last executing test programs: 2m29.378057377s ago: executing program 2 (id=291): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x6, 0x6e1, 0x0, 0x0) syz_read_part_table(0x5c6, &(0x7f0000003880)="$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") 2m27.956417472s ago: executing program 2 (id=316): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 2m27.862605565s ago: executing program 2 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) 2m27.784528447s ago: executing program 2 (id=325): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x459, &(0x7f0000000600)="$eJzs3M1vFOUfAPDvTLvlxw+wFfGFF7WKxsaXlgIqBw9qNPGAiYke9Ni0hSALNbQmQhoFY/BkjIl349F/wZNejPFk4lXvhoSYXgBPa2Znhu4u24Uuuyy6n08y8DzzPNPn+Xbm2X1mnt0GMLQms3+SiO0R8XtEjOfZ5gqT+X9X11bnr62tzidRq739V1Kvd2Vtdb6sWh63rchMpRHpZ0nsbdPu8tlzJ+eq1cUzRX5m5dQHM8tnzz134tTc8cXji6cPHjly+NDsiy8cfL4ncWZ9urLn46V9u99476s3j37RFH9LHD0y2anwyVqtx80N1o6GdDI6wI6wKSMRkZ2uSn38j8dIrJ+88Xj904F2DuirWq1W27Zx8fka8B+WRHPekIdhUb7Rp2ur81eKrXUS8HL/ph8Dd/mV/AYoi/tqseUlo5EWdSot97e9NBkR757/+5tsi/48hwAAaPJDNv95Np93NM//0nigod49xdrQRETcGxE7I+K+iNgVEfdH1Os+GBEPbbL91kWSG+c/6aWuArtF2fzvpWJtq3n+V87+YmKkyO2ox19Jjp2oLh4ofidTUdmS5Wc7tPHja799uVFZ4/wv27L2y7lg0Y9Lo1uaj1mYW5m7nZgbXb4QsWe0XfzJ9ZWAJCJ2R8SeLts48fR3+zYqu3n8HfRgnan2bcRT+fk/Hy3xl5LO65Mz/4vq4oGZ8qq40S+/Xnxro/ZvK/4eyM7//9te/9fjn0ga12uXN9/GxT8+3/Ceptvrfyx5p54eK/Z9NLeycmY2Yiw5mne6cf/B9WPLfFk/i39qf/vxvzPWfxN7IyK7iB+OiEci4tGi749FxOMRsb9D/D+/+sT73cffX1n8C5s6/+uJsWjd0z4xcvKn75sanbgh/mudz//hemqq2HMrr3+30q/urmYAAAD490kjYnsk6fT1dJpOT+efl98VkVaXlleeObb04emF/DsCE1FJyydd4w3PQ2eL2/o8fyEi8o8WlOWHiufGX49sreen55eqC4MOHobcttbxfy0ipvOyP0cG3Tug73xfC4aX8Q/Dy/iH4WX8w/BqM/63DqIfwJ3X7v3/kwH0A7jzWsa/ZT8YIu7/YXgZ/zC8jH8YSstb4+Zfku+YKH9Sl4e3SZR/06FnP3AgiajcFd3oWyLSu6IbEn1KDO41CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJf+CQAA//+8KN00") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x3, 0x345}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m27.601193042s ago: executing program 2 (id=329): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r0, 0x1) listen(r0, 0x28) poll(&(0x7f00000001c0)=[{r0, 0x4}], 0x1, 0x40000400) socket(0x1e, 0xa, 0x3ff) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 2m27.335415279s ago: executing program 2 (id=334): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2, 0x3, 0x2, 0xd, 0x0, 0x2, 0x48140, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x58d, 0x2, 0x0, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 2m27.308015969s ago: executing program 32 (id=334): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x4008240b, &(0x7f00000013c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2, 0x3, 0x2, 0xd, 0x0, 0x2, 0x48140, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x58d, 0x2, 0x0, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) 1m57.763954255s ago: executing program 4 (id=820): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000d24000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000b37000/0x1000)=nil, &(0x7f0000724000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000780000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m57.731888787s ago: executing program 4 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x2c, &(0x7f0000003cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x66}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x525}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1m57.58262178s ago: executing program 4 (id=829): ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 1m56.707117092s ago: executing program 4 (id=842): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x459, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x3, 0x345}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m56.37875793s ago: executing program 4 (id=847): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000005400)={r3, @in={{0x2, 0x4e23, @remote}}}, 0x84) 1m55.858872083s ago: executing program 4 (id=853): r0 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb700, 0x800, 0x2, 0x24c}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) 1m55.858758783s ago: executing program 33 (id=853): r0 = socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x6005, &(0x7f0000000080)={0x0, 0xb700, 0x800, 0x2, 0x24c}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) 1m14.478549299s ago: executing program 5 (id=1566): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x825, 0xfffffffffffffff9, 0xa000000, 0x8, 0x43, 0x52e6ac5d, 0x2000fff7ffff, 0x9655, 0xfffffffffffffffe, 0x40000000000009, 0x6, 0x5, 0x80000007, 0x80000000000003, 0x919, 0xfffffffffffffffd, 0x81, 0x8000000000000000, 0x6, 0x100000000, 0x5, 0x200000006, 0xfffffffffffffffc, 0x3, 0xa}) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200075b, &(0x7f0000000680)={[{@usrjquota}, {@nobarrier}, {@discard}, {@debug}, {@sb={'sb', 0x3d, 0x9}, 0x0}, {@noauto_da_alloc}, {@barrier}, {@data_err_abort}, {}, {@lazytime}, {@block_validity}, {@nolazytime}, {@usrjquota}, {@resgid}, {@lazytime}, {@sysvgroups}, {@bsdgroups}], [{@obj_user={'obj_user', 0x3d, 'nodioread_nolock'}}, {@obj_role}], 0x2c}, 0x0, 0x51b, &(0x7f0000001300)="$eJzs3E1vFOcdAPD/rtc2LlC79I23lm1pVatVMTavhx4AtRKXSpVaVfS4tQ2iGKiwK4FlFVNVIPXQik/QNrdI+QQ5JZcoiXJIlGtQrlEkFPkCySGaaHZnNrveXXtt1l4Z/37SLs/MPjPz/Gfmwc/Lzgawa5XTt0LEvoj4KCJGa4vNGcq1f56vLE1/vrI0XYgk+f1nhWq+ZytL03nWfLu92cJ4MaL4z0IcaT3s8Py9xRuVubnZO9mKiYVilrpZuTZ7bfbW1Pnzp0+NnDs7daYncaZlenb477ePHrr8p8e/nb7y+M/vvJaWN8k+b4yjZqz6PtT1EQZa1pSj3HwuG/y0+6LvCPsb0oVS+l7sX2HoWnrXppdrsFr/R2OgulQzGr/5R18LB2ypJEmS4Za19b9ly0mjQqG2QZI8SICXQCH6XQKgP/I/9M9W0p7q0nRrP/jl9vRiVHtAadzPs1ftk1K1B1seq/WNBrfo+N+JiCvLX/w3fUXbcQgAgN5642LEo0u1dkf+qn1SjO815PtmNjc0FhHfiogDEfHtrP3y3Yhq3u9HxMGGbfZ3MQtQXrXc2v75YCRLNDZXeyZt//0qm9tqbv/VSz42kC3tr8Y/WLh6fW72ZHZOxmNwOF2ebN11fVjtzV9/+J9Oxy83tP/SV3r8vC2YlePT0qoBupnKQuVF4849fVA9sfdb4y9EqZCnIg5FxOFN7D89Z9d//urRTp83xZ/G2RL/vzvvvLSJAq2S/D/iZ7XrvxzV+POxz1rwQ1lqYuHmXyfm7y3+8nrj/OTkubNTZyb2xNzsyYn8rmj17vsPf5clW7oRzdc/SRquf141tnQiLb3+32h7/9dnLsfSVH2+dn7jx3j45FHHPs1m7/+hwh+q6Xx+9m5lYeHOZMRQYbl1/dTX296tjDTlT+MfP96+/h+I+PJ/2XZHIiK9iX8QET+MiGNZ2X8UET+OiONrxP/2pZ/8pVMXcv34t1Ya/8yGrv+9xZHIEvU1aeLCexHNa/LEwI23Xm858L/KLfEPRqfrf7qaGs/WzFQW9qwXV5sCtk288AkEAACAHeBYROyLQvFENtC0L4rFEyci9tZHUOYXfnH19t9uzdSeERiLwWI+0jXaMB46mY0Np8vpVlMNy+nnp6rjxkmSJCPpctp/nzvY39Bh19vbof6nPml9pAV42WxoHq3TE23AjrS6/j/pesvefyED2F49+B4NsEOp/7B7dV3/t+opOKBv2tX/+xHP+1AUYJu1q/9/bFlzYVvKAmyvdvXf3D/sDpsf//NlANjpjP/DrtTVQ/KbSBy4vEaeQqm7/ZS6fox/vUQx1v4VgLGo/6ZB3qZZe4cfFyN6c8YGenrmR5quabFtnj3Ri2NFcd08pQ38EMP2JoqVubn8AZe+l2c4Ita5e+s32/08sbjVBauem1f69z8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAb3wVAAD//8B9zog=") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000540)={0x0}) 1m14.414523041s ago: executing program 5 (id=1567): sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48010) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[], 0x1, 0x25c, &(0x7f0000000d00)="$eJzs2k9rXFUYB+D3xkpiSjoR/9GC9KAL6+bSZOVCJEFaEAOKNkIVpLfmRodcZ0LuEBgRGze6ceFHcC0u3QlSceMmGz+BC3fZZNmFeKWdaZuECBlinNI+z2Ze5p3f3HM4h8NZ3J1Xv/10bbXOV4teTGRZTCzEVtzKYjYm4q6tePmlq789/+7V999cXFq69E5KlxevzM2nlM6c//mDz3944Wbv9Hs/nvlpMrZnP9zZ/fLP7We3z+78feWTdp3adep0e6lI17vdXnG9KtNKu17LU3q7Kou6TO1OXW7s669W3fX1fio6KzPT6xtlXaei009rZT/1uqm30U/Fx0W7k/I8TzPTwXEsf3+raWK3efxaZHe/m/kjWpE9mbKnFrJnrmXPbWVnd5umNd6BckLurX/TNE98F6dvWv9Hyp5DfSqi+npzeXN58DnoL65GO6oo42K04q+4vU2GBvXlN5YuXUx3zMZX1Y1h/sbm8mP783PRitnD83ODfNqfn4zpvfn5aMXTh+fnD81PxYUX9+TzaMXvH0U3qliJ29n7+S/mUnr9raUD+XN3fgcA8LDJ0z2H3t/y/N/6g/wI98MD96tTce7UeOdORN3/bK2oqnJDMUpxftTU1DEfOhnjnvLxi8FmuzDceSfxiCaLeBBmeqTi119ee+UBGMawWDh4FIz5YOJ/cX/Rj5qYOtkBAQAAAAAAAAAAcCT/3VuE3wz/cV8rG+XNMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NH0TwAAAP//vwHHww==") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x80000000, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) 1m14.344528142s ago: executing program 5 (id=1568): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendfile(r1, r0, 0x0, 0x8010002b) connect$inet(r1, &(0x7f0000000480)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) 1m13.500511543s ago: executing program 5 (id=1583): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 1m13.25910199s ago: executing program 5 (id=1588): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sendmsg$unix(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x10}}], 0x10, 0x4000}, 0x80) 1m12.678851814s ago: executing program 5 (id=1611): unshare(0x22020600) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0xbb, 0xc40, 0x2, 0x20, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd2d, 0x0, {0x81, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 1m12.678735674s ago: executing program 34 (id=1611): unshare(0x22020600) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0xbb, 0xc40, 0x2, 0x20, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x70bd2d, 0x0, {0x81, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 47.357939164s ago: executing program 3 (id=2019): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000640)='$', 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x9) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r3], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440a0) 47.150299009s ago: executing program 3 (id=2020): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) setresuid(0xee01, 0xee00, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x80) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 47.056106561s ago: executing program 3 (id=2023): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 46.406532798s ago: executing program 3 (id=2031): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 46.358935109s ago: executing program 3 (id=2033): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x4000, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 45.648757447s ago: executing program 3 (id=2044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) 45.630094807s ago: executing program 35 (id=2044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) 5.958838369s ago: executing program 8 (id=2733): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.455056622s ago: executing program 6 (id=2744): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, r0, 0x0) utime(&(0x7f0000000200)='.\x00', 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.050693432s ago: executing program 8 (id=2746): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ITER_CREATE(0x21, 0x0, 0xffffffffffffffa3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100000001692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000cc0)="0000000000000000000051229dc9", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.041666702s ago: executing program 8 (id=2747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x1}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3755}}]}]}}]}, 0x50}}, 0x0) 4.923706335s ago: executing program 8 (id=2750): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xd400, 0x2, 0x234}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.820161968s ago: executing program 8 (id=2753): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x40000400004, &(0x7f0000000040)) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 4.446871468s ago: executing program 6 (id=2756): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x0, 0x0, 0x1a, 0x0, "bb02a3c364ca41d6357e544508474204000b5aa201ecffffffffffffff0f0000000000000034a632ab7193fcf19b2df3ee050000000000000041d269776df1228328cf0a007bbe6c0000000000b800"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x8) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 4.396002419s ago: executing program 6 (id=2757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x4001020) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) 4.375049779s ago: executing program 6 (id=2758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private0, 0x20000000}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private0}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) close(r2) syz_emit_ethernet(0x66, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x30, 0x6, 0x0, @private0, @private0, {[], {{0x4e22, 0x4e23, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x2, 0x1000}, {"0254f0cfdab39eb95c103c0508fe9600f806be6bd8829f9db0677f88"}}}}}}}, 0x0) 4.186667274s ago: executing program 8 (id=2761): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x10) fcntl$notify(r3, 0x402, 0x26) fcntl$notify(r3, 0x402, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 4.173987024s ago: executing program 36 (id=2761): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x10) fcntl$notify(r3, 0x402, 0x26) fcntl$notify(r3, 0x402, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3.478512092s ago: executing program 6 (id=2772): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xf6272000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fdatasync(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) tkill(r0, 0x14) 3.242614588s ago: executing program 7 (id=2776): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvfrom$inet6(r1, &(0x7f0000000040)=""/62, 0x3e, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.132596931s ago: executing program 7 (id=2779): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x180400) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.022211143s ago: executing program 6 (id=2781): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1.17641877s ago: executing program 9 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 1.094892332s ago: executing program 0 (id=2790): ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x6ad) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1.094639612s ago: executing program 0 (id=2791): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r0, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x10, 0x3, 0xb) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) socket(0x1e, 0x1, 0x0) 1.073584342s ago: executing program 9 (id=2792): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) 1.058346653s ago: executing program 0 (id=2793): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x2100, 0x4) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1, 0x2000) read(r1, &(0x7f0000001840)=""/180, 0xb4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0x0, r3, 0x35, r0}, 0x10) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 862.861808ms ago: executing program 0 (id=2795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0xc, 0x87}, {0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 862.531028ms ago: executing program 7 (id=2797): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0xec0}], 0x1}, 0x2002) 860.945758ms ago: executing program 0 (id=2798): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)}, {&(0x7f0000000cc0)="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", 0x10e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="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", 0x185}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c5", 