last executing test programs: 1m41.20132388s ago: executing program 32 (id=79): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x4, 0x20110, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x1074cc, 0x400, 0xfff7fffc, 0x0, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffffff, 0x0, 0x28040, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x300, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x9, 0xe}, {0x8, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x5}}]}, 0x2c}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m26.391742103s ago: executing program 33 (id=78): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m19.281623993s ago: executing program 34 (id=344): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8000000000000001, 0x8001}, 0x111026, 0xb, 0x8, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x20000016, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1m3.836216872s ago: executing program 35 (id=515): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$nl_route(r0, 0x0, 0x440b0) 54.071060658s ago: executing program 5 (id=660): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x60000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x6, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x2, 0x6, 0x2000000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(r0, 0x0, 0x4000001) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x100008c, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 53.724431317s ago: executing program 5 (id=663): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x101ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffb}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 53.671230558s ago: executing program 5 (id=664): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44) 53.617461729s ago: executing program 5 (id=665): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 53.61705998s ago: executing program 5 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 53.504380492s ago: executing program 5 (id=667): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 53.504247002s ago: executing program 36 (id=667): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 51.449532474s ago: executing program 9 (id=699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000008114020010000000000000000000000000001ff02000000000000000000000000000120e620e6"], 0x64) 51.066380413s ago: executing program 8 (id=707): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) 51.024976745s ago: executing program 8 (id=708): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f00000003c0)="641a6a2b863c0dd898", 0x9}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c4832713618", 0x7c}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd4", 0x3f}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b1402", 0x1b}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000740)="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", 0x10c, 0x10008095, 0x0, 0x0) 50.921498387s ago: executing program 8 (id=710): close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='\\_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x1, 0x7, 0x9}) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x8080}], 0x1, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000140)=""/159, 0x9f, 0x1, 0x0) 50.083011678s ago: executing program 8 (id=722): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xd400, 0x2, 0x234}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 49.957324901s ago: executing program 8 (id=724): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x3, 0x2, 0x6], [0x6, 0x7, 0x1, 0x5, 0x80000000008002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x2a3b, 0xc, 0xdd, 0x5, 0x1, 0x2a6, 0x2000000003, 0xc3d, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x2, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x7, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0x8f, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0xbf4, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x897, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 49.61944514s ago: executing program 8 (id=728): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x4000, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 49.6193484s ago: executing program 37 (id=728): socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x4000, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 49.504551253s ago: executing program 9 (id=732): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x5000, 0x0, 0x3) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 47.753573147s ago: executing program 9 (id=747): r0 = socket$kcm(0x29, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="47e75e65875d62a2897c41319b34e4fee798d8b68de8d29d07ea15c0ecc327a81b30446b9e180edb2dc593ed390d4e02ad0415ce6da347af8b12c7b7839029b7896502eceee28fdf", 0x48}, {&(0x7f0000000240)="4aee4320baeb6eddf15148ef3d066d502fc9c002a1605b4458859cc6a543e06f41214c5d3071fd90ff79044d93a2c5af3d7424a3161d3055c62748f0bc5b4648d7e44e08a4440aa003d5098ea04c", 0x4e}, {&(0x7f0000000300)="b4400fd5663606d184bd9187dd98ae014533f3a3726fe86b2dc8d2a047f408bdfcbdd42dbb90882830b6a51b1d81abf62f0541dea6058ad1dd3371509c13368a8dc88de0816014d042982a8327b848837a863544da0d9cd649f262386663", 0x5e}, {&(0x7f0000000440)="5797083849bf5c8aec3fad0053a8738fcf1b3339269632ef5635e7c27f92bcbf602b2e4a", 0x24}], 0x4) 47.64492787s ago: executing program 9 (id=750): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xd400, 0x2, 0x234}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47.618580461s ago: executing program 9 (id=752): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x3, 0x8d) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = creat(0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) rename(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(0x0, 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x2c, 0x1c, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) 47.321609568s ago: executing program 9 (id=753): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) ftruncate(r1, 0x1000) 47.321333238s ago: executing program 38 (id=753): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) ftruncate(r1, 0x1000) 37.142978335s ago: executing program 2 (id=857): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18e40000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x200000000000000f, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000040000000000000000000000850000000700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ab000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xffeffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 36.952736309s ago: executing program 2 (id=859): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x10) fcntl$notify(r3, 0x402, 0x26) fcntl$notify(r3, 0x402, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 36.93396255s ago: executing program 2 (id=860): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 36.847672702s ago: executing program 2 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r0, 0x0, 0x0, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x83595b8d09592993, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x6}, {0x2, 0x2}, {0xb, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 36.678116886s ago: executing program 2 (id=864): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) setresuid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 36.389401583s ago: executing program 2 (id=869): mkdir(0x0, 0x11e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, @perf_config_ext={0x1, 0xfffffbfffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r1, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rmdir(0x0) openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 21.153787977s ago: executing program 39 (id=869): mkdir(0x0, 0x11e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, @perf_config_ext={0x1, 0xfffffbfffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r1, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rmdir(0x0) openat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 12.743228529s ago: executing program 6 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 12.71881309s ago: executing program 6 (id=1100): mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010200000000000000000a00000076"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 12.579767523s ago: executing program 6 (id=1103): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.516653175s ago: executing program 6 (id=1106): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) 12.480848066s ago: executing program 6 (id=1107): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x7, 0xbd6, 0x2, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 11.815640312s ago: executing program 6 (id=1119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x10) shutdown(r0, 0x2) 11.773556633s ago: executing program 40 (id=1119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) listen(r1, 0x10) shutdown(r0, 0x2) 4.832455658s ago: executing program 3 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001f4ff00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000780)=r4}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002e00), &(0x7f0000002e80), 0x10001, r5}, 0x38) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.867058523s ago: executing program 3 (id=1250): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x5000, 0x0, 0x3) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.113402752s ago: executing program 0 (id=1266): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xc5, 0x0, 0xe1b31c0aaf6f5dc5}}, 0x40) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x4, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 2.657530153s ago: executing program 0 (id=1269): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x0, [0x0, 0x200000000000, 0x0, 0x0, 0x200000000030, 0x200000000060], 0x0, 0x0, 0x0}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@local, 0x3, 0x8, 0x4e24, 0x10, 0x2}, {0x0, 0x0, 0x2000004, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x400}, {0x1ff, 0x7ffffffffffd, 0x4, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d3, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2003504, 0x5, 0x0, 0x0, 0xffffffff, 0x6, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) socket$unix(0x1, 0x1, 0x0) 2.556479626s ago: executing program 0 (id=1259): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) munmap(&(0x7f000038b000/0x3000)=nil, 0x3000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000cc0000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.737425176s ago: executing program 1 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.623555119s ago: executing program 1 (id=1264): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.338921016s ago: executing program 0 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000380)='./file0\x00', 0x143142, 0x88) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 1.293205558s ago: executing program 7 (id=1270): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x7d224ff6999e56b2}, 0x4000000) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.19115102s ago: executing program 7 (id=1272): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000800)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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") sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x804) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.19102991s ago: executing program 3 (id=1273): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002180)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getgroups(0x0, &(0x7f0000003c40)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) close(r0) 1.152578191s ago: executing program 1 (id=1274): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0xd1) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r1, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233", 0x5}], 0x1, 0xe, 0x6) 1.061690184s ago: executing program 1 (id=1275): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 908.260957ms ago: executing program 3 (id=1276): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") mkdir(0x0, 0x0) chdir(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0xa, 0x420a4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe}, 0x50) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 904.854237ms ago: executing program 1 (id=1277): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaa", 0xee}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da7", 0x62}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 808.07153ms ago: executing program 1 (id=1278): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 806.38821ms ago: executing program 4 (id=1288): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x4000) socket(0x40000000015, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file2\x00', 0x201c08b, &(0x7f0000000640)=ANY=[], 0x2, 0x2d5, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x8000, 0x135) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) 521.274767ms ago: executing program 3 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a3100000000050001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(r3, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000280)=""/116, 0x74}], 0x3}, 0x43}], 0x1, 0x20, 0x0) 478.201518ms ago: executing program 0 (id=1280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0xd27, 0x4071bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb5, 0x2470, 0x5ed241966fe80b85, 0x2, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) 459.401869ms ago: executing program 4 (id=1281): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffff63, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0xffffffffffffffaf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 387.7757ms ago: executing program 0 (id=1282): iopl(0x3) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffbfe, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 287.557343ms ago: executing program 3 (id=1283): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}]}, 0x24}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000c00)={0x24, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x20}]}, 0x24}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r2, &(0x7f0000000e00)={0x27, 0x1, 0x0, 0x5, 0x1, 0x0, 'urn:nfc:sn:snep\x00'}, 0x60) 249.296504ms ago: executing program 7 (id=1284): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) 154.475916ms ago: executing program 7 (id=1285): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001040)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESDEC=0x0], 0x3, 