284] oom_kill_process+0x295/0x350 [ 167.393520][T10284] out_of_memory+0x981/0xbc0 [ 167.393553][T10284] try_charge_memcg+0x621/0xa00 [ 167.393595][T10284] charge_memcg+0x6d/0x120 [ 167.393667][T10284] __mem_cgroup_charge+0x28/0xb0 [ 167.393709][T10284] handle_mm_fault+0x1041/0x2da0 [ 167.393743][T10284] ? _raw_spin_lock+0x52/0xa0 [ 167.393823][T10284] __get_user_pages+0x129c/0x1f10 [ 167.393868][T10284] __mm_populate+0x242/0x390 [ 167.393967][T10284] __se_sys_mlockall+0x35e/0x3c0 [ 167.394000][T10284] __x64_sys_mlockall+0x1f/0x30 [ 167.394078][T10284] x64_sys_call+0xf90/0x3020 [ 167.394106][T10284] do_syscall_64+0x136/0x3c0 [ 167.394133][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.394198][T10284] RIP: 0033:0x7f7f220dde59 [ 167.394213][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.394232][T10284] RSP: 002b:00007f7f20b37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 167.394253][T10284] RAX: ffffffffffffffda RBX: 00007f7f22365fa0 RCX: 00007f7f220dde59 [ 167.394340][T10284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 167.394423][T10284] RBP: 00007f7f22173e6f R08: 0000000000000000 R09: 0000000000000000 [ 167.394441][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.394506][T10284] R13: 00007f7f22366038 R14: 00007f7f22365fa0 R15: 00007ffcef38f378 [ 167.394528][T10284] [ 167.616499][T10284] memory: usage 307176kB, limit 307200kB, failcnt 3364 [ 167.623541][T10284] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 167.631788][T10284] kmem: usage 296584kB, limit 9007199254740988kB, failcnt 0 [ 167.639318][T10284] Memory cgroup stats for /syz3: [ 167.639737][T10284] cache 9654272 [ 167.648935][T10284] rss 1191936 [ 167.652383][T10284] shmem 0 [ 167.655373][T10284] mapped_file 9654272 [ 167.659792][T10284] dirty 8192 [ 167.663184][T10284] writeback 0 [ 167.667531][T10284] workingset_refault_anon 1728 [ 167.672439][T10284] workingset_refault_file 4569 [ 167.677406][T10284] swap 204800 [ 167.680770][T10284] swapcached 22863872 [ 167.684808][T10284] pgpgin 129038 [ 167.688669][T10284] pgpgout 126390 [ 167.692393][T10284] pgfault 186973 [ 167.705448][T10284] pgmajfault 347 [ 167.712170][T10284] inactive_anon 0 [ 167.718521][T10284] active_anon 0 [ 167.722109][T10284] inactive_file 0 [ 167.725797][T10284] active_file 0 [ 167.729590][T10284] unevictable 10846208 [ 167.733818][T10284] hierarchical_memory_limit 314572800 [ 167.739381][T10284] hierarchical_memsw_limit 9223372036854771712 [ 167.745604][T10284] total_cache 9654272 [ 167.749860][T10284] total_rss 1191936 [ 167.753812][T10284] total_shmem 0 [ 167.757540][T10284] total_mapped_file 9654272 [ 167.792931][T10284] total_dirty 8192 [ 167.799963][T10284] total_writeback 0 [ 167.807490][T10284] total_workingset_refault_anon 1728 [ 167.813000][T10284] total_workingset_refault_file 4569 [ 167.818621][T10284] total_swap 204800 [ 167.822513][T10284] total_swapcached 22863872 [ 167.827290][T10284] total_pgpgin 129038 [ 167.831360][T10284] total_pgpgout 126390 [ 167.836798][T10284] total_pgfault 186973 [ 167.871294][T10284] total_pgmajfault 347 [ 167.915441][T10284] total_inactive_anon 0 [ 167.921398][T10284] total_active_anon 0 [ 167.929900][T10300] loop5: detected capacity change from 0 to 512 [ 167.939987][T10284] total_inactive_file 0 [ 167.954400][T10284] total_active_file 0 [ 167.974442][T10300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.992459][T10284] total_unevictable 10846208 [ 168.008200][T10304] loop2: detected capacity change from 0 to 2048 [ 168.021279][T10284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.866,pid=5767,uid=0 [ 168.050738][T10304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.063356][T10300] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.111182][ T28] audit: type=1400 audit(1784108156.443:827): avc: denied { write } for pid=10299 comm="syz.5.2431" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.139470][T10302] loop8: detected capacity change from 0 to 512 [ 168.139906][T10304] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 168.140045][T10304] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 168.140075][T10304] EXT4-fs (loop2): This should not happen!! Data will be lost [ 168.140075][T10304] [ 168.140091][T10304] EXT4-fs (loop2): Total free blocks count 0 [ 168.140109][T10304] EXT4-fs (loop2): Free/Dirty block details [ 168.140124][T10304] EXT4-fs (loop2): free_blocks=2415919504 [ 168.140141][T10304] EXT4-fs (loop2): dirty_blocks=64 [ 168.155922][T10284] Memory cgroup out of memory: Killed process 5767 (syz.3.866) total-vm:96096kB, anon-rss:1240kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 168.230107][T10310] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.246197][ T28] audit: type=1400 audit(1784108156.453:828): avc: denied { write } for pid=10303 comm="syz.2.2434" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.271951][ T5952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.289085][T10304] EXT4-fs (loop2): Block reservation details [ 168.305993][T10310] EXT4-fs (loop2): This should not happen!! Data will be lost [ 168.305993][T10310] [ 168.373529][T10315] loop5: detected capacity change from 0 to 512 [ 168.396538][ T3303] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 168.399136][T10302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.435170][T10302] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.441748][T10315] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.535485][T10315] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #11: comm syz.5.2435: corrupted in-inode xattr: invalid ea_ino [ 168.556394][T10315] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.565945][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 168.581582][ C1] EXT4-fs (loop5): initial error at time 1784108156: ext4_iget_extra_inode:5180: inode 11 [ 168.587427][T10315] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2435: couldn't read orphan inode 11 (err -117) [ 168.591823][ C1] EXT4-fs (loop5): last error at time 1784108156: ext4_iget_extra_inode:5180: inode 11 [ 168.664190][T10323] netlink: 'syz.4.2438': attribute type 4 has an invalid length. [ 168.676973][T10315] loop5: lost filesystem error report for type 5 error -117 [ 168.696335][ T28] audit: type=1400 audit(1784108157.033:829): avc: denied { setopt } for pid=10301 comm="syz.8.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.703965][T10315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.764910][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.837583][T10334] netlink: 'syz.2.2443': attribute type 12 has an invalid length. [ 168.954257][ T5952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.128298][T10354] loop2: detected capacity change from 0 to 512 [ 169.217508][T10354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.233694][T10354] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.592649][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.722060][T10361] loop4: detected capacity change from 0 to 128 [ 169.847390][T10361] syz.4.2453: attempt to access beyond end of device [ 169.847390][T10361] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 169.917080][T10361] syz.4.2453: attempt to access beyond end of device [ 169.917080][T10361] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 169.943483][T10361] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 169.965676][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2458'. [ 169.973296][T10361] syz.4.2453: attempt to access beyond end of device [ 169.973296][T10361] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 170.027553][T10361] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 170.049019][T10361] syz.4.2453: attempt to access beyond end of device [ 170.049019][T10361] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 170.107961][T10361] syz.4.2453: attempt to access beyond end of device [ 170.107961][T10361] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 170.145514][T10361] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 170.180009][T10361] syz.4.2453: attempt to access beyond end of device [ 170.180009][T10361] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 170.237634][T10361] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 170.286551][T10361] syz.4.2453: attempt to access beyond end of device [ 170.286551][T10361] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 170.339072][T10361] syz.4.2453: attempt to access beyond end of device [ 170.339072][T10361] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 170.376490][T10361] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 170.398422][T10361] syz.4.2453: attempt to access beyond end of device [ 170.398422][T10361] loop4: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 170.426450][T10361] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 170.452350][T10361] syz.4.2453: attempt to access beyond end of device [ 170.452350][T10361] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 170.595268][ T28] audit: type=1400 audit(1784108158.933:830): avc: denied { write } for pid=10386 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.638517][T10399] netlink: 'syz.8.2461': attribute type 10 has an invalid length. [ 170.691482][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.714961][ T28] audit: type=1400 audit(1784108159.003:831): avc: denied { write } for pid=10398 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.744995][T10399] bond0: (slave team0): Enslaving as an active interface with an up link [ 170.897959][ T28] audit: type=1400 audit(1784108159.243:832): avc: denied { write } for pid=10404 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.996413][ T28] audit: type=1400 audit(1784108159.323:833): avc: denied { write } for pid=10418 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.475827][T10431] syzkaller0: entered promiscuous mode [ 171.490001][T10431] syzkaller0: entered allmulticast mode [ 171.678406][T10450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.688832][T10450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.716239][ T28] audit: type=1400 audit(1784108160.053:834): avc: denied { write } for pid=10435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.779565][ T28] audit: type=1400 audit(1784108160.083:835): avc: denied { read } for pid=10448 comm="syz.8.2471" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 171.955772][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 171.955792][ T28] audit: type=1400 audit(1784108160.293:838): avc: denied { write } for pid=10456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.020868][ T28] audit: type=1400 audit(1784108160.363:839): avc: denied { write } for pid=10472 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.312800][T10488] loop2: detected capacity change from 0 to 1024 [ 172.337082][T10488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.339479][T10484] loop4: detected capacity change from 0 to 512 [ 