0xb3}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 833.317999ms ago: executing program 1 (id=2799): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@multicast, @random="9366f942d32d", @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@generic={0xc, 0x6, "bab728", 0x0, 0x33, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 825.614709ms ago: executing program 7 (id=2800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f00000004c0)={@void, @val={0x1, 0x0, 0x9, 0x5, 0x6}, @ipv6=@icmpv6={0x1, 0x6, "d78643", 0x1c, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[], @mlv2_query={0x82, 0x0, 0x0, 0xffff, 0x9, @remote, 0x0, 0x0, 0x4, 0x3}}}}, 0x4e) 669.646673ms ago: executing program 7 (id=2801): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x62, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x11000, 0x2, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048044}, 0x404c094) 669.194913ms ago: executing program 1 (id=2802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x40005) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) recvfrom$inet6(r1, &(0x7f00000002c0)=""/120, 0x78, 0x140, 0x0, 0x0) 594.889785ms ago: executing program 1 (id=2803): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x3b, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 594.757755ms ago: executing program 7 (id=2804): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 584.365455ms ago: executing program 9 (id=2805): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 548.800036ms ago: executing program 1 (id=2806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 506.845737ms ago: executing program 9 (id=2807): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1, 0x0, r0}) io_uring_setup(0x3b2f, &(0x7f0000000000)={0x0, 0x603b, 0x0, 0x1, 0x1c2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00020004000000010000b000ff000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 506.621507ms ago: executing program 9 (id=2808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 408.523239ms ago: executing program 9 (id=2809): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 360.743651ms ago: executing program 1 (id=2810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2140, &(0x7f0000003700)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000340)={[{@quota}, {@nombcache}, {@norecovery}, {@noload}, {@noquota}, {@auto_da_alloc}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1400) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 178.883316ms ago: executing program 1 (id=2811): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) 0s ago: executing program 0 (id=2812): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xca6c, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x97, &(0x7f0000000080)=""/151, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0xc, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000200)=[{0x1, 0x3, 0xe, 0xc}, {0x4, 0x3, 0x9, 0x7}, {0x3, 0x1, 0x4, 0x4}, {0x1, 0x5, 0x2, 0x8}, {0x0, 0x4, 0x6, 0xa}], 0x10, 0x1ff}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = msgget$private(0x0, 0x428) msgrcv(r2, 0x0, 0x0, 0x3, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_RMID(r2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000004c0)=r0, 0x4) r3 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf40e, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) kernel console output (not intermixed with test programs): onds [ 112.731989][ T7432] Freezing user space processes [ 112.738685][ T7432] Freezing user space processes completed (elapsed 0.001 seconds) [ 112.746825][ T7432] OOM killer disabled. [ 112.750929][ T7432] Freezing remaining freezable tasks [ 112.757938][ T7432] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 112.766366][ T7432] printk: Suspending console(s) (use no_console_suspend to debug) [ 112.812251][ T7432] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 112.812776][ T7432] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 112.813391][ T7432] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 112.813575][ T7432] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 112.814123][ T7432] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 112.814209][ T7432] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 112.814240][ T7432] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 112.814270][ T7432] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 112.814338][ T7432] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 112.814406][ T7432] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 112.814437][ T7432] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 112.814527][ T7432] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 112.814557][ T7432] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 112.814604][ T7432] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 112.814686][ T7432] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 112.814716][ T7432] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 112.851516][ T4078] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 113.504962][ T7432] ACPI: PM: Preparing to enter system sleep state S3 [ 113.505196][ T7432] ACPI: PM: Saving platform NVS memory [ 113.505205][ T7432] PM: suspend debug: Waiting for 0 second(s). [ 113.505214][ T7432] ACPI: PM: Waking up from system sleep state S3 [ 113.546799][ T30] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 113.710499][ T7432] OOM killer enabled. [ 113.711260][ T7432] Restarting tasks: Starting [ 113.750681][ T7432] Restarting tasks: Done [ 113.751680][ T7432] random: crng reseeded on system resumption [ 113.764399][ T7432] PM: suspend exit [ 113.792517][ T7594] loop3: detected capacity change from 0 to 128 [ 113.796419][ T7593] syzkaller1: entered promiscuous mode [ 113.798324][ T7593] syzkaller1: entered allmulticast mode [ 113.873089][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1305'. [ 113.983709][ T7616] netlink: 'syz.5.1311': attribute type 1 has an invalid length. [ 114.009150][ T7616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.022957][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 114.022973][ T28] audit: type=1400 audit(1786099110.222:907): avc: denied { nlmsg_read } for pid=7618 comm="syz.3.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.037912][ T7616] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 114.041913][ T7615] process 'syz.1.1310' launched './file1' with NULL argv: empty string added [ 114.045817][ T28] audit: type=1400 audit(1786099110.242:908): avc: denied { execute_no_trans } for pid=7613 comm="syz.1.1310" path="/289/file1" dev="tmpfs" ino=1524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.071359][ T7616] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 114.074065][ T7616] bond2 (unregistering): Released all slaves [ 114.161025][ T7607] loop0: detected capacity change from 0 to 1764 [ 114.205177][ T28] audit: type=1400 audit(1786099110.392:909): avc: denied { unmount } for pid=7622 comm="syz.1.1313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.370498][ T7646] syzkaller1: entered promiscuous mode [ 114.376876][ T7646] syzkaller1: entered allmulticast mode [ 114.387274][ T7646] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 114.517646][ T7638] loop3: detected capacity change from 0 to 764 [ 114.538817][ T7658] loop0: detected capacity change from 0 to 128 [ 114.543265][ T7660] netlink: 'syz.6.1330': attribute type 1 has an invalid length. [ 114.563110][ T7658] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.567415][ T7658] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.574154][ T7660] bond1: entered promiscuous mode [ 114.575369][ T7660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.586643][ T28] audit: type=1400 audit(1786099110.782:910): avc: denied { write } for pid=7657 comm="syz.0.1329" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.616833][ T7660] bond1: (slave veth7): making interface the new active one [ 114.619143][ T7638] netlink: zone id is out of range [ 114.621776][ T7660] veth7: entered promiscuous mode [ 114.623818][ T7660] bond1: (slave veth7): Enslaving as an active interface with an up link [ 114.625294][ T7638] netlink: zone id is out of range [ 114.625304][ T7638] netlink: zone id is out of range [ 114.625313][ T7638] netlink: zone id is out of range [ 114.625322][ T7638] netlink: zone id is out of range [ 114.628539][ T4821] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.633001][ T7638] netlink: zone id is out of range [ 114.634675][ T7638] netlink: zone id is out of range [ 114.636231][ T7638] netlink: zone id is out of range [ 114.645140][ T7665] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1331'. [ 114.759538][ T28] audit: type=1400 audit(1786099110.952:911): avc: denied { getopt } for pid=7677 comm="syz.0.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 114.765831][ T28] audit: type=1400 audit(1786099110.962:912): avc: denied { append } for pid=7679 comm="syz.6.1338" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 114.910020][ T28] audit: type=1400 audit(1786099111.102:913): avc: denied { create } for pid=7697 comm="syz.6.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.914693][ T28] audit: type=1400 audit(1786099111.112:914): avc: denied { write } for pid=7697 comm="syz.6.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 114.933169][ T28] audit: type=1400 audit(1786099111.132:915): avc: denied { getopt } for pid=7693 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.988611][ T28] audit: type=1326 audit(1786099111.182:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7702 comm="syz.6.1348" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cef4ae0d9 code=0x0 [ 115.181875][ T7720] uprobe: syz.1.1355:7720 failed to unregister, leaking uprobe [ 115.290724][ T7727] loop0: detected capacity change from 0 to 8192 [ 115.469452][ T7731] loop3: detected capacity change from 0 to 1024 [ 115.477445][ T7731] EXT4-fs: Ignoring removed nobh option [ 115.481201][ T7731] EXT4-fs: Ignoring removed bh option [ 115.485164][ T7731] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 115.502497][ T7731] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 115.504066][ T7731] System zones: 0-1, 3-12 [ 115.506768][ T7731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.519909][ T7731] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 115.535505][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.617744][ T7735] loop3: detected capacity change from 0 to 8192 [ 115.634744][ T7735] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.417647][ T7813] netlink: 'syz.1.1372': attribute type 4 has an invalid length. [ 116.647057][ T7744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.817980][ T7879] loop0: detected capacity change from 0 to 512 [ 116.832966][ T7879] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1379: bg 0: block 393: padding at end of block bitmap is not set [ 116.835359][ T7879] loop0: lost filesystem error report for type 5 error -117 [ 116.835552][ T7879] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 116.841083][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 116.842258][ C1] EXT4-fs (loop0): initial error at time 1786099113: ext4_validate_block_bitmap:441 [ 116.843843][ C1] EXT4-fs (loop0): last error at time 1786099113: ext4_validate_block_bitmap:441 [ 116.845796][ T7879] loop0: lost filesystem error report for type 5 error -117 [ 116.849230][ T7879] EXT4-fs (loop0): 2 truncates cleaned up [ 116.877216][ T7879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.914652][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'. [ 116.932147][ T4821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.002960][ T7900] netlink: 'syz.5.1385': attribute type 2 has an invalid length. [ 117.140006][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1392'. [ 117.170774][ T7894] loop6: detected capacity change from 0 to 512 [ 117.184470][ T7894] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.193138][ T7894] EXT4-fs (loop6): 1 truncate cleaned up [ 117.195678][ T7894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.398446][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.999555][ T7935] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.1399'. [ 118.005549][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1399'. [ 118.089725][ T7946] netlink: 'syz.5.1406': attribute type 10 has an invalid length. [ 118.091963][ T7946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.094531][ T7946] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 118.561497][ T7966] loop5: detected capacity change from 0 to 512 [ 118.632652][ T7966] EXT4-fs: Ignoring removed orlov option [ 118.723949][ T7966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.827889][ T4478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.864497][ T7975] loop5: detected capacity change from 0 to 512 [ 118.871772][ T7975] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 118.873904][ T7975] EXT4-fs (loop5): invalid journal inode [ 118.874939][ T7975] EXT4-fs (loop5): can't get journal size [ 118.878363][ T7975] EXT4-fs (loop5): 1 truncate cleaned up [ 118.879887][ T7975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.125065][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 119.125080][ T28] audit: type=1400 audit(1786099115.322:931): avc: denied { ioctl } for pid=7991 comm="syz.3.1423" path="socket:[18164]" dev="sockfs" ino=18164 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.805815][ T4478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.864910][ T7997] loop3: detected capacity change from 0 to 128 [ 120.077778][ T7997] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 120.090857][ T7997] ext4 filesystem being mounted at /295/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.129412][ T28] audit: type=1400 audit(1786099116.322:932): avc: denied { write } for pid=7996 comm="syz.3.1426" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.138445][ T28] audit: type=1400 audit(1786099116.332:933): avc: denied { create } for pid=7996 comm="syz.3.1426" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 120.155507][ T8009] loop5: detected capacity change from 0 to 512 [ 120.172765][ T28] audit: type=1400 audit(1786099116.362:934): avc: denied { write } for pid=7996 comm="syz.3.1426" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.185515][ T8009] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1440: iget: bad i_size value: 38620345925642 [ 120.187938][ T28] audit: type=1400 audit(1786099116.382:935): avc: denied { write } for pid=7996 comm="syz.3.1426" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.196112][ T8009] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.196368][ T8009] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1440: couldn't read orphan inode 15 (err -117) [ 120.198539][ T28] audit: type=1400 audit(1786099116.392:936): avc: denied { write } for pid=7996 comm="syz.3.1426" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.208889][ T8009] loop5: lost filesystem error report for type 5 error -117 [ 120.210228][ T8009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.231552][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.239403][ T28] audit: type=1400 audit(1786099116.432:937): avc: denied { write } for pid=8008 comm="syz.5.1440" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.277393][ T28] audit: type=1400 audit(1786099116.472:938): avc: denied { map } for pid=8000 comm="syz.0.1427" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.285583][ T28] audit: type=1400 audit(1786099116.472:939): avc: denied { read write } for pid=8000 comm="syz.0.1427" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 120.327000][ T8009] EXT4-fs (loop5): shut down requested (1) [ 120.365263][ T4478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.567344][ T8017] loop6: detected capacity change from 0 to 2048 [ 120.667639][ T8017] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.748079][ T8017] EXT4-fs error (device loop6): ext4_ext_precache:631: inode #2: comm syz.6.1433: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 120.768308][ T8017] EXT4-fs (loop6): Remounting filesystem read-only [ 120.834859][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.836516][ T28] audit: type=1400 audit(1786099117.032:940): avc: denied { bind } for pid=8033 comm="syz.1.