0x266, &(0x7f0000001180)="$eJzs2s9rHGUYB/Bn0takKelG/EUL4ose1MvQ5OwhQRoQA4p2hSpIp2ajS8bdkFkCK2Jyqlf/BM/i0ZsgPYmXXPwLPHiRXHLsQRzJ7sY0EiVFko3087nsA+/75Xlm32WYXXb3ta8+XVut8tWiFxNZFhMLsR0PspiNiTiwHa++fPun59+9/f6bi8vLN99JaWnx1tx8SunqCz988Pm3L97vXXnvu6vfT8bO7Ie7e/O/7jy7c233j1uftKvUrlKn20tFutvt9oq7ZSuttKu1PKW3y1ZRtVK7U7U2jqyvlt319X4qOisz0+sbrapKRaef1lr91Oum3kY/FR8X7U7K8zzNTAd/t3T55Hub3zyo69irL92Juq4vfx1X7sfML9GI7MmUPbWQPXMne247u7ZX143THJmxcf6Pt4du6lMR5Zebzc3m8HW4vrga7SijFTeiEb/H/sdkZFgvvbF880YamI175dYov7XZvHA0PxeNmD0+PzfMp7hX/vbEsO3WZnMypiMuRYzy89GIp4/Pzx/mB/0vDPpPxSsvPdQ/j0b8/FF0o4yV2M8e5r+YS+n1t5YP8gvD/tcH+/7N1CmfDQDAacjTX459fsvzf1of5h/h+TAdzV+M6xfHe+1EVP3P1oqybG2cqNg/0RNv/h8WUyfYc/BN+LzMPCp+HP0Wdl7micgG82Sjt2vc8/z3YmvyXIxxVsV47kecrcNDH/ckAAAAAAAAAAAAPIqz+DvhuK8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43/4MAAD//8U1x98=") chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) open(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108843, 0x190) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) creat(&(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 153.938256ms ago: executing program 7 (id=1286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x8, 0x3, 0x7}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 104.241317ms ago: executing program 7 (id=1287): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x6, 0x80, 0x8000, 0xbbd7, 0x86, "1053e02f4322b907360009490a0080002a0008"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0xa) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 99.762617ms ago: executing program 4 (id=1289): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaa", 0xee}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da7", 0x62}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 59.434829ms ago: executing program 4 (id=1290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 31.756589ms ago: executing program 4 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) 0s ago: executing program 4 (id=1292): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {'B\x00', "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) kernel console output (not intermixed with test programs): en=1024, size=1024 fake=0 [ 75.973650][ T28] audit: type=1400 audit(1786037736.591:1007): avc: denied { write } for pid=5540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.019163][ T28] audit: type=1400 audit(1786037736.621:1008): avc: denied { write } for pid=5558 comm="syz.7.504" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.053126][ T4827] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 76.078729][ T28] audit: type=1400 audit(1786037736.741:1009): avc: denied { write } for pid=4827 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.109423][ T4827] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 76.130616][ T28] audit: type=1400 audit(1786037736.741:1010): avc: denied { remove_name } for pid=4827 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.363224][ T39] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.461283][ T5581] loop0: detected capacity change from 0 to 128 [ 76.498691][ T39] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.568085][ T39] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.614944][ T5587] loop6: detected capacity change from 0 to 2048 [ 76.649569][ T39] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.673847][ T5587] loop6: p1 < > p3 [ 76.678384][ T5587] loop6: p3 size 134217728 extends beyond EOD, truncated [ 76.731795][ T4827] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.794298][ T5591] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 76.889170][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.925723][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.948110][ T39] bond0 (unregistering): Released all slaves [ 77.017798][ T39] hsr_slave_0: left promiscuous mode [ 77.029293][ T39] hsr_slave_1: left promiscuous mode [ 77.045764][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.067122][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.089515][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.101514][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.119809][ T39] veth1_macvtap: left promiscuous mode [ 77.125531][ T39] veth0_macvtap: left promiscuous mode [ 77.136126][ T39] veth1_vlan: left promiscuous mode [ 77.146697][ T5620] loop5: detected capacity change from 0 to 512 [ 77.156425][ T39] veth0_vlan: left promiscuous mode [ 77.169402][ T5620] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.217724][ T5620] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.251183][ T5620] EXT4-fs (loop5): 1 truncate cleaned up [ 77.260682][ T5620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.273486][ T5618] loop6: detected capacity change from 0 to 32768 [ 77.294945][ T39] team0 (unregistering): Port device team_slave_1 removed [ 77.308070][ T39] team0 (unregistering): Port device team_slave_0 removed [ 77.530373][ T3759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.670437][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.678316][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.687245][ T5604] bridge_slave_0: entered allmulticast mode [ 77.695270][ T5604] bridge_slave_0: entered promiscuous mode [ 77.704785][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.712714][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.720273][ T5604] bridge_slave_1: entered allmulticast mode [ 77.727859][ T5604] bridge_slave_1: entered promiscuous mode [ 77.749507][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.760700][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.785026][ T5604] team0: Port device team_slave_0 added [ 77.792135][ T5604] team0: Port device team_slave_1 added [ 77.809564][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.816968][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.934362][ T5664] loop0: detected capacity change from 0 to 512 [ 77.939116][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.951281][ T5664] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.964996][ T5664] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.530: iget: bad i_size value: 38620345925642 [ 77.973138][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.984023][ T5664] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.988918][ T5664] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.530: couldn't read orphan inode 15 (err -117) [ 77.998239][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 77.998289][ C1] EXT4-fs (loop0): initial error at time 1786037738: ext4_orphan_get:1399: inode 15 [ 77.998368][ C1] EXT4-fs (loop0): last error at time 1786037738: ext4_orphan_get:1399: inode 15 [ 78.036012][ T5664] loop0: lost filesystem error report for type 5 error -117 [ 78.038073][ T5664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.041296][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.173903][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.186892][ T4733] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:19: bg 0: block 5: invalid block bitmap [ 78.192601][ T5665] loop5: detected capacity change from 0 to 512 [ 78.216764][ T4733] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 748 with error 28 [ 78.239454][ T4733] EXT4-fs (loop0): This should not happen!! Data will be lost [ 78.239454][ T4733] [ 78.265712][ T5671] loop2: detected capacity change from 0 to 512 [ 78.266478][ T4733] EXT4-fs (loop0): Total free blocks count 0 [ 78.272438][ T5604] hsr_slave_0: entered promiscuous mode [ 78.288173][ T4733] EXT4-fs (loop0): Free/Dirty block details [ 78.289139][ T5671] EXT4-fs: test_dummy_encryption option not supported [ 78.305079][ T4733] EXT4-fs (loop0): free_blocks=0 [ 78.306205][ T5604] hsr_slave_1: entered promiscuous mode [ 78.315603][ T4733] EXT4-fs (loop0): dirty_blocks=748 [ 78.317238][ T5665] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.329685][ T4733] EXT4-fs (loop0): Block reservation details [ 78.352266][ T4733] EXT4-fs (loop0): i_reserved_data_blocks=748 [ 78.358452][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 78.371427][ T4442] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 78.382952][ T5604] Cannot create hsr debugfs directory [ 78.387897][ T4442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.420993][ T5665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.443134][ T5665] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.485662][ T5665] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å ) failed with errno=-22 [ 78.580271][ T3759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.713326][ T5604] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 78.735716][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.770557][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 78.798172][ T5604] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 78.810792][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.828289][ T5604] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 78.835377][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 78.856963][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.879023][ T5604] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 78.893084][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.050700][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.179100][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.193851][ T5746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.538'. [ 79.208514][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 79.417341][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.424560][ T5054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.459011][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.466340][ T5054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.552623][ T5759] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 79.639094][ T5761] loop5: detected capacity change from 0 to 8192 [ 79.709850][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.723943][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 79.723958][ T28] audit: type=1400 audit(1786037740.411:1041): avc: denied { write } for pid=5765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.782842][ T5780] loop0: detected capacity change from 0 to 8192 [ 79.797798][ T28] audit: type=1400 audit(1786037740.481:1042): avc: denied { read append } for pid=5779 comm="syz.0.544" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.833153][ T28] audit: type=1400 audit(1786037740.481:1043): avc: denied { ioctl open } for pid=5779 comm="syz.0.544" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.868118][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 79.886635][ T28] audit: type=1400 audit(1786037740.511:1044): avc: denied { read } for pid=5779 comm="syz.0.544" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.911409][ T28] audit: type=1400 audit(1786037740.511:1045): avc: denied { open } for pid=5779 comm="syz.0.544" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 79.925802][ T5604] veth0_vlan: entered promiscuous mode [ 79.942118][ T28] audit: type=1400 audit(1786037740.511:1046): avc: denied { write } for pid=5793 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.949533][ T5604] veth1_vlan: entered promiscuous mode [ 79.984095][ T5604] veth0_macvtap: entered promiscuous mode [ 79.991790][ T5604] veth1_macvtap: entered promiscuous mode [ 80.003788][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.016714][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.028696][ T28] audit: type=1400 audit(1786037740.711:1047): avc: denied { write } for pid=5804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.052797][ T173] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.062348][ T173] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.084130][ T4733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.095532][ T28] audit: type=1400 audit(1786037740.761:1048): avc: denied { write } for pid=5815 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.096754][ T4733] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.127312][ T28] audit: type=1400 audit(1786037740.821:1049): avc: denied { mount } for pid=5604 comm="syz-executor" name="/" dev="gadgetfs" ino=3818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 80.127774][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 80.220981][ T5825] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.516: corrupted in-inode xattr: e_value out of bounds [ 80.221007][ T5825] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.221176][ T5825] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.516: couldn't read orphan inode 15 (err -117) [ 80.235102][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 80.235122][ C0] EXT4-fs (loop8): initial error at time 1786037740: ext4_iget_extra_inode:5180: inode 15 [ 80.235189][ C0] EXT4-fs (loop8): last error at time 1786037740: ext4_iget_extra_inode:5180: inode 15 [ 80.283349][ T5825] loop8: lost filesystem error report for type 5 error -117 [ 80.285573][ T5825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.318238][ T28] audit: type=1400 audit(1786037741.001:1050): avc: denied { write } for pid=5818 comm="syz.8.516" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.379439][ T5604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.531965][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.552'. [ 81.020895][ T5865] set_capacity_and_notify: 1 callbacks suppressed [ 81.020910][ T5865] loop6: detected capacity change from 0 to 512 [ 81.057252][ T5863] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.559'. [ 81.083205][ T5865] EXT4-fs: Ignoring removed i_version option [ 81.129639][ T5865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.194657][ T5865] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.374014][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.429223][ T5861] loop0: detected capacity change from 0 to 512 [ 81.655835][ T5861] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 81.686697][ T5861] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 81.715187][ T5861] System zones: 0-1, 15-15, 18-18, 34-34 [ 81.729774][ T5861] EXT4-fs (loop0): orphan cleanup on readonly fs [ 81.744369][ T5861] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.761575][ T5861] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 81.771177][ T5861] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.558: bad orphan inode 16 [ 81.785798][ T5861] loop0: lost filesystem error report for type 5 error -117 [ 81.791200][ T5861] ext4_test_bit(bit=15, block=18) = 1 [ 81.798789][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 81.798819][ C0] EXT4-fs (loop0): initial error at time 1786037742: ext4_orphan_get:1425 [ 81.798909][ C0] EXT4-fs (loop0): last error at time 1786037742: ext4_orphan_get:1425 [ 81.830368][ T5861] is_bad_inode(inode)=0 [ 81.835771][ T5861] NEXT_ORPHAN(inode)=0 [ 81.844866][ T5861] max_ino=32 [ 81.848494][ T5861] i_nlink=2 [ 81.857606][ T5861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.924331][ T4442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.022956][ T5903] netlink: 172 bytes leftover after parsing attributes in process `syz.8.575'. [ 82.153239][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.579'. [ 82.194420][ T5899] loop6: detected capacity change from 0 to 128 [ 82.266996][ T5915] syzkaller0: entered promiscuous mode [ 82.304388][ T5915] syzkaller0: entered allmulticast mode [ 82.363951][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.371294][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.446025][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.456577][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.487343][ T5920] batman_adv: batadv0: Interface deactivated: gretap1 [ 82.551971][ T4733] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.563322][ T4733] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.595885][ T4733] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.610103][ T4733] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.665051][ T5933] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.134805][ T5956] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 83.198718][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 83.218648][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 83.738871][ T5981] loop2: detected capacity change from 0 to 128 [ 84.248724][ T6023] netlink: 'syz.5.618': attribute type 10 has an invalid length. [ 84.274205][ T6023] syz_tun: entered promiscuous mode [ 84.697241][ T6054] loop8: detected capacity change from 0 to 512 [ 84.728248][ T6054] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.626: iget: bad i_size value: 38620345925642 [ 84.740987][ T6054] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.741924][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 84.757544][ C1] EXT4-fs (loop8): initial error at time 1786037745: ext4_orphan_get:1399: inode 15 [ 84.764056][ T6054] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.626: couldn't read orphan inode 15 (err -117) [ 84.766986][ C1] EXT4-fs (loop8): last error at time 1786037745: ext4_orphan_get:1399: inode 15 [ 84.800605][ T6059] loop6: detected capacity change from 0 to 256 [ 84.802182][ T6054] loop8: lost filesystem error report for type 5 error -117 [ 84.825693][ T6059] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.897931][ T6054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.908602][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 84.908631][ T28] audit: type=1400 audit(1786037745.581:1069): avc: denied { audit_read } for pid=6062 comm="syz.2.629" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.943142][ T6059] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.983086][ T28] audit: type=1400 audit(1786037745.661:1070): avc: denied { write } for pid=6053 comm="syz.8.626" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.029460][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 85.047851][ T6070] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.626: bg 0: block 5: invalid block bitmap [ 85.062114][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 85.071393][ T28] audit: type=1400 audit(1786037745.741:1071): avc: denied { mount } for pid=6064 comm="syz.0.630" name="/" dev="rpc_pipefs" ino=14840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 85.095994][ T6070] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 820 with error 28 [ 85.096655][ T28] audit: type=1400 audit(1786037745.781:1072): avc: denied { unmount } for pid=4442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 85.111092][ T6070] EXT4-fs (loop8): This should not happen!! Data will be lost [ 85.111092][ T6070] [ 85.147997][ T6070] EXT4-fs (loop8): Total free blocks count 0 [ 85.166823][ T6070] EXT4-fs (loop8): Free/Dirty block details [ 85.181418][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.188721][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.206108][ T6070] EXT4-fs (loop8): free_blocks=0 [ 85.227039][ T6070] EXT4-fs (loop8): dirty_blocks=824 [ 85.253155][ T6070] EXT4-fs (loop8): Block reservation details [ 85.260482][ T6080] loop6: detected capacity change from 0 to 1024 [ 85.270763][ T6076] dummy0: left promiscuous mode [ 85.282415][ T6070] EXT4-fs (loop8): i_reserved_data_blocks=824 [ 85.318590][ T6054] EXT4-fs (loop8): shut down requested (0) [ 85.332524][ T28] audit: type=1400 audit(1786037746.021:1073): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 85.365386][ T6080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.383302][ T28] audit: type=1400 audit(1786037746.021:1074): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.415133][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.434361][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.456306][ T28] audit: type=1400 audit(1786037746.021:1075): avc: denied { write search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.479224][ T28] audit: type=1400 audit(1786037746.021:1076): avc: denied { add_name } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.505651][ T28] audit: type=1400 audit(1786037746.021:1077): avc: denied { create } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.527334][ T28] audit: type=1400 audit(1786037746.021:1078): avc: denied { append open } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.589396][ T6076] gretap1: left promiscuous mode [ 85.613248][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.633837][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.673910][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.711995][ T4733] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.733119][ T4733] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.761465][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.770775][ T6102] netlink: 172 bytes leftover after parsing attributes in process `syz.5.640'. [ 85.772729][ T4733] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.812016][ T4733] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.824348][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.643'. [ 85.836259][ T4733] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.903423][ T6110] tipc: Started in network mode [ 85.912370][ T6110] tipc: Node identity 224f2996dd06, cluster identity 4711 [ 85.921311][ T6110] tipc: Enabled bearer , priority 0 [ 85.952253][ T6108] syzkaller0: entered promiscuous mode [ 85.957812][ T6108] syzkaller0: entered allmulticast mode [ 85.985648][ T6110] syzkaller0: entered promiscuous mode [ 85.991366][ T6110] syzkaller0: entered allmulticast mode [ 85.997637][ T6110] tipc: Resetting bearer [ 86.027758][ T6109] tipc: Resetting bearer [ 86.040281][ T6109] tipc: Disabling bearer [ 86.051692][ T6119] 0: reclassify loop, rule prio 0, protocol 03 [ 86.186444][ T6131] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.651'. [ 86.232823][ T6131] netlink: 31 bytes leftover after parsing attributes in process `syz.0.651'. [ 86.311494][ T6141] loop5: detected capacity change from 0 to 512 [ 86.348019][ T6141] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.588613][ T6154] netlink: 'syz.8.659': attribute type 10 has an invalid length. [ 86.642933][ T6154] team0 (unregistering): Port device team_slave_0 removed [ 86.670511][ T6154] team0 (unregistering): Port device team_slave_1 removed [ 86.723582][ T6157] loop5: detected capacity change from 0 to 128 [ 87.434317][ T6171] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.446395][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.458386][ T6171] bridge_slave_0: entered allmulticast mode [ 87.465785][ T6171] bridge_slave_0: entered promiscuous mode [ 87.475791][ T6171] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.487110][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.494735][ T6171] bridge_slave_1: entered allmulticast mode [ 87.501495][ T6171] bridge_slave_1: entered promiscuous mode [ 87.532563][ T6171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.543043][ T6171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.564268][ T6171] team0: Port device team_slave_0 added [ 87.570925][ T6171] team0: Port device team_slave_1 added [ 87.588512][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.595983][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.623336][ T6171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.635187][ T6171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.642350][ T6171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.675645][ T6171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.710276][ T6196] netlink: 76 bytes leftover after parsing attributes in process `syz.0.684'. [ 87.731201][ T6171] hsr_slave_0: entered promiscuous mode [ 87.747013][ T6200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.755832][ T6200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.779381][ T6171] hsr_slave_1: entered promiscuous mode [ 87.787014][ T6171] debugfs: 'hsr0' already exists in 'hsr' [ 87.793276][ T6171] Cannot create hsr debugfs directory [ 87.884248][ T6213] netlink: 'syz.2.682': attribute type 10 has an invalid length. [ 87.897605][ T6213] team0 (unregistering): Port device team_slave_0 removed [ 87.906790][ T6213] team0 (unregistering): Port device team_slave_1 removed [ 87.934861][ T6171] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 87.944020][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.952234][ T6171] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 87.961650][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.969894][ T6171] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 87.979885][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.988535][ T6171] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 87.999126][ T6171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.058151][ T6171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.071557][ T6171] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.082858][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.090076][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.116367][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.123595][ T4733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.416186][ T6171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.457915][ T6243] netlink: 76 bytes leftover after parsing attributes in process `syz.8.688'. [ 88.805685][ T6171] veth0_vlan: entered promiscuous mode [ 88.831236][ T6171] veth1_vlan: entered promiscuous mode [ 88.905173][ T6171] veth0_macvtap: entered promiscuous mode [ 88.923951][ T6171] veth1_macvtap: entered promiscuous mode [ 88.928579][ T5926] kernel read not supported for file /lru_gen (pid: 5926 comm: kworker/0:6) [ 88.935789][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.952594][ T6171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.992444][ T5054] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.003400][ T5054] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.025035][ T5054] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.062874][ T4733] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.081150][ T6265] loop8: detected capacity change from 0 to 512 [ 89.117534][ T6265] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.167427][ T6265] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 89.216771][ T6265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 89.242308][ T6265] System zones: 1-12 [ 89.254313][ T6265] EXT4-fs (loop8): orphan cleanup on readonly fs [ 89.275437][ T6265] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.696: bg 0: block 361: padding at end of block bitmap is not set [ 89.316453][ T6265] loop8: lost filesystem error report for type 5 error -117 [ 89.317405][ T6265] EXT4-fs (loop8): Remounting filesystem read-only [ 89.325424][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 89.325485][ C0] EXT4-fs (loop8): initial error at time 1786037750: ext4_validate_block_bitmap:441 [ 89.325535][ C0] EXT4-fs (loop8): last error at time 1786037750: ext4_validate_block_bitmap:441 [ 89.334595][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 89.354196][ T6265] EXT4-fs (loop8): 1 truncate cleaned up [ 89.382041][ T6265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 89.487379][ T6292] loop0: detected capacity change from 0 to 512 [ 89.495070][ T5604] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 89.508366][ T6292] EXT4-fs: Ignoring removed i_version option [ 89.551246][ T6292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.566374][ T6292] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.684863][ T4442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.877969][ T6312] netlink: 127592 bytes leftover after parsing attributes in process `syz.2.713'. [ 89.943373][ T6316] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 89.966371][ T5054] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.974274][ T3668] Bluetooth: hci0: unexpected event 0x02 length: 0 < 1 [ 89.993740][ T6316] loop2: detected capacity change from 0 to 256 [ 90.014100][ T6316] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.027606][ T6316] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.044324][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 90.044340][ T28] audit: type=1400 audit(1786037750.731:1108): avc: denied { create } for pid=6315 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.072388][ T28] audit: type=1400 audit(1786037750.731:1109): avc: denied { write } for pid=6315 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.114913][ T6321] loop2: detected capacity change from 0 to 7 [ 90.162585][ T6331] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 90.177170][ T28] audit: type=1400 audit(1786037750.861:1110): avc: denied { write } for pid=6319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.179347][ T6331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.226141][ T28] audit: type=1400 audit(1786037750.911:1111): avc: denied { write } for pid=6336 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.269074][ T6331] bond2: (slave geneve2): making interface the new active one [ 90.278245][ T6331] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 90.292270][ T5054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.301982][ T5054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.324919][ T5054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.332469][ T6340] loop2: detected capacity change from 0 to 512 [ 90.351043][ T6340] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.719: iget: bad i_size value: 38620345925642 [ 90.374070][ T4733] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.391477][ T6340] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.391660][ T6340] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.719: couldn't read orphan inode 15 (err -117) [ 90.401450][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 90.401475][ C0] EXT4-fs (loop2): initial error at time 1786037751: ext4_orphan_get:1399: inode 15 [ 90.401535][ C0] EXT4-fs (loop2): last error at time 1786037751: ext4_orphan_get:1399: inode 15 [ 90.444051][ T6340] loop2: lost filesystem error report for type 5 error -117 [ 90.444611][ T6340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.472086][ T28] audit: type=1400 audit(1786037751.151:1112): avc: denied { write } for pid=6341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.520338][ T28] audit: type=1400 audit(1786037751.151:1113): avc: denied { write } for pid=6339 comm="syz.2.719" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.557343][ T28] audit: type=1400 audit(1786037751.201:1114): avc: denied { nlmsg_write } for pid=6348 comm="syz.6.