last executing test programs: 7.664576781s ago: executing program 2 (id=165): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 6.816435638s ago: executing program 2 (id=179): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 6.75878323s ago: executing program 2 (id=180): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x10000007) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x47c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RTAB={0x404, 0x2, [0x4a, 0x100, 0x6f5e895f, 0xf, 0x1, 0x7, 0x4a187b7a, 0x5, 0x7, 0x6, 0x10000, 0x8, 0x1, 0xf, 0x100, 0x2, 0x0, 0x3, 0x800, 0x2c1, 0x3, 0x101, 0x7d, 0x7fff, 0x0, 0x0, 0x606, 0x5, 0x0, 0xaf3, 0x8000, 0xd, 0x80000000, 0x9, 0x10, 0x8, 0x8, 0x0, 0x2, 0x5, 0x5, 0x7, 0x6, 0x0, 0x7, 0xfffff53b, 0x8, 0x41fe, 0x4, 0x8, 0x0, 0x9, 0x43c, 0xfffffffd, 0xffff, 0xffffff21, 0xf, 0x8, 0xfffffffc, 0x8, 0x0, 0x8, 0x0, 0xd406, 0x2, 0x7fff, 0x4, 0x4, 0xd59, 0x1, 0x7, 0x4, 0xffff, 0x3, 0x3448575b, 0xca, 0x3, 0x10001, 0x7, 0x9, 0x1, 0x5, 0x200, 0x800, 0x5, 0x4, 0x4, 0x40, 0x1, 0x8, 0xe, 0x1, 0x7fffffff, 0x1, 0x0, 0x10000, 0xff, 0x5, 0xa5, 0xffffff20, 0xc79, 0x1459, 0x4, 0xff, 0x0, 0x3, 0x4, 0xe, 0x200004, 0x9, 0x0, 0xe3d, 0x4, 0x0, 0xf2, 0xc, 0x80000001, 0x4, 0x7, 0x9, 0x3, 0x5, 0x7, 0x68, 0x7c, 0x8, 0xc, 0x7ff, 0x5, 0x7, 0x4, 0x2, 0x3, 0xffff, 0x8001, 0x8, 0x57, 0x4, 0x7fffffff, 0x3ff, 0x1, 0x7, 0x800, 0x8, 0x0, 0x189, 0x80, 0x3, 0x1, 0xffffffff, 0x4d, 0x0, 0xfff, 0x7, 0x0, 0x1, 0x4, 0x8670, 0xd, 0x40, 0x6, 0x3, 0x3d1f9312, 0x16, 0x499, 0x101, 0x5, 0x1, 0x9, 0x400, 0x4, 0x1ff, 0x1, 0x7, 0xa, 0x21e, 0xb8, 0xc, 0x240000, 0x1, 0x9, 0x0, 0x857e, 0x200, 0xfffffff7, 0x4, 0x7, 0x7, 0xfffffff9, 0x7, 0x3, 0x1000, 0x8, 0xffff, 0x8, 0xffffffff, 0x800000, 0x2, 0xc, 0x9, 0xd, 0x0, 0x101, 0x1000, 0x40, 0x6c, 0x5, 0x9, 0x9, 0x28478204, 0x6, 0x1284c4f0, 0x5, 0x2, 0x3f, 0x1, 0x0, 0x3, 0x2000, 0x8, 0xfffffffb, 0x8de4, 0x116d80, 0x1, 0x5, 0x8, 0x8, 0x6, 0x1, 0xa, 0x9, 0x1, 0x5, 0x10001, 0x7033, 0xe, 0xec, 0x0, 0x3, 0xf0, 0x2, 0x82b, 0x2, 0x5, 0x7fff, 0x8, 0xe, 0x1000, 0x2, 0xfffffc00, 0x4, 0x0, 0xcfd, 0x0, 0x4, 0x1a]}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x4, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 5.666917552s ago: executing program 2 (id=198): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) 3.172699214s ago: executing program 2 (id=200): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) 2.642307655s ago: executing program 4 (id=195): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x104, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @remote, 0x8, 0x4000000}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0xffffffff, 0xff, 0xa, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x184}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x101, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x8}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.521852327s ago: executing program 4 (id=196): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2.205925184s ago: executing program 0 (id=199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x484c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x5, 0xfffffffffffffbff}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigqueueinfo(0x0, 0x2b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x884) 2.141225195s ago: executing program 1 (id=201): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 1.985397059s ago: executing program 1 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) 1.972038109s ago: executing program 0 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.91135303s ago: executing program 2 (id=204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x11, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.766245053s ago: executing program 3 (id=205): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1.765886383s ago: executing program 0 (id=206): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xb, 0x4, 0x5, 0xff, 0x0, 0x377e755a, 0x40400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x7}, 0x880, 0x1, 0x6, 0x1, 0xea9, 0x82, 0xa86b, 0x0, 0xa, 0x0, 0xd}, r0, 0x4, 0xffffffffffffffff, 0x1) fstat(r1, &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b52, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0xf027, 0x96}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x48000) 1.737672863s ago: executing program 1 (id=207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r1 = mq_open(&(0x7f0000000300)='!\x7fM\x8e3\xd5\x00\f\x00RBn[A\x164\v6\x89}\x87\xc4\xfaP\x00\x01E!Vnux\x00\xa5\xf5\x1b\xa8\x12\x8a\x88\xad\x03\x16\x9arA\ap%s\a\xf3O\xc3\xd5._a\x04\xb7eQ7]N\xb5\xd1\xe5\x04%\xd4\xd0R\xbc\x84fNW3\r0A\x81E\xd8\x98\xe2\x05\x06\"\xb86I*h\xfc\xc8\xdb\x9f\xd7~\x90\xd0\xbc<\xdc\x89\xea?:\n\x9b\xf4xQ', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0xd, 0xa, 0x3}) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.714166904s ago: executing program 0 (id=208): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x6}, 0x2732, 0x0, 0x8000, 0x3, 0xfff, 0x7fff, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r1 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffffffffffff, @perf_config_ext={0xfd9, 0x922}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) shmdt(r1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa7, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1a2d, 0x0, 0x7fc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) 1.640237936s ago: executing program 3 (id=209): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.600488917s ago: executing program 4 (id=210): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x9, 0xfffa}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.550018837s ago: executing program 4 (id=211): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.549438977s ago: executing program 0 (id=212): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1.478185399s ago: executing program 3 (id=214): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x880) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r1, 0x0, 0x0, 0x10042, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700), 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r3], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1.377733101s ago: executing program 3 (id=215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x4, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.202873045s ago: executing program 3 (id=216): mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) 1.109038047s ago: executing program 4 (id=217): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x44) pipe2$9p(0x0, 0x4000) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0x713, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000011, 0x6, 0xa, 0x4, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r4, &(0x7f00000086c0), 0x1, 0x20, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 801.336313ms ago: executing program 1 (id=218): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x8, 0x20da, 0x2, 0x0, 