172.371164][T10488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.374090][T10484] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 172.386242][T10490] netlink: 'syz.8.2480': attribute type 12 has an invalid length. [ 172.394193][T10484] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 172.412629][ T28] audit: type=1400 audit(1784108160.743:840): avc: denied { write } for pid=10487 comm="syz.2.2479" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.458764][T10484] System zones: 0-1, 15-15, 18-18, 34-34 [ 172.474659][T10484] EXT4-fs (loop4): orphan cleanup on readonly fs [ 172.493326][T10484] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 172.503584][T10484] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.518858][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.528739][T10484] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 172.545561][T10484] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2475: bg 0: block 40: padding at end of block bitmap is not set [ 172.564940][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2484'. [ 172.574313][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2484'. [ 172.590817][T10484] loop4: lost filesystem error report for type 5 error -117 [ 172.593454][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2484'. [ 172.594218][T10484] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 172.601227][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2484'. [ 172.610486][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 172.610537][ C0] EXT4-fs (loop4): initial error at time 1784108160: ext4_validate_block_bitmap:441 [ 172.610598][ C0] EXT4-fs (loop4): last error at time 1784108160: ext4_validate_block_bitmap:441 [ 172.665151][T10484] loop4: lost filesystem error report for type 5 error -117 [ 172.667045][T10484] EXT4-fs (loop4): 1 truncate cleaned up [ 172.722918][T10484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.779399][T10484] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 172.825615][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.843846][T10514] loop8: detected capacity change from 0 to 2048 [ 172.885758][T10514] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.906368][T10514] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2490: bg 0: block 234: padding at end of block bitmap is not set [ 172.907459][ T28] audit: type=1400 audit(1784108161.243:841): avc: denied { write } for pid=10513 comm="syz.8.2490" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 172.972511][T10514] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 173.019050][T10514] EXT4-fs (loop8): This should not happen!! Data will be lost [ 173.019050][T10514] [ 173.059405][T10514] EXT4-fs (loop8): Total free blocks count 0 [ 173.096801][T10514] EXT4-fs (loop8): Free/Dirty block details [ 173.117706][T10514] EXT4-fs (loop8): free_blocks=0 [ 173.145361][T10514] EXT4-fs (loop8): dirty_blocks=16 [ 173.160006][T10514] EXT4-fs (loop8): Block reservation details [ 173.186401][T10514] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 173.193755][T10547] netlink: 'syz.5.2503': attribute type 4 has an invalid length. [ 173.203101][T10547] netlink: 'syz.5.2503': attribute type 4 has an invalid length. [ 173.250852][ T8821] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 173.277193][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.324492][ T28] audit: type=1400 audit(1784108161.663:842): avc: denied { connect } for pid=10552 comm="syz.8.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.408716][T10555] loop8: detected capacity change from 0 to 8192 [ 173.419061][T10555] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.808778][T10567] netlink: 'syz.5.2510': attribute type 12 has an invalid length. [ 174.028456][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.054943][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.854845][T10582] loop8: detected capacity change from 0 to 512 [ 174.968067][T10582] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.995532][ T28] audit: type=1400 audit(1784108163.333:843): avc: denied { write } for pid=10581 comm="syz.8.2517" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.025971][ T28] audit: type=1400 audit(1784108163.363:844): avc: denied { write } for pid=10581 comm="syz.8.2517" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 176.750988][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.994960][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2527'. [ 177.037724][T10605] loop5: detected capacity change from 0 to 256 [ 177.044507][T10605] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.563656][T10636] smc: net device lo applied user defined pnetid SYZ2 [ 177.571109][T10636] smc: net device lo erased user defined pnetid SYZ2 [ 177.998618][T10659] loop4: detected capacity change from 0 to 764 [ 178.422934][T10675] smc: net device lo applied user defined pnetid SYZ2 [ 178.439379][T10675] smc: net device lo erased user defined pnetid SYZ2 [ 178.592119][T10685] loop8: detected capacity change from 0 to 128 [ 178.616809][T10685] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.632156][T10685] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.670541][ T28] audit: type=1400 audit(1784108167.013:845): avc: denied { write } for pid=10684 comm="syz.8.2563" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.729968][ T8821] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.938342][T10707] netlink: 'syz.3.2570': attribute type 12 has an invalid length. [ 179.028039][T10708] loop8: detected capacity change from 0 to 8192 [ 179.069715][T10708] loop8: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 179.743724][T10724] smc: net device lo applied user defined pnetid SYZ2 [ 180.052780][T10736] smc: net device lo erased user defined pnetid SYZ2 [ 180.213848][ T28] audit: type=1400 audit(1784108168.553:846): avc: denied { ioctl } for pid=10744 comm="syz.2.2585" path="socket:[27458]" dev="sockfs" ino=27458 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.318397][T10749] netlink: 'syz.8.2584': attribute type 4 has an invalid length. [ 180.331711][T10717] udevd[10717]: inotify_add_watch(7, /dev/loop8p23, 10) failed: No such file or directory [ 180.347166][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop8p22, 10) failed: No such file or directory [ 180.351997][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop8p28, 10) failed: No such file or directory [ 180.369585][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop8p24, 10) failed: No such file or directory [ 180.379894][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop8p25, 10) failed: No such file or directory [ 180.394318][T10711] udevd[10711]: inotify_add_watch(7, /dev/loop8p31, 10) failed: No such file or directory [ 180.411072][T10753] loop2: detected capacity change from 0 to 136 [ 180.417997][T10716] udevd[10716]: inotify_add_watch(7, /dev/loop8p30, 10) failed: No such file or directory [ 180.439986][T10713] udevd[10713]: inotify_add_watch(7, /dev/loop8p29, 10) failed: No such file or directory [ 180.450441][T10714] udevd[10714]: inotify_add_watch(7, /dev/loop8p27, 10) failed: No such file or directory [ 180.452356][T10712] udevd[10712]: inotify_add_watch(7, /dev/loop8p20, 10) failed: No such file or directory [ 180.741941][T10761] random: crng reseeded on system resumption [ 180.748384][ T28] audit: type=1400 audit(1784108169.083:847): avc: denied { write } for pid=10760 comm="syz.4.2590" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.851294][ T28] audit: type=1400 audit(1784108169.083:848): avc: denied { open } for pid=10760 comm="syz.4.2590" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 181.284569][T10774] loop2: detected capacity change from 0 to 1024 [ 181.332252][T10774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.370505][T10774] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.388337][T10784] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.2598'. [ 181.425221][ T28] audit: type=1400 audit(1784108169.763:849): avc: denied { write } for pid=10758 comm="syz.2.2589" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.435610][T10759] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.2589: lblock 0 mapped to illegal pblock 0 (length 1) [ 181.451996][T10784] openvswitch: netlink: Key type 386 is out of range max 32 [ 181.473639][T10759] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 181.486034][T10759] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.486034][T10759] [ 181.576546][T10789] loop8: detected capacity change from 0 to 512 [ 181.621986][ T360] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 1) [ 181.631663][T10789] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 181.668150][ T360] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 181.691995][ T360] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.691995][ T360] [ 181.697476][T10789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.707168][ T3303] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 181.728043][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.757709][T10789] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.851796][ T28] audit: type=1400 audit(1784108170.193:850): avc: denied { write } for pid=10788 comm="syz.8.2600" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.907320][T10789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.954551][T10789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.008951][ T28] audit: type=1400 audit(1784108170.353:851): avc: denied { setopt } for pid=10819 comm="syz.5.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.029785][ T28] audit: type=1400 audit(1784108170.373:852): avc: denied { connect } for pid=10819 comm="syz.5.