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 90.584643][ T28] audit: type=1400 audit(1786037751.201:1115): avc: denied { audit_write } for pid=6348 comm="syz.6.720" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.633190][ T28] audit: type=1107 audit(1786037751.201:1116): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 90.661244][ T28] audit: type=1400 audit(1786037751.211:1117): avc: denied { write } for pid=6356 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.689283][ T6340] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.719: bg 0: block 5: invalid block bitmap [ 90.723917][ T6340] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 90.738375][ T6340] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.738375][ T6340] [ 90.748732][ T6340] EXT4-fs (loop2): Total free blocks count 0 [ 90.754974][ T6340] EXT4-fs (loop2): Free/Dirty block details [ 90.760997][ T6340] EXT4-fs (loop2): free_blocks=0 [ 90.766230][ T6340] EXT4-fs (loop2): dirty_blocks=2432 [ 90.771549][ T6340] EXT4-fs (loop2): Block reservation details [ 90.777980][ T6340] EXT4-fs (loop2): i_reserved_data_blocks=2432 [ 90.786663][ T6358] EXT4-fs (loop2): shut down requested (0) [ 90.877275][ T6368] netlink: 'syz.6.725': attribute type 10 has an invalid length. [ 90.903137][ T6368] team0 (unregistering): Port device team_slave_0 removed [ 90.917099][ T6368] team0 (unregistering): Port device team_slave_1 removed [ 91.088532][ T6380] tipc: Failed to remove unknown binding: 66,0,0/0:2742352095/2742352097 [ 91.108728][ T6380] tipc: Failed to remove unknown binding: 66,0,0/0:2742352095/2742352096 [ 91.208983][ T6395] 0: reclassify loop, rule prio 0, protocol 03 [ 91.423763][ T6411] netlink: 'syz.6.735': attribute type 4 has an invalid length. [ 91.476670][ T6411] netlink: 'syz.6.735': attribute type 4 has an invalid length. [ 91.508271][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.524038][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.536206][ T6375] bridge_slave_0: entered allmulticast mode [ 91.552163][ T6375] bridge_slave_0: entered promiscuous mode [ 91.621794][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.635260][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.700344][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.714454][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.745658][ T6375] bridge_slave_1: entered allmulticast mode [ 91.759151][ T6375] bridge_slave_1: entered promiscuous mode [ 91.803053][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.825339][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.850372][ T6375] team0: Port device team_slave_0 added [ 91.858498][ T6375] team0: Port device team_slave_1 added [ 91.876655][ T6394] loop9: detected capacity change from 0 to 4096 [ 91.889912][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.918270][ T6394] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.946744][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.983133][ T3668] Bluetooth: hci0: command 0x1003 tx timeout [ 91.989599][ T5203] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.013848][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.038272][ T4733] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.052480][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.059904][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.087382][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.121312][ T4733] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.167250][ T6375] hsr_slave_0: entered promiscuous mode [ 92.184141][ T6375] hsr_slave_1: entered promiscuous mode [ 92.194717][ T6375] debugfs: 'hsr0' already exists in 'hsr' [ 92.204775][ T6375] Cannot create hsr debugfs directory [ 92.231573][ T4733] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.274984][ T4733] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.403354][ T5054] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.412941][ T5054] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.432656][ T5054] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.452073][ T5054] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.748830][ T6456] loop0: detected capacity change from 0 to 512 [ 92.770522][ T6456] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 92.779570][ T6456] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -EBUSY [ 92.811830][ T6394] Set syz1 is full, maxelem 65536 reached [ 92.851571][ T6456] bridge_slave_1: default FDB implementation only supports local addresses [ 92.873861][ T6171] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.896017][ T4733] bridge_slave_1: left allmulticast mode [ 92.913118][ T4733] bridge_slave_1: left promiscuous mode [ 92.929648][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.967106][ T4733] bridge_slave_0: left allmulticast mode [ 92.976771][ T4733] bridge_slave_0: left promiscuous mode [ 92.983313][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.011567][ T6474] random: crng reseeded on system resumption [ 93.080040][ T4733] batman_adv: batadv0: Removing interface: gretap1 [ 93.108019][ T4733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.118444][ T4733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.127850][ T4733] bond0 (unregistering): Released all slaves [ 93.157793][ T6476] tipc: Started in network mode [ 93.163001][ T6476] tipc: Node identity 96183a3e9f54, cluster identity 4711 [ 93.170493][ T6476] tipc: Enabled bearer , priority 0 [ 93.199513][ T6476] syzkaller0: entered promiscuous mode [ 93.205626][ T6476] syzkaller0: entered allmulticast mode [ 93.211560][ T6476] tipc: Resetting bearer [ 93.222305][ T4733] hsr_slave_0: left promiscuous mode [ 93.228079][ T4733] hsr_slave_1: left promiscuous mode [ 93.234034][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.241548][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.278084][ T4733] team0 (unregistering): Port device team_slave_1 removed [ 93.288277][ T4733] team0 (unregistering): Port device team_slave_0 removed [ 93.373192][ T6505] netlink: 'syz.0.756': attribute type 83 has an invalid length. [ 93.412020][ T6475] tipc: Resetting bearer [ 93.439392][ T6475] tipc: Disabling bearer [ 93.797504][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.804827][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.813340][ T6512] bridge_slave_0: entered allmulticast mode [ 93.821884][ T6512] bridge_slave_0: entered promiscuous mode [ 93.830796][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.838130][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.849247][ T6512] bridge_slave_1: entered allmulticast mode [ 93.856813][ T6512] bridge_slave_1: entered promiscuous mode [ 93.870269][ T4733] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.898172][ T6512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.909281][ T6512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.934775][ T6512] team0: Port device team_slave_0 added [ 93.959732][ T4733] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.981072][ T6512] team0: Port device team_slave_1 added [ 93.995539][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 94.022928][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.030021][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.078625][ T6512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.099806][ T6580] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 94.120875][ T4733] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.147976][ T6512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.156635][ T6512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.204819][ T6512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.233245][ T6580] 8021q: adding VLAN 0 to HW filter on device bond3 [ 94.281672][ T4733] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.297189][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 94.333961][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 94.346858][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.770'. [ 94.352884][ T6512] hsr_slave_0: entered promiscuous mode [ 94.376530][ T6512] hsr_slave_1: entered promiscuous mode [ 94.387974][ T6512] debugfs: 'hsr0' already exists in 'hsr' [ 94.393943][ T6512] Cannot create hsr debugfs directory [ 94.530563][ T4733] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.621588][ T4733] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.653008][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 94.760218][ T4733] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.821616][ T6626] loop2: detected capacity change from 0 to 512 [ 94.841987][ T6626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.867538][ T6626] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.948907][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 94.985026][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.006699][ T4733] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.063453][ T28] kauditd_printk_skb: 663 callbacks suppressed [ 95.063472][ T28] audit: type=1107 audit(1786037755.751:1349): pid=6641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 95.151705][ T4733] bridge_slave_1: left allmulticast mode [ 95.162052][ T28] audit: type=1400 audit(1786037755.851:1350): avc: denied { write } for pid=6640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.186805][ T4733] bridge_slave_1: left promiscuous mode [ 95.204504][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.220297][ T28] audit: type=1400 audit(1786037755.901:1351): avc: denied { write } for pid=6655 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.246697][ T4733] bridge_slave_0: left allmulticast mode [ 95.260787][ T4733] bridge_slave_0: left promiscuous mode [ 95.266722][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.280846][ T4733] bridge_slave_1: left allmulticast mode [ 95.289670][ T4733] bridge_slave_1: left promiscuous mode [ 95.295849][ T4733] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.305899][ T4733] bridge_slave_0: left allmulticast mode [ 95.311986][ T4733] bridge_slave_0: left promiscuous mode [ 95.312056][ T6660] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 95.317855][ T4733] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.399654][ T4733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.410086][ T4733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.419843][ T4733] bond0 (unregistering): Released all slaves [ 95.447957][ T4733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.458065][ T4733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.468906][ T4733] bond0 (unregistering): Released all slaves [ 95.477391][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 95.497842][ T6660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.519676][ T6667] bond1: (slave geneve2): making interface the new active one [ 95.537717][ T6667] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 95.565204][ T4733] hsr_slave_0: left promiscuous mode [ 95.573324][ T4733] hsr_slave_1: left promiscuous mode [ 95.584822][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.592746][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.625057][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.632870][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.642977][ T4733] hsr_slave_0: left promiscuous mode [ 95.649152][ T4733] hsr_slave_1: left promiscuous mode [ 95.655804][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.663518][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.671509][ T4733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.672088][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.783'. [ 95.680243][ T4733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.702112][ T4733] veth1_macvtap: left promiscuous mode [ 95.708173][ T4733] veth0_macvtap: left promiscuous mode [ 95.714538][ T4733] veth1_vlan: left promiscuous mode [ 95.720167][ T4733] veth0_vlan: left promiscuous mode [ 95.726411][ T4733] veth1_macvtap: left promiscuous mode [ 95.732547][ T4733] veth0_macvtap: left promiscuous mode [ 95.738706][ T4733] veth1_vlan: left promiscuous mode [ 95.744248][ T4733] veth0_vlan: left promiscuous mode [ 95.834230][ T4733] team0 (unregistering): Port device team_slave_1 removed [ 95.843965][ T4733] team0 (unregistering): Port device team_slave_0 removed [ 95.985944][ T28] audit: type=1400 audit(1786037756.671:1352): avc: denied { write } for pid=6676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.023047][ T28] audit: type=1400 audit(1786037756.711:1353): avc: denied { write } for pid=6687 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.104389][ T28] audit: type=1400 audit(1786037756.791:1354): avc: denied { write } for pid=6689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.141240][ T28] audit: type=1400 audit(1786037756.821:1355): avc: denied { write } for pid=6700 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.219032][ T28] audit: type=1400 audit(1786037756.901:1356): avc: denied { write } for pid=6702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.243920][ T28] audit: type=1400 audit(1786037756.901:1357): avc: denied { write } for pid=6713 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.323919][ T28] audit: type=1400 audit(1786037757.011:1358): avc: denied { write } for pid=6715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.564758][ T6375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.573869][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.582693][ T6375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.591718][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.603962][ T6375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.613449][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.621202][ T6375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.630210][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.641636][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 96.665742][ T6512] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.674917][ T6512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.682715][ T6512] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.691589][ T6512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.699752][ T6512] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.708620][ T6512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.717404][ T6512] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.726105][ T6512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.760141][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.781624][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.801613][ T6512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.815266][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.823092][ T5054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.833061][ T6512] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.846184][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.853518][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.872772][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.880039][ T5054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.888838][ T5054] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.896011][ T5054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.907974][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 97.069702][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.096454][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 97.126721][ T6512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.178936][ T6375] veth0_vlan: entered promiscuous mode [ 97.192356][ T6375] veth1_vlan: entered promiscuous mode [ 97.212994][ T6375] veth0_macvtap: entered promiscuous mode [ 97.233863][ T6375] veth1_macvtap: entered promiscuous mode [ 97.247542][ T6512] veth0_vlan: entered promiscuous mode [ 97.257187][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.268550][ T6512] veth1_vlan: entered promiscuous mode [ 97.277627][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.297931][ T6512] veth0_macvtap: entered promiscuous mode [ 97.310743][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 97.318918][ T6512] veth1_macvtap: entered promiscuous mode [ 97.344154][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.372039][ T173] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.387009][ T173] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.406843][ T6512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.443339][ T6866] Cannot find add_set index 0 as target [ 97.452064][ T5054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.465072][ T5054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.502537][ T173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.518621][ T173] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.544955][ T6866] : renamed from bond0 (while UP) [ 97.570741][ T6887] PM: suspend entry (deep) [ 97.592131][ T4715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.622213][ T4715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.697566][ T5054] Filesystems sync: 0.093 seconds [ 97.711807][ T6907] loop3: detected capacity change from 0 to 1024 [ 97.745666][ T6907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.760148][ T6887] Freezing user space processes [ 97.772745][ T6887] Freezing user space processes completed (elapsed 0.006 seconds) [ 97.780949][ T6887] OOM killer disabled. [ 97.785233][ T6887] Freezing remaining freezable tasks [ 97.792276][ T6887] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 97.800605][ T6887] printk: Suspending console(s) (use no_console_suspend to debug) [ 97.820170][ T6887] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 97.820237][ T6887] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 97.821007][ T6887] PM: Some devices failed to suspend, or early wake event detected [ 97.862203][ T6887] OOM killer enabled. [ 97.866350][ T6887] Restarting tasks: Starting [ 97.888090][ T6887] Restarting tasks: Done [ 97.912263][ T6887] random: crng reseeded on system resumption [ 97.932771][ T6887] PM: suspend exit [ 97.936247][ T6922] loop6: detected capacity change from 0 to 512 [ 97.948980][ T6921] loop1: detected capacity change from 0 to 512 [ 97.981069][ T6921] EXT4-fs: Ignoring removed i_version option [ 98.007438][ T6922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.048250][ T6921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.058866][ T6922] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.076352][ T6921] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.096097][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 98.117089][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 98.126400][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 98.248089][ T6512] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.262930][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.269096][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.302515][ T6956] netlink: 'syz.1.801': attribute type 1 has an invalid length. [ 98.332464][ T6959] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.362321][ T6959] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.398081][ T6966] 8021q: VLANs not supported on sit0 [ 98.401840][ T6967] loop3: detected capacity change from 0 to 256 [ 98.408125][ T6963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.805'. [ 98.419506][ T6967] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.442460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 98.459733][ T6967] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.573164][ T6989] loop1: detected capacity change from 0 to 512 [ 98.583805][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 98.591085][ T6989] EXT4-fs: Ignoring removed orlov option [ 98.597742][ T6989] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.629283][ T6989] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.808: corrupted in-inode xattr: e_value size too large [ 98.669066][ T6995] PM: suspend entry (deep) [ 98.721521][ T6989] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 98.721883][ T6989] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.808: couldn't read orphan inode 15 (err -117) [ 98.721938][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 98.754735][ C0] EXT4-fs (loop1): initial error at time 1786037759: ext4_iget_extra_inode:5180: inode 15 [ 98.765714][ C0] EXT4-fs (loop1): last error at time 1786037759: ext4_iget_extra_inode:5180: inode 15 [ 98.786400][ T6989] loop1: lost filesystem error report for type 5 error -117 [ 98.788693][ T6989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.828956][ T4735] Filesystems sync: 0.144 seconds [ 98.864933][ T6512] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.883204][ T6995] Freezing user space processes [ 98.894718][ T6995] Freezing user space processes completed (elapsed 0.003 seconds) [ 98.902876][ T6995] OOM killer disabled. [ 98.906961][ T6995] Freezing remaining freezable tasks [ 98.914238][ T6995] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 98.922724][ T6995] printk: Suspending console(s) (use no_console_suspend to debug) [ 98.942099][ T6995] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 98.942187][ T6995] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 98.943528][ T6995] PM: Some devices failed to suspend, or early wake event detected [ 98.985834][ T6995] OOM killer enabled. [ 98.989889][ T6995] Restarting tasks: Starting [ 98.998088][ T6995] Restarting tasks: Done [ 99.002612][ T6995] random: crng reseeded on system resumption [ 99.011566][ T7007] loop0: detected capacity change from 0 to 512 [ 99.019834][ T6995] PM: suspend exit [ 99.031486][ T7007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.086788][ T7007] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.143451][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 99.325940][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 99.360389][ T39] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.411166][ T4442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.541819][ T7060] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.564508][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 99.596834][ T7066] loop0: detected capacity change from 0 to 256 [ 99.607737][ T7066] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.648161][ T7066] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.924248][ T7100] PM: suspend entry (deep) [ 100.004392][ T173] Filesystems sync: 0.069 seconds [ 100.053912][ T7100] Freezing user space processes [ 100.118665][ T7024] Set syz1 is full, maxelem 65536 reached [ 101.422118][ T5203] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.422679][ T3668] Bluetooth: hci0: command 0x1003 tx timeout [ 101.437816][ T7100] Freezing user space processes completed (elapsed 1.371 seconds) [ 101.445759][ T7100] OOM killer disabled. [ 101.449914][ T7100] Freezing remaining freezable tasks [ 101.457310][ T7100] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 101.465785][ T7100] printk: Suspending console(s) (use no_console_suspend to debug) [ 101.487925][ T7100] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 101.488018][ T7100] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 101.513754][ T7100] PM: Some devices failed to suspend, or early wake event detected [ 101.586668][ T7100] OOM killer enabled. [ 101.590803][ T7100] Restarting tasks: Starting [ 101.614778][ T7100] Restarting tasks: Done [ 101.656761][ T7100] random: crng reseeded on system resumption [ 101.714669][ T7100] PM: suspend exit [ 101.718695][ T7195] bridge_slave_0: left allmulticast mode [ 101.749152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 101.762018][ T7195] bridge_slave_0: left promiscuous mode [ 101.781213][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.806307][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 101.806325][ T28] audit: type=1400 audit(1786037762.491:1419): avc: denied { sys_module } for pid=7194 comm="syz.0.831" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.824694][ T7205] loop1: detected capacity change from 0 to 512 [ 101.900180][ T7195] bridge_slave_1: left allmulticast mode [ 101.906568][ T7195] bridge_slave_1: left promiscuous mode [ 101.917567][ T28] audit: type=1400 audit(1786037762.541:1420): avc: denied { write } for pid=7187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.968958][ T7205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.981376][ T7108] loop3: detected capacity change from 0 to 128 [ 101.997128][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.011513][ T28] audit: type=1400 audit(1786037762.581:1421): avc: denied { write } for pid=7215 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.015059][ T7205] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.060884][ T7231] loop2: detected capacity change from 0 to 512 [ 102.076361][ T7231] ext2: Unknown parameter 'nouser_xattr' [ 102.123178][ T28] audit: type=1400 audit(1786037762.811:1422): avc: denied { write } for pid=7220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.165364][ T28] audit: type=1400 audit(1786037762.851:1423): avc: denied { write } for pid=7237 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.193440][ T7195] bond0: (slave bond_slave_0): Releasing backup interface [ 102.204452][ T6512] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.234151][ T7195] bond0: (slave bond_slave_1): Releasing backup interface [ 102.256245][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.273350][ T7195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.292511][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.310764][ T7195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.332991][ T7195] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.415281][ T28] audit: type=1400 audit(1786037763.091:1424): avc: denied { write } for pid=7241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.491049][ T28] audit: type=1400 audit(1786037763.151:1425): avc: denied { write } for pid=7260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.499487][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.841'. [ 102.593727][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 102.603117][ T28] audit: type=1400 audit(1786037763.281:1426): avc: denied { write } for pid=7272 comm="syz.1.843" name="instances" dev="tracefs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.643613][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 102.660419][ T28] audit: type=1400 audit(1786037763.291:1427): avc: denied { write } for pid=7267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.692694][ T7172] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.714546][ T7172] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.735159][ T28] audit: type=1400 audit(1786037763.371:1428): avc: denied { write } for pid=7272 comm="syz.1.843" name="instances" dev="tracefs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.792484][ T7142] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.816220][ T7142] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.272008][ T7316] loop0: detected capacity change from 0 to 4096 [ 103.297128][ T7316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.327605][ T7301] loop3: detected capacity change from 0 to 32768 [ 103.354893][ T7328] loop6: detected capacity change from 0 to 512 [ 103.363612][ T7328] EXT4-fs: Ignoring removed orlov option [ 103.370209][ T7328] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.386545][ T7328] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.854: corrupted in-inode xattr: e_value size too large [ 103.411038][ T7301] loop3: p1 p3 < > [ 103.417772][ T7328] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.419352][ T7328] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.854: couldn't read orphan inode 15 (err -117) [ 103.419868][ T4442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.429024][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 103.429045][ C0] EXT4-fs (loop6): initial error at time 1786037764: ext4_iget_extra_inode:5180: inode 15 [ 103.429070][ C0] EXT4-fs (loop6): last error at time 1786037764: ext4_iget_extra_inode:5180: inode 15 [ 103.430015][ T7328] loop6: lost filesystem error report for type 5 error -117 [ 103.490565][ T7328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.655474][ T7350] loop3: detected capacity change from 0 to 512 [ 103.678804][ T7350] EXT4-fs: Ignoring removed bh option [ 103.703957][ T7350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.728794][ T3709] udevd[3709]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 103.746138][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 103.775959][ T7350] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.848055][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.853340][ T7363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 103.884165][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.036926][ T7379] loop2: detected capacity change from 0 to 512 [ 104.066553][ T7379] EXT4-fs: Invalid want_extra_isize 4 [ 104.370793][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 104.424591][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 104.442147][ T7143] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.483769][ T7143] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.542236][ T7141] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.562083][ T7141] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.778543][ T7399] loop6: detected capacity change from 0 to 32768 [ 104.833784][ T7399] loop6: p1 p3 < > [ 105.065415][ T7460] loop6: detected capacity change from 0 to 512 [ 105.086245][ T7460] EXT4-fs: Ignoring removed orlov option [ 105.108813][ T3709] udevd[3709]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 105.109585][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 105.151635][ T7460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.202732][ T7460] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.273536][ T7460] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.880: corrupted xattr block 33: invalid ea_ino [ 105.290074][ T7413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.310420][ T7460] EXT4-fs (loop6): Remounting filesystem read-only [ 105.341660][ T7460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 105.399950][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.416432][ T7472] mmap: syz.0.882 (7472) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.963334][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.6.891'. [ 107.062383][ T7518] loop0: detected capacity change from 0 to 8192 [ 107.716149][ T7531] loop6: detected capacity change from 0 to 512 [ 107.754173][ T7531] ext2: Unknown parameter 'nouser_xattr' [ 107.977826][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 108.022653][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.903'. [ 108.058302][ T7540] loop6: detected capacity change from 0 to 1024 [ 108.097694][ T7540] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.119276][ T7540] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.134444][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 108.134458][ T28] audit: type=1400 audit(1786037768.821:1452): avc: denied { write } for pid=7539 comm="syz.6.904" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.178407][ T28] audit: type=1400 audit(1786037768.851:1453): avc: denied { write } for pid=7539 comm="syz.6.904" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 108.203628][ T7540] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.904: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.218656][ T7540] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 108.233178][ T7540] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.233178][ T7540] [ 108.253949][ T7540] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 1: comm syz.6.904: lblock 1 mapped to illegal pblock 1 (length 5) [ 108.289214][ T7540] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 108.309351][ T7540] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.309351][ T7540] [ 108.326843][ T7540] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.904: bg 0: block 112: padding at end of block bitmap is not set [ 108.343938][ T7540] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.904: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 108.415493][ T7173] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:79: lblock 8 mapped to illegal pblock 8 (length 8) [ 108.446346][ T7173] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 108.450365][ T28] audit: type=1400 audit(1786037769.131:1454): avc: denied { setopt } for pid=7565 comm="syz.3.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.470919][ T7173] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.470919][ T7173] [ 108.513090][ T4331] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 108.526150][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 108.566602][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 108.798223][ T7584] loop0: detected capacity change from 0 to 128 [ 108.848164][ T7576] loop3: detected capacity change from 0 to 512 [ 108.850484][ T7584] syz.0.924: attempt to access beyond end of device [ 108.850484][ T7584] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 108.859351][ T7576] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.897817][ T7584] syz.0.924: attempt to access beyond end of device [ 108.897817][ T7584] loop0: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 108.928962][ T7576] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 108.932153][ T7584] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 108.960748][ T7576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 108.971096][ T7576] System zones: 1-12 [ 108.977347][ T7576] EXT4-fs (loop3): orphan cleanup on readonly fs [ 108.988578][ T7576] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.920: bg 0: block 361: padding at end of block bitmap is not set [ 109.004090][ T7576] loop3: lost filesystem error report for type 5 error -117 [ 109.004933][ T7576] EXT4-fs (loop3): Remounting filesystem read-only [ 109.012582][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 109.012611][ C1] EXT4-fs (loop3): initial error at time 1786037769: ext4_validate_block_bitmap:441 [ 109.012699][ C1] EXT4-fs (loop3): last error at time 1786037769: ext4_validate_block_bitmap:441 [ 109.059459][ T7576] EXT4-fs (loop3): 1 truncate cleaned up [ 109.075379][ T7576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 109.162265][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 109.237722][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 109.535066][ T7599] loop0: detected capacity change from 0 to 764 [ 109.606145][ T7599] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 109.688689][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.930'. [ 109.848356][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 110.066126][ T7627] loop6: detected capacity change from 0 to 512 [ 110.088517][ T7627] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.941: corrupted in-inode xattr: e_value out of bounds [ 110.148789][ T7627] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.149095][ T7627] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.941: couldn't read orphan inode 15 (err -117) [ 110.158660][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 110.158689][ C1] EXT4-fs (loop6): initial error at time 1786037770: ext4_iget_extra_inode:5180: inode 15 [ 110.158748][ C1] EXT4-fs (loop6): last error at time 1786037770: ext4_iget_extra_inode:5180: inode 15 [ 110.252364][ T7627] loop6: lost filesystem error report for type 5 error -117 [ 110.256115][ T7627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.373611][ T28] audit: type=1400 audit(1786037771.051:1455): avc: denied { write } for pid=7626 comm="syz.6.941" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.465825][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.580832][ T7637] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 110.591595][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 110.621676][ T7642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.642336][ T7643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 110.658237][ T7642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.682734][ T7642] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 110.711792][ T7642] bond0 (unregistering): Released all slaves [ 110.803466][ T28] audit: type=1400 audit(1786037771.481:1456): avc: denied { bind } for pid=7650 comm="syz.3.947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.941463][ T7173] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.954319][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 111.975636][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 111.993445][ T7172] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.002791][ T7172] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.027810][ T7172] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.039989][ T7172] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.275102][ T7698] loop0: detected capacity change from 0 to 1764 [ 112.590433][ T7704] loop0: detected capacity change from 0 to 512 [ 112.619001][ T7704] ext2: Unknown parameter 'nouser_xattr' [ 112.720302][ T7711] ref_ctr increment failed for inode: 0x2f4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881048d3100 [ 112.941974][ T5203] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.942470][ T3668] Bluetooth: hci0: command 0x1003 tx timeout [ 112.997707][ T28] audit: type=1400 audit(1786037773.671:1457): avc: denied { write } for pid=7717 comm="syz.1.971" name="instances" dev="tracefs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 113.064289][ T28] audit: type=1400 audit(1786037773.751:1458): avc: denied { write } for pid=7717 comm="syz.1.971" name="instances" dev="tracefs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 113.325203][ T7738] syz.3.980 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 113.487788][ T7733] loop0: detected capacity change from 0 to 512 [ 113.518527][ T7733] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.549856][ T7733] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.602994][ T7733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 113.624763][ T7733] System zones: 1-12 [ 113.636085][ T7733] EXT4-fs (loop0): orphan cleanup on readonly fs [ 113.670682][ T7733] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.978: bg 0: block 361: padding at end of block bitmap is not set [ 113.711116][ T7733] loop0: lost filesystem error report for type 5 error -117 [ 113.711918][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 113.726163][ C0] EXT4-fs (loop0): initial error at time 1786037774: ext4_validate_block_bitmap:441 [ 113.735944][ C0] EXT4-fs (loop0): last error at time 1786037774: ext4_validate_block_bitmap:441 [ 113.794040][ T7733] EXT4-fs (loop0): Remounting filesystem read-only [ 113.815590][ T7733] EXT4-fs (loop0): 1 truncate cleaned up [ 113.846610][ T7733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 114.042845][ T4442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 114.191233][ T7143] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.295684][ T28] audit: type=1400 audit(1786037774.981:1459): avc: denied { write } for pid=7756 comm="syz.3.988" name="instances" dev="tracefs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 114.403451][ T28] audit: type=1400 audit(1786037775.091:1460): avc: denied { write } for pid=7756 comm="syz.3.988" name="instances" dev="tracefs" ino=2127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 114.553727][ T7740] loop6: detected capacity change from 0 to 4096 [ 114.630163][ T28] audit: type=1400 audit(1786037775.311:1461): avc: denied { write } for pid=7759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.648646][ T7765] loop3: detected capacity change from 0 to 512 [ 114.711792][ T28] audit: type=1400 audit(1786037775.391:1462): avc: denied { write } for pid=7775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.763055][ T7740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.796820][ T7765] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 114.837804][ T7765] EXT4-fs (loop3): 1 truncate cleaned up [ 114.856373][ T28] audit: type=1400 audit(1786037775.541:1463): avc: denied { write } for pid=7739 comm="syz.6.981" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.868748][ T7765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.926163][ T28] audit: type=1400 audit(1786037775.611:1464): avc: denied { write } for pid=7763 comm="syz.3.989" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.040282][ T28] audit: type=1400 audit(1786037775.721:1465): avc: denied { write } for pid=7779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.115016][ T28] audit: type=1400 audit(1786037775.781:1466): avc: denied { write } for pid=7794 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.182538][ T7797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.992'. [ 115.328678][ T28] audit: type=1400 audit(1786037776.011:1467): avc: denied { write } for pid=7799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.392013][ T28] audit: type=1400 audit(1786037776.061:1468): avc: denied { write } for pid=7814 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.420802][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.662138][ T7740] Set syz1 is full, maxelem 65536 reached [ 115.699448][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.222261][ T5203] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.333084][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.340554][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.458988][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.469365][ T7882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.532043][ T7143] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.541752][ T7143] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.573392][ T7142] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.583376][ T7142] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.604049][ T7142] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.632389][ T7142] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.658422][ T7142] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.702342][ T7142] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.766181][ T7909] syzkaller0: entered promiscuous mode [ 116.789726][ T7909] syzkaller0: entered allmulticast mode [ 117.105630][ T7918] loop6: detected capacity change from 0 to 512 [ 117.150547][ T7918] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 117.171744][ T7918] EXT4-fs (loop6): 1 truncate cleaned up [ 117.185053][ T7918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.236355][ T4331] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.572014][ T7985] netlink: 'syz.6.1007': attribute type 1 has an invalid length. [ 119.586516][ T7172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.649243][ T7985] bond2: entered promiscuous mode [ 119.660632][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1007'. [ 