0x80000001, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffa99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x437, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x10c8d}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 576.599347ms ago: executing program 4 (id=219): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) syz_emit_ethernet(0xbe, 0x0, 0x0) 448.90902ms ago: executing program 0 (id=220): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x111a9, 0x1020}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 390.122882ms ago: executing program 1 (id=221): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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") ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000300), 0x0, 0x6, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8011, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) 295.520874ms ago: executing program 1 (id=222): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 0s ago: executing program 3 (id=223): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): [ 20.392510][ T28] audit: type=1400 audit(1782829364.760:106): avc: denied { search } for pid=3183 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.416567][ T28] audit: type=1400 audit(1782829364.760:107): avc: denied { search } for pid=3183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 28.234328][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 28.234342][ T28] audit: type=1400 audit(1782829372.700:126): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.266317][ T28] audit: type=1400 audit(1782829372.730:127): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.267550][ T3283] cgroup: Unknown subsys name 'net' [ 28.295961][ T28] audit: type=1400 audit(1782829372.760:128): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.418068][ T3283] cgroup: Unknown subsys name 'cpuset' [ 28.424399][ T3283] cgroup: Unknown subsys name 'rlimit' [ 28.534593][ T28] audit: type=1400 audit(1782829373.000:129): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.558796][ T28] audit: type=1400 audit(1782829373.000:130): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.579885][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.591035][ T28] audit: type=1400 audit(1782829373.000:131): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.612482][ T28] audit: type=1400 audit(1782829373.000:132): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.633890][ T28] audit: type=1400 audit(1782829373.000:133): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.660374][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.660503][ T28] audit: type=1400 audit(1782829373.000:134): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.694205][ T28] audit: type=1400 audit(1782829373.050:135): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.975053][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.982753][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.990567][ T3294] bridge_slave_0: entered allmulticast mode [ 29.997038][ T3294] bridge_slave_0: entered promiscuous mode [ 30.019157][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.026983][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.034388][ T3294] bridge_slave_1: entered allmulticast mode [ 30.040970][ T3294] bridge_slave_1: entered promiscuous mode [ 30.085278][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.092493][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.099647][ T3302] bridge_slave_0: entered allmulticast mode [ 30.106268][ T3302] bridge_slave_0: entered promiscuous mode [ 30.120556][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.127647][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.134782][ T3304] bridge_slave_0: entered allmulticast mode [ 30.141342][ T3304] bridge_slave_0: entered promiscuous mode [ 30.147982][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.155171][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.162747][ T3300] bridge_slave_0: entered allmulticast mode [ 30.169273][ T3300] bridge_slave_0: entered promiscuous mode [ 30.175997][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.183366][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.190764][ T3302] bridge_slave_1: entered allmulticast mode [ 30.197514][ T3302] bridge_slave_1: entered promiscuous mode [ 30.204989][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.217232][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.225408][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.233428][ T3304] bridge_slave_1: entered allmulticast mode [ 30.240813][ T3304] bridge_slave_1: entered promiscuous mode [ 30.251698][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.259599][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.266879][ T3300] bridge_slave_1: entered allmulticast mode [ 30.273490][ T3300] bridge_slave_1: entered promiscuous mode [ 30.290636][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.323650][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.334213][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.344864][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.364111][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.378696][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.389056][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.403799][ T3294] team0: Port device team_slave_0 added [ 30.410450][ T3294] team0: Port device team_slave_1 added [ 30.436032][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.443530][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.450864][ T3296] bridge_slave_0: entered allmulticast mode [ 30.457377][ T3296] bridge_slave_0: entered promiscuous mode [ 30.464785][ T3304] team0: Port device team_slave_0 added [ 30.475689][ T3302] team0: Port device team_slave_0 added [ 30.485587][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.492897][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.500138][ T3296] bridge_slave_1: entered allmulticast mode [ 30.506429][ T3296] bridge_slave_1: entered promiscuous mode [ 30.513779][ T3304] team0: Port device team_slave_1 added [ 30.520657][ T3300] team0: Port device team_slave_0 added [ 30.527456][ T3302] team0: Port device team_slave_1 added [ 30.537513][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.544937][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.571332][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.591334][ T3300] team0: Port device team_slave_1 added [ 