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.842110][ T8036] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 120.884835][ T8036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.921458][ T8036] bond3: (slave dummy0): Releasing backup interface [ 120.937953][ T8036] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 120.964647][ T8036] netlink: 'syz.3.1438': attribute type 10 has an invalid length. [ 120.971925][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1438'. [ 120.979804][ T8036] dummy0: entered promiscuous mode [ 120.991948][ T7485] net_ratelimit: 136 callbacks suppressed [ 120.991969][ T7485] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.994824][ T7485] bond4: (slave dummy0): link status up again after 0 ms [ 120.997856][ T8036] bond4: (slave dummy0): Removing an active aggregator [ 120.999474][ T8036] bond4: (slave dummy0): Releasing backup interface [ 121.353672][ T8046] loop0: detected capacity change from 0 to 764 [ 121.463471][ T8046] netlink: zone id is out of range [ 121.465758][ T8046] netlink: zone id is out of range [ 121.468553][ T8046] netlink: zone id is out of range [ 121.469744][ T8046] netlink: zone id is out of range [ 121.473951][ T8046] netlink: zone id is out of range [ 121.477247][ T8046] netlink: zone id is out of range [ 121.481533][ T8046] netlink: zone id is out of range [ 121.482923][ T8046] netlink: zone id is out of range [ 121.607379][ T8066] lo speed is unknown, defaulting to 1000 [ 122.326438][ T8072] loop0: detected capacity change from 0 to 2048 [ 122.383350][ T8094] loop5: detected capacity change from 0 to 512 [ 122.386951][ T8094] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.441251][ T8072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.475857][ T8094] EXT4-fs (loop5): 1 truncate cleaned up [ 122.477414][ T8094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.481413][ T8072] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.1452: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 122.492176][ T8072] EXT4-fs (loop0): Remounting filesystem read-only [ 122.519355][ T4821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.543480][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1465'. [ 122.631590][ T4478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.839478][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1473'. [ 122.850665][ T8120] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1473'. [ 122.885721][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1474'. [ 123.085875][ T8131] loop0: detected capacity change from 0 to 512 [ 123.104828][ T8131] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.194596][ T8131] EXT4-fs (loop0): 1 truncate cleaned up [ 123.240650][ T8150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1484'. [ 123.262669][ T8131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.487051][ T4821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.530240][ T8205] loop6: detected capacity change from 0 to 256 [ 124.861870][ T8231] sit0: entered promiscuous mode [ 124.867275][ T8231] netlink: 'syz.6.1522': attribute type 1 has an invalid length. [ 124.868734][ T8231] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1522'. [ 125.156853][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 125.201635][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 125.262378][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 125.838312][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1542'. [ 125.894455][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 125.894474][ T28] audit: type=1326 audit(1786099122.092:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.901682][ T8283] loop5: detected capacity change from 0 to 512 [ 125.905149][ T8283] EXT4-fs: Ignoring removed bh option [ 125.909438][ T28] audit: type=1326 audit(1786099122.092:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.917801][ T28] audit: type=1326 audit(1786099122.092:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9d274e90e code=0x7ffc0000 [ 125.922469][ T8283] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 125.926750][ T28] audit: type=1326 audit(1786099122.092:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.931297][ T28] audit: type=1326 audit(1786099122.092:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.935808][ T28] audit: type=1326 audit(1786099122.092:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.940169][ T8283] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 125.940349][ T8283] EXT4-fs (loop5): orphan cleanup on readonly fs [ 125.942653][ T28] audit: type=1326 audit(1786099122.102:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.947210][ T28] audit: type=1326 audit(1786099122.102:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.951416][ T28] audit: type=1326 audit(1786099122.102:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.955960][ T28] audit: type=1326 audit(1786099122.102:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8287 comm="syz.1.1546" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 125.961698][ T8283] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1545: Failed to acquire dquot type 1 [ 125.979751][ T8283] loop5: lost filesystem error report for type 5 error -5 [ 125.980066][ T8283] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1545: Invalid block bitmap block 0 in block_group 0 [ 125.981500][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 125.981516][ C0] EXT4-fs (loop5): last error at time 1786099122: ext4_acquire_dquot:7041 [ 126.007426][ T8294] netlink: 'syz.0.1548': attribute type 2 has an invalid length. [ 126.009186][ T8283] loop5: lost filesystem error report for type 5 error -117 [ 126.010444][ T8283] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1545: Invalid block bitmap block 0 in block_group 0 [ 126.026674][ T8294] netlink: 'syz.0.1548': attribute type 2 has an invalid length. [ 126.034646][ T8294] netlink: 'syz.0.1548': attribute type 2 has an invalid length. [ 126.039015][ T8283] loop5: lost filesystem error report for type 5 error -117 [ 126.039319][ T8283] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1545: Invalid block bitmap block 0 in block_group 0 [ 126.057406][ T8283] loop5: lost filesystem error report for type 5 error -117 [ 126.061902][ T8283] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1545: Failed to acquire dquot type 1 [ 126.073819][ T8283] loop5: lost filesystem error report for type 5 error -28 [ 126.074338][ T8283] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1545: Failed to acquire dquot type 1 [ 126.095905][ T8283] loop5: lost filesystem error report for type 5 error -28 [ 126.096089][ T8283] EXT4-fs (loop5): 1 orphan inode deleted [ 126.111305][ T8283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.151682][ T8283] syz.5.1545 (8283) used greatest stack depth: 9680 bytes left [ 126.224305][ T4478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.394886][ T8319] loop6: detected capacity change from 0 to 512 [ 126.399589][ T8319] EXT4-fs: Ignoring removed bh option [ 126.426468][ T8319] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 126.432226][ T8319] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 126.435680][ T8319] EXT4-fs (loop6): orphan cleanup on readonly fs [ 126.442987][ T8319] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1558: Failed to acquire dquot type 1 [ 126.446557][ T8319] loop6: lost filesystem error report for type 5 error -5 [ 126.448511][ T8319] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1558: Invalid block bitmap block 0 in block_group 0 [ 126.452052][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 126.452069][ C1] EXT4-fs (loop6): last error at time 1786099122: ext4_acquire_dquot:7041 [ 126.466652][ T8319] loop6: lost filesystem error report for type 5 error -117 [ 126.467763][ T8319] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1558: Invalid block bitmap block 0 in block_group 0 [ 126.471621][ T8319] loop6: lost filesystem error report for type 5 error -117 [ 126.473242][ T8319] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1558: Invalid block bitmap block 0 in block_group 0 [ 126.478275][ T8319] loop6: lost filesystem error report for type 5 error -117 [ 126.479710][ T8319] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1558: Failed to acquire dquot type 1 [ 126.484591][ T8319] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1558: Failed to acquire dquot type 1 [ 126.489620][ T8319] EXT4-fs (loop6): 1 orphan inode deleted [ 126.491428][ T8319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.500372][ T8319] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.1558: deleted inode referenced: 12 [ 126.514224][ T8319] EXT4-fs error (device loop6): ext4_lookup:1789: inode #2: comm syz.6.1558: deleted inode referenced: 12 [ 126.643072][ T8338] loop5: detected capacity change from 0 to 512 [ 126.647268][ T8338] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 126.687512][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.711225][ T8342] loop5: detected capacity change from 0 to 128 [ 126.724558][ T8344] loop6: detected capacity change from 0 to 1024 [ 126.749164][ T8344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.224324][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.329889][ T8373] xt_hashlimit: size too large, truncated to 1048576 [ 127.360882][ T8377] syz.0.1577(8377): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 127.656530][ T8392] loop0: detected capacity change from 0 to 512 [ 127.658437][ T8392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 127.665017][ T8392] EXT4-fs (loop0): 1 truncate cleaned up [ 127.667310][ T8392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.885697][ T8411] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 127.895568][ T4821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.898413][ T8411] bond4: entered promiscuous mode [ 127.901197][ T8411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.923498][ T8411] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.950902][ T8411] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 127.981776][ T8411] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 128.004571][ T8420] sg_read: process 360 (syz.6.1595) changed security contexts after opening file descriptor, this is not allowed. [ 128.018367][ T8411] bond4: (slave xfrm1): making interface the new active one [ 128.026105][ T8411] xfrm1: entered promiscuous mode [ 128.033516][ T8411] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 128.658631][ T8460] lo speed is unknown, defaulting to 1000 [ 128.782297][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.789521][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.797216][ T8460] bridge_slave_0: entered allmulticast mode [ 128.803983][ T8460] bridge_slave_0: entered promiscuous mode [ 128.811332][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.818618][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.826271][ T8460] bridge_slave_1: entered allmulticast mode [ 128.832963][ T8460] bridge_slave_1: entered promiscuous mode [ 128.860427][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.884132][ T8486] __nla_validate_parse: 7 callbacks suppressed [ 128.884154][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'. [ 128.901984][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.954328][ T8460] team0: Port device team_slave_0 added [ 128.970392][ T8460] team0: Port device team_slave_1 added [ 129.005882][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.022274][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.065587][ T8460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.077711][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.085784][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.112756][ T8460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.143566][ T8460] hsr_slave_0: entered promiscuous mode [ 129.151432][ T8460] hsr_slave_1: entered promiscuous mode [ 129.157755][ T8460] debugfs: 'hsr0' already exists in 'hsr' [ 129.164059][ T8460] Cannot create hsr debugfs directory [ 129.334056][ T8460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 129.396258][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 129.420886][ T8460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 129.445618][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 129.471205][ T8460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 129.488787][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 129.504202][ T8460] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 129.534527][ T8460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 129.617222][ T8460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.674705][ T8460] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.695575][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.702724][ T7504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.739208][ T7487] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.746376][ T7487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.871981][ T8495] loop6: detected capacity change from 0 to 1024 [ 129.938416][ T8495] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.951279][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.956160][ T8495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.998488][ T8495] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.063835][ T8495] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.1624: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 