119.665284][ T7985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.677807][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1007'. [ 119.698575][ T7172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.726665][ T7985] bond2: (slave bridge0): making interface the new active one [ 119.734332][ T7985] bridge0: entered promiscuous mode [ 119.741223][ T7985] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 119.765489][ T7172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.814026][ T7172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.938055][ T7172] bridge_slave_1: left allmulticast mode [ 119.944283][ T7172] bridge_slave_1: left promiscuous mode [ 119.950288][ T7172] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.958728][ T7172] bridge_slave_0: left allmulticast mode [ 119.965611][ T7172] bridge_slave_0: left promiscuous mode [ 119.972282][ T7172] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.002908][ T7172] bond2 (unregistering): (slave geneve2): Releasing active interface [ 120.019930][ T7172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.030834][ T7172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.039992][ T7172] bond0 (unregistering): Released all slaves [ 120.048553][ T7172] bond1 (unregistering): (slave veth3): Releasing backup interface [ 120.057113][ T7172] bond1 (unregistering): Released all slaves [ 120.068497][ T7172] bond2 (unregistering): Released all slaves [ 120.080422][ T7172] bond3 (unregistering): Released all slaves [ 120.104934][ T7172] tipc: Left network mode [ 120.117656][ T7172] hsr_slave_0: left promiscuous mode [ 120.124212][ T7172] hsr_slave_1: left promiscuous mode [ 120.129918][ T7172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.138853][ T7172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.295228][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.304172][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.312385][ T7981] bridge_slave_0: entered allmulticast mode [ 120.321034][ T7981] bridge_slave_0: entered promiscuous mode [ 120.335298][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.342739][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.350330][ T7981] bridge_slave_1: entered allmulticast mode [ 120.383724][ T7981] bridge_slave_1: entered promiscuous mode [ 120.393306][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 120.393323][ T28] audit: type=1400 audit(1786037781.081:1492): avc: denied { write } for pid=8012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.436849][ T7172] IPVS: stop unused estimator thread 0... [ 120.450623][ T7981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.452030][ T28] audit: type=1400 audit(1786037781.131:1493): avc: denied { write } for pid=8026 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.501241][ T7981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.511781][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 120.537863][ T7981] team0: Port device team_slave_0 added [ 120.546992][ T7981] team0: Port device team_slave_1 added [ 120.582807][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.590658][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.618422][ T7981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.630539][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.647290][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.676114][ T7981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.734435][ T28] audit: type=1400 audit(1786037781.421:1494): avc: denied { write } for pid=8029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.735501][ T7981] hsr_slave_0: entered promiscuous mode [ 120.765238][ T7981] hsr_slave_1: entered promiscuous mode [ 120.771459][ T7981] debugfs: 'hsr0' already exists in 'hsr' [ 120.777262][ T7981] Cannot create hsr debugfs directory [ 120.780242][ T28] audit: type=1400 audit(1786037781.471:1495): avc: denied { write } for pid=8040 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.824546][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 120.929612][ T28] audit: type=1400 audit(1786037781.611:1496): avc: denied { write } for pid=8044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.954232][ T28] audit: type=1400 audit(1786037781.631:1497): avc: denied { write } for pid=8055 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.968903][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 121.051173][ T28] audit: type=1400 audit(1786037781.731:1498): avc: denied { write } for pid=8058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.075329][ T28] audit: type=1400 audit(1786037781.731:1499): avc: denied { write } for pid=8069 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.098373][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 121.156531][ T28] audit: type=1400 audit(1786037781.841:1500): avc: denied { write } for pid=8071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.179911][ T28] audit: type=1400 audit(1786037781.861:1501): avc: denied { write } for pid=8082 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.631324][ T7981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 121.640317][ T7981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.648315][ T7981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 121.657729][ T7981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.666168][ T7981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 121.677331][ T7981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.686134][ T7981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 121.696291][ T7981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 121.733685][ T7981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.746016][ T7981] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.756070][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.763245][ T7137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.775106][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.782313][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.894111][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.015805][ T7981] veth0_vlan: entered promiscuous mode [ 122.026714][ T7981] veth1_vlan: entered promiscuous mode [ 122.044171][ T7981] veth0_macvtap: entered promiscuous mode [ 122.052296][ T7981] veth1_macvtap: entered promiscuous mode [ 122.067898][ T7981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.080190][ T7981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.104286][ T7137] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.116150][ T7137] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.142079][ T7172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.151012][ T7172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.488726][ T8262] loop4: detected capacity change from 0 to 32768 [ 122.535612][ T8262] loop4: p1 p3 < > [ 122.652121][ T3709] udevd[3709]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 122.663599][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 122.867953][ T8301] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1015'. [ 122.889835][ T8303] loop3: detected capacity change from 0 to 1024 [ 122.896850][ T8301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.916387][ T8303] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 122.916387][ T8303] [ 123.489462][ T6096] IPVS: starting estimator thread 0... [ 123.592031][ T8361] IPVS: using max 2448 ests per chain, 122400 per kthread [ 124.249860][ T8449] program syz.0.1047 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.449415][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.458346][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.138330][ T8467] loop3: detected capacity change from 0 to 256 [ 125.215015][ T8467] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.308483][ T8471] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8200) [ 125.318942][ T8471] FAT-fs (loop3): Filesystem has been set read-only [ 125.388353][ T8467] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2057) [ 125.797132][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 125.797150][ T28] audit: type=1400 audit(1786037786.481:1530): avc: denied { write } for pid=8503 comm="syz.6.1068" name="functions" dev="configfs" ino=8854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 125.834995][ T28] audit: type=1400 audit(1786037786.521:1531): avc: denied { write } for pid=8503 comm="syz.6.1068" name="c_chmask" dev="configfs" ino=22093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 125.859769][ T28] audit: type=1400 audit(1786037786.521:1532): avc: denied { open } for pid=8503 comm="syz.6.1068" path="/155/config/usb_gadget/g1/functions/uac1.usb0/c_chmask" dev="configfs" ino=22093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 125.891585][ T28] audit: type=1400 audit(1786037786.551:1533): avc: denied { create } for pid=8505 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 125.990108][ T28] audit: type=1400 audit(1786037786.671:1534): avc: denied { shutdown } for pid=8507 comm="syz.6.1069" lport=54894 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 127.293377][ T28] audit: type=1326 audit(1786037787.971:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.4.1049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414febe0d9 code=0x7fc00000 [ 127.712092][ T8575] netlink: 'syz.4.1094': attribute type 20 has an invalid length. [ 127.725147][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 127.757061][ T8575] netlink: 'syz.4.1094': attribute type 20 has an invalid length. [ 127.772365][ T7136] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.775936][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 127.786034][ T7136] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.831800][ T7136] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.850962][ T8579] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 127.862027][ T7136] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.098265][ T28] audit: type=1400 audit(1786037788.781:1536): avc: denied { ioctl } for pid=8600 comm="syz.6.1103" path="socket:[23585]" dev="sockfs" ino=23585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.179559][ T28] audit: type=1400 audit(1786037788.811:1537): avc: denied { read } for pid=8600 comm="syz.6.1103" path="socket:[23585]" dev="sockfs" ino=23585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.230713][ T28] audit: type=1400 audit(1786037788.911:1538): avc: denied { write } for pid=8589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.280849][ T28] audit: type=1400 audit(1786037788.951:1539): avc: denied { write } for pid=8616 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.462781][ T8624] syzkaller0: entered promiscuous mode [ 128.490769][ T8624] syzkaller0: entered allmulticast mode [ 128.521392][ T8640] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 128.581375][ T8624] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.591078][ T8624] syzkaller0: Linktype set failed because interface is up [ 128.815068][ T7136] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 128.866155][ T7136] bridge0 (unregistering): left promiscuous mode [ 128.924854][ T7136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.948915][ T7136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.978389][ T7136] bond0 (unregistering): Released all slaves [ 128.986087][ T7136] bond1 (unregistering): Released all slaves [ 129.031796][ T7136] bond2 (unregistering): Released all slaves [ 129.097735][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 129.121974][ T7136] tipc: Left network mode [ 129.148595][ T7136] hsr_slave_0: left promiscuous mode [ 129.174050][ T7136] hsr_slave_1: left promiscuous mode [ 129.182993][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.205383][ T7136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.345148][ T8701] loop4: detected capacity change from 0 to 256 [ 129.451069][ T8705] ªªªªªª: renamed from vlan0 (while UP) [ 129.467458][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 129.771571][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 129.840151][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.855947][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.873446][ T8667] bridge_slave_0: entered allmulticast mode [ 129.880285][ T8667] bridge_slave_0: entered promiscuous mode [ 129.886445][ T8748] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1136'. [ 129.896435][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.904566][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.912092][ T8667] bridge_slave_1: entered allmulticast mode [ 129.918740][ T8667] bridge_slave_1: entered promiscuous mode [ 129.927485][ T8748] unsupported nlmsg_type 40 [ 129.938742][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.949551][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.952806][ T8734] loop3: detected capacity change from 0 to 512 [ 129.980300][ T8667] team0: Port device team_slave_0 added [ 129.991486][ T8667] team0: Port device team_slave_1 added [ 130.023680][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.034973][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.073393][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'. [ 130.079500][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.105928][ T8734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 130.119608][ T8734] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.276293][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 130.292281][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.309716][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.372021][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.417016][ T8767] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 130.432675][ T8667] hsr_slave_0: entered promiscuous mode [ 130.466294][ T8667] hsr_slave_1: entered promiscuous mode [ 130.483803][ T8767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.514416][ T8775] macsec1: entered promiscuous mode [ 130.532717][ T8767] bond2: (slave geneve3): making interface the new active one [ 130.542911][ T8767] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 130.616484][ T8793] xt_hashlimit: max too large, truncated to 1048576 [ 130.627427][ T8773] syzkaller0: entered promiscuous mode [ 130.633647][ T8793] xt_hashlimit: size too large, truncated to 1048576 [ 130.641705][ T8793] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 130.642103][ T8773] syzkaller0: entered allmulticast mode [ 130.673887][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 130.759432][ T8799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1149'. [ 131.045093][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 131.045111][ T28] audit: type=1400 