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.204288][T10829] netlink: 'syz.4.2615': attribute type 3 has an invalid length. [ 182.230180][T10829] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2615'. [ 182.533057][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.998654][T10845] loop5: detected capacity change from 0 to 1024 [ 183.007259][T10845] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.031863][T10845] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 183.043510][T10845] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 183.059959][T10845] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 183.083056][T10845] EXT4-fs (loop5): journal inode is deleted [ 183.574333][T10856] loop2: detected capacity change from 0 to 512 [ 184.154422][T10872] loop5: detected capacity change from 0 to 4096 [ 184.187964][T10872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.216532][ T28] audit: type=1400 audit(1784108172.553:853): avc: denied { write } for pid=10871 comm="syz.5.2635" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 184.305121][T10889] EXT4-fs (loop5): shut down requested (0) [ 184.424732][ T5952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.549865][T10901] loop5: detected capacity change from 0 to 128 [ 184.646456][T10901] syz.5.2643: attempt to access beyond end of device [ 184.646456][T10901] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 184.693690][T10901] syz.5.2643: attempt to access beyond end of device [ 184.693690][T10901] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 184.707666][T10901] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 184.716692][T10901] syz.5.2643: attempt to access beyond end of device [ 184.716692][T10901] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 184.730659][T10901] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 184.744545][T10901] syz.5.2643: attempt to access beyond end of device [ 184.744545][T10901] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 184.759820][ T28] audit: type=1400 audit(1784108173.083:854): avc: denied { write } for pid=10913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.789111][T10901] syz.5.2643: attempt to access beyond end of device [ 184.789111][T10901] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 184.802840][T10901] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 184.811712][ T28] audit: type=1400 audit(1784108173.153:855): avc: denied { write } for pid=10930 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.835232][T10901] syz.5.2643: attempt to access beyond end of device [ 184.835232][T10901] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 184.849877][T10901] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 184.866840][T10901] syz.5.2643: attempt to access beyond end of device [ 184.866840][T10901] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 184.885617][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 184.886125][T10901] syz.5.2643: attempt to access beyond end of device [ 184.886125][T10901] loop5: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 184.911282][T10901] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 184.920863][T10901] syz.5.2643: attempt to access beyond end of device [ 184.920863][T10901] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 184.942530][T10901] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 184.979131][T10901] syz.5.2643: attempt to access beyond end of device [ 184.979131][T10901] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 185.003407][ T28] audit: type=1326 audit(1784108173.343:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.3.2659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f220dde59 code=0x7ffc0000 [ 185.042502][ T28] audit: type=1326 audit(1784108173.373:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.3.2659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f220dde59 code=0x7ffc0000 [ 185.043952][T10901] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 185.081627][ T28] audit: type=1326 audit(1784108173.373:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.3.2659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f220dde59 code=0x7ffc0000 [ 185.086200][T10901] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 185.123575][ T118] bond0 (unregistering): (slave team0): Releasing backup interface [ 185.138584][ T118] bond0 (unregistering): Released all slaves [ 185.146499][ T118] bond1 (unregistering): Released all slaves [ 185.167104][ T28] audit: type=1326 audit(1784108173.373:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.3.2659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7f220dde59 code=0x7ffc0000 [ 185.178650][T10901] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 185.212425][ T28] audit: type=1326 audit(1784108173.423:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.3.2659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f220dde59 code=0x7ffc0000 [ 185.234760][T10901] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 185.309199][ T28] audit: type=1326 audit(1784108173.423:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.3.2659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7f2209e68e code=0x7ffc0000 [ 185.438886][ T28] audit: type=1326 audit(1784108173.423:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10937 comm="syz.3.2659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f220dde59 code=0x7ffc0000 [ 185.471268][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2657'. [ 185.629569][T10873] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.648643][T10873] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.701616][T10873] bridge_slave_0: entered allmulticast mode [ 185.717269][T10988] loop8: detected capacity change from 0 to 128 [ 185.724016][T10988] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.736314][T10988] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.745727][T10873] bridge_slave_0: entered promiscuous mode [ 185.770703][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 185.802831][T10873] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.817689][T10873] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.836385][T10873] bridge_slave_1: entered allmulticast mode [ 185.837545][T10995] loop5: detected capacity change from 0 to 512 [ 185.843841][T10873] bridge_slave_1: entered promiscuous mode [ 185.864528][T10995] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 185.936450][T10873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.051935][T11008] loop8: detected capacity change from 0 to 1024 [ 186.063914][T10873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.084655][T11008] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.104534][T10873] team0: Port device team_slave_0 added [ 186.116824][T11008] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 186.125583][T10873] team0: Port device team_slave_1 added [ 186.157572][T11008] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 186.179809][T11008] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 186.199327][T10873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.207190][T11008] EXT4-fs (loop8): journal inode is deleted [ 186.219129][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.260987][T11016] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2673'. [ 186.281467][T11016] openvswitch: netlink: Key type 386 is out of range max 32 [ 186.301440][T10873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.332626][T10873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.353029][T10873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.415604][T10873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.437789][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2674'. [ 186.488146][T10873] hsr_slave_0: entered promiscuous mode [ 186.500231][T10873] hsr_slave_1: entered promiscuous mode [ 186.512282][T11024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.529562][T11024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.562947][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 186.756559][ T8674] Bluetooth: hci0: Frame reassembly failed (-84) [ 186.789626][T10873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 186.808451][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.826921][T10873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 186.844272][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.863658][T10873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 186.878890][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.898211][T10873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 186.915149][T10873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 186.966966][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 187.035613][T10873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.059123][T10873] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.082158][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.089462][ T5618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.110557][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.117675][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.368900][T10873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.559791][T10873] veth0_vlan: entered promiscuous mode [ 187.569121][T10873] veth1_vlan: entered promiscuous mode [ 187.587734][T10873] veth0_macvtap: entered promiscuous mode [ 187.595642][T10873] veth1_macvtap: entered promiscuous mode [ 187.607072][T10873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.619101][T10873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.636472][ T360] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.645271][ T360] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.963570][ T360] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.980594][ T360] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.261554][T11128] loop9: detected capacity change from 0 to 4096 [ 188.306492][T11128] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.389737][T11135] EXT4-fs (loop9): shut down requested (0) [ 188.476924][T10873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.595844][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.609887][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.825998][ T4444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.871639][T11176] loop9: detected capacity change from 0 to 128 [ 190.893830][T11176] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.947576][T11176] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.999280][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 191.273789][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 191.273861][ T28] audit: type=1400 audit(1784108179.613:880): avc: denied { listen } for pid=11220 comm="syz.9.2732" lport=37261 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.314624][T11217] loop4: detected capacity change from 0 to 512 [ 191.468138][T11217] EXT4-fs (loop4): 1 orphan inode deleted [ 191.482163][T11217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.497039][T11217] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.528168][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 191.546996][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 1 [ 191.607131][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.620141][T11244] netlink: 'syz.8.2742': attribute type 1 has an invalid length. [ 191.652837][T11244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.708076][T11251] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 191.719172][T11251] netlink: 'syz.3.2745': attribute type 4 has an invalid length. [ 191.755750][T11251] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2745'. [ 191.856202][T11260] loop5: detected capacity change from 0 to 512 [ 191.897259][T11260] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 191.932478][T11260] EXT4-fs (loop5): 1 truncate cleaned up [ 191.948416][T11260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.977007][ T28] audit: type=1400 audit(1784108180.313:881): avc: denied { write } for pid=11259 comm="syz.5.2749" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.132181][ T5952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.293274][T11281] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 192.420065][T11286] netlink: 'syz.3.2758': attribute type 1 has an invalid length. [ 192.472434][T11286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.087578][T11290] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 193.278093][T11318] loop9: detected capacity change from 0 to 512 [ 193.305383][T11318] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 193.343622][T11318] EXT4-fs (loop9): 1 truncate cleaned up [ 193.354357][T11318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.475143][ T28] audit: type=1400 audit(1784108181.813:882): avc: denied { write } for pid=11317 comm="syz.9.2769" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.600046][T11345] gre1: entered promiscuous mode [ 193.699628][T10873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.790502][ T28] audit: type=1326 audit(1784108182.133:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.3.2784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f220dde59 code=0x0 [ 194.037242][T11383] loop8: detected capacity change from 0 to 8192 [ 194.063304][T11383] vfat filesystem being mounted at /134/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 194.294314][T11393] netlink: 'syz.8.2794': attribute type 1 has an invalid length. [ 194.295424][T11389] loop4: detected capacity change from 0 to 128 [ 194.307844][T11393] netlink: 101600 bytes leftover after parsing attributes in process `syz.8.2794'. [ 194.338417][T11389] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.356403][T11395] random: crng reseeded on system resumption [ 194.366159][T11389] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.371457][ T28] audit: type=1400 audit(3931591830.707:884): avc: denied { ioctl } for pid=11394 comm="syz.8.2795" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.405874][T11389] vfat filesystem being mounted at /502/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 194.436138][ T3378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 194.445402][ T3378] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.815560][T11420] random: crng reseeded on system resumption [ 195.135105][T11442] loop5: detected capacity change from 0 to 8192 [ 195.543993][T11442] loop5: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 195.628159][T11451] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 195.750274][ T360] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.850779][ T360] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.858485][T11459] loop8: detected capacity change from 0 to 128 [ 195.923721][ T360] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.988183][T11459] msdos filesystem being mounted at /143/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 196.009118][ T360] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.064519][T11459] bio_check_eod: 32 callbacks suppressed [ 196.064565][T11459] syz.8.2821: attempt to access beyond end of device [ 196.064565][T11459] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 196.113213][T11459] syz.8.2821: attempt to access beyond end of device [ 196.113213][T11459] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 196.131005][ T360] bridge_slave_1: left allmulticast mode [ 196.143107][ T360] bridge_slave_1: left promiscuous mode [ 196.150543][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.153936][T11459] buffer_io_error: 18 callbacks suppressed [ 196.153976][T11459] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 196.172890][T11459] syz.8.2821: attempt to access beyond end of device [ 196.172890][T11459] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 196.193040][ T360] bridge_slave_0: left allmulticast mode [ 196.205580][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.234322][T11459] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 196.273103][T11459] syz.8.2821: attempt to access beyond end of device [ 196.273103][T11459] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 196.377068][T11459] syz.8.2821: attempt to access beyond end of device [ 196.377068][T11459] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 196.381372][T11485] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.416151][T11459] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 196.443727][T11459] syz.8.2821: attempt to access beyond end of device [ 196.443727][T11459] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 196.466335][T11459] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 196.481835][ T360] bond3 (unregistering): (slave gretap1): Removing an active aggregator [ 196.486864][T11459] syz.8.2821: attempt to access beyond end of device [ 196.486864][T11459] loop8: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 196.513480][ T360] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 196.519468][T11459] syz.8.2821: attempt to access beyond end of device [ 196.519468][T11459] loop8: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 196.542766][T11459] Buffer I/O error on dev loop8, logical block 95, lost async page write [ 196.556160][ T360] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 196.561443][T11459] syz.8.2821: attempt to access beyond end of device [ 196.561443][T11459] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 196.590077][T11459] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 196.614214][T11459] syz.8.2821: attempt to access beyond end of device [ 196.614214][T11459] loop8: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 196.663066][ T360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.667432][T11459] Buffer I/O error on dev loop8, logical block 99, lost async page write [ 196.684562][ T360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.708241][ T360] bond0 (unregistering): Released all slaves [ 196.714455][T11459] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 196.720249][ T360] bond1 (unregistering): Released all slaves [ 196.757241][ T360] bond2 (unregistering): Released all slaves [ 196.769350][ T360] bond3 (unregistering): Released all slaves [ 196.784714][ T360] bond4 (unregistering): Released all slaves [ 196.836365][ T360] tipc: Disabling bearer [ 196.844027][ T360] tipc: Left network mode [ 196.945104][ T360] hsr_slave_0: left promiscuous mode [ 196.958064][ T360] hsr_slave_1: left promiscuous mode [ 196.969601][ T360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.983219][ T360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.992980][ T360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.000978][ T360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.023556][ T360] veth1_macvtap: left promiscuous mode [ 197.030911][ T360] veth0_macvtap: left promiscuous mode [ 197.037814][ T360] veth1_vlan: left promiscuous mode [ 197.043233][ T360] veth0_vlan: left promiscuous mode [ 197.138199][ T28] audit: type=1400 audit(3931591833.467:885): avc: denied { write } for pid=11499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.173258][T11507] loop9: detected capacity change from 0 to 8192 [ 197.195711][T10717] udevd[10717]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 197.213603][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p10, 10) failed: No such file or directory [ 197.231657][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 197.242310][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 197.253150][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 197.256743][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 197.274921][ T28] audit: type=1400 audit(3931591833.597:886): avc: denied { write } for pid=11520 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.308408][T10711] udevd[10711]: inotify_add_watch(7, /dev/loop5p13, 10) failed: No such file or directory [ 197.315081][ T2980] loop9: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 197.326556][T10715] udevd[10715]: inotify_add_watch(7, /dev/loop5p8, 10) failed: No such file or directory [ 197.430097][T10714] udevd[10714]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 197.452340][T10712] udevd[10712]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 197.524816][ T360] team0 (unregistering): Port device team_slave_1 removed [ 197.535648][ T360] team0 (unregistering): Port device team_slave_0 removed [ 197.602925][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 197.687689][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.702552][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.710331][T11456] bridge_slave_0: entered allmulticast mode [ 197.718799][T11456] bridge_slave_0: entered promiscuous mode [ 197.727565][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.737536][T11546] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2843'. [ 197.767678][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.771654][ T28] audit: type=1400 audit(3931591834.107:887): avc: denied { write } for pid=11536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.797766][T11456] bridge_slave_1: entered allmulticast mode [ 197.802368][T11456] bridge_slave_1: entered promiscuous mode [ 197.813102][T11546] netlink: zone id is out of range [ 197.845964][ T28] audit: type=1400 audit(3931591834.177:888): avc: denied { write } for pid=11556 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.898179][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.909790][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.940077][T11456] team0: Port device team_slave_0 added [ 197.963218][T11456] team0: Port device team_slave_1 added [ 197.983509][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.991369][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.031051][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.043121][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.050977][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.077901][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.157852][T11456] hsr_slave_0: entered promiscuous mode [ 198.172298][T11456] hsr_slave_1: entered promiscuous mode [ 198.189808][T11456] debugfs: 'hsr0' already exists in 'hsr' [ 198.203801][T11456] Cannot create hsr debugfs directory [ 198.375649][ T28] audit: type=1400 audit(3931591834.707:889): avc: denied { write } for pid=11566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.496996][ T28] audit: type=1400 audit(3931591834.817:890): avc: denied { write } for pid=11585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.568458][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 198.730093][T11507] loop9: p1 p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 198.963775][T11456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.204465][T11456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.224713][T11456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.263861][T11456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.277862][T11456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.303503][ T28] audit: type=1400 audit(3931591835.637:891): avc: denied { write } for pid=11590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.324332][T11456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.369479][T11456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.413202][T11456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.596468][T11456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.634907][ T28] audit: type=1400 audit(3931591835.967:892): avc: denied { write } for pid=11613 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.673136][T11456] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.709602][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.716738][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.737689][ T28] audit: type=1400 audit(3931591836.077:893): avc: denied { bind } for pid=11587 comm="syz.8.