130.089060][ T8495] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 130.091344][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 130.109206][ C0] EXT4-fs (loop6): initial error at time 1786099126: ext4_ext_check_inode:521: inode 11 [ 130.119596][ C0] EXT4-fs (loop6): last error at time 1786099126: ext4_ext_check_inode:521: inode 11 [ 130.131031][ T8495] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1624: couldn't read orphan inode 11 (err -117) [ 130.155701][ T8495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.242593][ T8495] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1624: Invalid block bitmap block 0 in block_group 0 [ 130.268523][ T8495] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1624: Failed to acquire dquot type 0 [ 130.322147][ T8495] syz.6.1624 (8495) used greatest stack depth: 9472 bytes left [ 130.334357][ T8460] veth0_vlan: entered promiscuous mode [ 130.336185][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.355490][ T8460] veth1_vlan: entered promiscuous mode [ 130.363999][ T8554] netlink: 'syz.1.1635': attribute type 2 has an invalid length. [ 130.391782][ T8460] veth0_macvtap: entered promiscuous mode [ 130.422356][ T8460] veth1_macvtap: entered promiscuous mode [ 130.447595][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.463683][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.506995][ T8562] loop6: detected capacity change from 0 to 128 [ 130.541686][ T7504] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.566079][ T7504] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.581286][ T8562] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.622167][ T7504] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.662208][ T7487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.714316][ T8562] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.904355][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 130.904404][ T28] audit: type=1326 audit(1786099127.102:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 130.982475][ T28] audit: type=1326 audit(1786099127.142:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.038830][ T28] audit: type=1326 audit(1786099127.142:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.123051][ T28] audit: type=1326 audit(1786099127.142:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.211870][ T28] audit: type=1326 audit(1786099127.142:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.298318][ T28] audit: type=1326 audit(1786099127.142:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.357176][ T28] audit: type=1326 audit(1786099127.152:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.383127][ T28] audit: type=1326 audit(1786099127.152:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.443532][ T28] audit: type=1326 audit(1786099127.152:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.524288][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.534244][ T28] audit: type=1326 audit(1786099127.152:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.6.1636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1cef46e90e code=0x7ffc0000 [ 131.563661][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.161202][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 132.196445][ T8601] team_slave_0: entered promiscuous mode [ 132.210182][ T8601] team_slave_0: left promiscuous mode [ 132.267845][ T8607] sctp: [Deprecated]: syz.3.1654 (pid 8607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.267845][ T8607] Use struct sctp_sack_info instead [ 132.456581][ T8613] lo speed is unknown, defaulting to 1000 [ 132.483475][ T7487] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.121628][ T8624] netlink: 'syz.7.1663': attribute type 6 has an invalid length. [ 133.469424][ T8628] netlink: 'syz.6.1666': attribute type 3 has an invalid length. [ 133.479286][ T8628] netlink: 'syz.6.1666': attribute type 3 has an invalid length. [ 133.769146][ T8652] netlink: 'syz.1.1676': attribute type 1 has an invalid length. [ 133.820558][ T8633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.834756][ T8652] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.862291][ T8633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.883889][ T8654] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 133.941117][ T7504] net_ratelimit: 136 callbacks suppressed [ 133.941136][ T7504] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.007024][ T8652] bond5 (unregistering): (slave gretap1): Removing an active aggregator [ 134.016412][ T8652] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 134.032655][ T8652] bond5 (unregistering): Released all slaves [ 134.688002][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1690'. [ 134.719183][ T8695] SELinux: Context system_u:object_r:shell_exec_t:s0 is not valid (left unmapped). [ 134.725082][ T8697] macvtap1: entered allmulticast mode [ 134.750814][ T8697] bridge0: entered allmulticast mode [ 134.762532][ T8697] bridge0: entered promiscuous mode [ 134.828729][ T8697] bridge0: port 3(macvtap1) entered blocking state [ 134.836830][ T8697] bridge0: port 3(macvtap1) entered disabled state [ 134.871589][ T8697] bridge0: left allmulticast mode [ 134.970144][ T35] bridge0: left promiscuous mode [ 134.994899][ T8709] syzkaller0: entered promiscuous mode [ 135.000438][ T8709] syzkaller0: entered allmulticast mode [ 135.940926][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 135.940947][ T28] audit: type=1400 audit(1786099132.132:1152): avc: denied { write } for pid=8786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.022996][ T28] audit: type=1400 audit(1786099132.192:1153): avc: denied { write } for pid=8806 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.087888][ T28] audit: type=1400 audit(1786099132.282:1154): avc: denied { read } for pid=8810 comm="syz.0.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 136.126597][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1719'. [ 136.293546][ T28] audit: type=1400 audit(1786099132.492:1155): avc: denied { write } for pid=8812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.321670][ T8833] netlink: 'syz.0.1723': attribute type 1 has an invalid length. [ 136.339485][ T8833] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.398852][ T28] audit: type=1400 audit(1786099132.592:1156): avc: denied { write } for pid=8836 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.441912][ T7504] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 136.454543][ T8840] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 136.490312][ T8833] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 136.498538][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1723'. [ 136.507621][ T8833] dummy0: entered promiscuous mode [ 136.514313][ T8833] bond2: (slave dummy0): Removing an active aggregator [ 136.521669][ T8833] bond2: (slave dummy0): Releasing backup interface [ 136.659314][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 136.696723][ T8854] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1731'. [ 136.781888][ T28] audit: type=1400 audit(1786099132.982:1157): avc: denied { read } for pid=8861 comm="syz.0.1735" name="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 136.811435][ T28] audit: type=1400 audit(1786099132.982:1158): avc: denied { read open } for pid=8861 comm="syz.0.1735" path="/" dev="configfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.000423][ T8868] netlink: 'syz.3.1740': attribute type 1 has an invalid length. [ 137.025851][ T8868] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1740'. [ 137.484697][ T8909] sctp: [Deprecated]: syz.1.1753 (pid 8909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.484697][ T8909] Use struct sctp_sack_info instead [ 138.292592][ T8950] netlink: 'syz.0.1769': attribute type 2 has an invalid length. [ 138.425687][ T8956] loop0: detected capacity change from 0 to 512 [ 138.426597][ T8955] sctp: [Deprecated]: syz.6.1771 (pid 8955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.426597][ T8955] Use struct sctp_sack_info instead [ 138.462909][ T8956] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 138.485688][ T8956] EXT4-fs (loop0): invalid journal inode [ 138.493636][ T8956] EXT4-fs (loop0): can't get journal size [ 138.513289][ T8956] EXT4-fs (loop0): 1 truncate cleaned up [ 138.528975][ T8956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.571924][ T28] audit: type=1400 audit(1786099134.772:1159): avc: denied { write } for pid=8953 comm="syz.0.1772" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.660888][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1778'. [ 138.670296][ T8969] netlink: 'syz.3.1778': attribute type 7 has an invalid length. [ 138.671581][ T28] audit: type=1400 audit(1786099134.772:1160): avc: denied { write } for pid=8953 comm="syz.0.1772" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.679148][ T8969] netlink: 'syz.3.1778': attribute type 8 has an invalid length. [ 138.709114][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 138.834056][ T8978] netlink: 'syz.3.1782': attribute type 2 has an invalid length. [ 138.857080][ T8980] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1781'. [ 138.971648][ T4821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.062046][ T9064] netlink: 'syz.6.1796': attribute type 2 has an invalid length. [ 140.144755][ T9077] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1798'. [ 140.902052][ T9138] netlink: 'syz.7.1812': attribute type 2 has an invalid length. [ 141.251604][ T7487] rpcbind: server 127.0.0.1 not responding, timed out [ 142.077227][ T28] audit: type=1326 audit(1786099138.272:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.126088][ T28] audit: type=1326 audit(1786099138.302:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.152284][ T28] audit: type=1326 audit(1786099138.302:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.230959][ T28] audit: type=1326 audit(1786099138.302:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.291991][ T28] audit: type=1326 audit(1786099138.302:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.376483][ T28] audit: type=1326 audit(1786099138.302:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.447992][ T28] audit: type=1326 audit(1786099138.302:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.448282][ T9252] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1829'. [ 142.509699][ T28] audit: type=1326 audit(1786099138.312:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.562939][ T28] audit: type=1326 audit(1786099138.312:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 142.576217][ T9252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.618569][ T28] audit: type=1326 audit(1786099138.382:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.1.1825" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d278e0d9 code=0x7ffc0000 [ 143.849173][ T9332] SELinux: policydb version 0 does not match my version range 15-35 [ 143.876523][ T9332] SELinux: failed to load policy [ 144.167987][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.175507][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.274285][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.289819][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.408222][ T9380] batadv_slave_1: entered promiscuous mode [ 144.441203][ T7490] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.450225][ T7490] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.476249][ T7490] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.512887][ T7490] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.870197][ T9384] loop3: detected capacity change from 0 to 2048 [ 145.222791][ T9384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.414088][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.505196][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1866'. [ 146.092044][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1870'. [ 146.894834][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1882'. [ 147.105892][ T9489] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 147.212176][ T28] kauditd_printk_skb: 164 callbacks suppressed [ 147.212208][ T28] audit: type=1400 audit(1786099143.412:1335): avc: denied { mount } for pid=9493 comm="syz.0.1888" name="/" dev="rpc_pipefs" ino=25153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 147.533818][ T28] audit: type=1400 audit(1786099143.732:1336): avc: denied { connect } for pid=9520 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 147.596005][ T28] audit: type=1400 audit(1786099143.732:1337): avc: denied { setopt } for pid=9516 comm="syz.3.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 148.026501][ T28] audit: type=1400 audit(1786099144.222:1338): avc: denied { unmount } for pid=4821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 148.676432][ T9565] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 148.701746][ T9565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.748941][ T9565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.783318][ T9565] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 148.843767][ T9565] bond0 (unregistering): Released all slaves [ 150.470770][ T9704] loop7: detected capacity change from 0 to 7 [ 150.480504][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 150.490850][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.500488][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 150.508672][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.518334][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 150.526613][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.536268][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 150.545379][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.555036][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 150.563189][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.572834][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 150.585055][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 150.919062][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1942'. [ 150.963519][ T28] audit: type=1400 audit(1786099147.162:1339): avc: denied { setopt } for pid=9709 comm="syz.6.