last executing test programs: 10m59.245656864s ago: executing program 32 (id=1815): socket(0x18, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') lseek(r0, 0x401, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x802) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000800900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f2c00128028000180090001006c617374000000001800028008000140ffffff430c000240fffffffffffffffb08000340000001"], 0xb8}}, 0x20050800) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000140)={'nr0\x00', {0x2, 0x0, @private}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0xc, 0xe}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0), 0x0, 0x400, &(0x7f0000000540)={0xc9, 0x15, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0x8, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r6, 0x81) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000200)=0x11) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 10m2.006978792s ago: executing program 33 (id=1922): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uac1.usb0/c_srate\x00', 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x300000001) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x4, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x2, 0x800, &(0x7f0000003640)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nodioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './file1/file0'}}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) execve(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x8000000000b, &(0x7f0000102000/0x4000)=nil, 0x3) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004802c0001800b000100736f636b657400001c000280080002400000000c08000140000000030800030000000038100001800900010068617368000000001400000011000100"/186], 0xbc}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x11, 0x148, 0x130, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x4, 0x0, 0x4, 0x7}}}, @common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 9m8.667148149s ago: executing program 34 (id=2085): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r0, 0x0, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x7ff, 0xfffffffe, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000700000000000c0000000c00000004000000020000000000000f0400000000005f00ef5841509566df3282de19d8e69599bd7ef01371a1d879aef9c11eb6273e14127d095be2b619120a0f57e61f3036e63f620def3f7ed8d6284a8d5c6a49ce0316ef9b3e581a3eff1e8086936e7bff92ccbcf719b835918baee73f72faa2dfb80b0e79922db54ae1b31ec2dc3f34fd3af1c2ec9ec1a0d99b6befff4ba9a4ae5cae11a923377d6e8462c8eebe9763c8fb6df1fad0ec3e0ce42f260bda61b293abaf8e7a355818d0081044e5c29047824da0bb4a8bc97effa97d8ae769"], 0x0, 0x28, 0x0, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100001d00"/20], 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40b02, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd70000000000002"], 0x38}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x200000000622c, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000001300)=0xffff0002) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(r8, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x4004810) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x3, 0x6, 0x6, 0x3f8, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chroot(0x0) 7m3.73196244s ago: executing program 35 (id=2426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000100000000000000120000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)={'c', ' *:* ', 'rm\x00'}, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) socket$kcm(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r1, 0x917, 0x0, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x100002}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback={0xffffffffffffffe4}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) 1m30.491425826s ago: executing program 36 (id=5463): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x17e) lseek(r3, 0xfffffffffffffffe, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r5, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x9}}, 0x20) semctl$GETALL(0x0, 0x0, 0xd, 0x0) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}]}, 0x24}}, 0x24004094) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r8, 0x2) open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) 1m3.631696012s ago: executing program 9 (id=5968): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x9, 0x2}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200001f, &(0x7f00000011c0)={[{@barrier_val={'barrier', 0x3d, 0xad}}, {@errors_remount}, {@journal_dev}, {@noinit_itable}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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") 1m3.237488222s ago: executing program 9 (id=5977): r0 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xed, &(0x7f00000001c0)=ANY=[], 0x0) 1m2.45982044s ago: executing program 9 (id=5983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000008e8aaaaaaaaaaaaaaaaaaaaaaaa88a80c0086dd"], 0x2e) 1m2.305879944s ago: executing program 9 (id=5990): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a8f480, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x82, 0x10}, 0x18) 1m2.240674465s ago: executing program 9 (id=5992): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast1, 0x4e21, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0x20, 0x5c}, {0x8, 0x5, 0x1, 0x1, 0x7, 0x6, 0x2, 0x7fffffffffffffff}, {0x70, 0x6, 0xf432, 0x9}, 0x7, 0x6e6bb9, 0x1, 0x1, 0x3}, {{@in6=@private1, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x2, 0x2, 0x76, 0x0, 0x4, 0x9}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000050c0)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x5, @remote}, 0x1c, 0x0}}], 0x4a3, 0x4000000) close(0x4) 1m1.993451211s ago: executing program 9 (id=5999): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 1m1.958203262s ago: executing program 37 (id=5999): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 54.686985265s ago: executing program 1 (id=6113): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x4001004) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 54.622571256s ago: executing program 1 (id=6115): ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, @hci={0x1f, 0x3, 0x2}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x4008000}, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x4, 0x1}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000008}) 54.512665428s ago: executing program 1 (id=6118): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r2, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 54.257850365s ago: executing program 1 (id=6121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) 54.0156041s ago: executing program 1 (id=6126): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) 53.971363291s ago: executing program 1 (id=6128): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf4}], 0x1, 0x2000, 0x0, 0x3) lseek(r0, 0x595e, 0x3) 43.597649107s ago: executing program 5 (id=6258): setgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='fdinfo\x00') 43.507645969s ago: executing program 5 (id=6260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) listns(&(0x7f0000000080)={0x20, 0x0, 0x1, 0x4000000, 0x0, 0x1}, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0) ptrace$setregset(0x4205, r2, 0x202, &(0x7f00000002c0)={&(0x7f0000000280)="7e839f6ece6a7c7df4c245a2e9e97de0c852111101937f3fe6e3c96f", 0x1c}) perf_event_open(0x0, r1, 0x3, 0xffffffffffffffff, 0x9) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(r4, &(0x7f00000000c0)=@unspec, 0xc) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) preadv(r3, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000980)=""/222, 0xde}], 0x3, 0x9f2, 0x2ba) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x98}}, 0x0) 43.321874403s ago: executing program 5 (id=6262): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000001a00)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.113048669s ago: executing program 5 (id=6265): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c9) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 42.971458222s ago: executing program 5 (id=6267): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000ec0)={@multicast, @local, @void, {@x25={0x805, {0x1, 0x0, 0xf3}}}}, 0x0) 42.719595928s ago: executing program 5 (id=6270): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x0, 0x5, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1ab13) 42.719467748s ago: executing program 38 (id=6270): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x0, 0x5, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x1ab13) 38.922510598s ago: executing program 39 (id=6128): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf4}], 0x1, 0x2000, 0x0, 0x3) lseek(r0, 0x595e, 0x3) 22.983208925s ago: executing program 4 (id=6424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) close(0x3) 22.766119071s ago: executing program 4 (id=6429): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x4004814) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 22.238063743s ago: executing program 4 (id=6432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0x8, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0x8b4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x8, 0xa, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x4005, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x8, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x104, 0xc57, 0x5, 0x2, 0x5, 0x8000008, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x8, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 21.53420731s ago: executing program 4 (id=6436): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 21.434991482s ago: executing program 4 (id=6438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x4, 0x8, 0x3, 0x7fffffff}, {0x6, 0x0, 0x1, 0xffff, 0x1, 0x3}, 0x800, 0x3, 0x12c8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x8d607941abeaa41e}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc008045}, 0x0) 21.144631729s ago: executing program 4 (id=6444): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fallocate(r3, 0x0, 0x0, 0x8) sendfile(r2, r3, 0x0, 0x40) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/247, 0xf7}], 0x1, 0xa, 0x7400) 21.11618456s ago: executing program 40 (id=6444): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = dup(r1) r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) fallocate(r3, 0x0, 0x0, 0x8) sendfile(r2, r3, 0x0, 0x40) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/247, 0xf7}], 0x1, 0xa, 0x7400) 13.841604712s ago: executing program 8 (id=6520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x241}], 0x1}}], 0x1, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 13.791220434s ago: executing program 8 (id=6522): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 13.698352756s ago: executing program 8 (id=6524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 13.592975528s ago: executing program 8 (id=6527): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000380)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@user_xattr}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$eJzs3d9rW1UcAPDvTdP91nUwBopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4h/gu4/Df8C/YqCDIaPogy+Vm96s3Zr0R5o1mfl84Gbn3Huyc78595ydm3NHAhhYo9lLIeKViPg2iTi67lgx8oOjq+WWH9+cyrYkVlY++yuJJN/XLJ/kfx5uZooRv30dcbrwVJUj2UttcWm2XKmk8/nOsfrctbHa4tKZK3PlmXQmvToxOXnuncmJ9997t2uxvnnxnx8+vf/RuW9OLn//y8Njd5M4H0fyY+vj2IVb6zOjMZp/JsNx/pmC412orJ8kvT4BOjKU9/PhyMaAozGU93rg/++riFgBBlSi/8OAas4Dmvf2XboPfmE8+nD1Bmhj/MXV70biQOPe6NBy8tSdUdL8ImOXsjp+/fPe3WyL7n0PAbClW7cj4myxuHH8S/Lxr3Nnt1Hm2TqMf7B37mfzn7dazX8KT+Y/0WL+c7hF3+3E1v2/8LAL1bSVzf8+aDn/zRetRmJkKM+91MgOJ5evVNJsbHs5Ik7F8P4sv9l6zrnlByvtjq2f/2VbVn9zLpifx8Pi/qffM12ul3cX9ZpHtyNebTn/TZ60f9Ki/bPP4+I26ziR3nu93bGt43++Vn6OeKNl+6+taCWbr0+ONa6HseZVsdHfd0783q7+Xseftf+hzeMfSdav19Z2XsdPB/5N2x3r9Prfl3zeSO/L990o1+vz4xH7kk827p9Ye28z3yyfxX/q5ObjX6vr/2BEfLHN+O8cv9O26K7avwuLrln80ztq/50nHnz85Y+dx5+1/9uN1Kl8z3bGv+2e4G4+OwAAAAAAAOg3hYg4Ekmh9CRdKJRKq893HI9DhUq1Vj99eahR9sjq8w+F5kr30XXPQ4znz8M28xPP5Ccj4lhEfDd0sJEvTVUr070OHgAAAAAAAAAAAAAAAAAAAPrE4Tb//z/zx1Cvzw547vzkNwyuLft/N37pCehL/v2HwaX/w+DS/2Fw6f8wuPR/GFz6Pwwu/R8Gl/4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXxwoVsW1l+fHMqy09fX1yYrV4/M53WZktzC1Olqer8tdJMtTpTSUtT1bmt/r5KtXptfCIWbozV01p9rLa4dGmuunC1funKXHkmvZQO70lUAAAAAAAAAAAAAAAAAAAA8GKpLS7NliuVdH5nidc6epfEJokDnbZFjxPFPagriX6IdNuJiLjVB6exu0SvRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWPNfAAAA///mLTPX") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x4, 