audit(1786037791.731:1557): avc: denied { write } for pid=8812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.097033][ T8667] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 131.118608][ T8667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.127685][ T28] audit: type=1400 audit(1786037791.781:1558): avc: denied { write } for pid=8835 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.153515][ T8667] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 131.160754][ T28] audit: type=1400 audit(1786037791.791:1559): avc: denied { mount } for pid=8836 comm="syz.1.1159" name="/" dev="hugetlbfs" ino=24657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 131.187836][ T8667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.200266][ T8667] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 131.215442][ T8667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.223655][ T8667] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 131.238523][ T8667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.246974][ T28] audit: type=1400 audit(1786037791.921:1560): avc: denied { unmount } for pid=6512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 131.369354][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.377830][ T8856] loop0: detected capacity change from 0 to 2048 [ 131.405790][ T8856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.419838][ T8667] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.432525][ T28] audit: type=1400 audit(1786037792.091:1561): avc: denied { write } for pid=8855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.466121][ T7134] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.473629][ T7134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.487981][ T28] audit: type=1400 audit(1786037792.121:1562): avc: denied { write } for pid=8854 comm="syz.0.1163" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.510312][ T28] audit: type=1400 audit(1786037792.121:1563): avc: denied { write } for pid=8854 comm="syz.0.1163" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.535737][ T7134] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.542948][ T7134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.555428][ T28] audit: type=1400 audit(1786037792.171:1564): avc: denied { write } for pid=8871 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.698317][ T28] audit: type=1400 audit(1786037792.371:1565): avc: denied { write } for pid=8873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.749650][ T28] audit: type=1400 audit(1786037792.431:1566): avc: denied { write } for pid=8891 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.827363][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.870842][ T4442] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.871809][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1168'. [ 131.948946][ T8917] netlink: 'syz.1.1169': attribute type 1 has an invalid length. [ 131.996524][ T8917] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.1169'. [ 132.170710][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 132.219175][ T8667] veth0_vlan: entered promiscuous mode [ 132.251635][ T8667] veth1_vlan: entered promiscuous mode [ 132.306362][ T8667] veth0_macvtap: entered promiscuous mode [ 132.334995][ T8667] veth1_macvtap: entered promiscuous mode [ 132.374783][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.415854][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.462446][ T7138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.484177][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 132.494985][ T8983] loop4: detected capacity change from 0 to 512 [ 132.501359][ T7138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.526474][ T8983] EXT4-fs (loop4): 1 orphan inode deleted [ 132.550090][ T8983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.565072][ T7172] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.574309][ T7136] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:42: Failed to release dquot type 1 [ 132.596639][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1181'. [ 132.605830][ T7172] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.620275][ T7136] loop4: lost filesystem error report for type 5 error -117 [ 132.623105][ T8983] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.686544][ T8975] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 132.888180][ T9008] loop3: detected capacity change from 0 to 512 [ 132.920665][ T9008] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1184: inode has both inline data and extents flags [ 132.964178][ T9008] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 132.964422][ T9008] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1184: couldn't read orphan inode 15 (err -117) [ 132.973874][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 132.973893][ C1] EXT4-fs (loop3): initial error at time 1786037793: ext4_orphan_get:1399: inode 15 [ 132.973918][ C1] EXT4-fs (loop3): last error at time 1786037793: ext4_orphan_get:1399: inode 15 [ 133.039415][ T9008] loop3: lost filesystem error report for type 5 error -117 [ 133.046153][ T9008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.074366][ T9008] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 133.163350][ T9026] netlink: 'syz.0.1187': attribute type 6 has an invalid length. [ 133.224600][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.277476][ T9033] netlink: 'syz.0.1198': attribute type 4 has an invalid length. [ 133.423292][ T9046] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 133.633065][ T9065] TC_ACT_REPEAT abuse ? [ 133.650271][ T7981] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.700836][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 133.710385][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 133.921580][ T9102] bond1: entered promiscuous mode [ 133.927207][ T9102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.978959][ T9102] bridge1: entered promiscuous mode [ 133.988269][ T9102] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 134.574816][ T9169] netlink: 'syz.3.1213': attribute type 13 has an invalid length. [ 134.874980][ T9185] loop3: detected capacity change from 0 to 512 [ 134.972808][ T9185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1215: bg 0: block 393: padding at end of block bitmap is not set [ 135.021159][ T9185] loop3: lost filesystem error report for type 5 error -117 [ 135.021999][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 135.037461][ C0] EXT4-fs (loop3): initial error at time 1786037795: ext4_validate_block_bitmap:441 [ 135.047329][ C0] EXT4-fs (loop3): last error at time 1786037795: ext4_validate_block_bitmap:441 [ 135.080091][ T9185] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 135.121056][ T9185] loop3: lost filesystem error report for type 5 error -117 [ 135.127333][ T9185] EXT4-fs (loop3): 2 truncates cleaned up [ 135.168949][ T9185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.291662][ T9237] __nla_validate_parse: 6 callbacks suppressed [ 135.291684][ T9237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1225'. [ 135.480307][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.784766][ T9318] loop7: detected capacity change from 0 to 128 [ 136.825346][ T9318] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.887553][ T9318] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.010811][ T8667] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.014406][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 137.014420][ T28] audit: type=1400 audit(1786037797.691:1606): avc: denied { remount } for pid=9326 comm="syz.1.1252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.426867][ T28] audit: type=1400 audit(1786037798.021:1607): avc: denied { append } for pid=9337 comm="syz.7.1255" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.485109][ T28] audit: type=1400 audit(1786037798.061:1608): avc: denied { create } for pid=9337 comm="syz.7.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 138.317273][ T9347] loop7: detected capacity change from 0 to 512 [ 138.372031][ T9322] loop3: detected capacity change from 0 to 4096 [ 138.471543][ T9347] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1257: bg 0: block 393: padding at end of block bitmap is not set [ 138.476491][ T9322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.540021][ T9347] loop7: lost filesystem error report for type 5 error -117 [ 138.541599][ T9347] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 138.549229][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 138.549270][ C0] EXT4-fs (loop7): initial error at time 1786037799: ext4_validate_block_bitmap:441 [ 138.549500][ C0] EXT4-fs (loop7): last error at time 1786037799: ext4_validate_block_bitmap:441 [ 138.603465][ T9347] loop7: lost filesystem error report for type 5 error -117 [ 138.606258][ T9347] EXT4-fs (loop7): 2 truncates cleaned up [ 138.624692][ T28] audit: type=1400 audit(1786037799.281:1609): avc: denied { write } for pid=9321 comm="syz.3.1250" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.649269][ T9347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.680850][ T9359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 138.682320][ T28] audit: type=1400 audit(1786037799.351:1610): avc: denied { create } for pid=9358 comm="syz.1.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 138.763112][ T8667] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.779052][ T28] audit: type=1400 audit(1786037799.361:1611): avc: denied { write } for pid=9358 comm="syz.1.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 138.884760][ T28] audit: type=1400 audit(1786037799.411:1612): avc: denied { write } for pid=9346 comm="syz.7.1257" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.940496][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 138.958696][ T9368] loop7: detected capacity change from 0 to 512 [ 138.974577][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 138.990170][ T9368] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1262: corrupted in-inode xattr: e_value out of bounds [ 139.009066][ T9368] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.009584][ T9368] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1262: couldn't read orphan inode 15 (err -117) [ 139.018882][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 139.018907][ C1] EXT4-fs (loop7): initial error at time 1786037799: ext4_iget_extra_inode:5180: inode 15 [ 139.018956][ C1] EXT4-fs (loop7): last error at time 1786037799: ext4_iget_extra_inode:5180: inode 15 [ 139.056983][ T9368] loop7: lost filesystem error report for type 5 error -117 [ 139.057734][ T9368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.088438][ T28] audit: type=1400 audit(1786037799.771:1613): avc: denied { write } for pid=9365 comm="syz.7.1262" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.139811][ T8667] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.240156][ T28] audit: type=1400 audit(1786037799.921:1614): avc: denied { firmware_load } for pid=9376 comm="syz.7.1267" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 139.355992][ T9357] Set syz1 is full, maxelem 65536 reached [ 139.570952][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.663091][ T9390] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 139.732932][ T9394] loop3: detected capacity change from 0 to 512 [ 139.780187][ T9394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.807911][ T9386] loop7: detected capacity change from 0 to 512 [ 139.829582][ T9394] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.866997][ T9386] EXT4-fs (loop7): 1 truncate cleaned up [ 139.871100][ T28] audit: type=1400 audit(1786037800.551:1615): avc: denied { write } for pid=9393 comm="syz.3.1276" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.891297][ T9386] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.105794][ T9403] loop4: detected capacity change from 0 to 256 [ 140.126070][ T6375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.247031][ T9418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1279'. [ 140.428278][ T8667] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.475665][ T9436] loop7: detected capacity change from 0 to 128 [ 140.683560][ T9405] ================================================================== [ 140.691688][ T9405] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 140.698728][ T9405] [ 140.701137][ T9405] read-write to 0xffff88810cba2124 of 4 bytes by task 9404 on cpu 1: [ 140.709198][ T9405] fifo_open+0x179/0x5b0 [ 140.713899][ T9405] do_dentry_open+0x49f/0xa60 [ 140.718606][ T9405] vfs_open+0x37/0x1e0 [ 140.722698][ T9405] path_openat+0x1b39/0x2000 [ 140.727319][ T9405] do_file_open+0x16c/0x290 [ 140.731970][ T9405] do_sys_openat2+0xa0/0x130 [ 140.737033][ T9405] __x64_sys_open+0xe6/0x110 [ 140.741824][ T9405] x64_sys_call+0x14b9/0x3020 [ 140.746702][ T9405] do_syscall_64+0x136/0x3c0 [ 140.751316][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.757244][ T9405] [ 140.759581][ T9405] read to 0xffff88810cba2124 of 4 bytes by task 9405 on cpu 0: [ 140.767243][ T9405] wait_for_partner+0x109/0x1d0 [ 140.772129][ T9405] fifo_open+0x443/0x5b0 [ 140.776393][ T9405] do_dentry_open+0x49f/0xa60 [ 140.781137][ T9405] vfs_open+0x37/0x1e0 [ 140.785256][ T9405] path_openat+0x1b39/0x2000 [ 140.790300][ T9405] do_file_open+0x16c/0x290 [ 140.794824][ T9405] do_sys_openat2+0xa0/0x130 [ 140.799479][ T9405] __x64_sys_open+0xe6/0x110 [ 140.804100][ T9405] x64_sys_call+0x14b9/0x3020 [ 140.808989][ T9405] do_syscall_64+0x136/0x3c0 [ 140.813717][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.819664][ T9405] [ 140.821994][ T9405] value changed: 0x00000002 -> 0x00000001 [ 140.827709][ T9405] [ 140.830027][ T9405] Reported by Kernel Concurrency Sanitizer on: [ 140.836214][ T9405] CPU: 0 UID: 0 PID: 9405 Comm: syz.1.1278 Not tainted syzkaller #0 PREEMPT(lazy) [ 140.845515][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.855666][ T9405] ================================================================== [ 142.506077][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 142.506093][ T28] audit: type=1400 audit(1786037803.191:1679): avc: denied { write } for pid=9466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.536709][ T28] audit: type=1400 audit(1786037803.211:1680): avc: denied { write } for pid=9477 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.783550][ T28] audit: type=1400 audit(1786037808.471:1681): avc: denied { write } for pid=9480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.807077][ T28] audit: type=1400 audit(1786037808.471:1682): avc: denied { write } for pid=9491 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1