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.983636][ T9722] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 151.031210][ T28] audit: type=1400 audit(1786099147.162:1340): avc: denied { wake_alarm } for pid=9721 comm="syz.3.1947" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.087123][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 151.102636][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 151.260038][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1957'. [ 151.515768][ T9743] macvtap1: entered allmulticast mode [ 151.540261][ T9743] bridge0: entered allmulticast mode [ 151.550361][ T9743] bridge0: entered promiscuous mode [ 151.584510][ T9743] bridge0: port 3(macvtap1) entered blocking state [ 151.594535][ T9743] bridge0: port 3(macvtap1) entered disabled state [ 151.652166][ T9743] bridge0: left allmulticast mode [ 151.813421][ T3401] bridge0: left promiscuous mode [ 152.149939][ T28] audit: type=1326 audit(1786099148.342:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9764 comm="syz.6.1965" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cef4ae0d9 code=0x0 [ 152.359024][ T28] audit: type=1400 audit(1786099148.552:1342): avc: denied { ioctl } for pid=9789 comm="syz.0.1976" path="socket:[25604]" dev="sockfs" ino=25604 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 152.426560][ T9794] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1977'. [ 152.442977][ T28] audit: type=1400 audit(1786099148.642:1343): avc: denied { watch } for pid=9795 comm="syz.3.1979" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 152.506489][ T28] audit: type=1400 audit(1786099148.702:1344): avc: denied { read write } for pid=9799 comm="syz.3.1981" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 152.550765][ T28] audit: type=1400 audit(1786099148.702:1345): avc: denied { open } for pid=9799 comm="syz.3.1981" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 152.567710][ T9802] loop7: detected capacity change from 0 to 256 [ 152.619922][ T9802] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.670118][ T28] audit: type=1400 audit(1786099148.862:1346): avc: denied { listen } for pid=9808 comm="syz.0.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.775967][ T9816] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 8200) [ 152.807829][ T9821] loop0: detected capacity change from 0 to 512 [ 152.813282][ T9816] FAT-fs (loop7): Filesystem has been set read-only [ 152.839887][ T9821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.853985][ T9822] syz_tun: entered promiscuous mode [ 152.862483][ T9821] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.889264][ T28] audit: type=1400 audit(1786099149.082:1347): avc: denied { name_connect } for pid=9828 comm="syz.6.1993" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 152.913916][ T28] audit: type=1400 audit(1786099149.112:1348): avc: denied { write } for pid=9820 comm="syz.0.1991" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 152.939225][ T9802] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2057) [ 153.013536][ T28] audit: type=1400 audit(1786099149.212:1349): avc: denied { sqpoll } for pid=9835 comm="syz.1.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 153.032866][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1995'. [ 153.090326][ T28] audit: type=1400 audit(1786099149.282:1350): avc: denied { ioctl } for pid=9820 comm="syz.0.1991" path="/305/file1/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.106654][ T9842] sctp: [Deprecated]: syz.6.1997 (pid 9842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.106654][ T9842] Use struct sctp_sack_info instead [ 153.158343][ T4821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.189006][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 153.209857][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2002'. [ 153.438152][ T9872] netlink: 'syz.1.2011': attribute type 1 has an invalid length. [ 153.456291][ T9872] bond1: entered promiscuous mode [ 153.481179][ T9872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.524673][ T9881] bond1: (slave ip6gre1): refused to change device type [ 153.576575][ T9887] loop7: detected capacity change from 0 to 7 [ 153.583251][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 153.636761][ T9889] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2017'. [ 153.652453][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 153.688293][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 153.706892][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 153.716834][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 153.725350][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 153.734011][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 153.744810][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 153.754071][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 153.765958][ T9896] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 153.780291][ T9896] bond5: entered promiscuous mode [ 153.785915][ T9896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.807312][ T9896] bond5: (slave bridge2): making interface the new active one [ 153.816104][ T9896] bridge2: entered promiscuous mode [ 153.823842][ T9896] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 153.967696][ T28] audit: type=1400 audit(1786099150.162:1351): avc: denied { write } for pid=9893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.235681][ T9919] loop3: detected capacity change from 0 to 1764 [ 154.286276][ T9885] macvtap1: entered allmulticast mode [ 154.296589][ T9885] bridge0: entered allmulticast mode [ 154.351256][ T9885] bridge0: port 1(macvtap1) entered blocking state [ 154.368821][ T9885] bridge0: port 1(macvtap1) entered disabled state [ 154.628849][ T9885] bridge0: left allmulticast mode [ 155.380076][ T9978] batman_adv: batadv0: Adding interface: dummy0 [ 155.402354][ T9978] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.432258][ T9978] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 155.446007][ T9978] netlink: 'syz.0.2043': attribute type 10 has an invalid length. [ 155.463397][ T9978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.477636][ T9978] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.878364][ T9986] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.899929][ T9986] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.907489][ T9986] bridge_slave_0: entered allmulticast mode [ 155.914338][ T9986] bridge_slave_0: entered promiscuous mode [ 155.922043][ T9986] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.929213][ T9986] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.936645][ T9986] bridge_slave_1: entered allmulticast mode [ 155.945025][ T9986] bridge_slave_1: entered promiscuous mode [ 155.966050][ T9986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.982914][ T9986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.062852][ T9986] team0: Port device team_slave_0 added [ 156.085887][ T9986] team0: Port device team_slave_1 added [ 156.127172][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.140185][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.166552][ T9986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.178078][ T9986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.185331][ T9986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.219831][ T9986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.285690][ T9986] hsr_slave_0: entered promiscuous mode [ 156.302419][ T9986] hsr_slave_1: entered promiscuous mode [ 156.324277][ T9986] debugfs: 'hsr0' already exists in 'hsr' [ 156.330356][ T9986] Cannot create hsr debugfs directory [ 156.563261][ T9986] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 156.574077][ T9986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 156.577219][T10050] __nla_validate_parse: 2 callbacks suppressed [ 156.577233][T10050] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2068'. [ 156.597772][ T9986] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 156.608287][ T9986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 156.631993][ T9986] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 156.640392][T10052] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.652709][ T9986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 156.661788][ T9986] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 156.673556][ T9986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 156.702487][ T9986] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.709641][ T9986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.716991][ T9986] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.724155][ T9986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.797658][ T9986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.816762][ T7488] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.832612][ T7488] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.852926][ T9986] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.875853][ T7487] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.883031][ T7487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.914104][ T7488] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.921375][ T7488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.003170][T10077] netlink: 'syz.1.2075': attribute type 1 has an invalid length. [ 157.021377][T10077] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.2075'. [ 157.104918][T10081] loop7: detected capacity change from 0 to 1024 [ 157.193614][ T9986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.216267][T10081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.229794][T10081] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.320635][T10081] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 157.339160][T10081] EXT4-fs (loop7): orphan cleanup on readonly fs [ 157.373376][T10081] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2076: Invalid inode table block 0 in block_group 0 [ 157.391836][T10081] fserror_report: 3 callbacks suppressed [ 157.391912][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.449846][T10081] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 157.457848][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 157.457938][ C0] EXT4-fs (loop7): initial error at time 1786099153: __ext4_get_inode_loc:4886 [ 157.458467][ C0] EXT4-fs (loop7): last error at time 1786099153: __ext4_get_inode_loc:4886 [ 157.520577][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.546390][T10081] EXT4-fs error (device loop7): ext4_quota_write:7430: inode #3: comm syz.7.2076: mark_inode_dirty error [ 157.591636][T10081] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 157.595781][T10081] __quota_error: 15 callbacks suppressed [ 157.596224][T10081] Quota error (device loop7): write_blk: dquota write failed [ 157.645000][T10081] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 157.684639][T10081] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2076: Failed to acquire dquot type 0 [ 157.695323][ T9986] veth0_vlan: entered promiscuous mode [ 157.705062][ T9986] veth1_vlan: entered promiscuous mode [ 157.706613][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.720851][T10081] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2076: Invalid inode table block 0 in block_group 0 [ 157.747920][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.751057][T10081] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 157.777148][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.779515][T10081] EXT4-fs error (device loop7): ext4_ext_truncate:4557: inode #15: comm syz.7.2076: mark_inode_dirty error [ 157.800759][T10081] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.804199][T10081] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2076: Invalid inode table block 0 in block_group 0 [ 157.830385][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.832129][T10081] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 157.851725][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.855150][T10081] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 157.875912][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.877991][T10081] EXT4-fs error (device loop7): __ext4_get_inode_loc:4886: comm syz.7.2076: Invalid inode table block 0 in block_group 0 [ 157.904123][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.908785][T10081] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 157.932889][T10081] loop7: lost filesystem error report for type 5 error -117 [ 157.937529][T10081] EXT4-fs error (device loop7): ext4_truncate:4691: inode #15: comm syz.7.2076: mark_inode_dirty error [ 157.959323][T10081] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.962851][T10081] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 157.989463][T10081] EXT4-fs (loop7): 1 truncate cleaned up [ 158.004568][T10081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.319499][ T8460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.338122][ T9986] veth0_macvtap: entered promiscuous mode [ 158.354049][ T9986] veth1_macvtap: entered promiscuous mode [ 158.388944][ T9986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.412026][ T9986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.446571][ T7486] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.460059][ T7486] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.479078][ T7494] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.501244][ T7494] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.604919][T10147] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2098'. [ 158.889328][ T28] audit: type=1326 audit(1786099155.082:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10162 comm="syz.0.2100" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x0 [ 159.079888][T10180] tipc: Started in network mode [ 159.088811][T10180] tipc: Node identity a63b7d42f186, cluster identity 4711 [ 159.101874][T10180] tipc: Enabled bearer , priority 0 [ 159.140416][T10180] syzkaller0: entered promiscuous mode [ 159.146119][T10180] syzkaller0: entered allmulticast mode [ 159.152305][T10180] tipc: Resetting bearer [ 159.170239][T10179] tipc: Resetting bearer [ 159.191814][T10179] tipc: Disabling bearer [ 159.268453][T10186] netlink: 'syz.6.2108': attribute type 1 has an invalid length. [ 159.288302][T10186] bond2: entered promiscuous mode [ 159.296866][T10186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.324081][T10186] bond2: (slave ip6gre1): refused to change device type [ 159.341255][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2110'. [ 159.479393][T10190] macvtap1: entered allmulticast mode [ 159.494517][T10190] bridge0: entered allmulticast mode [ 159.543060][T10190] bridge0: port 1(macvtap1) entered blocking state [ 159.572650][T10190] bridge0: port 1(macvtap1) entered disabled state [ 159.666355][T10190] bridge0: left allmulticast mode [ 159.869150][T10213] loop7: detected capacity change from 0 to 2048 [ 159.903541][T10213] loop7: p1 < > p3 [ 159.908758][T10213] loop7: p3 size 134217728 extends beyond EOD, truncated [ 160.022787][ T9878] udevd[9878]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 160.033099][ T28] audit: type=1400 audit(1786099156.222:1368): avc: denied { write } for pid=10211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.060436][ T7311] udevd[7311]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 160.096773][ T28] audit: type=1400 audit(1786099156.292:1369): avc: denied { write } for pid=10234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.147725][T10228] loop8: detected capacity change from 0 to 1764 [ 160.315514][ T28] audit: type=1326 audit(1786099156.502:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10242 