0x9}}, 0xa) 13.200109147s ago: executing program 8 (id=6534): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@abort}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 13.033924432s ago: executing program 8 (id=6536): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x830d}, 0x180, 0x2, 0xfffffffe, 0x7, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xe8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.001601962s ago: executing program 41 (id=6536): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x830d}, 0x180, 0x2, 0xfffffffe, 0x7, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xe8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.968194452s ago: executing program 7 (id=6622): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x2, 0x1a2, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0xc, "f465d8", 0x0, 0xe}) 3.977230796s ago: executing program 6 (id=6639): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 3.865028489s ago: executing program 2 (id=6643): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78d, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff"]) 3.675712853s ago: executing program 3 (id=6645): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 3.643788334s ago: executing program 2 (id=6647): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef", 0xdd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e1", 0xb}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.602893855s ago: executing program 3 (id=6649): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getuid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x8, 0x4) 3.441864089s ago: executing program 3 (id=6650): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="ee", 0x1, 0x4091, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="0b99d3a9ba97e8463da11946dcbeca5123942dd5da7eb1e555658ebcd55ffc01dfe6364b504fbf365823bd7f381ce9d875f279ea8ea594a47d98cfd4bfe451d386c9768dcb61e7ce4b6b3a248c81b435242bcf28cc37dd6317157af49bf8b01421982d73e80105ebe749d69b8fc2e822d009dc9d7c58e8fac6b40500000000000000000000000000000096f33d19c89dc62a67f944c1460dd06e5d770b25edaa24a28a4da4e41322768a9671ac5a42b5dc317879db287720c3f540ac0fe0f270bc76bbe7b1b776debbd73cdfbfd44b05c38d784fe5f464b9", 0xd8, 0x4000010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8) 3.053739218s ago: executing program 6 (id=6651): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) 3.053513118s ago: executing program 0 (id=6652): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$tun(r0, &(0x7f0000000a80)={@void, @val={0x2, 0x3, 0x1, 0xe2b, 0x4, 0x7}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x7, 0x0, 0x6, 0x1, 0x0, @rand_addr=0x64010102, @remote}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xc, 0xec, {0x5, 0x4, 0x2, 0x0, 0xffff, 0x64, 0x2, 0x4, 0xc, 0x2, @multicast2, @multicast2}}}}, 0x3a) 2.780943664s ago: executing program 2 (id=6653): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='isp1760\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/isp1760/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7) close(r1) 2.717159786s ago: executing program 2 (id=6654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) listns(0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0) ptrace$setregset(0x4205, r4, 0x202, &(0x7f00000002c0)={&(0x7f0000000280)="7e839f6ece6a7c7df4c245a2e9e97de0c852111101937f3fe6e3c96f", 0x1c}) perf_event_open(0x0, r1, 0x3, 0xffffffffffffffff, 0x9) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$netlink(r6, &(0x7f00000000c0)=@unspec, 0xc) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000980)=""/222, 0xde}], 0x3, 0x9f2, 0x2ba) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r3], 0x98}}, 0x0) 2.716720546s ago: executing program 6 (id=6655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.663317757s ago: executing program 0 (id=6656): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) close_range(r1, 0xffffffffffffffff, 0x0) 2.591817019s ago: executing program 0 (id=6657): ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@auto_da_alloc}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@resuid}, {@nodelalloc}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x35, 0x0, "2050436d555ef4eda9c2b435803e10e415b623c048c0bd181a4d0484d76e8b55d853a4a885537319bb379fdbe519aeabaeb3d7321d03fc793ae7ac69c6e5f2c256c565caf6e3e053f5db10b4287061d5"}, 0xd8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2.591580859s ago: executing program 0 (id=6658): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x80000000b, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x41}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2.582266489s ago: executing program 6 (id=6659): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 2.096715031s ago: executing program 7 (id=6660): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f0000000400)='\\[', 0x2, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 2.09647672s ago: executing program 3 (id=6661): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x6, 0x86, 0x0, 0x2, @tick, {0x9, 0xfa}, {0x5, 0x8}, @time=@time={0xc3}}, {0xed, 0x8, 0x4, 0x7f, @tick=0x1, {0x6, 0x3}, {0x3, 0x3}, @queue={0x8, {0x3, 0x3}}}], 0x38) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x2, 0xffffffff, 0x1, 0x22}, 0x4105}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.70418293s ago: executing program 7 (id=6662): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 1.615425172s ago: executing program 3 (id=6663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.614884402s ago: executing program 7 (id=6664): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.592284392s ago: executing program 7 (id=6665): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13100}, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 1.586205833s ago: executing program 6 (id=6666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=ANY=[@ANYBLOB="18020000020000000000000000000000850000005300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 811.826571ms ago: executing program 2 (id=6667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x8010}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 811.562601ms ago: executing program 0 (id=6668): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r2, 0x73, &(0x7f00000002c0)}, 0x10) 811.354081ms ago: executing program 7 (id=6669): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 591.461287ms ago: executing program 3 (id=6670): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)={0x1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x2, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x38, 0x30, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000)="f387bca3f1fb5c316afef776f2adb95d52067824b9d8aafe2d18b0cf640eb753bb07c5460e064b31c9ceb0efdbc87434171c964281039e757807c1527b02117e", &(0x7f00000002c0)="f44bb4d01cf4a2643ad0771d453b575e51f6f489e84168423dc19fd70cfd19988cfcd6dbfe7ba8660de3fa4dc2a5a9c5a5499e6334196b14d353b7972bc39f79a1c570a4f14c7597c398f4234aaf2db448d60071f5ed0a64a9cf", 0x5, 0x0, 0xfffffffe}, 0x2a) 545.698307ms ago: executing program 6 (id=6671): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000600fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8810) 479.720829ms ago: executing program 0 (id=6672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x9}}, 0x30) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) syz_emit_ethernet(0xfcbb, &(0x7f00000002c0)=ANY=[], 0x0) 0s ago: executing program 2 (id=6673): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): atch_reads } for pid=24976 comm="syz.8.5580" path="/598/file0" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1274.602008][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.613532][ T28] audit: type=1400 audit(1785053693.257:3209): avc: denied { write } for pid=24976 comm="syz.8.5580" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1274.812850][T24996] loop8: detected capacity change from 0 to 512 [ 1274.857176][T24996] EXT4-fs (loop8): 1 orphan inode deleted [ 1274.866890][T24996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1274.879997][ T49] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1274.903117][ T49] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1 [ 1274.937695][T24996] ext4 filesystem being mounted at /602/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.975172][ T28] audit: type=1400 audit(1785053693.707:3210): avc: denied { write } for pid=24994 comm="syz.8.5586" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1274.998503][ T28] audit: type=1400 audit(1785053693.737:3211): avc: denied { write } for pid=24994 comm="syz.8.5586" name="bus" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1275.051761][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.060617][ T28] audit: type=1400 audit(1785053693.737:3212): avc: denied { add_name } for pid=24994 comm="syz.8.5586" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1275.118181][T25012] loop5: detected capacity change from 0 to 512 [ 1275.123570][T25010] loop9: detected capacity change from 0 to 2048 [ 1275.133502][T25012] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1275.184082][T25012] EXT4-fs (loop5): 1 truncate cleaned up [ 1275.201732][T25010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.221471][T25012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.258408][T25024] loop8: detected capacity change from 0 to 512 [ 1275.308618][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.308667][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.353158][T25024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.384986][T25024] ext4 filesystem being mounted at /605/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1275.438133][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.486460][T25044] loop8: detected capacity change from 0 to 1024 [ 1275.504181][T25044] EXT4-fs: Ignoring removed bh option [ 1275.546751][T25044] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.567667][T25044] EXT4-fs (loop8): shut down requested (1) [ 1275.582316][T25044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=16 [ 1275.600377][T25044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=16 [ 1275.624549][T25044] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=16 [ 1275.699248][T25048] loop5: detected capacity change from 0 to 512 [ 1275.749973][T25048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1275.773857][T25048] ext4 filesystem being mounted at /728/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1275.806499][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.867142][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1275.939320][T25062] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 1276.001291][T25071] loop5: detected capacity change from 0 to 1024 [ 1276.009985][T25071] EXT4-fs: inline encryption not supported [ 1276.016271][T25071] EXT4-fs: Ignoring removed bh option [ 1276.033143][T25071] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1276.052904][T25071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1276.142604][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.321134][T25112] veth1_to_batadv: entered allmulticast mode [ 1276.410197][T25117] bond2: (slave veth1_to_bridge): Device is not bonding slave [ 1276.417788][T25117] bond2: option active_slave: invalid value (veth1_to_bridge) [ 1276.426424][T25117] bond2 (unregistering): Released all slaves [ 1276.514238][T25127] IPv6: NLM_F_CREATE should be specified when creating new route [ 1276.734672][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5646'. [ 1276.745287][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5644'. [ 1277.138254][T25166] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1277.150143][T25166] syzkaller0: linktype set to 804 [ 1277.330100][T25185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1277.356836][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 1277.356854][ T28] audit: type=1400 audit(1785053696.087:3237): avc: denied { write } for pid=25183 comm="syz.9.5667" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1277.446905][ T7786] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1277.472579][ T28] audit: type=1400 audit(1785053696.207:3238): avc: denied { bind } for pid=25198 comm="syz.3.5674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1277.491550][ T7786] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 1277.504291][ T7786] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1277.504291][ T7786] [ 1277.513972][ T7786] EXT4-fs (loop9): Total free blocks count 0 [ 1277.520006][ T7786] EXT4-fs (loop9): Free/Dirty block details [ 1277.525975][ T7786] EXT4-fs (loop9): free_blocks=2415919504 [ 1277.531771][ T7786] EXT4-fs (loop9): dirty_blocks=160 [ 1277.536999][ T7786] EXT4-fs (loop9): Block reservation details [ 1277.543072][ T7786] EXT4-fs (loop9): i_reserved_data_blocks=10 [ 1277.549905][T25194] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5672'. [ 1277.576966][T24602] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1277.621881][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.855905][T25223] set_capacity_and_notify: 4 callbacks suppressed [ 1277.855943][T25223] loop9: detected capacity change from 0 to 512 [ 1277.914194][T25223] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 1277.927184][T25223] System zones: 0-2, 18-18, 34-35 [ 1277.943095][T25223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.956793][T25223] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1278.016093][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.065597][ T28] audit: type=1400 audit(1785053696.797:3239): avc: denied { listen } for pid=25247 comm="syz.8.5695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1278.194280][T25263] 9p: Bad value for 'rfdno' [ 1278.285950][T25281] loop8: detected capacity change from 0 to 512 [ 1278.290669][T25280] loop9: detected capacity change from 0 to 512 [ 1278.308707][T25280] EXT4-fs (loop9): 1 truncate cleaned up [ 1278.330913][T25280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.356795][T25280] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5710: bg 0: block 465: padding at end of block bitmap is not set [ 1278.373006][ T28] audit: type=1400 audit(1785053697.087:3240): avc: denied { write } for pid=25278 comm="syz.9.5710" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1278.416330][T25280] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1278.427877][T25280] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.5710: invalid indirect mapped block 234881024 (level 0) [ 1278.522908][T25300] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1278.529139][ T28] audit: type=1400 audit(1785053697.257:3241): avc: denied { create } for pid=25299 comm="syz.5.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1278.534583][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.573846][ T28] audit: type=1400 audit(1785053697.307:3242): avc: denied { write } for pid=25299 comm="syz.5.5717" path="socket:[70035]" dev="sockfs" ino=70035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1278.730282][T25311] loop8: detected capacity change from 0 to 512 [ 1278.782870][T25311] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.5722: inode has both inline data and extents flags [ 1278.791384][T25314] loop9: detected capacity change from 0 to 1024 [ 1278.796724][T25311] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1278.808569][T25311] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.5722: couldn't read orphan inode 15 (err -117) [ 1278.817857][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1278.817878][ C1] EXT4-fs (loop8): initial error at time 1785053697: ext4_orphan_get:1399: inode 15 [ 1278.817920][ C1] EXT4-fs (loop8): last error at time 1785053697: ext4_orphan_get:1399: inode 15 [ 1278.819027][T25314] EXT4-fs: Ignoring removed bh option [ 1278.852951][T25311] loop8: lost filesystem error report for type 5 error -117 [ 1278.871128][T25311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.943142][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.953096][T25314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.999052][T25320] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1279.089777][ T28] audit: type=1326 audit(1785053697.787:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25321 comm="syz.8.5725" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22da70de99 code=0x0 [ 1279.161671][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.939208][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5736'. [ 1279.967544][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5736'. [ 1280.082490][T25352] loop8: detected capacity change from 0 to 128 [ 1280.154678][T25352] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1280.196322][T25352] ext4 filesystem being mounted at /642/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.233858][ T28] audit: type=1400 audit(1785053698.967:3244): avc: denied { write } for pid=25351 comm="syz.8.5739" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1280.305046][T16262] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1280.465686][T25362] loop9: detected capacity change from 0 to 4096 [ 1280.489304][T25362] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1280.533695][T25362] EXT4-fs (loop9): shut down requested (1) [ 1280.580137][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.835622][T25372] loop9: detected capacity change from 0 to 1024 [ 1280.864088][T25372] EXT4-fs: Ignoring removed bh option [ 1280.887977][T25372] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1281.060206][T25384] SELinux: invalid class [ 1281.065800][T25384] SELinux: failed to load policy [ 1281.144434][T25400] loop5: detected capacity change from 0 to 512 [ 1281.154267][T25400] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1281.176578][T25400] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.5757: bad orphan inode 131083 [ 1281.199289][T25400] loop5: lost filesystem error report for type 5 error -117 [ 1281.512759][T25432] loop8: detected capacity change from 0 to 1024 [ 1281.564383][T25432] ext4 filesystem being mounted at /646/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.608148][T25441] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5775'. [ 1281.641217][ T28] audit: type=1400 audit(1785053700.367:3245): avc: denied { write } for pid=25431 comm="syz.8.5772" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1281.641249][T25441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5775'. [ 1281.786899][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5777'. [ 1281.809264][T25443] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5777'. [ 1281.821371][T25452] gre0 speed is unknown, defaulting to 1000 [ 1281.852577][T25443] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1281.879098][T25443] bond2 (unregistering): Released all slaves [ 1281.944360][T25461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25461 comm=syz.5.5777 [ 1281.963703][T25443] 9p: Bad value for 'rfdno' [ 1282.067147][T25469] usb usb1: usbfs: process 25469 (syz.8.5784) did not claim interface 47 before use [ 1282.174080][T25475] ext4 filesystem being mounted at /762/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.442622][ T28] audit: type=1400 audit(1785053701.177:3246): avc: denied { write } for pid=25476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.566821][T25513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5798'. [ 1282.576615][T25513] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5798'. [ 1282.622056][ T28] audit: type=1400 audit(1785053701.357:3247): avc: denied { write } for pid=25515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.942920][T25518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25518 comm=syz.2.5798 [ 1282.992893][T25518] 9p: Bad value for 'rfdno' [ 1283.178905][T25519] set_capacity_and_notify: 1 callbacks suppressed [ 1283.178923][T25519] loop5: detected capacity change from 0 to 4096 [ 1283.240983][ T28] audit: type=1400 audit(1785053701.967:3248): avc: denied { write } for pid=25507 comm="syz.5.5797" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1283.321322][ T28] audit: type=1400 audit(1785053702.057:3249): avc: denied { setopt } for pid=25528 comm="syz.8.5801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1283.502528][T25513] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1283.527621][T25513] bond2 (unregistering): Released all slaves [ 1283.602726][T25538] loop5: detected capacity change from 0 to 1024 [ 1283.808397][ T28] audit: type=1400 audit(1785053702.537:3250): avc: denied { write } for pid=25536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.889458][ T28] audit: type=1400 audit(1785053702.617:3251): avc: denied { write } for pid=25567 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.924934][T25571] loop9: detected capacity change from 0 to 512 [ 1284.013836][T25571] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.039518][ T28] audit: type=1400 audit(1785053702.767:3252): avc: denied { write } for pid=25570 comm="syz.9.5813" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1284.118888][ T28] audit: type=1400 audit(1785053702.847:3253): avc: denied { write } for pid=25576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1284.152621][T25594] loop9: detected capacity change from 0 to 1024 [ 1284.223208][ T28] audit: type=1400 audit(1785053702.927:3254): avc: denied { write } for pid=25599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1284.335244][T25608] loop8: detected capacity change from 0 to 1024 [ 1284.342787][T25608] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1284.380108][T25608] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #3: block 1: comm syz.8.5821: lblock 1 mapped to illegal pblock 1 (length 1) [ 1284.399528][T25608] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1284.405020][T25608] Quota error (device loop8): write_blk: dquota write failed [ 1284.419613][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1284.424512][T25608] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.5821: Failed to acquire dquot type 0 [ 1284.428034][ C0] EXT4-fs (loop8): initial error at time 1785053703: ext4_map_blocks:833: inode 3: block 1 [ 1284.439274][ C0] EXT4-fs (loop8): last error at time 1785053703: ext4_map_blocks:833: inode 3: block 1 [ 1285.056590][T25631] loop9: detected capacity change from 0 to 512 [ 1285.392138][T25608] loop8: lost filesystem error report for type 5 error -117 [ 1285.393926][T25608] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.5821: Freeing blocks not in datazone - block = 0, count = 4096 [ 1285.415728][T25608] loop8: lost filesystem error report for type 5 error -117 [ 1285.417135][T25608] EXT4-fs error (device loop8): ext4_read_inode_bitmap:141: comm syz.8.5821: Invalid inode bitmap blk 0 in block_group 0 [ 1285.437589][T25608] loop8: lost filesystem error report for type 5 error -117 [ 1285.437652][ T1846] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 1285.459114][ T1846] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1285.689219][T25663] loop5: detected capacity change from 0 to 4096 [ 1285.712281][ T1846] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 0 [ 1285.725010][T25608] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 1285.739977][T25608] loop8: lost filesystem error report for type 5 error -117 [ 1285.741106][T25608] EXT4-fs (loop8): 1 orphan inode deleted [ 1285.757758][ T1846] loop8: lost filesystem error report for type 5 error -117 [ 1285.766474][T25608] EXT4-fs mount: 16 callbacks suppressed [ 1285.766508][T25608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.798529][T25608] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz.8.5821: Invalid inode table block 17179869185 in block_group 0 [ 1285.815176][T25663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1285.846050][T25608] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1285.868943][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.890942][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1286.306111][T25676] loop9: detected capacity change from 0 to 1024 [ 1286.326390][T25676] EXT4-fs: Ignoring removed bh option [ 