30.601927][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.609180][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.635847][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.660547][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.667991][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.695679][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.710449][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.720040][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.727627][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.754303][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.770240][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.777514][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.804152][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.819265][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.829774][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.837127][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.864454][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.875961][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.883199][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.909677][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.922158][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.929339][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.956747][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.015455][ T3294] hsr_slave_0: entered promiscuous mode [ 31.022656][ T3294] hsr_slave_1: entered promiscuous mode [ 31.038547][ T3296] team0: Port device team_slave_0 added [ 31.046459][ T3304] hsr_slave_0: entered promiscuous mode [ 31.052673][ T3304] hsr_slave_1: entered promiscuous mode [ 31.058834][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 31.064832][ T3304] Cannot create hsr debugfs directory [ 31.077836][ T3302] hsr_slave_0: entered promiscuous mode [ 31.084548][ T3302] hsr_slave_1: entered promiscuous mode [ 31.090829][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 31.096903][ T3302] Cannot create hsr debugfs directory [ 31.107475][ T3296] team0: Port device team_slave_1 added [ 31.131435][ T3300] hsr_slave_0: entered promiscuous mode [ 31.137710][ T3300] hsr_slave_1: entered promiscuous mode [ 31.143733][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 31.149746][ T3300] Cannot create hsr debugfs directory [ 31.185965][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.193532][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.220276][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.244104][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.251221][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.278553][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.367787][ T3296] hsr_slave_0: entered promiscuous mode [ 31.373992][ T3296] hsr_slave_1: entered promiscuous mode [ 31.380260][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 31.386365][ T3296] Cannot create hsr debugfs directory [ 31.455430][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.464396][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.474775][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.483626][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.491768][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.500298][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.511101][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.519676][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.559733][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.568934][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.577122][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.585829][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.598194][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.606425][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.614399][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.623579][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.649159][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.657872][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.665929][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.674647][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.682823][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.691858][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.699734][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.708733][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.750553][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.759143][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.767964][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.777022][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.785486][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.793967][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.802313][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.811223][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.853083][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.862173][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.874543][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.883582][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.891362][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.899956][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.913633][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.922229][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.939487][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.950500][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.969792][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.985378][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.992665][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.004774][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.021704][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.029075][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.038899][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.046122][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.055593][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.062764][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.084163][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.113160][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.126581][ T3294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.141413][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.169252][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.176619][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.188428][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.196067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.206972][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.217095][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.224523][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.239982][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.250461][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.257823][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.292658][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.316909][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.324175][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.333512][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.341275][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.387122][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.464306][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.478337][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.612767][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.639393][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.650088][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.672110][ T3302] veth0_vlan: entered promiscuous mode [ 32.680157][ T3294] veth0_vlan: entered promiscuous mode [ 32.700707][ T3294] veth1_vlan: entered promiscuous mode [ 32.712652][ T3302] veth1_vlan: entered promiscuous mode [ 32.758813][ T3294] veth0_macvtap: entered promiscuous mode [ 32.773092][ T3294] veth1_macvtap: entered promiscuous mode [ 32.789403][ T3302] veth0_macvtap: entered promiscuous mode [ 32.801350][ T3302] veth1_macvtap: entered promiscuous mode [ 32.821293][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.843519][ T3300] veth0_vlan: entered promiscuous mode [ 32.854901][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.863594][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.874671][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.887993][ T3304] veth0_vlan: entered promiscuous mode [ 32.898965][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.908108][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.919506][ T3304] veth1_vlan: entered promiscuous mode [ 32.926482][ T3300] veth1_vlan: entered promiscuous mode [ 32.938076][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.947153][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.960170][ T3296] veth0_vlan: entered promiscuous mode [ 32.969035][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.978027][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.997650][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.006519][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.022959][ T3294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.029990][ T3304] veth0_macvtap: entered promiscuous mode [ 33.045692][ T3296] veth1_vlan: entered promiscuous mode [ 33.056703][ T3304] veth1_macvtap: entered promiscuous mode [ 33.067172][ T3300] veth0_macvtap: entered promiscuous mode [ 33.088152][ T3300] veth1_macvtap: entered promiscuous mode [ 33.091442][ T3501] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 33.104850][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.114788][ T3296] veth0_macvtap: entered promiscuous mode [ 33.128624][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.147888][ T3296] veth1_macvtap: entered promiscuous mode [ 33.159694][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.176997][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.191441][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.201312][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.209886][ T3505] veth0_virt_wifi: entered promiscuous mode [ 33.218824][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.227970][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245399][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.259680][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.277102][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 33.277118][ T28] audit: type=1400 audit(1782829377.740:163): avc: denied { prog_load } for pid=3506 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.309274][ T28] audit: type=1400 audit(1782829377.740:164): avc: denied { bpf } for pid=3506 comm="syz.1.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.341134][ T28] audit: type=1400 audit(1782829377.810:165): avc: denied { allowed } for pid=3508 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.365703][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.375335][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.385849][ T28] audit: type=1400 audit(1782829377.810:166): avc: denied { create } for pid=3508 comm="syz.0.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.408168][ T28] audit: type=1400 audit(1782829377.810:167): avc: denied { map } for pid=3508 comm="syz.0.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.433274][ T28] audit: type=1400 audit(1782829377.810:168): avc: denied { read write } for pid=3508 comm="syz.0.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.447008][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.461590][ T28] audit: type=1400 audit(1782829377.890:169): avc: denied { mounton } for pid=3508 comm="syz.0.7" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.472846][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.492778][ T28] audit: type=1400 audit(1782829377.900:170): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.529280][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.541885][ T28] audit: type=1400 audit(1782829378.000:171): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.546921][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.569131][ T28] audit: type=1400 audit(1782829378.000:172): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.709581][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.720764][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.811860][ T3522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.158794][ T3529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9'. [ 34.248765][ T3530] syzkaller0: entered promiscuous mode [ 34.285553][ T3530] syzkaller0: entered allmulticast mode [ 34.312001][ T3531] macvlan2: entered promiscuous mode [ 34.318715][ T3531] macvlan2: entered allmulticast mode [ 34.339253][ T3533] netlink: 'syz.0.11': attribute type 4 has an invalid length. [ 35.333433][ T3551] loop2: detected capacity change from 0 to 256 [ 35.345226][ T3551] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.489485][ T3553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 35.528693][ T3557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 35.541847][ T3557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3557 comm=syz.0.21 [ 35.618382][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.625946][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.672932][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.683003][ T3559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.700792][ T3559] veth0_virt_wifi: left promiscuous mode [ 35.752523][ T3566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 35.762683][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.770072][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.811319][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.833141][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.872164][ T40] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.883996][ T3571] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3571 comm=syz.3.24 [ 35.904152][ T40] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.931320][ T40] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.947523][ T40] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.959238][ T40] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.969488][ T40] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.978655][ T40] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.987777][ T40] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.138917][ T3578] mmap: syz.3.28 (3578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.086725][ T3612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 37.153564][ T3612] bond0: (slave veth3): Enslaving as an active interface