comm="syz.1.2124" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd9d2787e57 code=0x0 [ 160.387863][ T28] audit: type=1400 audit(1786099156.562:1371): avc: denied { write } for pid=10244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.432174][ T28] audit: type=1400 audit(1786099156.582:1372): avc: denied { write } for pid=10259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.569117][T10264] loop7: detected capacity change from 0 to 512 [ 160.618957][T10264] EXT4-fs (loop7): 1 orphan inode deleted [ 160.632583][ T7488] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 160.644315][T10264] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.660258][T10264] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.670878][ T7488] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:63: Failed to release dquot type 1 [ 160.693927][ T28] audit: type=1400 audit(1786099156.882:1373): avc: denied { setopt } for pid=10262 comm="syz.7.2127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.887467][T10279] netlink: 'syz.8.2132': attribute type 1 has an invalid length. [ 160.979879][ T8460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.924467][T10321] batadv_slave_1: entered promiscuous mode [ 161.989171][T10318] batadv_slave_1: left promiscuous mode [ 162.175213][T10342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2155'. [ 162.190153][T10342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2155'. [ 162.204877][T10342] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2155'. [ 162.218624][T10342] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2155'. [ 162.271178][T10346] loop6: detected capacity change from 0 to 128 [ 162.857437][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 162.857452][ T28] audit: type=1400 audit(1786099159.052:1428): avc: denied { mount } for pid=10381 comm="syz.8.2168" name="/" dev="autofs" ino=27665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 162.908260][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2169'. [ 163.547059][ T28] audit: type=1400 audit(1786099159.742:1429): avc: denied { name_bind } for pid=10415 comm="syz.1.2181" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 163.557455][T10401] loop6: detected capacity change from 0 to 1024 [ 163.620507][ T28] audit: type=1400 audit(1786099159.812:1430): avc: denied { write } for pid=10421 comm="syz.7.2183" name="instances" dev="tracefs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.626685][T10401] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.685927][ T28] audit: type=1400 audit(1786099159.812:1431): avc: denied { remove_name } for pid=10421 comm="syz.7.2183" name="foo" dev="tracefs" ino=7558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.686440][T10401] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.737051][ T28] audit: type=1400 audit(1786099159.812:1432): avc: denied { rmdir } for pid=10421 comm="syz.7.2183" name="foo" dev="tracefs" ino=7558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 163.764230][T10401] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 163.789639][T10401] EXT4-fs (loop6): orphan cleanup on readonly fs [ 163.826122][ T28] audit: type=1400 audit(1786099160.022:1433): avc: denied { write } for pid=10428 comm="syz.7.2187" name="UDC" dev="configfs" ino=27726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 163.849569][T10429] Need at least one configuration in g1. [ 163.850871][T10401] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.2175: Invalid inode table block 0 in block_group 0 [ 163.863058][T10429] udc usbip-vudc.0: failed to start g1: -22 [ 163.880015][T10401] fserror_report: 1 callbacks suppressed [ 163.880190][T10401] loop6: lost filesystem error report for type 5 error -117 [ 163.899707][T10401] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 163.907906][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 163.907967][ C0] EXT4-fs (loop6): initial error at time 1786099160: __ext4_get_inode_loc:4886 [ 163.908367][ C0] EXT4-fs (loop6): last error at time 1786099160: __ext4_get_inode_loc:4886 [ 163.910106][T10429] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 163.919832][T10401] loop6: lost filesystem error report for type 5 error -117 [ 163.958290][ T28] audit: type=1400 audit(1786099160.022:1434): avc: denied { open } for pid=10428 comm="syz.7.2187" path="/114/config/usb_gadget/g1/UDC" dev="configfs" ino=27726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 163.962577][T10429] UDC core: g1: couldn't find an available UDC or it's busy [ 163.966396][T10401] EXT4-fs error (device loop6): ext4_quota_write:7430: inode #3: comm syz.6.2175: mark_inode_dirty error [ 164.026183][T10401] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 164.030461][T10401] Quota error (device loop6): write_blk: dquota write failed [ 164.073200][T10401] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 164.098983][T10401] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2175: Failed to acquire dquot type 0 [ 164.140976][T10401] loop6: lost filesystem error report for type 5 error -117 [ 164.155599][T10401] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.2175: Invalid inode table block 0 in block_group 0 [ 164.209492][T10401] loop6: lost filesystem error report for type 5 error -117 [ 164.218357][T10401] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 164.255543][T10401] loop6: lost filesystem error report for type 5 error -117 [ 164.258258][T10401] EXT4-fs error (device loop6): ext4_ext_truncate:4557: inode #15: comm syz.6.2175: mark_inode_dirty error [ 164.282620][T10401] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.284014][T10401] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.2175: Invalid inode table block 0 in block_group 0 [ 164.309947][T10401] loop6: lost filesystem error report for type 5 error -117 [ 164.311503][T10401] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 164.344616][T10401] loop6: lost filesystem error report for type 5 error -117 [ 164.345843][T10401] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 164.363391][T10401] loop6: lost filesystem error report for type 5 error -117 [ 164.364634][T10401] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.2175: Invalid inode table block 0 in block_group 0 [ 164.386503][T10401] loop6: lost filesystem error report for type 5 error -117 [ 164.387550][T10401] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 164.405984][T10401] loop6: lost filesystem error report for type 5 error -117 [ 164.406693][T10401] EXT4-fs error (device loop6): ext4_truncate:4691: inode #15: comm syz.6.2175: mark_inode_dirty error [ 164.438412][T10401] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 164.443054][T10401] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 164.482029][T10401] EXT4-fs (loop6): 1 truncate cleaned up [ 164.544175][T10401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.625242][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.767062][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2203'. [ 164.783470][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2203'. [ 164.867768][ T7487] Bluetooth: hci0: Frame reassembly failed (-84) [ 164.905092][ T28] audit: type=1400 audit(1786099161.102:1435): avc: denied { mount } for pid=10474 comm="syz.1.2205" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 165.095276][T10493] xt_hashlimit: max too large, truncated to 1048576 [ 165.102733][T10493] xt_hashlimit: size too large, truncated to 1048576 [ 165.109619][T10493] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 166.135241][T10543] netlink: 'syz.7.2229': attribute type 1 has an invalid length. [ 166.153772][T10543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.178685][T10543] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 166.196936][T10543] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 166.208211][T10543] netlink: 'syz.7.2229': attribute type 10 has an invalid length. [ 166.216663][T10543] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2229'. [ 166.225954][T10543] dummy0: entered promiscuous mode [ 166.232588][T10543] bond1: (slave dummy0): Releasing backup interface [ 166.456669][T10560] loop8: detected capacity change from 0 to 128 [ 166.580971][T10560] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 166.613735][T10560] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 166.863177][ T9986] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.931179][T10473] Bluetooth: hci0: command 0x1003 tx timeout [ 166.932432][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 166.969317][ T3356] kernel read not supported for file /lru_gen (pid: 3356 comm: kworker/1:2) [ 167.301765][T10621] batadv_slave_1: entered allmulticast mode [ 167.341826][T10620] batadv_slave_1: left allmulticast mode [ 167.567621][T10642] loop6: detected capacity change from 0 to 1024 [ 167.607073][T10642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.981398][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 167.981417][ T28] audit: type=1400 audit(1786099420.187:1451): avc: denied { write } for pid=10666 comm="syz.1.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 168.035288][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.242001][T10686] netlink: 'syz.0.2280': attribute type 19 has an invalid length. [ 168.407031][T10698] 0: reclassify loop, rule prio 0, protocol 03 [ 168.702600][T10695] loop7: detected capacity change from 0 to 32768 [ 168.710488][T10714] netlink: 'syz.0.2292': attribute type 1 has an invalid length. [ 168.734051][T10695] loop7: p1 < > p3 < > p4 [ 168.738263][T10714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.738956][T10695] loop7: partition table partially beyond EOD, truncated [ 168.817577][T10695] loop7: p4 start 1426063360 is beyond EOD, truncated [ 168.857771][T10714] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 168.908032][T10718] dummy0: left promiscuous mode [ 168.908397][T10720] netlink: 'syz.0.2292': attribute type 10 has an invalid length. [ 168.928657][T10718] batman_adv: batadv0: Removing interface: dummy0 [ 168.995682][T10720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2292'. [ 169.009790][T10718] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 169.045187][T10729] netlink: 'syz.6.2296': attribute type 1 has an invalid length. [ 169.064152][ T7486] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 169.085327][T10729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.096826][ T9878] udevd[9878]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 169.108513][ T7311] udevd[7311]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 169.147329][T10720] dummy0: entered promiscuous mode [ 169.157222][T10720] bond3: (slave dummy0): Removing an active aggregator [ 169.167085][T10720] bond3: (slave dummy0): Releasing backup interface [ 169.226448][T10729] bond2: (slave geneve2): making interface the new active one [ 169.248592][ T28] audit: type=1400 audit(1786099677.440:1452): avc: denied { bind } for pid=10737 comm="syz.0.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.284229][T10729] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 169.316769][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'. [ 169.392315][ T28] audit: type=1400 audit(1786099677.590:1453): avc: denied { create } for pid=10747 comm="syz.6.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.445189][ T28] audit: type=1400 audit(1786099677.620:1454): avc: denied { connect } for pid=10747 comm="syz.6.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 169.477301][T10752] xt_hashlimit: size too large, truncated to 1048576 [ 169.513620][ T28] audit: type=1400 audit(1786099677.700:1455): avc: denied { connect } for pid=10753 comm="syz.6.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.038829][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 170.049360][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 170.237662][T10787] syz_tun: entered allmulticast mode [ 170.620728][T10785] syz_tun: left allmulticast mode [ 171.137665][ T28] audit: type=1400 audit(1786099679.330:1456): avc: denied { name_bind 0x1000000 } for pid=10817 comm="syz.6.2331" path="socket:[28230]" dev="sockfs" ino=28230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 171.205382][ T28] audit: type=1326 audit(1786099679.400:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.7.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7057fe0d9 code=0x0 [ 171.312494][ T28] audit: type=1326 audit(1786099679.510:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.7.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7057fe0d9 code=0x7ffc0000 [ 171.347723][ T28] audit: type=1326 audit(1786099679.510:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.7.