1286.352289][T25676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.371044][T25676] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1286.428813][T25676] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm syz.9.5841: lblock 0 mapped to illegal pblock 0 (length 6) [ 1286.450597][T25676] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.5841: bg 0: block 3: invalid block bitmap [ 1286.463378][T25676] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 1286.477415][T25676] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1286.477415][T25676] [ 1286.487887][T25676] EXT4-fs (loop9): Total free blocks count 0 [ 1286.494070][T25676] EXT4-fs (loop9): Free/Dirty block details [ 1286.500415][T25676] EXT4-fs (loop9): free_blocks=0 [ 1286.505405][T25676] EXT4-fs (loop9): dirty_blocks=64 [ 1286.511000][T25676] EXT4-fs (loop9): Block reservation details [ 1286.517014][T25676] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 1286.546735][T24602] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1286.558659][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1286.601776][T25690] syzkaller1: entered promiscuous mode [ 1286.607436][T25690] syzkaller1: entered allmulticast mode [ 1286.671840][T25692] gre0 speed is unknown, defaulting to 1000 [ 1288.012528][T25712] loop8: detected capacity change from 0 to 512 [ 1288.306849][T25728] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5862'. [ 1288.361063][T25728] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5862'. [ 1288.436436][T25737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25737 comm=syz.8.5862 [ 1288.457898][T25739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5866'. [ 1288.478196][T25730] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1288.500507][T25740] 9p: Bad value for 'rfdno' [ 1288.523484][T25730] bond2 (unregistering): Released all slaves [ 1288.767583][T25752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5871'. [ 1288.785854][T25752] netlink: 35 bytes leftover after parsing attributes in process `syz.3.5871'. [ 1288.805979][T25752] netlink: 'syz.3.5871': attribute type 5 has an invalid length. [ 1288.819155][T25752] netlink: 'syz.3.5871': attribute type 6 has an invalid length. [ 1288.828186][T25752] netlink: 35 bytes leftover after parsing attributes in process `syz.3.5871'. [ 1289.086949][T25775] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5881'. [ 1291.115957][T25793] loop8: detected capacity change from 0 to 512 [ 1291.175153][T25793] EXT4-fs: Ignoring removed i_version option [ 1291.210926][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1291.286917][T25793] EXT4-fs: Ignoring removed bh option [ 1291.311984][T25795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1291.353209][T25798] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1291.354123][T25793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1291.376680][T25790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25790 comm=syz.2.5885 [ 1291.405457][T25798] bond2 (unregistering): Released all slaves [ 1291.406879][T25793] ext4 filesystem being mounted at /669/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1291.427317][T25790] 9p: Bad value for 'rfdno' [ 1291.447229][T25793] EXT4-fs (loop8): shut down requested (1) [ 1291.480259][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.528204][T25819] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5892'. [ 1291.671598][T25826] netlink: 'syz.2.5897': attribute type 9 has an invalid length. [ 1291.704426][T25826] netlink: 'syz.2.5897': attribute type 7 has an invalid length. [ 1291.768054][T25826] netlink: 'syz.2.5897': attribute type 8 has an invalid length. [ 1291.904515][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1291.904533][ T28] audit: type=1400 audit(1785053710.637:3264): avc: denied { read } for pid=25847 comm="syz.3.5909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1292.113411][T25873] loop8: detected capacity change from 0 to 128 [ 1292.249033][T25873] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1292.261780][T25873] ext4 filesystem being mounted at /677/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1292.640918][T25878] loop9: detected capacity change from 0 to 1024 [ 1292.683924][T25878] EXT4-fs: Ignoring removed nobh option [ 1292.767250][T25878] EXT4-fs: Ignoring removed bh option [ 1292.819173][T25878] EXT4-fs: Ignoring removed nobh option [ 1292.836419][ T28] audit: type=1400 audit(1785053711.567:3265): avc: denied { write } for pid=25871 comm="syz.8.5918" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1292.868960][T25878] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1292.886568][T16262] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1292.913895][T25878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.966310][ T28] audit: type=1400 audit(1785053711.697:3266): avc: denied { write } for pid=25876 comm="syz.9.5919" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1293.057697][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1293.239241][T25891] Mass Storage Function, version: 2009/09/11 [ 1293.248477][ T28] audit: type=1400 audit(1785053711.967:3267): avc: denied { write } for pid=25887 comm="syz.9.5925" name="functions" dev="configfs" ino=33828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1293.283229][T25891] LUN: removable file: (no medium) [ 1293.307728][T25897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1293.320519][ T28] audit: type=1400 audit(1785053711.967:3268): avc: denied { create } for pid=25887 comm="syz.9.5925" name="mass_storage.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1293.357353][T25899] netlink: 'syz.2.5928': attribute type 4 has an invalid length. [ 1293.368350][ T28] audit: type=1400 audit(1785053712.027:3269): avc: denied { write } for pid=25887 comm="syz.9.5925" name="functions" dev="configfs" ino=33828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1293.397366][ T28] audit: type=1400 audit(1785053712.027:3270): avc: denied { remove_name } for pid=25887 comm="syz.9.5925" name="mass_storage.usb0" dev="configfs" ino=70887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1293.437389][ T28] audit: type=1400 audit(1785053712.027:3271): avc: denied { rmdir } for pid=25887 comm="syz.9.5925" name="mass_storage.usb0" dev="configfs" ino=70887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1293.463471][ T28] audit: type=1326 audit(1785053712.167:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25900 comm="syz.9.5929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc66f9de99 code=0x7ffc0000 [ 1293.489454][ T28] audit: type=1326 audit(1785053712.167:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25900 comm="syz.9.5929" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc66f9de99 code=0x7ffc0000 [ 1293.635016][T25919] loop5: detected capacity change from 0 to 2048 [ 1293.764766][T25919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.394396][T25968] loop9: detected capacity change from 0 to 4096 [ 1294.421414][T25968] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.454593][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.455355][ T1846] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1294.479469][ T1846] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 962 with error 28 [ 1294.492548][ T1846] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1294.492548][ T1846] [ 1294.508480][ T1846] EXT4-fs (loop5): Total free blocks count 0 [ 1294.514763][ T1846] EXT4-fs (loop5): Free/Dirty block details [ 1294.521027][ T1846] EXT4-fs (loop5): free_blocks=4096 [ 1294.526467][ T1846] EXT4-fs (loop5): dirty_blocks=992 [ 1294.532027][ T1846] EXT4-fs (loop5): Block reservation details [ 1294.538151][ T1846] EXT4-fs (loop5): i_reserved_data_blocks=62 [ 1294.554285][ T1846] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 1294.580191][T12545] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1294.668619][T25986] geneve2: entered promiscuous mode [ 1294.710361][T25988] loop9: detected capacity change from 0 to 1764 [ 1294.729842][T25988] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1294.749254][T25990] loop5: detected capacity change from 0 to 256 [ 1294.788920][T25992] loop9: detected capacity change from 0 to 512 [ 1294.832099][T25992] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1294.840735][T25992] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1294.865180][T25992] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.5968: Failed to acquire dquot type 1 [ 1294.894825][T25992] loop9: lost filesystem error report for type 5 error -5 [ 1294.895015][T25992] EXT4-fs (loop9): Remounting filesystem read-only [ 1294.902219][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1294.902248][ C1] EXT4-fs (loop9): initial error at time 1785053713: ext4_acquire_dquot:7041 [ 1294.902270][ C1] EXT4-fs (loop9): last error at time 1785053713: ext4_acquire_dquot:7041 [ 1294.941428][T26002] loop8: detected capacity change from 0 to 2048 [ 1294.973521][T26002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.995120][T25992] EXT4-fs (loop9): 1 truncate cleaned up [ 1295.070636][T26010] loop5: detected capacity change from 0 to 256 [ 1295.077596][T25992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1295.091326][T26010] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1295.112003][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.124322][T26010] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1295.160079][T24602] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.357478][T26024] EXT4-fs: inline encryption not supported [ 1295.668693][T26024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1295.686589][T26027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1295.920004][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.068577][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1296.250485][T26056] set_capacity_and_notify: 3 callbacks suppressed [ 1296.250517][T26056] loop8: detected capacity change from 0 to 512 [ 1296.277713][T26056] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1296.518106][T26071] gre0 speed is unknown, defaulting to 1000 [ 1296.851840][T26072] gre0 speed is unknown, defaulting to 1000 [ 1296.933009][T26104] loop5: detected capacity change from 0 to 1024 [ 1296.951847][T26104] EXT4-fs: Ignoring removed oldalloc option [ 1296.964505][T26104] EXT4-fs: Ignoring removed oldalloc option [ 1296.983948][T26104] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 1297.029999][T26104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1297.058196][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1297.058217][ T28] audit: type=1400 audit(1785053715.787:3285): avc: denied { write } for pid=26103 comm="syz.5.6014" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1297.252089][T26072] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.260622][T26072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.289952][T26072] bridge_slave_0: entered allmulticast mode [ 1297.298204][T26124] netlink: 'syz.2.6018': attribute type 3 has an invalid length. [ 1297.305505][T26072] bridge_slave_0: entered promiscuous mode [ 1297.324649][T26072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.331870][T26072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.339105][T26072] bridge_slave_1: entered allmulticast mode [ 1297.346034][T26072] bridge_slave_1: entered promiscuous mode [ 1297.365098][T26072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.375702][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.376388][T26072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.413456][ T28] audit: type=1400 audit(1785053716.147:3286): avc: denied { bind } for pid=26127 comm="syz.5.6020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1297.443894][T26072] team0: Port device team_slave_0 added [ 1297.451583][T26072] team0: Port device team_slave_1 added [ 1297.473930][T26131] loop5: detected capacity change from 0 to 1024 [ 1297.490212][T26131] EXT4-fs: Ignoring removed bh option [ 1297.491539][T26072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1297.511065][T26072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.538233][T26131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1297.555544][ T28] audit: type=1400 audit(1785053716.287:3287): avc: denied { write } for pid=26130 comm="syz.5.6021" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1297.560057][T26072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1297.620485][T26072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1297.627477][T26072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1297.653513][T26072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1297.681699][T26072] hsr_slave_0: entered promiscuous mode [ 1297.687899][T26072] hsr_slave_1: entered promiscuous mode [ 1297.693925][T26072] debugfs: 'hsr0' already exists in 'hsr' [ 1297.699709][T26072] Cannot create hsr debugfs directory [ 1297.724773][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.943333][T26152] __nla_validate_parse: 3 callbacks suppressed [ 1297.943350][T26152] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6026'. [ 1297.973462][T26146] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6026'. [ 1298.007301][ T28] audit: type=1400 audit(1785053716.737:3288): avc: denied { write } for pid=26144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.079735][ T28] audit: type=1400 audit(1785053716.807:3289): avc: denied { write } for pid=26159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.105536][T26161] batadv_slave_0: entered promiscuous mode [ 1298.122678][T26161] batadv_slave_0: left promiscuous mode [ 1298.177568][T26072] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1298.190150][T26166] loop8: detected capacity change from 0 to 256 [ 1298.190641][T26072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1298.218362][T26072] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1298.268382][T26072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1298.287982][T26072] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1298.301654][T26072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1298.330419][T26072] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1298.341500][T26173] loop8: detected capacity change from 0 to 2048 [ 1298.355662][T26072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1298.374071][T26173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1298.408100][ T28] audit: type=1400 audit(1785053717.137:3290): avc: denied { write } for pid=26172 comm="syz.8.6030" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1298.456295][ T28] audit: type=1400 audit(1785053717.167:3291): avc: denied { setattr } for pid=26172 comm="syz.8.6030" name="cpuset.memory_pressure_enabled" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1298.499074][ T28] audit: type=1400 audit(1785053717.227:3292): avc: denied { write } for pid=26164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.526385][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.622089][ T28] audit: type=1400 audit(1785053717.347:3293): avc: denied { write } for pid=26199 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.665597][T26072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.725370][T26072] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.763252][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.770402][ T7786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.821068][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.828217][ T7786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.950920][T26236] Invalid argument reading file caps for ./file0 [ 1299.133262][T26227] loop8: detected capacity change from 0 to 8192 [ 1299.139776][ T28] audit: type=1400 audit(1785053717.857:3294): avc: denied { write } for pid=26211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1299.341122][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6048'. [ 1299.382064][T26264] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6048'. [ 1299.420672][T26256] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1299.464472][T26274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26274 comm=syz.5.6048 [ 1299.480304][T26256] bond2 (unregistering): Released all slaves [ 1299.639499][T26264] 9p: Bad value for 'rfdno' [ 1299.737142][T26072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.871196][T26300] batadv_slave_1: entered promiscuous mode [ 1299.893849][T26299] batadv_slave_1: left promiscuous mode [ 1299.991564][T26311] loop8: detected capacity change from 0 to 1024 [ 1300.024654][T26311] EXT4-fs: Ignoring removed orlov option [ 1300.106973][T26310] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6058'. [ 1300.118800][T26072] veth0_vlan: entered promiscuous mode [ 1300.131351][T26072] veth1_vlan: entered promiscuous mode [ 1300.154449][T26311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.195659][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.254211][T26321] loop8: detected capacity change from 0 to 1024 [ 1300.255407][T26072] veth0_macvtap: entered promiscuous mode [ 1300.311907][T26072] veth1_macvtap: entered promiscuous mode [ 1300.320136][T26321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.354917][T26072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.361532][T26321] ext4 filesystem being mounted at /715/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1300.378428][T26072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.421717][ T1846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.444652][ T1846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.457986][ T1846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.467350][ T1846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.503825][T26338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6064'. [ 1300.523928][ T7786] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm kworker/u8:10: lblock 0 mapped to illegal pblock 0 (length 1) [ 1300.546875][T26338] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6064'. [ 1300.574367][ T7786] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1300.601572][ T7786] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1300.601572][ T7786] [ 1300.611823][T16262] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1300.614241][T26333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26333 comm=syz.5.6064 [ 1300.624231][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1300.638092][T26342] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1300.681189][T26350] 9p: Bad value for 'rfdno' [ 1300.727326][T26342] bond2 (unregistering): Released all slaves [ 1301.049121][T26391] loop8: detected capacity change from 0 to 512 [ 1301.083340][T26391] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1301.136414][T26391] EXT4-fs (loop8): 1 truncate cleaned up [ 1301.167023][T26391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1301.265223][T26407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6083'. [ 1301.319895][T26407] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6083'. [ 1301.332969][T26413] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1301.489796][T26415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26415 comm=syz.1.6083 [ 1301.503045][T26415] 9p: Bad value for 'rfdno' [ 1302.102608][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.116196][T26413] bond1 (unregistering): Released all slaves [ 1302.232240][T26433] loop8: detected capacity change from 0 to 512 [ 1302.274107][T26433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1302.308617][T26433] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6090: bg 0: block 393: padding at end of block bitmap is not set [ 1302.350785][T26433] loop8: lost filesystem error report for type 5 error -117 [ 1302.350960][T26433] EXT4-fs (loop8): Remounting filesystem read-only [ 1302.364972][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1302.365015][ C0] EXT4-fs (loop8): initial error at time 1785053721: ext4_validate_block_bitmap:441 [ 1302.365054][ C0] EXT4-fs (loop8): last error at time 1785053721: ext4_validate_block_bitmap:441 [ 1302.390540][T26433] EXT4-fs (loop8): 2 truncates cleaned up [ 1302.396859][T26433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.415009][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1302.415025][ T28] audit: type=1400 audit(1785053721.147:3318): avc: denied { write } for pid=26432 comm="syz.8.6090" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1302.455100][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.543564][ T28] audit: type=1400 audit(1785053721.277:3319): avc: denied { write } for pid=26430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.658187][ T28] audit: type=1400 audit(1785053721.387:3320): avc: denied { write } for pid=26470 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.826913][T26488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1302.861752][ T28] audit: type=1400 audit(1785053721.587:3321): avc: denied { append } for pid=26493 comm="syz.1.6105" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1302.919341][ T28] audit: type=1400 audit(1785053721.597:3322): avc: denied { relabelfrom } for pid=26489 comm="syz.5.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1302.934091][T26480] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1302.978883][T26480] bond2 (unregistering): Released all slaves [ 1302.990577][ T28] audit: type=1400 audit(1785053721.597:3323): avc: denied { relabelto } for pid=26489 comm="syz.5.6104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1303.027902][T26508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26508 comm=syz.2.6102 [ 1303.051593][T26507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26507 comm=syz.5.6107 [ 1303.082432][ T28] audit: type=1400 audit(1785053721.817:3324): avc: denied { write } for pid=26482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.092906][T26507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26507 comm=syz.5.6107 [ 1303.149745][T26480] 9p: Bad value for 'rfdno' [ 1303.169481][ T28] audit: type=1400 audit(1785053721.897:3325): avc: denied { write } for pid=26511 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.311765][T26517] loop5: detected capacity change from 0 to 4096 [ 1303.355589][T26517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1303.369355][T26502] loop8: detected capacity change from 0 to 32768 [ 1303.399232][ T28] audit: type=1400 audit(1785053722.127:3326): avc: denied { write } for pid=26516 comm="syz.5.6109" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1303.458834][ T28] audit: type=1400 audit(1785053722.127:3327): avc: denied { write } for pid=26516 comm="syz.5.6109" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1303.493236][T26502] loop8: p1 p3 < > [ 1303.534740][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.576337][T26534] __nla_validate_parse: 1 callbacks suppressed [ 1303.576353][T26534] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6112'. [ 1303.735881][T26543] [ 1303.787471][T12843] udevd[12843]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1303.791731][ T4966] udevd[4966]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1304.224786][T26576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6121'. [ 1304.647643][T26620] loop8: detected capacity change from 0 to 1024 [ 1304.678155][T26620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1304.748100][T26620] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1304.789837][T26620] ext4 filesystem being mounted at /734/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1304.802891][T26620] EXT4-fs error (device loop8): ext4_free_blocks:6718: comm syz.8.6131: Freeing blocks not in datazone - block = 0, count = 16 [ 1304.823710][T26620] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6131: bg 0: block 112: padding at end of block bitmap is not set [ 1304.849003][T26620] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 117 [ 1304.862183][T26620] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1304.862183][T26620] [ 1304.918243][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1304.974025][T26638] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6137'. [ 1304.985852][T16262] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1305.006614][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1306.065693][T26675] loop8: detected capacity change from 0 to 128 [ 1306.110346][T26675] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1306.223278][T26675] ext4 filesystem being mounted at /740/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1306.417641][T16262] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1308.102578][T26743] loop8: detected capacity change from 0 to 512 [ 1308.111894][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1308.111912][ T28] audit: type=1326 audit(1785053726.847:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26744 comm="syz.2.6179" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff59de99 code=0x0 [ 1308.169274][T26743] EXT4-fs: Mount option(s) incompatible with ext2 [ 1310.148693][T26782] vxcan1: tx drop: invalid sa for name 0x0000000000000004 [ 1310.372991][T26773] gre0 speed is unknown, defaulting to 1000 [ 1311.709769][T26812] loop8: detected capacity change from 0 to 512 [ 1311.734309][T26812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1311.754623][T26812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.773767][T26812] ext4 filesystem being mounted at /767/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.788774][ T28] audit: type=1400 audit(1785053730.517:3358): avc: denied { write } for pid=26811 comm="syz.8.6209" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1311.815197][ T28] audit: type=1400 audit(1785053730.517:3359): avc: denied { write } for pid=26811 comm="syz.8.6209" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1311.857768][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.049681][T26829] netlink: 'syz.8.6215': attribute type 4 has an invalid length. [ 1312.784238][T26833] loop5: detected capacity change from 0 to 2048 [ 1312.798983][T26833] EXT4-fs: Ignoring removed i_version option [ 1312.841627][T26833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1312.866905][T26833] ext4 filesystem being mounted at /834/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1312.909849][ T28] audit: type=1400 audit(1785053731.637:3360): avc: denied { write } for pid=26832 comm="syz.5.6216" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1313.006833][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.082500][T26845] syzkaller0: entered promiscuous mode [ 1313.098171][T26845] syzkaller0: entered allmulticast mode [ 1313.105530][T26847] sctp: [Deprecated]: syz.2.6221 (pid 26847) Use of int in max_burst socket option. [ 1313.105530][T26847] Use struct sctp_assoc_value instead [ 1313.626414][T26863] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.6230'. [ 1313.684646][T26863] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.6230'. [ 1313.922043][T26882] loop5: detected capacity change from 0 to 512 [ 1313.947994][T26882] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.6238: corrupted in-inode xattr: e_value out of bounds [ 1314.006014][T26882] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1314.006237][T26882] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6238: couldn't read orphan inode 15 (err -117) [ 1314.015463][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1314.015488][ C1] EXT4-fs (loop5): initial error at time 1785053732: ext4_iget_extra_inode:5180: inode 15 [ 1314.015529][ C1] EXT4-fs (loop5): last error at time 1785053732: ext4_iget_extra_inode:5180: inode 15 [ 1314.121967][T26882] loop5: lost filesystem error report for type 5 error -117 [ 1314.130425][T26882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.184169][T12545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.498850][T26921] gre0 speed is unknown, defaulting to 1000 [ 1314.985452][T26933] loop8: detected capacity change from 0 to 8192 [ 1315.009950][T26933] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1315.145754][T26946] loop8: detected capacity change from 0 to 512 [ 1315.152813][T26946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1315.165763][T26946] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1315.198450][T26946] EXT4-fs (loop8): 1 truncate cleaned up [ 1315.247372][T26946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.323931][ T28] audit: type=1400 audit(1785053734.057:3361): avc: denied { write } for pid=26945 comm="syz.8.6263" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1315.401662][T26956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1315.411790][T26956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6266'. [ 1315.620038][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.630027][T13727] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.730155][T13727] bond0: (slave netdevsim2): Releasing backup interface [ 1315.783068][T13727] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.942222][T13727] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.425210][T13727] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1316.594580][T26970] gre0 speed is unknown, defaulting to 1000 [ 1316.619610][T13727] pimreg: left allmulticast mode [ 1317.063725][T13727] bond0 (unregistering): Released all slaves [ 1317.086750][T13727] bond1 (unregistering): Released all slaves [ 1317.297806][T13727] hsr_slave_0: left promiscuous mode [ 1317.310499][ T28] audit: type=1400 audit(1785053736.037:3362): avc: denied { write } for pid=27001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1317.355310][T13727] hsr_slave_1: left promiscuous mode [ 1317.414524][ T28] audit: type=1400 audit(1785053736.077:3363): avc: denied { write } for pid=27017 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1317.478089][T27028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1317.545488][T27033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1317.577029][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1317.586322][T27026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6283'. [ 1317.613459][T27029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6283'. [ 1317.708659][T26970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.721962][T26970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.739752][T26970] bridge_slave_0: entered allmulticast mode [ 1317.751409][T26970] bridge_slave_0: entered promiscuous mode [ 1317.770798][T26970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.779354][T26970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1317.795654][T26970] bridge_slave_1: entered allmulticast mode [ 1317.806806][T26970] bridge_slave_1: entered promiscuous mode [ 1317.856757][T26970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.883458][T26970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.946833][T26970] team0: Port device team_slave_0 added [ 1317.960172][ T28] audit: type=1400 audit(1785053736.687:3364): avc: denied { write } for pid=27045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1317.984882][T26970] team0: Port device team_slave_1 added [ 1318.028025][ T28] audit: type=1400 audit(1785053736.757:3365): avc: denied { write } for pid=27057 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.028670][T26970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.106444][T26970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.160416][T26970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.172153][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1318.180637][T26970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.187923][T26970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.214197][T26970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1318.320881][T26970] hsr_slave_0: entered promiscuous mode [ 1318.339535][T26970] hsr_slave_1: entered promiscuous mode [ 1318.382310][T26970] debugfs: 'hsr0' already exists in 'hsr' [ 1318.388088][T26970] Cannot create hsr debugfs directory [ 1318.468216][T13727] IPVS: stop unused estimator thread 0... [ 1318.538976][ T28] audit: type=1400 audit(1785053737.267:3366): avc: denied { write } for pid=27067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.635659][ T28] audit: type=1400 audit(1785053737.367:3367): avc: denied { write } for pid=27083 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.692801][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1318.928419][T26970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1318.967402][T26970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1318.975908][T27085] xt_NFQUEUE: number of total queues is 0 [ 1318.984593][T26970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1319.007710][T26970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1319.026699][T26970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1319.046736][ T28] audit: type=1400 audit(1785053737.777:3368): avc: denied { write } for pid=27089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.088470][T26970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1319.110919][T26970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1319.145896][T26970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1319.157507][ T28] audit: type=1400 audit(1785053737.887:3369): avc: denied { write } for pid=27106 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.215277][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1319.283702][T26970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.318109][T26970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.343251][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.350378][T13727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.371897][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.379027][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.400543][ T28] audit: type=1400 audit(1785053738.137:3370): avc: denied { write } for pid=27117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.657665][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.714427][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.738361][T26970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.756989][T27138] gre0 speed is unknown, defaulting to 1000 [ 1319.778933][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.871880][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.965901][ T49] bridge_slave_1: left allmulticast mode [ 1319.974703][ T49] bridge_slave_1: left promiscuous mode [ 1319.999823][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.009027][T27175] loop8: detected capacity change from 0 to 512 [ 1320.016466][ T49] bridge_slave_0: left allmulticast mode [ 1320.023278][ T49] bridge_slave_0: left promiscuous mode [ 1320.029267][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.036875][T27175] EXT4-fs: Mount option(s) incompatible with ext2 [ 1320.152046][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.164243][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.178260][ T49] bond0 (unregistering): Released all slaves [ 1320.362180][ T49] hsr_slave_0: left promiscuous mode [ 1320.393237][ T49] hsr_slave_1: left promiscuous mode [ 1320.404773][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1320.431944][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.451676][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1320.459344][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.486657][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1320.486674][ T28] audit: type=1400 audit(1785053739.217:3374): avc: denied { write } for pid=27184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.524465][ T49] veth1_macvtap: left promiscuous mode [ 1320.548309][ T49] veth0_macvtap: left promiscuous mode [ 1320.561953][ T49] veth1_vlan: left promiscuous mode [ 1320.589761][ T49] veth0_vlan: left promiscuous mode [ 1320.606862][ T28] audit: type=1400 audit(1785053739.337:3375): avc: denied { write } for pid=27199 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.644071][T27201] PM: suspend entry (deep) [ 1320.760199][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1320.781349][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1320.806370][T13727] Filesystems sync: 0.154 seconds [ 1320.831394][ T28] audit: type=1400 audit(1785053739.557:3376): avc: denied { write } for pid=27203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.882572][ T28] audit: type=1400 audit(1785053739.617:3377): avc: denied { write } for pid=27218 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1320.951079][T26970] veth0_vlan: entered promiscuous mode [ 1320.974438][T26970] veth1_vlan: entered promiscuous mode [ 1320.989875][T27201] Freezing user space processes [ 1321.608014][T27201] Freezing user space processes completed (elapsed 0.613 seconds) [ 