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.840826][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.847937][ T5618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.930784][ T28] audit: type=1400 audit(3931591837.257:894): avc: denied { write } for pid=11587 comm="syz.8.2861" path="socket:[32096]" dev="sockfs" ino=32096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 202.124003][T11659] loop8: detected capacity change from 0 to 256 [ 202.160294][T11659] vfat filesystem being mounted at /152/file1 supports timestamps until 2107-12-31 (0x10390cdaa) [ 202.292605][T10712] udevd[10712]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 202.296632][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop9p13, 10) failed: No such file or directory [ 202.318191][T10716] udevd[10716]: inotify_add_watch(7, /dev/loop9p11, 10) failed: No such file or directory [ 202.330916][T10717] udevd[10717]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 202.342405][ T3553] udevd[3553]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 202.343131][T10711] udevd[10711]: inotify_add_watch(7, /dev/loop9p12, 10) failed: No such file or directory [ 202.363391][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 202.386724][T10713] udevd[10713]: inotify_add_watch(7, /dev/loop9p10, 10) failed: No such file or directory [ 202.389391][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop9p9, 10) failed: No such file or directory [ 202.410776][T10716] udevd[10716]: inotify_add_watch(7, /dev/loop9p16, 10) failed: No such file or directory [ 202.920392][T11672] Invalid argument reading file caps for ./file0 [ 203.326660][T11456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.652889][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 203.652907][ T28] audit: type=1400 audit(3931591839.987:897): avc: denied { write } for pid=11673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.762935][ T28] audit: type=1400 audit(3931591840.097:898): avc: denied { write } for pid=11699 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.821281][T11456] veth0_vlan: entered promiscuous mode [ 203.850476][T11456] veth1_vlan: entered promiscuous mode [ 204.068118][ T28] audit: type=1400 audit(3931591840.407:899): avc: denied { write } for pid=11707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.107770][T11456] veth0_macvtap: entered promiscuous mode [ 204.164712][ T28] audit: type=1400 audit(3931591840.497:900): avc: denied { write } for pid=11726 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.212653][T11456] veth1_macvtap: entered promiscuous mode [ 204.343457][T11456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.396325][T11456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.437154][ T8674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.457533][ T8674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.484932][ T8674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.513186][ T8674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.833147][ T28] audit: type=1400 audit(3931591841.167:901): avc: denied { write } for pid=11740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.989878][ T28] audit: type=1400 audit(3931591841.317:902): avc: denied { write } for pid=11764 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.389060][T11786] loop9: detected capacity change from 0 to 512 [ 205.398786][ T28] audit: type=1400 audit(3931591841.737:903): avc: denied { write } for pid=11768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.477055][T11786] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.569609][ T28] audit: type=1400 audit(3931591841.897:904): avc: denied { write } for pid=11784 comm="syz.9.2882" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.697647][ T28] audit: type=1400 audit(3931591841.947:905): avc: denied { write } for pid=11792 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.070532][T11807] syzkaller1: entered promiscuous mode [ 206.097449][T11807] syzkaller1: entered allmulticast mode [ 206.162121][T11811] loop8: detected capacity change from 0 to 512 [ 206.193450][T10873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.215845][T11811] EXT4-fs: Ignoring removed orlov option [ 206.270376][ T28] audit: type=1400 audit(3931591842.607:906): avc: denied { write } for pid=11797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.349876][T11811] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #3: comm syz.8.2892: corrupted inode contents [ 206.394191][T11811] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.394370][T11811] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #3: comm syz.8.2892: mark_inode_dirty error [ 206.403476][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 206.403513][ C0] EXT4-fs (loop8): initial error at time 3931591842: ext4_do_update_inode:5742: inode 3 [ 206.403548][ C0] EXT4-fs (loop8): last error at time 3931591842: ext4_do_update_inode:5742: inode 3 [ 206.449225][T11811] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.459848][T11811] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #3: comm syz.8.2892: corrupted inode contents [ 206.554860][T11811] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.555960][T11811] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.2892: mark_inode_dirty error [ 206.645966][T11811] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 206.648534][T11811] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.2892: Failed to acquire dquot type 0 [ 206.737303][T11811] loop8: lost filesystem error report for type 5 error -117 [ 206.737915][T11811] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.2892: corrupted inode contents [ 206.826342][T11811] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 206.826625][T11811] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #16: comm syz.8.2892: mark_inode_dirty error [ 206.886385][T11811] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 206.886624][T11811] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.2892: corrupted inode contents [ 206.965595][T11811] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 206.965776][T11811] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.2892: mark_inode_dirty error [ 207.085364][T11811] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 207.085632][T11811] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.2892: corrupted inode contents [ 207.111971][T11885] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2898'. [ 207.211309][T11811] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 207.211495][T11811] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 207.274586][T11811] loop8: lost filesystem error report for type 5 error -117 [ 207.279704][T11811] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.2892: corrupted inode contents [ 207.323758][T11811] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 207.324313][T11811] EXT4-fs error (device loop8): ext4_truncate:4691: inode #16: comm syz.8.2892: mark_inode_dirty error [ 207.345186][T11811] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 207.356324][T11811] loop8: lost filesystem error report for type 5 error -117 [ 207.356764][T11811] EXT4-fs (loop8): 1 truncate cleaned up [ 207.371176][T11811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.406855][T11811] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.604439][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.703465][T11978] loop4: detected capacity change from 0 to 128 [ 208.739084][T11978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842e018, mo2=0002] [ 208.770054][T11978] System zones: 1-3, 19-19, 35-36 [ 208.780715][T11978] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 208.820161][T11978] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.862360][T11967] loop5: detected capacity change from 0 to 512 [ 208.948650][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 208.948668][ T28] audit: type=1400 audit(3931591845.287:924): avc: denied { write } for pid=11977 comm="syz.4.2912" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.028253][T11967] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2910: bg 0: block 104: invalid block bitmap [ 209.043293][T11967] loop5: lost filesystem error report for type 5 error -117 [ 209.055918][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 209.069863][ C0] EXT4-fs (loop5): initial error at time 3931591845: ext4_validate_block_bitmap:432 [ 209.079397][ C0] EXT4-fs (loop5): last error at time 3931591845: ext4_validate_block_bitmap:432 [ 209.206312][T11967] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 209.230537][T11967] loop5: lost filesystem error report for type 5 error -117 [ 209.240627][T11967] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2910: invalid indirect mapped block 1 (level 1) [ 209.341643][T11967] EXT4-fs (loop5): 1 truncate cleaned up [ 209.456081][T11967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.624845][ T28] audit: type=1400 audit(3931591845.947:925): avc: denied { write } for pid=11966 comm="syz.5.2910" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.945389][ T28] audit: type=1400 audit(3931591846.277:926): avc: denied { ioctl } for pid=12011 comm="syz.3.2920" path="socket:[32895]" dev="sockfs" ino=32895 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 210.088740][T11456] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.219031][ T5952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.462941][T12059] xt_hashlimit: max too large, truncated to 1048576 [ 210.513838][T12067] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 211.512013][T12097] loop9: detected capacity change from 0 to 512 [ 211.707103][T12091] loop5: detected capacity change from 0 to 128 [ 211.723793][T12097] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.724383][T12091] vfat: Unknown parameter '' [ 211.773544][T12097] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.842525][T12116] netlink: 'syz.4.2945': attribute type 3 has an invalid length. [ 211.869625][T12116] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2945'. [ 