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7057fe0d9 code=0x7ffc0000 [ 171.389738][ T28] audit: type=1326 audit(1786099679.510:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10811 comm="syz.7.2329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7057fe0d9 code=0x7ffc0000 [ 171.895271][T10849] netlink: 'syz.7.2342': attribute type 1 has an invalid length. [ 171.996351][T10849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.053653][T10849] bond2: (slave geneve2): making interface the new active one [ 172.064096][T10849] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 172.092444][ T7487] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.101488][ T7487] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.113189][ T7487] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.122265][ T7487] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.572533][T10886] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.2354'. [ 173.185947][T10934] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 173.214362][T10934] batman_adv: batadv0: Adding interface: gretap1 [ 173.224915][T10934] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.256827][T10934] batman_adv: batadv0: Interface activated: gretap1 [ 173.423980][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 173.435530][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 173.435584][ T28] audit: type=1400 audit(1786099681.640:1482): avc: denied { bind } for pid=10943 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.462008][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2377'. [ 173.476334][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 173.487179][ T7501] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.518474][ T7501] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.561392][ T7493] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.570903][ T7493] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.861977][T10981] loop8: detected capacity change from 0 to 8192 [ 173.884005][ T28] audit: type=1400 audit(1786099682.070:1483): avc: denied { mounton } for pid=10980 comm="syz.8.2389" path="/62/bus/bus" dev="loop8" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 174.050092][ T9986] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 174.059820][ T9986] FAT-fs (loop8): Filesystem has been set read-only [ 174.091225][ T9] IPVS: starting estimator thread 0... [ 174.101999][T10984] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.181532][T10986] IPVS: using max 2304 ests per chain, 115200 per kthread [ 174.484611][ T28] audit: type=1400 audit(1786099682.680:1484): avc: denied { ioctl } for pid=11003 comm="syz.8.2398" path="socket:[28497]" dev="sockfs" ino=28497 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.548891][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2402'. [ 174.636835][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2405'. [ 175.214013][ T28] audit: type=1400 audit(1786099683.410:1485): avc: denied { map } for pid=11044 comm="syz.7.2414" path="socket:[28563]" dev="sockfs" ino=28563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.252599][ T28] audit: type=1400 audit(1786099683.410:1486): avc: denied { read write } for pid=11044 comm="syz.7.2414" path="socket:[28563]" dev="sockfs" ino=28563 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.845059][T11063] netlink: 'syz.8.2422': attribute type 1 has an invalid length. [ 175.878049][T11063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.929517][T11063] bond1: (slave geneve2): making interface the new active one [ 175.979964][T11063] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 176.018122][T11066] Cannot find add_set index 0 as target [ 176.055308][T11067] : renamed from bond0 [ 176.413674][T11081] netlink: 11575 bytes leftover after parsing attributes in process `syz.8.2430'. [ 176.427755][T11081] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2430'. [ 176.527217][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2432'. [ 176.562196][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2432'. [ 176.713947][ T28] audit: type=1400 audit(1786099684.900:1487): avc: denied { name_bind } for pid=11094 comm="syz.1.2436" src=18977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 176.768026][T11101] bond4: entered allmulticast mode [ 176.815787][T11107] macvlan2: entered promiscuous mode [ 176.830714][T11107] macvlan2: entered allmulticast mode [ 176.846201][T11107] bond4: (slave macvlan2): Opening slave failed [ 177.104195][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.113950][T11125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.328641][T11135] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 177.509633][T11140] netlink: 127592 bytes leftover after parsing attributes in process `syz.6.2454'. [ 177.809104][ T28] audit: type=1400 audit(1786099686.000:1488): avc: denied { create } for pid=11153 comm="syz.6.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 177.833331][T11154] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 177.914661][T11161] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.974924][T11161] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.993186][T11169] loop6: detected capacity change from 0 to 512 [ 178.000438][T11169] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 178.010336][T11169] EXT4-fs (loop6): failed to open journal device unknown-block(8,0) -EBUSY [ 178.026229][T11161] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.041010][T11169] bridge_slave_1: default FDB implementation only supports local addresses [ 178.076899][T11161] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.137014][ T7493] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.201487][ T7486] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.213327][ T7486] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.225547][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 178.234808][ T7486] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.392704][T11194] netlink: 'syz.7.2477': attribute type 2 has an invalid length. [ 178.405259][T11194] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2477'. [ 178.764444][ T28] audit: type=1400 audit(1786099686.960:1489): avc: denied { ioctl } for pid=11212 comm="syz.1.2484" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30142 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.845215][T11217] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.897107][T11217] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.955424][T11217] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.005205][T11217] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.074119][ T7501] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.087534][ T7486] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.096668][ T7486] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.131974][ T7486] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.179261][T11223] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 179.354461][T11233] bridge_slave_0: left allmulticast mode [ 179.364941][T11233] bridge_slave_0: left promiscuous mode [ 179.377630][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.423279][T11233] bridge_slave_1: left allmulticast mode [ 179.437052][T11233] bridge_slave_1: left promiscuous mode [ 179.455600][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.496739][T11233] bond0: (slave bond_slave_0): Releasing backup interface [ 179.521450][T11233] bond0: (slave bond_slave_1): Releasing backup interface [ 179.544069][T11233] team0: Port device team_slave_0 removed [ 179.556738][T11233] team0: Port device team_slave_1 removed [ 179.572629][T11233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.583129][T11233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.595913][T11233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.608776][T11233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.627305][T11233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.951401][ T28] audit: type=1326 audit(1786099688.140:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11121 comm="syz.8.2447" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2057e0d9 code=0x7fc00000 [ 179.988453][T11257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11257 comm=syz.7.2502 [ 180.635276][T11277] loop8: detected capacity change from 0 to 512 [ 180.657815][T11277] EXT4-fs: Ignoring removed nobh option [ 180.688758][T11277] EXT4-fs (loop8): orphan cleanup on readonly fs [ 180.706942][T11277] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.2511: EA inode hash validation failed [ 180.721590][T11277] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.738440][T11277] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.2511: corrupted inode contents [ 180.751621][T11277] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.753011][T11277] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #15: comm syz.8.2511: mark_inode_dirty error [ 180.762954][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 180.763042][ C1] EXT4-fs (loop8): initial error at time 1786099688: ext4_do_update_inode:5742: inode 15 [ 180.763419][ C1] EXT4-fs (loop8): last error at time 1786099688: ext4_do_update_inode:5742: inode 15 [ 180.810199][T11277] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.812758][T11277] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #15: comm syz.8.2511: corrupted inode contents [ 180.836070][T11277] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.839536][T11277] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2511: mark_inode_dirty error [ 180.865403][T11277] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.866993][T11277] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2511: mark inode dirty (error -117) [ 180.891218][T11277] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.893053][T11277] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 180.927616][T11277] EXT4-fs (loop8): 1 orphan inode deleted [ 180.952015][T11277] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 181.076110][ T9986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.186985][T11295] loop6: detected capacity change from 0 to 512 [ 181.427785][T11295] EXT4-fs (loop6): 1 orphan inode deleted [ 181.441810][ T7501] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 181.443005][T11295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.467648][ T7501] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:76: Failed to release dquot type 1 [ 181.482695][T11295] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.520916][ T28] audit: type=1400 audit(1786099689.710:1491): avc: denied { write } for pid=11294 comm="syz.6.2519" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.563720][T11295] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 181.605386][ T28] audit: type=1400 audit(1786099689.790:1492): avc: denied { write } for pid=11294 comm="syz.6.2519" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.750305][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2526'. [ 181.796044][ T28] audit: type=1400 audit(1786099689.960:1493): avc: denied { getopt } for pid=11316 comm="syz.0.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.825803][ T28] audit: type=1400 audit(1786099690.020:1494): avc: denied { getopt } for pid=11321 comm="syz.0.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.101167][ T28] audit: type=1326 audit(1786099690.290:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.8.2530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2057e0d9 code=0x7ffc0000 [ 182.162414][ T28] audit: type=1326 audit(1786099690.290:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.8.2530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e2057e0d9 code=0x7ffc0000 [ 182.221594][ T28] audit: type=1326 audit(1786099690.290:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11327 comm="syz.8.2530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f2e2057e0d9 code=0x7ffc0000 [ 182.305477][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.061347][T11332] Set syz1 is full, maxelem 65536 reached [ 184.438707][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 184.454944][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 184.464185][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2567'. [ 184.526185][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2570'. [ 184.740696][T11441] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2574'. [ 184.840402][T11447] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2577'. [ 184.924668][T11454] loop7: detected capacity change from 0 to 128 [ 184.961938][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 184.961952][ T28] audit: type=1326 audit(1786099693.160:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.004488][T11454] syz.7.2580: attempt to access beyond end of device [ 185.004488][T11454] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 185.021381][T11436] loop6: detected capacity change from 0 to 512 [ 185.034549][T11454] syz.7.2580: attempt to access beyond end of device [ 185.034549][T11454] loop7: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 185.048705][ T28] audit: type=1326 audit(1786099693.200:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.075172][T11454] Buffer I/O error on dev loop7, logical block 72, lost async page write [ 185.083872][ T28] audit: type=1326 audit(1786099693.220:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.110190][T11436] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2573: inode has both inline data and extents flags [ 185.123579][T11436] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 185.123662][ T28] audit: type=1326 audit(1786099693.220:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.132877][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 185.132906][ C1] EXT4-fs (loop6): initial error at time 1786099693: ext4_orphan_get:1399: inode 15 [ 185.132930][ C1] EXT4-fs (loop6): last error at time 1786099693: ext4_orphan_get:1399: inode 15 [ 185.158505][T11436] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2573: couldn't read orphan inode 15 (err -117) [ 185.170618][ T28] audit: type=1326 audit(1786099693.220:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.178171][T11454] syz.7.2580: attempt to access beyond end of device [ 185.178171][T11454] loop7: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 185.184325][ T28] audit: type=1326 audit(1786099693.220:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.217091][T11436] fserror_report: 1 callbacks suppressed [ 185.217142][T11436] loop6: lost filesystem error report for type 5 error -117 [ 185.226471][ T28] audit: type=1326 audit(1786099693.220:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.264474][T11436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.271617][T11468] syz.7.2580: attempt to access beyond end of device [ 185.271617][T11468] loop7: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 185.325373][T11468] Buffer I/O error on dev loop7, logical block 72, lost async page write [ 185.333897][ T28] audit: type=1326 audit(1786099693.220:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.359785][ T28] audit: type=1326 audit(1786099693.220:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.387982][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2586'. [ 185.434511][ T28] audit: type=1326 audit(1786099693.220:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.0.2582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fc01704e0d9 code=0x7ffc0000 [ 185.481727][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.520209][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2590'. [ 186.490078][T11534] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 186.617964][T11541] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.2614'. [ 186.915213][T11560] netlink: 'syz.7.2622': attribute type 10 has an invalid length. [ 186.943121][T11560] team0 (unregistering): Port device team_slave_0 removed [ 186.958046][T11560] team0 (unregistering): Port device team_slave_1 removed [ 187.152001][T11584] netlink: 'syz.8.2630': attribute type 4 has an invalid length. [ 187.189274][T11584] netlink: 'syz.8.2630': attribute type 4 has an invalid length. [ 187.889156][T11584] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.896474][T11584] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.925921][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'. [ 187.969410][T11584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.980044][T11584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.041913][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2636'. [ 188.085584][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2636'. [ 188.094938][ T7493] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.114849][ T7493] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.151161][ T7493] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.169637][ T7501] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.181749][ T7493] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.212533][T11613] loop6: detected capacity change from 0 to 512 [ 188.239218][T11613] EXT4-fs: Ignoring removed i_version option [ 188.258908][T11613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.291853][T11613] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.398682][T11626] tipc: Enabled bearer , priority 0 [ 188.416597][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.427315][T11626] syzkaller0: mtu less than device minimum [ 188.688882][T11637] netlink: 4116 bytes leftover after parsing attributes in process `syz.6.2649'. [ 189.072743][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2656'. [ 189.401600][T11656] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 189.460301][ T3356] tipc: Node number set to 1472036162 [ 189.741093][T11670] loop7: detected capacity change from 0 to 512 [ 190.054837][T11670] EXT4-fs (loop7): 1 orphan inode deleted [ 190.071231][ T7486] __quota_error: 12 callbacks suppressed [ 190.071255][ T7486] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 190.078840][T11670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.095522][ T7486] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:61: Failed to release dquot type 1 [ 190.131071][ T7486] loop7: lost filesystem error report for type 5 error -117 [ 190.152290][T11670] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.211284][ T3605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.267984][T11694] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 190.294417][ T28] audit: type=1400 audit(1786099698.480:1526): avc: denied { write } for pid=11669 comm="syz.7.2664" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.324820][T11695] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 190.381638][ T28] audit: type=1400 audit(1786099698.570:1527): avc: denied { write } for pid=11669 comm="syz.7.2664" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.124930][ T8460] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.370419][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2686'. [ 191.436876][T11726] vlan4: entered allmulticast mode [ 191.445679][T11726] bridge2: entered allmulticast mode [ 192.772412][T11754] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 193.883689][T11822] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2704'. [ 193.897995][T11829] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 193.972903][T11843] loop6: detected capacity change from 0 to 512 [ 193.991919][T11843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.010578][T11843] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.025775][ T28] audit: type=1400 audit(1786099702.220:1528): avc: denied { write } for pid=11841 comm="syz.6.2708" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.075865][ T28] audit: type=1400 audit(1786099702.270:1529): avc: denied { write } for pid=11841 comm="syz.6.2708" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 194.105481][ T28] audit: type=1400 audit(1786099702.270:1530): avc: denied { add_name } for pid=11841 comm="syz.6.2708" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 194.138395][ T28] audit: type=1326 audit(1786099702.320:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.7.2711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7057fe0d9 code=0x7ffc0000 [ 194.191660][ T28] audit: type=1326 audit(1786099702.320:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.7.2711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7057fe0d9 code=0x7ffc0000 [ 194.339421][ T28] audit: type=1326 audit(1786099702.320:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.7.2711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7057fe0d9 code=0x7ffc0000 [ 194.400425][T11889] bond0: (slave batadv0): Releasing backup interface [ 194.412432][ T6249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.414190][ T28] audit: type=1326 audit(1786099702.320:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.7.2711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7057fe0d9 code=0x7ffc0000 [ 194.474492][T11889] bond0: (slave bond_slave_0): Releasing backup interface [ 194.518426][T11889] bond0: (slave bond_slave_1): Releasing backup interface [ 194.549898][T11889] team0: Port device team_slave_0 removed [ 194.579306][T11889] team0: Port device team_slave_1 removed [ 194.586064][T11889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.621276][T11889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.651205][T11889] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 194.668945][T11894] team0: Mode changed to "loadbalance" [ 194.691835][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 194.707755][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 195.243499][T11936] loop7: detected capacity change from 0 to 128 [ 195.256083][T11936] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.271343][T11936] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.311944][ T8460] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.399019][T11955] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2740'. [ 196.067886][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2747'. [ 196.081001][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2747'. [ 196.267343][ T28] kauditd_printk_skb: 95 callbacks suppressed [ 196.267361][ T28] audit: type=1400 audit(1786099704.460:1630): avc: denied { read } for pid=9986 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 196.307411][ T9986] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.317083][ T9986] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 196.326550][ T28] audit: type=1400 audit(1786099704.460:1631): avc: denied { open } for pid=9986 comm="syz-executor" path="/115/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 196.331137][ T9986] audit: backlog limit exceeded [ 196.383177][ T9986] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.385942][ T28] audit: type=1400 audit(1786099704.500:1632): avc: denied { read } for pid=9986 comm="syz-executor" name="instances" dev="tracefs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 196.404394][ T9986] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 196.421017][ T9986] audit: backlog limit exceeded [ 196.426767][ T9986] audit: audit_backlog=65 > audit_backlog_limit=64 [ 196.734614][ T7491] bridge_slave_1: left allmulticast mode [ 196.756425][ T7491] bridge_slave_1: left promiscuous mode [ 196.766977][ T7491] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.787783][ T7491] bridge_slave_0: left allmulticast mode [ 196.801078][ T7491] bridge_slave_0: left promiscuous mode [ 196.816621][ T7491] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.874777][ T7491] bond1 (unregistering): (slave geneve2): Releasing active interface [ 196.927808][ T7491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.948119][ T7491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.973184][T12009] netlink: 'syz.1.2763': attribute type 13 has an invalid length. [ 196.982811][ T7491] bond0 (unregistering): Released all slaves [ 196.994349][ T7491] bond1 (unregistering): Released all slaves [ 197.101276][ T7491] hsr_slave_0: left promiscuous mode [ 197.113088][ T7491] hsr_slave_1: left promiscuous mode [ 197.121694][ T7491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.136544][ T7491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.206267][ T7491] team0 (unregistering): Port device team_slave_1 removed [ 197.218695][ T7491] team0 (unregistering): Port device team_slave_0 removed [ 197.271094][ T7497] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.284550][ T7497] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.311110][ T7499] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.326584][ T7499] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.539135][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 197.547831][T12056] syzkaller0: entered promiscuous mode [ 197.554858][T12056] syzkaller0: entered allmulticast mode [ 197.582313][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2773'. [ 197.600034][T12011] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.607663][T12011] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.615563][T12011] bridge_slave_0: entered allmulticast mode [ 197.626673][T12011] bridge_slave_0: entered promiscuous mode [ 197.658697][T12059] bond3: entered promiscuous mode [ 197.674776][T12059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.706262][T12067] bridge1: entered promiscuous mode [ 197.718205][T12067] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 197.728485][T12011] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.736973][T12011] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.744622][T12011] bridge_slave_1: entered allmulticast mode [ 197.751512][T12011] bridge_slave_1: entered promiscuous mode [ 197.804427][T12011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.841950][T12011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.864744][T12084] netlink: 'syz.1.2777': attribute type 39 has an invalid length. [ 197.900521][T12011] team0: Port device team_slave_0 added [ 197.928844][T12011] team0: Port device team_slave_1 added [ 198.009103][T12011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.028134][T12103] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2789'. [ 198.029726][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.082713][T12011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.103281][T12011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.143478][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.227524][T12011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.259383][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 198.307084][T12011] hsr_slave_0: entered promiscuous mode [ 198.322855][T12011] hsr_slave_1: entered promiscuous mode [ 198.334612][T12011] debugfs: 'hsr0' already exists in 'hsr' [ 198.347393][T12011] Cannot create hsr debugfs directory [ 198.581345][T12011] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 198.607547][T12011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.632059][T12011] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 198.659730][T12011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.684201][T12011] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 198.714760][T12011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.732945][T12011] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 198.755188][T12011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.769920][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 198.873818][T12011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.915810][T12011] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.944764][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.951929][ T7497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.967319][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.974495][ T7495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.170918][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 199.313693][T12011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.606043][T12011] veth0_vlan: entered promiscuous mode [ 199.635977][T12011] veth1_vlan: entered promiscuous mode [ 199.676410][T12011] veth0_macvtap: entered promiscuous mode [ 199.696704][T12011] veth1_macvtap: entered promiscuous mode [ 199.728181][T12011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.759970][T12011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.831111][ T7489] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.850312][ T7489] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.879841][ T7489] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.921130][ T7497] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.067886][T12207] macsec1: entered promiscuous mode [ 200.295279][T12223] syzkaller0: left promiscuous mode [ 200.312098][T12223] syzkaller0: left allmulticast mode [ 200.329800][T12221] netlink: 'syz.1.2799': attribute type 13 has an invalid length. [ 201.181654][T12109] ================================================================== [ 201.189817][T12109] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 201.196800][T12109] [ 201.199154][T12109] read-write to 0xffff88810a1fe1e4 of 4 bytes by task 12113 on cpu 1: [ 201.207336][T12109] fifo_open+0x57b/0x5b0 [ 201.211626][T12109] do_dentry_open+0x49f/0xa60 [ 201.216356][T12109] vfs_open+0x37/0x1e0 [ 201.220469][T12109] path_openat+0x1b39/0x2000 [ 201.225150][T12109] do_file_open+0x16c/0x290 [ 201.229716][T12109] do_sys_openat2+0xa0/0x130 [ 201.234361][T12109] __x64_sys_open+0xe6/0x110 [ 201.239000][T12109] x64_sys_call+0x14b9/0x3020 [ 201.243814][T12109] do_syscall_64+0x136/0x3c0 [ 201.248497][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.254438][T12109] [ 201.256802][T12109] read to 0xffff88810a1fe1e4 of 4 bytes by task 12109 on cpu 0: [ 201.264472][T12109] wait_for_partner+0xc9/0x1d0 [ 201.269293][T12109] fifo_open+0x443/0x5b0 [ 201.273585][T12109] do_dentry_open+0x49f/0xa60 [ 201.278319][T12109] vfs_open+0x37/0x1e0 [ 201.282435][T12109] path_openat+0x1b39/0x2000 [ 201.287126][T12109] do_file_open+0x16c/0x290 [ 201.291686][T12109] do_sys_openat2+0xa0/0x130 [ 201.296326][T12109] __x64_sys_open+0xe6/0x110 [ 201.300970][T12109] x64_sys_call+0x14b9/0x3020 [ 201.305692][T12109] do_syscall_64+0x136/0x3c0 [ 201.310369][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.316314][T12109] [ 201.318657][T12109] value changed: 0x00000001 -> 0x00000002 [ 201.324436][T12109] [ 201.326791][T12109] Reported by Kernel Concurrency Sanitizer on: [ 201.332979][T12109] CPU: 0 UID: 0 PID: 12109 Comm: syz.6.2781 Not tainted syzkaller #0 PREEMPT(lazy) [ 201.342387][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.352488][T12109] ================================================================== [ 208.519661][ T28] kauditd_printk_skb: 281 callbacks suppressed [ 208.519679][ T28] audit: type=1400 audit(1786099716.710:1813): avc: denied { write } for pid=12267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.558543][ T28] audit: type=1400 audit(1786099716.750:1814): avc: denied { write } for pid=12278 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.233372][ T28] audit: type=1400 audit(1786099718.430:1815): avc: denied { write } for pid=12281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.273932][ T28] audit: type=1400 audit(1786099718.470:1816): avc: denied { write } for pid=12292 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.648542][ T28] audit: type=1400 audit(1786099718.840:1817): avc: denied { write } for pid=12295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.682652][ T28] audit: type=1400 audit(1786099718.880:1818): avc: denied { write } for pid=12306 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.802596][ T28] audit: type=1400 audit(1786099719.000:1819): avc: denied { write } for pid=12309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.836783][ T28] audit: type=1400 audit(1786099719.030:1820): avc: denied { write } for pid=12320 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1