1321.615946][T27201] OOM killer disabled. [ 1321.620195][T27201] Freezing remaining freezable tasks [ 1321.627129][T27201] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 1321.635490][T27201] printk: Suspending console(s) (use no_console_suspend to debug) [ 1321.681305][T27201] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 1321.682570][T27201] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 1321.682688][T27201] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 1321.682785][T27201] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 1321.682815][T27201] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 1321.682913][T27201] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 1321.682980][T27201] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 1321.683009][T27201] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 1321.683104][T27201] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 1321.683133][T27201] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 1321.683177][T27201] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 1321.683284][T27201] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 1321.683332][T27201] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 1321.683357][T27201] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 1321.683387][T27201] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 1321.683468][T27201] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 1321.709791][T27230] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1322.362981][T27201] ACPI: PM: Preparing to enter system sleep state S3 [ 1322.363120][T27201] ACPI: PM: Saving platform NVS memory [ 1322.363181][T27201] Disabling non-boot CPUs ... [ 1322.374513][T27201] smpboot: CPU 1 is now offline [ 1322.378742][T27201] PM: suspend debug: Waiting for 5 second(s). [ 1327.579744][T27201] Enabling non-boot CPUs ... [ 1327.580570][T27201] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1327.584947][T27201] CPU1 is up [ 1327.585126][T27201] ACPI: PM: Waking up from system sleep state S3 [ 1327.619018][T27230] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 1327.788064][T27201] OOM killer enabled. [ 1327.788655][T27201] Restarting tasks: Starting [ 1327.809139][T27138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.810550][T27138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.812128][T27138] bridge_slave_0: entered allmulticast mode [ 1327.813968][T27138] bridge_slave_0: entered promiscuous mode [ 1327.820611][T26970] veth0_macvtap: entered promiscuous mode [ 1327.833867][T27201] Restarting tasks: Done [ 1327.835831][T27201] random: crng reseeded on system resumption [ 1327.836892][T27201] PM: suspend exit [ 1327.851095][T27138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.852287][T27138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.853689][T27138] bridge_slave_1: entered allmulticast mode [ 1327.858477][T27138] bridge_slave_1: entered promiscuous mode [ 1327.873167][T26970] veth1_macvtap: entered promiscuous mode [ 1327.905074][ T28] audit: type=1400 audit(1785053746.637:3378): avc: denied { write } for pid=27221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1327.918208][T27138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.934006][T27138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.968183][ T28] audit: type=1400 audit(1785053746.697:3379): avc: denied { write } for pid=27363 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1327.991351][T26970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.999282][T27138] team0: Port device team_slave_0 added [ 1328.004421][T27138] team0: Port device team_slave_1 added [ 1328.022134][T26970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.047175][T27324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.048686][T27324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.056673][T27324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.058472][T27324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.065400][T27370] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6310'. [ 1328.069983][T27138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.071433][T27138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.079740][T27138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.083719][T27138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.086312][T27138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.093723][T27138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.145331][T27138] hsr_slave_0: entered promiscuous mode [ 1328.146732][T27138] hsr_slave_1: entered promiscuous mode [ 1328.148038][T27138] debugfs: 'hsr0' already exists in 'hsr' [ 1328.148914][T27138] Cannot create hsr debugfs directory [ 1328.207233][ T28] audit: type=1400 audit(1785053746.937:3380): avc: denied { write } for pid=27371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.234058][T27389] loop4: detected capacity change from 0 to 512 [ 1328.236188][ T28] audit: type=1400 audit(1785053746.967:3381): avc: denied { mounton } for pid=27388 comm="syz.4.6271" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1328.259439][T27389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.261622][ T28] audit: type=1400 audit(1785053746.987:3382): avc: denied { write } for pid=27390 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.267519][T27389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1328.401361][ T28] audit: type=1400 audit(1785053747.137:3383): avc: denied { write } for pid=27397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.424676][ T28] audit: type=1400 audit(1785053747.157:3384): avc: denied { write } for pid=27410 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.501456][ T28] audit: type=1400 audit(1785053747.237:3385): avc: denied { write } for pid=27412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.526320][ T28] audit: type=1400 audit(1785053747.257:3386): avc: denied { write } for pid=27423 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.537037][T27138] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1328.543024][T27138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1328.544952][T27138] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1328.548146][T27138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1328.551184][T27138] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1328.554347][T27138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1328.556233][T27138] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1328.559051][T27138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1328.600236][T27138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.609089][T27138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1328.614438][T27324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.615591][T27324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.622918][T27327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.624156][T27327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.671040][ T28] audit: type=1400 audit(1785053747.407:3387): avc: denied { write } for pid=27432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1328.779274][T27138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.943595][T27138] veth0_vlan: entered promiscuous mode [ 1328.951665][T27138] veth1_vlan: entered promiscuous mode [ 1328.966006][T27138] veth0_macvtap: entered promiscuous mode [ 1328.969204][T27138] veth1_macvtap: entered promiscuous mode [ 1328.977962][T27138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.984868][T27138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.991414][T27327] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.993878][T27327] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.995647][T27327] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.997203][T27327] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.058512][T27506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1329.076222][T27512] syzkaller1: entered promiscuous mode [ 1329.077242][T27512] syzkaller1: entered allmulticast mode [ 1329.099357][T27508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.109138][T27508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.120164][T27508] can0: slcan on ptm0. [ 1329.197405][T27521] loop8: detected capacity change from 0 to 128 [ 1329.290872][T27503] can0 (unregistered): slcan off ptm0. [ 1329.374645][T27541] loop8: detected capacity change from 0 to 512 [ 1329.378039][T27541] EXT4-fs: Ignoring removed bh option [ 1329.391000][T27541] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1329.399248][T27541] EXT4-fs (loop8): 1 truncate cleaned up [ 1329.400765][T27541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.451821][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.452495][T27550] cgroup: noprefix used incorrectly [ 1329.638336][T27573] loop8: detected capacity change from 0 to 1024 [ 1329.647337][T27577] netlink: 'syz.2.6333': attribute type 4 has an invalid length. [ 1329.648717][T27577] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1329.663396][T27573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.669781][T27573] ext4 filesystem being mounted at /807/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1329.677626][T27573] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.6332: lblock 0 mapped to illegal pblock 0 (length 1) [ 1329.690450][T27573] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1329.694719][T27573] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1329.694719][T27573] [ 1329.706638][T27573] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6332: bg 0: block 112: padding at end of block bitmap is not set [ 1329.715643][T27573] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 1329.722329][T27573] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1329.722329][T27573] [ 1329.726375][T27573] EXT4-fs (loop8): Total free blocks count 0 [ 1329.727456][T27573] EXT4-fs (loop8): Free/Dirty block details [ 1329.736306][T27573] EXT4-fs (loop8): free_blocks=0 [ 1329.737185][T27573] EXT4-fs (loop8): dirty_blocks=64 [ 1329.746931][T27573] EXT4-fs (loop8): Block reservation details [ 1329.790124][T16262] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1329.846639][T27594] loop8: detected capacity change from 0 to 1024 [ 1329.854147][T27594] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1329.876196][T27598] syzkaller1: entered promiscuous mode [ 1329.877262][T27598] syzkaller1: entered allmulticast mode [ 1329.879216][T27594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1329.962906][T16262] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.020598][T27615] loop4: detected capacity change from 0 to 512 [ 1330.030409][T27615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c01c, mo2=0002] [ 1330.031732][T27615] System zones: 1-12 [ 1330.033151][T27615] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.6342: error while reading EA inode 32 err=-116 [ 1330.039835][T27615] loop4: lost filesystem error report for type 5 error -117 [ 1330.040172][T27615] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.6342: error while reading EA inode 32 err=-116 [ 1330.049559][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1330.050679][ C0] EXT4-fs (loop4): initial error at time 1785053748: ext4_xattr_inode_iget:446 [ 1330.052117][ C0] EXT4-fs (loop4): last error at time 1785053748: ext4_xattr_inode_iget:446 [ 1330.056424][T27615] loop4: lost filesystem error report for type 5 error -117 [ 1330.056964][T27615] EXT4-fs (loop4): 1 orphan inode deleted [ 1330.059713][T27615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.081971][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1330.132011][T26970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1330.163227][T27629] netlink: 'syz.8.6348': attribute type 1 has an invalid length. [ 1330.190611][T27629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1330.198394][T27624] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1330.242886][T27629] bond2: (slave geneve3): making interface the new active one [ 1330.248621][T27642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6350'. [ 1330.256234][T27629] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1330.387549][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1330.416777][T27668] netlink: 