with an up link [ 37.322560][ T3627] syzkaller0: entered promiscuous mode [ 37.340627][ T3627] syzkaller0: entered allmulticast mode [ 37.402607][ T3624] loop2: detected capacity change from 0 to 512 [ 37.435061][ T3624] ======================================================= [ 37.435061][ T3624] WARNING: The mand mount option has been deprecated and [ 37.435061][ T3624] and is ignored by this kernel. Remove the mand [ 37.435061][ T3624] option from the mount to silence this warning. [ 37.435061][ T3624] ======================================================= [ 37.504740][ T3624] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 37.513918][ T3624] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 37.523176][ T3624] System zones: 0-1, 15-15, 18-18, 34-34 [ 37.541707][ T3624] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.559197][ T3624] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 37.574545][ T3633] capability: warning: `syz.1.45' uses 32-bit capabilities (legacy support in use) [ 37.577803][ T3624] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 37.596862][ T3624] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.42: bad orphan inode 16 [ 37.609488][ T3624] loop2: lost filesystem error report for type 5 error -117 [ 37.610371][ T3624] ext4_test_bit(bit=15, block=18) = 1 [ 37.621120][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 37.621271][ C0] EXT4-fs (loop2): initial error at time 1782829382: ext4_orphan_get:1425 [ 37.621332][ C0] EXT4-fs (loop2): last error at time 1782829382: ext4_orphan_get:1425 [ 37.655401][ T3624] is_bad_inode(inode)=0 [ 37.660158][ T3624] NEXT_ORPHAN(inode)=0 [ 37.664619][ T3624] max_ino=32 [ 37.668929][ T3624] i_nlink=2 [ 37.676638][ T3624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.705892][ T3624] SELinux: security_context_str_to_sid (~) failed with errno=-22 [ 37.751841][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.887220][ T3636] syz.2.46 (3636) used greatest stack depth: 9600 bytes left [ 39.133910][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 39.133934][ T28] audit: type=1400 audit(1782829383.600:206): avc: denied { read } for pid=3661 comm="syz.4.53" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.201390][ T28] audit: type=1400 audit(1782829383.600:207): avc: denied { open } for pid=3661 comm="syz.4.53" path="/dev/qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.267170][ T28] audit: type=1400 audit(1782829383.630:208): avc: denied { append } for pid=3661 comm="syz.4.53" name="qrtr-tun" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.339392][ T28] audit: type=1326 audit(1782829383.730:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 39.430833][ T28] audit: type=1326 audit(1782829383.730:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 39.465708][ T28] audit: type=1326 audit(1782829383.730:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 39.530611][ T28] audit: type=1326 audit(1782829383.730:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 39.585962][ T3671] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 39.594318][ T28] audit: type=1326 audit(1782829383.730:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 39.626379][ T3671] team0: Port device dummy0 added [ 39.668667][ T3671] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 39.672463][ T28] audit: type=1326 audit(1782829383.730:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 39.724643][ T3671] team0: Port device dummy0 removed [ 39.764732][ T28] audit: type=1326 audit(1782829383.790:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.4.53" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1942bfd68e code=0x7ffc0000 [ 39.791786][ T3671] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.885426][ T3677] syzkaller0: entered promiscuous mode [ 39.900067][ T3677] syzkaller0: entered allmulticast mode [ 39.917884][ T3677] tipc: Started in network mode [ 39.922876][ T3677] tipc: Node identity eeac0482085d, cluster identity 4711 [ 39.945911][ T3677] tipc: Enabled bearer , priority 0 [ 39.970625][ T3676] tipc: Resetting bearer [ 39.989521][ T3676] tipc: Disabling bearer [ 40.084408][ T3684] loop0: detected capacity change from 0 to 512 [ 40.102255][ T3684] EXT4-fs: test_dummy_encryption option not supported [ 40.105534][ T3681] loop4: detected capacity change from 0 to 164 [ 40.136264][ T3681] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.148250][ T3685] loop1: detected capacity change from 0 to 8192 [ 40.372507][ T3690] loop4: detected capacity change from 0 to 1024 [ 40.411442][ T3690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.433726][ T3690] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.482610][ T3690] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.63: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.513852][ T3690] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.537775][ T3690] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.537775][ T3690] [ 40.572811][ T3690] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.63: bg 0: block 112: padding at end of block bitmap is not set [ 40.618213][ T3690] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 3 with error 28 [ 40.638860][ T3690] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.638860][ T3690] [ 40.649503][ T3690] EXT4-fs (loop4): Total free blocks count 0 [ 40.670404][ T3690] EXT4-fs (loop4): Free/Dirty block details [ 40.683347][ T3690] EXT4-fs (loop4): free_blocks=0 [ 40.693497][ T3690] EXT4-fs (loop4): dirty_blocks=16 [ 40.704980][ T3690] EXT4-fs (loop4): Block reservation details [ 40.717944][ T3690] syz.4.63 (3690) used greatest stack depth: 9344 bytes left [ 40.769899][ T3296] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.833102][ T3703] bridge0: entered allmulticast mode [ 40.864669][ T3703] bridge_slave_1: left allmulticast mode [ 40.890539][ T3703] bridge_slave_1: left promiscuous mode [ 40.899221][ T3703] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.905057][ T3707] loop3: detected capacity change from 0 to 512 [ 40.914997][ T3703] bridge_slave_0: left allmulticast mode [ 40.921254][ T3703] bridge_slave_0: left promiscuous mode [ 40.927782][ T3703] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.151723][ T3721] loop4: detected capacity change from 0 to 256 [ 41.168914][ T3721] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.334553][ T3726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 41.347591][ T3726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3726 comm=syz.3.76 [ 43.183054][ T3752] loop0: detected capacity change from 0 to 256 [ 43.203861][ T3752] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.240997][ T3754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.87'. [ 43.281434][ T3754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3754 comm=syz.1.87 [ 43.364489][ T3758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 43.397652][ T3760] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 43.423747][ T3760] team0: Port device dummy0 added [ 43.469527][ T3760] netlink: 'syz.0.90': attribute