211.912215][T10873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.968492][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2947'. [ 212.010305][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2947'. [ 212.649679][T12142] netlink: 'syz.3.2951': attribute type 1 has an invalid length. [ 212.700306][T12125] loop4: detected capacity change from 0 to 32768 [ 212.748371][T12142] bond2: entered promiscuous mode [ 212.769203][T12125] loop4: p1 p3 < > [ 212.810737][T12142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.900372][T10712] udevd[10712]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 212.936882][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 213.316529][T12142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.373446][T12142] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 213.489903][T12142] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 213.532561][T12142] bond2: (slave ip6gre2): making interface the new active one [ 213.555932][T12142] ip6gre2: entered promiscuous mode [ 213.585040][T12142] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 213.973042][T12221] loop9: detected capacity change from 0 to 512 [ 214.000306][T12221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.057211][T12221] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.133987][T12221] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.214882][ T28] audit: type=1400 audit(3931591850.547:927): avc: denied { write } for pid=12220 comm="syz.9.2966" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.276345][T10873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.285980][ T28] audit: type=1400 audit(3931591850.547:928): avc: denied { write } for pid=12220 comm="syz.9.2966" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.422321][ T28] audit: type=1400 audit(3931591850.757:929): avc: denied { getopt } for pid=12233 comm="syz.9.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 214.497865][T12222] pimreg: entered allmulticast mode [ 214.508330][T12222] pimreg: left allmulticast mode [ 214.792056][ T28] audit: type=1400 audit(3931591851.127:930): avc: denied { write } for pid=12248 comm="syz.4.2977" lport=51268 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 214.879421][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2978'. [ 214.970123][T12251] erspan0: entered promiscuous mode [ 214.990277][T12251] macvtap1: entered promiscuous mode [ 215.010039][T12251] macvtap1: entered allmulticast mode [ 215.027438][T12251] erspan0: entered allmulticast mode [ 215.075138][T12255] erspan0: left allmulticast mode [ 215.097923][T12255] erspan0: left promiscuous mode [ 215.275828][T12262] netlink: 'syz.4.2982': attribute type 4 has an invalid length. [ 215.389126][T12269] netlink: 'syz.4.2982': attribute type 4 has an invalid length. [ 215.731016][T12285] loop5: detected capacity change from 0 to 512 [ 215.749760][T12285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.804549][T12285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.821845][T12285] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.844104][ T28] audit: type=1400 audit(3931591852.177:931): avc: denied { write } for pid=12284 comm="syz.5.2989" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.951346][T12291] loop8: detected capacity change from 0 to 8192 [ 215.959771][T12291] vfat filesystem being mounted at /185/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 216.923942][ T9403] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 216.951006][ T5952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.966469][ T9403] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.050401][T12327] syzkaller0: entered promiscuous mode [ 217.068244][T12327] syzkaller0: entered allmulticast mode [ 217.174982][T12329] loop8: detected capacity change from 0 to 4096 [ 217.213130][T12329] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 217.280191][T12335] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.3007'. [ 217.508172][ T28] audit: type=1400 audit(3931591853.837:932): avc: denied { bind } for pid=12338 comm="syz.8.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.742840][T12348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12348 comm=syz.5.3011 [ 217.793284][T12348] netlink: 'syz.5.3011': attribute type 1 has an invalid length. [ 218.255497][T12369] loop5: detected capacity change from 0 to 128 [ 218.386565][T12369] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.445728][T12366] loop8: detected capacity change from 0 to 8192 [ 218.472804][T12366] vfat filesystem being mounted at /193/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 218.496642][T12369] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.547551][ T28] audit: type=1400 audit(3931591854.887:933): avc: denied { write } for pid=12368 comm="syz.5.3022" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.873228][T12380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3026'. [ 219.249983][T12390] netlink: 'syz.9.3031': attribute type 10 has an invalid length. [ 219.268095][ T5952] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.386659][ T28] audit: type=1326 audit(3931591855.727:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4fc1de59 code=0x7ffc0000 [ 219.454321][ T28] audit: type=1326 audit(3931591855.747:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4fc1de59 code=0x7ffc0000 [ 219.534148][ T28] audit: type=1326 audit(3931591855.747:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4fc1de59 code=0x7ffc0000 [ 219.585425][ T28] audit: type=1326 audit(3931591855.757:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4fc1de59 code=0x7ffc0000 [ 219.629708][ T28] audit: type=1326 audit(3931591855.767:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9c4fc1de59 code=0x7ffc0000 [ 219.715958][ T28] audit: type=1326 audit(3931591855.777:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4fc1de59 code=0x7ffc0000 [ 219.788678][ T28] audit: type=1326 audit(3931591855.857:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c4fbde68e code=0x7ffc0000 [ 219.883363][ T28] audit: type=1326 audit(3931591855.887:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c4fbde68e code=0x7ffc0000 [ 219.962894][ T28] audit: type=1326 audit(3931591855.917:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c4fbde68e code=0x7ffc0000 [ 220.060288][T12416] loop5: detected capacity change from 0 to 256 [ 220.073884][ T28] audit: type=1326 audit(3931591855.917:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.3033" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c4fbde68e code=0x7ffc0000 [ 220.104093][T12416] FAT-fs (loop5): Directory bread(block 1285) failed [ 220.118982][T12416] FAT-fs (loop5): Directory bread(block 1286) failed [ 220.146274][T12416] FAT-fs (loop5): Directory bread(block 1287) failed [ 220.160783][T12416] FAT-fs (loop5): Directory bread(block 1288) failed [ 220.183466][T12416] vfat filesystem being mounted at /383/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 220.236609][T12416] FAT-fs (loop5): Directory bread(block 1285) failed [ 220.262712][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3044'. [ 220.274748][T12416] FAT-fs (loop5): Directory bread(block 1286) failed [ 220.333660][T12416] FAT-fs (loop5): Directory bread(block 1287) failed [ 220.387502][T12416] FAT-fs (loop5): Directory bread(block 1288) failed [ 220.387546][T12422] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 220.463436][T12416] FAT-fs (loop5): Directory bread(block 1285) failed [ 220.682380][T12434] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 221.324050][T12448] syzkaller1: entered promiscuous mode [ 221.338475][T12448] syzkaller1: entered allmulticast mode [ 221.376505][T12464] loop4: detected capacity change from 0 to 1024 [ 221.415773][T12464] EXT4-fs: Ignoring removed bh option [ 221.442120][T12464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.287827][T11456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.425001][T12505] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3068'. [ 222.451821][T12500] loop5: detected capacity change from 0 to 1024 [ 222.490559][T12500] EXT4-fs: Ignoring removed bh option [ 222.637629][T12500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.682239][T12513] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3078'. [ 222.692597][T12513] unsupported nlmsg_type 40 [ 222.852243][ T5952] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.866501][T12518] netlink: 228 bytes leftover after parsing attributes in process `syz.8.3081'. [ 224.973102][T12577] loop8: detected capacity change from 0 to 8192 [ 225.012141][T12577] vfat filesystem being mounted at /203/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 225.130507][T12577] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 225.209268][T12577] FAT-fs (loop8): Filesystem has been set read-only [ 225.244926][ T9403] IPVS: starting estimator thread 0... [ 225.251599][T12589] bio_check_eod: 2 callbacks suppressed [ 225.251627][T12589] syz.8.3103: attempt to access beyond end of device [ 225.251627][T12589] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 225.330582][T12577] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 225.379910][T12589] Buffer I/O error on dev loop8, logical block 57847, async page read [ 225.389250][T12590] IPVS: using max 2304 ests per chain, 115200 per kthread [ 225.721988][ T49] IPVS: stop unused estimator thread 0... [ 225.948636][T12603] xt_CT: No such helper "pptp" [ 226.014102][T12606] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.3114'. [ 227.118931][T12634] loop4: detected capacity change from 0 to 512 [ 227.158145][T12634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.215589][T12636] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3129'. [ 227.246438][T12636] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3129'. [ 227.263536][T12634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.308055][T12634] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.339099][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 227.339125][ T28] audit: type=1400 audit(3931591863.677:966): avc: denied { write } for pid=12633 comm="syz.4.3127" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.416592][T12634] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3127: bg 0: block 217: padding at end of block bitmap is not set [ 227.474670][T12634] EXT4-fs (loop4): Remounting filesystem read-only [ 227.611837][T11456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.640877][ T8674] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 227.688613][ T8674] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 229.066886][T12683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3148'. [ 229.130123][T12683] xfrm1: entered allmulticast mode [ 229.233025][T12687] ip6gretap1: entered promiscuous mode [ 230.339168][T12710] tls_set_device_offload_rx: netdev not found [ 230.494168][T12714] loop9: detected capacity change from 0 to 512 [ 230.554907][T12714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.646478][T12714] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.736222][ T28] audit: type=1400 audit(3931592123.122:967): avc: denied { write } for pid=12713 comm="syz.9.3160" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.881399][ T28] audit: type=1400 audit(3931592123.252:968): avc: denied { execstack } for pid=12722 comm="syz.8.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 231.159794][T10873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.194064][T12730] cgroup: fork rejected by pids controller in /syz4 [ 231.441830][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3166'. [ 233.676514][T12742] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.684393][T12742] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.692703][T12742] bridge_slave_0: entered allmulticast mode [ 233.700486][T12742] bridge_slave_0: entered promiscuous mode [ 233.710445][T12742] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.718112][T12742] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.726389][T12742] bridge_slave_1: entered allmulticast mode [ 233.733805][T12742] bridge_slave_1: entered promiscuous mode [ 233.761039][T12742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.783615][T12742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.816579][T12742] team0: Port device team_slave_0 added [ 233.827353][T12742] team0: Port device team_slave_1 added [ 233.919178][ T28] audit: type=1400 audit(3931592126.312:969): avc: denied { name_bind } for pid=12774 comm="syz.3.3177" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 233.967534][T12742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.990355][T12742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.045306][ T28] audit: type=1400 audit(3931592126.342:970): avc: denied { name_connect } for pid=12774 comm="syz.3.3177" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 234.075326][T12742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.107230][T12742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.121230][T12742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.238451][T12742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.336328][T12779] netlink: 'syz.3.3178': attribute type 1 has an invalid length. [ 234.378163][T12781] netlink: 'syz.3.3178': attribute type 1 has an invalid length. [ 234.422943][T12781] netlink: 'syz.3.3178': attribute type 4 has an invalid length. [ 234.458025][T12779] netlink: 'syz.3.3178': attribute type 4 has an invalid length. [ 234.470771][T12781] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3178'. [ 234.538416][T12779] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3178'. [ 234.600082][T12742] hsr_slave_0: entered promiscuous mode [ 234.624001][T12742] hsr_slave_1: entered promiscuous mode [ 234.647343][T12742] debugfs: 'hsr0' already exists in 'hsr' [ 234.662014][T12742] Cannot create hsr debugfs directory [ 234.874657][T12785] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.882359][T12785] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.082025][T12785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.131686][T12785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.381562][T11880] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.422099][T11880] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.531131][T11880] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.591963][T11880] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.895471][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3183'. [ 236.003876][T12742] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.109057][T12742] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.250329][T12742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.394260][T12742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.608110][T12742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.644911][T12742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.676388][T12742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.720264][T12742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.759555][T12742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.792095][T12742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 236.807431][T12742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.828568][T12742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.052776][T12742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.118961][T12742] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.159188][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.166889][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.207141][T11880] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.214763][T11880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.300677][T12742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.334189][T12742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.870923][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'. [ 237.984526][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'. [ 238.065329][ T28] audit: type=1400 audit(3931592130.452:971): avc: denied { ioctl } for pid=12845 comm="syz.9.3196" path="socket:[35216]" dev="sockfs" ino=35216 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 238.329561][T12742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.013665][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3206'. [ 239.058174][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3206'. [ 239.318492][T12742] veth0_vlan: entered promiscuous mode [ 239.353267][T12742] veth1_vlan: entered promiscuous mode [ 239.431682][T12742] veth0_macvtap: entered promiscuous mode [ 239.463832][T12742] veth1_macvtap: entered promiscuous mode [ 239.520276][T12742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.562718][T12742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.604621][ T8674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.625790][ T8674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.663018][ T8674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.688645][ T8674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.830414][ T28] audit: type=1400 audit(3931592132.212:972): avc: denied { mount } for pid=12742 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 239.956039][ T28] audit: type=1400 audit(3931592132.262:973): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 240.334858][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3215'. [ 240.376578][T12906] loop9: detected capacity change from 0 to 512 [ 240.412900][T12906] EXT4-fs: Ignoring removed bh option [ 240.458525][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3215'. [ 240.516896][T12906] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.586804][T12906] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.664108][ T28] audit: type=1400 audit(3931592133.052:974): avc: denied { write } for pid=12905 comm="syz.9.3214" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.702380][T12906] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3214: bg 0: block 217: padding at end of block bitmap is not set [ 240.718771][T12913] netlink: 'syz.3.3216': attribute type 13 has an invalid length. [ 240.764036][T12906] EXT4-fs (loop9): Remounting filesystem read-only [ 240.843398][T10873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.857320][ T5620] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 240.874822][ T5620] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 241.238565][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3220'. [ 241.272862][T12928] netlink: 'syz.4.3220': attribute type 11 has an invalid length. [ 241.585844][ T49] bridge_slave_1: left allmulticast mode [ 241.592362][ T49] bridge_slave_1: left promiscuous mode [ 241.599443][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.619600][ T49] bridge_slave_0: left allmulticast mode [ 241.634312][ T49] bridge_slave_0: left promiscuous mode [ 241.650464][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.788824][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.804898][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.821157][ T49] bond0 (unregistering): Released all slaves [ 241.833995][ T49] bond1 (unregistering): Released all slaves [ 241.938935][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3220'. [ 241.975970][T12928] netlink: 'syz.4.3220': attribute type 11 has an invalid length. [ 242.018516][ T5616] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.036818][ T5616] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.094925][T12943] loop8: detected capacity change from 0 to 512 [ 242.115583][T12943] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 242.133554][ T5616] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.150816][ T5616] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.156797][T12943] EXT4-fs (loop8): 1 truncate cleaned up [ 242.214255][T12943] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.287886][ T28] audit: type=1400 audit(3931592134.682:975): avc: denied { write } for pid=12942 comm="syz.8.3226" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.337964][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3223'. [ 242.383798][ T49] hsr_slave_0: left promiscuous mode [ 242.399140][ T49] hsr_slave_1: left promiscuous mode [ 242.411495][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.457826][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.475483][T12952] loop4: detected capacity change from 0 to 736 [ 242.586678][ T28] audit: type=1400 audit(3931592134.982:976): avc: denied { write } for pid=12942 comm="syz.8.3226" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.644872][ T8821] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.910985][ T49] team0 (unregistering): Port device team_slave_1 removed [ 242.931620][ T49] team0 (unregistering): Port device team_slave_0 removed [ 243.012702][T12933] geneve2: entered promiscuous mode [ 243.122620][T12960] bond0: entered promiscuous mode [ 243.128665][T12960] bond_slave_0: entered promiscuous mode [ 243.136407][T12960] bond_slave_1: entered promiscuous mode [ 243.160626][T12960] bond0: left promiscuous mode [ 243.168805][T12960] bond_slave_0: left promiscuous mode [ 243.174835][T12960] bond_slave_1: left promiscuous mode [ 243.221417][T12964] bond0: entered promiscuous mode [ 243.227903][T12964] bond_slave_0: entered promiscuous mode [ 243.240579][T12964] bond_slave_1: entered promiscuous mode [ 243.289961][T12964] bond0: left promiscuous mode [ 243.307102][T12964] bond_slave_0: left promiscuous mode [ 243.315716][T12964] bond_slave_1: left promiscuous mode [ 243.345637][ T5616] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.355631][ T5616] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.459328][ C1] ================================================================== [ 243.467453][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 