type 10 has an invalid length. [ 43.489626][ T3760] team0: Port device dummy0 removed [ 43.524542][ T3760] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.777871][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.785770][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.832674][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.843403][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.883831][ T40] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.899282][ T3792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 44.908470][ T40] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.925336][ T3795] loop1: detected capacity change from 0 to 256 [ 44.933395][ T40] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.951322][ T3795] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.967883][ T40] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.055047][ T3800] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 45.074805][ T3800] team0: Port device dummy0 added [ 45.091902][ T3802] netlink: 'syz.4.105': attribute type 4 has an invalid length. [ 45.120503][ T3800] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 45.149032][ T3800] team0: Port device dummy0 removed [ 45.163686][ T3800] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.291860][ T3813] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'. [ 45.310577][ T3813] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3813 comm=syz.1.110 [ 45.673889][ T3824] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 45.743308][ T3824] veth0_virt_wifi: entered promiscuous mode [ 47.163667][ T3843] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.171177][ T3843] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.354225][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.379462][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.467610][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.479733][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.507599][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.527365][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.595456][ T3856] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 47.615867][ T3856] team0: Port device dummy0 added [ 47.651161][ T3856] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 47.693691][ T3856] team0: Port device dummy0 removed [ 47.724601][ T3856] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.775767][ T3864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.122'. [ 47.937091][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.944810][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.061299][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.089627][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.189435][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.202731][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.231602][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.265789][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.124257][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 49.124272][ T28] audit: type=1326 audit(1782829393.590:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.4.138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 49.159327][ T28] audit: type=1326 audit(1782829393.630:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.4.138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 49.227024][ T28] audit: type=1326 audit(1782829393.660:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.4.138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 49.308596][ T28] audit: type=1326 audit(1782829393.780:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.4.138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 49.337183][ T28] audit: type=1326 audit(1782829393.800:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3894 comm="syz.4.138" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 49.469417][ T3903] netlink: 'syz.4.139': attribute type 10 has an invalid length. [ 49.470958][ T3901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.140'. [ 49.499230][ T3903] team0: Port device dummy0 added [ 49.520912][ T3903] netlink: 'syz.4.139': attribute type 10 has an invalid length. [ 49.551668][ T3903] team0: Port device dummy0 removed [ 49.595226][ T3903] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.855940][ T3913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.146'. [ 52.305446][ T3936] netlink: 'syz.4.152': attribute type 1 has an invalid length. [ 52.348609][ T28] audit: type=1400 audit(1782829396.810:258): avc: denied { create } for pid=3941 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.406986][ T3936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.415587][ T28] audit: type=1400 audit(1782829396.820:259): avc: denied { connect } for pid=3941 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.438928][ T28] audit: type=1400 audit(1782829396.820:260): avc: denied { setopt } for pid=3941 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.461588][ T28] audit: type=1400 audit(1782829396.820:261): avc: denied { bind } for pid=3941 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.481063][ T28] audit: type=1400 audit(1782829396.820:262): avc: denied { write } for pid=3941 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 52.545530][ T3953] netlink: 'syz.4.156': attribute type 10 has an invalid length. [ 52.586318][ T3953] bond0: (slave dummy0): Releasing backup interface [ 52.616434][ T3953] team0: Port device dummy0 added [ 52.636051][ T3956] netlink: 'syz.4.156': attribute type 10 has an invalid length. [ 52.674025][ T3956] team0: Port device dummy0 removed [ 52.737937][ T3956] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 52.895517][ T3959] syz.2.159 uses obsolete (PF_INET,SOCK_PACKET) [ 53.317638][ T3980] Zero length message leads to an empty skb [ 53.326811][ T3982] netlink: 'syz.0.170': attribute type 10 has an invalid length. [ 53.359623][ T3982] bond0: (slave dummy0): Releasing backup interface [ 53.379232][ T3982] team0: Port device dummy0 added [ 53.420522][ T3982] netlink: 'syz.0.170': attribute type 10 has an invalid length. [ 53.475659][ T3982] team0: Port device dummy0 removed [ 53.510038][ T3982] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.901119][ T4005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 54.011221][ T4013] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.028351][ T4013] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 54.376481][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 54.376522][ T28] audit: type=1400 audit(1782829398.840:284): avc: denied { create } for pid=4016 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.405923][ T28] audit: type=1400 audit(1782829398.850:285): avc: denied { write } for pid=4016 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.438650][ T28] audit: type=1400 audit(1782829398.850:286): avc: denied { setopt } for pid=4016 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.538965][ T4028] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 54.588278][ T4031] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 54.951649][ T4032] loop4: detected capacity change from 0 to 512 [ 55.020630][ T4032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.045964][ T28] audit: type=1400 audit(1782829399.510:287): avc: denied { connect } for pid=4037 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.084465][ T28] audit: type=1400 audit(1782829399.510:288): avc: denied { write } for pid=4037 comm="syz.2.198" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.110677][ T4032] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.140291][ T28] audit: type=1400 audit(1782829399.510:289): avc: denied { open } for pid=4037 comm="syz.2.198" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.166643][ T28] audit: type=1400 audit(1782829399.510:290): avc: denied { ioctl } for pid=4037 comm="syz.2.198" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 55.192135][ T28] audit: type=1400 audit(1782829399.660:291): avc: denied { write } for pid=4023 comm="syz.4.185" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.198049][ T4029] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 55.231690][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.185: corrupted inode contents [ 55.249308][ T4029] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.185: mark_inode_dirty error [ 55.275047][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.185: corrupted inode contents [ 55.302917][ T4029] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.185: mark_inode_dirty error [ 55.329117][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.185: corrupted inode contents [ 55.353343][ T4029] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.185: mark_inode_dirty error [ 55.374508][ T4029] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.185: corrupted inode contents [ 55.401098][ T4029] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.185: mark_inode_dirty error [ 55.425616][ T4029] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem [ 57.466284][ T4028] bond0: (slave dummy0): Releasing backup interface [ 57.476521][ T4028] team0: Port device dummy0 added [ 57.485806][ T4031] team0: Port device dummy0 removed [ 57.496755][ T4031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.600133][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.686081][ T28] audit: type=1400 audit(1782829402.150:292): avc: denied { execute } for pid=4047 comm="syz.1.202" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.686337][ T4049] process 'syz.1.202' launched '/dev/fd/5' with NULL argv: empty string added [ 57.726775][ T28] audit: type=1400 audit(1782829402.190:293): avc: denied { execute_no_trans } for pid=4047 comm="syz.1.202" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.228796][ T4067] loop3: detected capacity change from 0 to 512 [ 58.238491][ T4067] EXT4-fs: Ignoring removed bh option [ 58.258281][ T4067] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.197: corrupted in-inode xattr: e_value size too large [ 58.295347][ T4067] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.295658][ T4067] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.197: couldn't read orphan inode 15 (err -117) [ 58.304878][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 58.304900][ C0] EXT4-fs (loop3): initial error at time 1782829402: ext4_iget_extra_inode:5180: inode 15 [ 58.304940][ C0] EXT4-fs (loop3): last error at time 1782829402: ext4_iget_extra_inode:5180: inode 15 [ 58.363204][ T4067] loop3: lost filesystem error report for type 5 error -117 [ 58.363955][ T4067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.463366][ T4067] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.197: Unrecognised inode hash code 4 [ 58.477079][ T4067] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.197: Corrupt directory, running e2fsck is recommended [ 58.500104][ T4067] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #12: comm syz.3.197: corrupted in-inode xattr: bad e_name length [ 58.534471][ T4073] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 58.545757][ T4076] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.197: Unrecognised inode hash code 4 [ 58.560662][ T4076] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.197: Corrupt directory, running e2fsck is recommended [ 58.578142][ T4076] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.197: corrupted in-inode xattr: e_value size too large [ 58.601330][ T4073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.602159][ T4067] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.197: Unrecognised inode hash code 4 [ 58.628257][ T4078] bond1: entered promiscuous mode [ 58.634645][ T4078] bond1: entered allmulticast mode [ 58.687805][ T4067] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.197: Corrupt directory, running e2fsck is recommended [ 58.702101][ T4067] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #12: comm syz.3.197: corrupted in-inode xattr: bad e_name length [ 58.710822][ T4076] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.197: Unrecognised inode hash code 4 [ 58.756879][ T4076] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.197: Corrupt directory, running e2fsck is recommended [ 58.797508][ T4076] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.197: corrupted in-inode xattr: e_value size too large [ 58.829841][ T4067] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.197: Unrecognised inode hash code 4 [ 58.848081][ T4067] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.197: Corrupt directory, running e2fsck is recommended [ 58.864581][ T4067] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.197: corrupted in-inode xattr: e_value size too large [ 58.893907][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.938062][ T4091] netlink: 'syz.3.205': attribute type 21 has an invalid length. [ 58.967718][ T4091] netlink: 132 bytes leftover after parsing attributes in process `syz.3.205'. [ 58.997154][ T4091] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 59.213694][ T4113] netlink: 72 bytes leftover after parsing attributes in process `syz.3.214'. [ 59.226603][ T4113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 59.237189][ T4113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 59.357559][ T4116] syzkaller0: entered promiscuous mode [ 59.363425][ T4116] syzkaller0: entered allmulticast mode [ 59.414338][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 59.414362][ T28] audit: type=1326 audit(1782829403.880:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 59.451607][ T28] audit: type=1326 audit(1782829403.920:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1942c3ce59 code=0x7ffc0000 [ 59.599722][ T4118] loop3: detected capacity change from 0 to 4096 [ 59.643646][ T4120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 59.652565][ T4118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.680696][ T28] audit: type=1400 audit(1782829404.150:319): avc: denied { execute } for pid=4117 comm="syz.3.216" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.721787][ T28] audit: type=1400 audit(1782829404.150:320): avc: denied { connect } for pid=4117 comm="syz.3.216" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.743682][ T4118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.755447][ T4118] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.765696][ T4118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.767024][ T28] audit: type=1400 audit(1782829404.230:321): avc: denied { module_request } for pid=4119 comm="syz.4.217" kmod="bt-proto-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 59.834943][ T4118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.848570][ T4118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.868715][ T28] audit: type=1400 audit(1782829404.340:322): avc: denied { perfmon } for pid=4126 comm="syz.1.218" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.871015][ T4118] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.913395][ T4118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.929490][ T4118] veth1_vlan: left promiscuous mode [ 59.935829][ T4118] veth0_vlan: left promiscuous mode [ 59.943350][ T4118] veth0_vlan: entered promiscuous mode [ 59.950863][ T4118] veth1_vlan: entered promiscuous mode [ 59.968611][ T4118] veth1_macvtap: left promiscuous mode [ 59.978640][ T4118] veth0_macvtap: left promiscuous mode [ 59.985683][ T4118] veth0_macvtap: entered promiscuous mode [ 59.994324][ T4118] veth1_macvtap: entered promiscuous mode [ 60.030493][ T4118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.048987][ T4118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.068567][ T4118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.087622][ T4118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.106376][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.113665][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.123290][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.130675][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.182518][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.193212][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.206368][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.215735][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.217646][ T4130] loop4: detected capacity change from 0 to 4096 [ 60.279102][ T4130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.299299][ T4134] loop1: detected capacity change from 0 to 256 [ 60.311582][ T28] audit: type=1400 audit(1782829404.780:323): avc: denied { write } for pid=4129 comm="syz.4.219" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.358813][ T28] audit: type=1400 audit(1782829404.820:324): avc: denied { ioctl } for pid=4131 comm="syz.0.220" path="socket:[6127]" dev="sockfs" ino=6127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.478140][ T28] audit: type=1400 audit(1782829404.950:325): avc: denied { bpf } for pid=4138 comm="syz.1.222" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.704336][ T3300] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 60.725565][ T3300] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 60.907696][ T4130] ================================================================== [ 60.915908][ T4130] BUG: KCSAN: data-race in touch_atime / touch_atime [ 60.922697][ T4130] [ 60.925217][ T4130] write to 0xffff8881058acdd0 of 4 bytes by task 4137 on cpu 1: [ 60.932960][ T4130] touch_atime+0x1cb/0x300 [ 60.937390][ T4130] filemap_splice_read+0x6fd/0x790 [ 60.942607][ T4130] ext4_file_splice_read+0x8f/0xb0 [ 60.947823][ T4130] splice_direct_to_actor+0x261/0x680 [ 60.953215][ T4130] do_splice_direct+0x119/0x1a0 [ 60.958256][ T4130] do_sendfile+0x37d/0x640 [ 60.962776][ T4130] __x64_sys_sendfile64+0x105/0x150 [ 60.968081][ T4130] x64_sys_call+0x2dc4/0x3020 [ 60.972859][ T4130] do_syscall_64+0x136/0x3c0 [ 60.977551][ T4130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.983977][ T4130] [ 60.986310][ T4130] read to 0xffff8881058acdd0 of 4 bytes by task 4130 on cpu 0: [ 60.994149][ T4130] touch_atime+0x162/0x300 [ 60.998761][ T4130] filemap_splice_read+0x6fd/0x790 [ 61.004148][ T4130] ext4_file_splice_read+0x8f/0xb0 [ 61.009394][ T4130] splice_direct_to_actor+0x261/0x680 [ 61.014787][ T4130] do_splice_direct+0x119/0x1a0 [ 61.020284][ T4130] do_sendfile+0x37d/0x640 [ 61.024765][ T4130] __x64_sys_sendfile64+0x105/0x150 [ 61.030357][ T4130] x64_sys_call+0x2dc4/0x3020 [ 61.035227][ T4130] do_syscall_64+0x136/0x3c0 [ 61.040105][ T4130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.046016][ T4130] [ 61.048350][ T4130] value changed: 0x16162594 -> 0x16aebc14 [ 61.054166][ T4130] [ 61.056494][ T4130] Reported by Kernel Concurrency Sanitizer on: [ 61.063206][ T4130] CPU: 0 UID: 0 PID: 4130 Comm: syz.4.219 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.073167][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 61.084428][ T4130] ================================================================== [ 61.172669][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.611882][ T3464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.680073][ T3464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.739622][ T3464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.799716][ T3464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.910136][ T3464] bridge_slave_1: left allmulticast mode [ 61.922730][ T3464] bridge_slave_1: left promiscuous mode [ 61.937262][ T3464] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.946546][ T3464] bridge_slave_0: left allmulticast mode [ 61.954252][ T3464] bridge_slave_0: left promiscuous mode [ 61.960184][ T3464] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.034390][ T28] audit: type=1400 audit(1782829406.500:326): avc: denied { write } for pid=4144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.061300][ T3464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.074086][ T3464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.091852][ T3464] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 62.102796][ T3464] bond0 (unregistering): Released all slaves [ 62.112447][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 62.166130][ T3464] hsr_slave_0: left promiscuous mode [ 62.175946][ T3464] hsr_slave_1: left promiscuous mode [ 62.187763][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.207623][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.218557][ T3464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.237462][ T3464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.247897][ T3464] veth1_macvtap: left promiscuous mode [ 62.253574][ T3464] veth0_macvtap: left promiscuous mode [ 62.259292][ T3464] veth1_vlan: left promiscuous mode [ 62.264625][ T3464] veth0_vlan: left promiscuous mode [ 62.320550][ T3464] team0 (unregistering): Port device team_slave_1 removed [ 62.335243][ T3464] team0 (unregistering): Port device team_slave_0 removed [ 62.371090][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 62.494297][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.607764][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4