243.474671][ C1] [ 243.477096][ C1] read-write to 0xffff88811dc50f80 of 4 bytes by interrupt on cpu 0: [ 243.485185][ C1] can_can_gw_rcv+0x812/0x820 [ 243.489894][ C1] can_rcv_filter+0xc3/0x480 [ 243.494550][ C1] can_receive+0x13e/0x190 [ 243.499018][ C1] can_rcv+0x17d/0x1f0 [ 243.503112][ C1] process_backlog+0x354/0x680 [ 243.507914][ C1] __napi_poll+0x61/0x300 [ 243.512350][ C1] net_rx_action+0x456/0x930 [ 243.516969][ C1] handle_softirqs+0xb9/0x280 [ 243.521678][ C1] do_softirq+0x45/0x60 [ 243.525854][ C1] __local_bh_enable_ip+0x70/0x80 [ 243.530898][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 243.535870][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 243.541543][ C1] process_scheduled_works+0x4d4/0x9a0 [ 243.547040][ C1] worker_thread+0x569/0x750 [ 243.551668][ C1] kthread+0x221/0x270 [ 243.555768][ C1] ret_from_fork+0x146/0x330 [ 243.560394][ C1] ret_from_fork_asm+0x1a/0x30 [ 243.565195][ C1] [ 243.567530][ C1] read-write to 0xffff88811dc50f80 of 4 bytes by interrupt on cpu 1: [ 243.575615][ C1] can_can_gw_rcv+0x812/0x820 [ 243.580332][ C1] can_rcv_filter+0xc3/0x480 [ 243.584996][ C1] can_receive+0x13e/0x190 [ 243.589447][ C1] can_rcv+0x17d/0x1f0 [ 243.593547][ C1] process_backlog+0x354/0x680 [ 243.598330][ C1] __napi_poll+0x61/0x300 [ 243.602696][ C1] net_rx_action+0x456/0x930 [ 243.607320][ C1] handle_softirqs+0xb9/0x280 [ 243.612032][ C1] do_softirq+0x45/0x60 [ 243.616220][ C1] __local_bh_enable_ip+0x70/0x80 [ 243.621262][ C1] __alloc_skb+0x2bb/0x6f0 [ 243.625706][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 243.631386][ C1] process_scheduled_works+0x4d4/0x9a0 [ 243.636889][ C1] worker_thread+0x569/0x750 [ 243.641532][ C1] kthread+0x221/0x270 [ 243.645648][ C1] ret_from_fork+0x146/0x330 [ 243.650281][ C1] ret_from_fork_asm+0x1a/0x30 [ 243.655079][ C1] [ 243.657426][ C1] value changed: 0x00141009 -> 0x0014100a [ 243.663349][ C1] [ 243.665690][ C1] Reported by Kernel Concurrency Sanitizer on: [ 243.671878][ C1] CPU: 1 UID: 0 PID: 11880 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(lazy) [ 243.681558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.691642][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 243.698442][ C1] ================================================================== [ 244.194524][ T3474] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.861767][ T8679] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.564826][ C1] ================================================================== [ 246.572957][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 246.580199][ C1] [ 246.582538][ C1] read-write to 0xffff88811dc50f80 of 4 bytes by interrupt on cpu 0: [ 246.590622][ C1] can_can_gw_rcv+0x812/0x820 [ 246.595341][ C1] can_rcv_filter+0xc3/0x480 [ 246.599962][ C1] can_receive+0x13e/0x190 [ 246.604410][ C1] can_rcv+0x17d/0x1f0 [ 246.608522][ C1] process_backlog+0x354/0x680 [ 246.613303][ C1] __napi_poll+0x61/0x300 [ 246.617646][ C1] net_rx_action+0x456/0x930 [ 246.622261][ C1] handle_softirqs+0xb9/0x280 [ 246.626966][ C1] __irq_exit_rcu+0x42/0xd0 [ 246.631507][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 246.637180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 246.643204][ C1] netlink_sendmsg+0x5c0/0x6f0 [ 246.648002][ C1] __sys_sendto+0x411/0x470 [ 246.652553][ C1] __x64_sys_sendto+0x76/0x90 [ 246.657269][ C1] x64_sys_call+0x2d35/0x3020 [ 246.661969][ C1] do_syscall_64+0x136/0x3c0 [ 246.666591][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.672521][ C1] [ 246.674856][ C1] read-write to 0xffff88811dc50f80 of 4 bytes by interrupt on cpu 1: [ 246.682933][ C1] can_can_gw_rcv+0x812/0x820 [ 246.687636][ C1] can_rcv_filter+0xc3/0x480 [ 246.692270][ C1] can_receive+0x13e/0x190 [ 246.696734][ C1] can_rcv+0x17d/0x1f0 [ 246.700836][ C1] process_backlog+0x354/0x680 [ 246.705641][ C1] __napi_poll+0x61/0x300 [ 246.709982][ C1] net_rx_action+0x456/0x930 [ 246.714583][ C1] handle_softirqs+0xb9/0x280 [ 246.719276][ C1] do_softirq+0x45/0x60 [ 246.723474][ C1] __local_bh_enable_ip+0x70/0x80 [ 246.728517][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 246.733468][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 246.739142][ C1] process_scheduled_works+0x4d4/0x9a0 [ 246.744641][ C1] worker_thread+0x569/0x750 [ 246.749271][ C1] kthread+0x221/0x270 [ 246.753367][ C1] ret_from_fork+0x146/0x330 [ 246.757997][ C1] ret_from_fork_asm+0x1a/0x30 [ 246.762796][ C1] [ 246.765138][ C1] value changed: 0x00163f86 -> 0x00163f87 [ 246.770875][ C1] [ 246.773219][ C1] Reported by Kernel Concurrency Sanitizer on: [ 246.779389][ C1] CPU: 1 UID: 0 PID: 8679 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(lazy) [ 246.788963][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.799047][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 246.805864][ C1] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.829199][ C0] ================================================================== [ 249.837333][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 249.844562][ C0] [ 249.846899][ C0] read-write to 0xffff88811dc50f80 of 4 bytes by interrupt on cpu 1: [ 249.854977][ C0] can_can_gw_rcv+0x812/0x820 [ 249.859686][ C0] can_rcv_filter+0xc3/0x480 [ 249.864309][ C0] can_receive+0x13e/0x190 [ 249.868748][ C0] can_rcv+0x17d/0x1f0 [ 249.872843][ C0] process_backlog+0x354/0x680 [ 249.877628][ C0] __napi_poll+0x61/0x300 [ 249.881975][ C0] net_rx_action+0x456/0x930 [ 249.886599][ C0] handle_softirqs+0xb9/0x280 [ 249.891300][ C0] run_ksoftirqd+0x1c/0x30 [ 249.895750][ C0] smpboot_thread_fn+0x32a/0x510 [ 249.900818][ C0] kthread+0x221/0x270 [ 249.904911][ C0] ret_from_fork+0x146/0x330 [ 249.909540][ C0] ret_from_fork_asm+0x1a/0x30 [ 249.914319][ C0] [ 249.916658][ C0] read-write to 0xffff88811dc50f80 of 4 bytes by interrupt on cpu 0: [ 249.924736][ C0] can_can_gw_rcv+0x812/0x820 [ 249.929437][ C0] can_rcv_filter+0xc3/0x480 [ 249.934056][ C0] can_receive+0x13e/0x190 [ 249.938510][ C0] can_rcv+0x17d/0x1f0 [ 249.942611][ C0] process_backlog+0x354/0x680 [ 249.947392][ C0] __napi_poll+0x61/0x300 [ 249.951742][ C0] net_rx_action+0x456/0x930 [ 249.956364][ C0] handle_softirqs+0xb9/0x280 [ 249.961065][ C0] __irq_exit_rcu+0x42/0xd0 [ 249.965599][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 249.971282][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.977294][ C0] finish_task_switch+0x12f/0x340 [ 249.982346][ C0] __schedule+0x799/0xd10 [ 249.986700][ C0] preempt_schedule_common+0x11/0x30 [ 249.992010][ C0] preempt_schedule_thunk+0x16/0x40 [ 249.997249][ C0] _raw_spin_unlock+0x1e/0x30 [ 250.001947][ C0] wg_ratelimiter_gc_entries+0x289/0x330 [ 250.007615][ C0] process_scheduled_works+0x4d4/0x9a0 [ 250.013116][ C0] worker_thread+0x569/0x750 [ 250.017755][ C0] kthread+0x221/0x270 [ 250.021851][ C0] ret_from_fork+0x146/0x330 [ 250.026479][ C0] ret_from_fork_asm+0x1a/0x30 [ 250.031276][ C0] [ 250.033613][ C0] value changed: 0x001885ef -> 0x001885f0 [ 250.039342][ C0] [ 250.041681][ C0] Reported by Kernel Concurrency Sanitizer on: [ 250.047848][ C0] CPU: 0 UID: 0 PID: 3392 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(lazy) [ 250.057245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.067317][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 250.074817][ C0] ================================================================== [ 250.531575][ T28] audit: type=1400 audit(3931592142.762:977): avc: denied { write } for pid=12982 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.345241][ T28] audit: type=1400 audit(3931592143.732:978): avc: denied { write } for pid=12993 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.918972][ C0] ================================================================== [ 252.927108][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 252.934334][ C0] [ 252.936669][ C0] read-write to 0xffff88811dc50f80 of 4 bytes by interrupt on cpu 1: [ 252.944761][ C0] can_can_gw_rcv+0x812/0x820 [ 252.949467][ C0] can_rcv_filter+0xc3/0x480 [ 252.954094][ C0] can_receive+0x13e/0x190 [ 252.958544][ C0] can_rcv+0x17d/0x1f0 [ 252.962646][ C0] process_backlog+0x354/0x680 [ 252.967446][ C0] __napi_poll+0x61/0x300 [ 252.971797][ C0] net_rx_action+0x456/0x930 [ 252.976422][ C0] handle_softirqs+0xb9/0x280 [ 252.981144][ C0] do_softirq+0x45/0x60 [ 252.985323][ C0] __local_bh_enable_ip+0x70/0x80 [ 252.990367][ C0] __alloc_skb+0x2bb/0x6f0 [ 252.994812][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 253.000488][ C0] process_scheduled_works+0x4d4/0x9a0 [ 253.005977][ C0] worker_thread+0x569/0x750 [ 253.010598][ C0] kthread+0x221/0x270 [ 253.014680][ C0] ret_from_fork+0x146/0x330 [ 253.019304][ C0] ret_from_fork_asm+0x1a/0x30 [ 253.024094][ C0] [ 253.026442][ C0] read-write to 0xffff88811dc50f80 of 4 bytes by interrupt on cpu 0: [ 253.034517][ C0] can_can_gw_rcv+0x812/0x820 [ 253.039239][ C0] can_rcv_filter+0xc3/0x480 [ 253.043858][ C0] can_receive+0x13e/0x190 [ 253.048325][ C0] can_rcv+0x17d/0x1f0 [ 253.052427][ C0] process_backlog+0x354/0x680 [ 253.057239][ C0] __napi_poll+0x61/0x300 [ 253.061588][ C0] net_rx_action+0x456/0x930 [ 253.066204][ C0] handle_softirqs+0xb9/0x280 [ 253.070957][ C0] __irq_exit_rcu+0x42/0xd0 [ 253.075498][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 253.081182][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 253.087203][ C0] _raw_spin_unlock_irq+0x12/0x30 [ 253.092262][ C0] filemap_remove_folio+0x75/0x1d0 [ 253.097417][ C0] truncate_inode_folio+0x42/0x50 [ 253.102469][ C0] shmem_undo_range+0x27f/0xb60 [ 253.107345][ C0] shmem_evict_inode+0x132/0x520 [ 253.112323][ C0] evict+0x2a5/0x510 [ 253.116264][ C0] iput+0x430/0x5a0 [ 253.120106][ C0] dentry_unlink_inode+0x24a/0x260 [ 253.125263][ C0] dentry_kill+0x184/0x500 [ 253.129702][ C0] shrink_dentry_list+0x165/0x1d0 [ 253.134772][ C0] shrink_dcache_tree+0x62/0x220 [ 253.139746][ C0] do_one_tree+0x1b/0xe0 [ 253.144030][ C0] shrink_dcache_for_umount+0x6e/0x1d0 [ 253.149537][ C0] generic_shutdown_super+0x44/0x220 [ 253.154868][ C0] kill_anon_super+0x2a/0x130 [ 253.159598][ C0] deactivate_locked_super+0x75/0x1c0 [ 253.165060][ C0] deactivate_super+0x97/0xa0 [ 253.169765][ C0] cleanup_mnt+0x2c3/0x340 [ 253.174219][ C0] __cleanup_mnt+0x19/0x20 [ 253.178663][ C0] task_work_run+0x130/0x1a0 [ 253.183263][ C0] do_exit+0x4a4/0x1500 [ 253.187440][ C0] do_group_exit+0x138/0x140 [ 253.192065][ C0] __x64_sys_exit_group+0x1f/0x20 [ 253.197119][ C0] x64_sys_call+0x3008/0x3020 [ 253.201837][ C0] do_syscall_64+0x136/0x3c0 [ 253.206447][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.212370][ C0] [ 253.214712][ C0] value changed: 0x001aaeaa -> 0x001aaeab [ 253.220439][ C0] [ 253.222775][ C0] Reported by Kernel Concurrency Sanitizer on: [ 253.228939][ C0] CPU: 0 UID: 0 PID: 8821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 253.238431][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.248511][ C0] ==================================================================