160 bytes leftover after parsing attributes in process `syz.8.6359'. [ 1330.476117][T27679] netlink: 'syz.3.6362': attribute type 18 has an invalid length. [ 1330.477564][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6362'. [ 1330.479086][T27679] netlink: 'syz.3.6362': attribute type 18 has an invalid length. [ 1330.480558][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6362'. [ 1330.510751][T27684] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1330.546288][T27689] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6364'. [ 1330.627181][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1330.810773][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1331.284362][ T5322] hid_parser_main: 213 callbacks suppressed [ 1331.284384][ T5322] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1331.288750][ T5322] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1331.487830][T27818] hid-generic 0000:0000:0000.0009: pid 27818 passed too large report [ 1331.499114][T27817] netlink: 'syz.4.6390': attribute type 39 has an invalid length. [ 1332.710463][T27894] loop4: detected capacity change from 0 to 512 [ 1332.733149][T27894] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1332.734667][T27894] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1332.735751][T27894] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.6387: bad orphan inode 15 [ 1332.737417][T27894] loop4: lost filesystem error report for type 5 error -117 [ 1332.737539][T27894] ext4_test_bit(bit=14, block=5) = 0 [ 1332.739979][T27894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1332.745931][T27894] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1332.758741][T26970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.787338][T27913] loop4: detected capacity change from 0 to 2048 [ 1332.816798][T27913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1332.818834][T27913] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1332.852950][T26970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.023506][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 1333.023546][ T28] audit: type=1400 audit(1785053751.737:3431): avc: denied { write } for pid=27919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.050618][ T28] audit: type=1400 audit(1785053751.787:3432): avc: denied { write } for pid=27939 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.255643][ T28] audit: type=1400 audit(1785053751.987:3433): avc: denied { write } for pid=27943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.298067][ T28] audit: type=1400 audit(1785053752.027:3434): avc: denied { write } for pid=27962 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1333.458920][T27971] macvlan2: entered promiscuous mode [ 1333.461183][T27971] bridge0: entered promiscuous mode [ 1333.618101][T27977] loop6: detected capacity change from 0 to 512 [ 1333.628286][T27977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1333.643505][T27977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1333.653838][T27977] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.668613][ T28] audit: type=1400 audit(1785053752.397:3435): avc: denied { write } for pid=27976 comm="syz.6.6407" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1333.817757][T27706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1334.655916][T27138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.908910][T28016] loop6: detected capacity change from 0 to 128 [ 1334.942554][T28016] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1334.949036][T28016] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1334.980555][ T28] audit: type=1400 audit(1785053753.697:3436): avc: denied { write } for pid=28015 comm="syz.6.6417" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1334.984209][ T28] audit: type=1400 audit(1785053753.697:3437): avc: denied { write } for pid=28015 comm="syz.6.6417" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1334.987805][ T28] audit: type=1400 audit(1785053753.697:3438): avc: denied { write } for pid=28015 comm="syz.6.6417" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1334.994938][ T28] audit: type=1400 audit(1785053753.697:3439): avc: denied { write } for pid=28015 comm="syz.6.6417" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1335.005715][ T28] audit: type=1400 audit(1785053753.707:3440): avc: denied { write } for pid=28015 comm="syz.6.6417" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1335.014943][T27138] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1335.485439][T28036] syzkaller0: entered promiscuous mode [ 1335.486479][T28036] syzkaller0: entered allmulticast mode [ 1335.715456][T28049] loop4: detected capacity change from 0 to 2048 [ 1335.744928][T28049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1336.157678][T27327] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1336.175592][T27327] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1336.190305][T27327] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1336.190305][T27327] [ 1336.197517][T27327] EXT4-fs (loop4): Total free blocks count 0 [ 1336.203288][T27327] EXT4-fs (loop4): Free/Dirty block details [ 1336.210565][T27327] EXT4-fs (loop4): free_blocks=4096 [ 1336.214123][T27327] EXT4-fs (loop4): dirty_blocks=512 [ 1336.218249][T27327] EXT4-fs (loop4): Block reservation details [ 1336.223067][T27327] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 1336.233572][T27327] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 1336.255521][T26970] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1336.395419][T28055] loop6: detected capacity change from 0 to 32768 [ 1336.440584][T28055] loop6: p1 p3 < > [ 1336.801619][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1336.804511][ T4966] udevd[4966]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1337.058758][T28079] sg_write: data in/out 467008/136 bytes for SCSI command 0x0-- guessing data in; [ 1337.058758][T28079] program syz.6.6439 not setting count and/or reply_len properly [ 1337.227943][T28088] hub 5-0:1.0: USB hub found [ 1337.238603][T28088] hub 5-0:1.0: 8 ports detected [ 1337.259108][T27324] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.353536][T27324] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.378544][T28094] __nla_validate_parse: 2 callbacks suppressed [ 1337.378627][T28094] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6447'. [ 1337.463679][T27324] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.496704][T28104] netlink: 'syz.6.6450': attribute type 1 has an invalid length. [ 1337.504918][T28108] netlink: 'syz.8.6452': attribute type 39 has an invalid length. [ 1337.521610][T28104] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6450'. [ 1337.537240][T27324] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.673624][T27324] bridge_slave_1: left allmulticast mode [ 1337.689072][T27324] bridge_slave_1: left promiscuous mode [ 1337.704514][T27324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.725220][T27324] bridge_slave_0: left allmulticast mode [ 1337.741172][T27324] bridge_slave_0: left promiscuous mode [ 1337.746971][T27324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.878596][T27324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1337.889334][T27324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1337.899306][T27324] bond0 (unregistering): Released all slaves [ 1337.909073][T28126] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6456'. [ 1337.918319][T28126] bridge: RTM_NEWNEIGH with invalid ether address [ 1337.934484][T28127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6456'. [ 1337.956415][T28127] bridge: RTM_NEWNEIGH with invalid ether address [ 1338.112181][T28097] gre0 speed is unknown, defaulting to 1000 [ 1338.133035][T27324] hsr_slave_0: left promiscuous mode [ 1338.151985][T27324] hsr_slave_1: left promiscuous mode [ 1338.158704][T27324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.174378][T27324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.175973][T28133] loop8: detected capacity change from 0 to 512 [ 1338.190607][T27324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.202409][T27324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.218653][T28133] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.6457: iget: bad i_size value: 38620345925642 [ 1338.243007][T27324] veth1_macvtap: left promiscuous mode [ 1338.248905][T28133] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1338.249024][T27324] veth0_macvtap: left promiscuous mode [ 1338.263681][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1338.270159][ C1] EXT4-fs (loop8): initial error at time 1785053756: ext4_orphan_get:1399: inode 15 [ 1338.279582][ C1] EXT4-fs (loop8): last error at time 1785053756: ext4_orphan_get:1399: inode 15 [ 1338.289313][T28133] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.6457: couldn't read orphan inode 15 (err -117) [ 1338.301338][T28133] loop8: lost filesystem error report for type 5 error -117 [ 1338.301438][T27324] veth1_vlan: left promiscuous mode [ 1338.310946][T28133] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1338.315163][T27324] veth0_vlan: left promiscuous mode [ 1338.352117][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1338.352135][ T28] audit: type=1400 audit(1785053757.087:3444): avc: denied { write } for pid=28132 comm="syz.8.6457" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1338.436016][ T28] audit: type=1400 audit(1785053757.167:3445): avc: denied { map } for pid=28132 comm="syz.8.6457" path="/829/file0/cpuset.effective_mems" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1338.499164][T28133] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.6457: bg 0: block 5: invalid block bitmap [ 1338.522381][T27324] team0 (unregistering): Port device team_slave_1 removed [ 1338.529723][T28133] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 904 with error 28 [ 1338.544859][T28133] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1338.544859][T28133] [ 1338.555449][T28133] EXT4-fs (loop8): Total free blocks count 0 [ 1338.562021][T27324] team0 (unregistering): Port device team_slave_0 removed [ 1338.573707][T28133] EXT4-fs (loop8): Free/Dirty block details [ 1338.585882][T28133] EXT4-fs (loop8): free_blocks=0 [ 1338.597043][T28133] EXT4-fs (loop8): dirty_blocks=908 [ 1338.608756][T28133] EXT4-fs (loop8): Block reservation details [ 1338.621032][T28133] EXT4-fs (loop8): i_reserved_data_blocks=908 [ 1338.640397][T28140] EXT4-fs (loop8): shut down requested (0) [ 1338.803627][T28139] gre0 speed is unknown, defaulting to 1000 [ 1338.994861][ T28] audit: type=1400 audit(1785053757.727:3446): avc: denied { write } for pid=28149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1339.109168][ T28] audit: type=1400 audit(1785053757.837:3447): avc: denied { write } for pid=28173 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1339.136130][T28175] loop6: detected capacity change from 0 to 512 [ 1339.151870][T28175] EXT4-fs: Ignoring removed mblk_io_submit option [ 1339.195859][T28175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.212207][T28175] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.241058][ T28] audit: type=1400 audit(1785053757.957:3448): avc: denied { write } for pid=28174 comm="syz.6.6467" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1339.269635][T27138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.288753][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1339.571614][T28097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.608999][T28097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.634569][T28097] bridge_slave_0: entered allmulticast mode [ 1339.650066][T28097] bridge_slave_0: entered promiscuous mode [ 1339.683058][ T28] audit: type=1400 audit(1785053758.417:3449): avc: denied { write } for pid=28191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1339.748031][ T28] audit: type=1400 audit(1785053758.467:3450): avc: denied { write } for pid=28207 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1339.801262][T28097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.813206][T28097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.822905][T28097] bridge_slave_1: entered allmulticast mode [ 1339.830301][T28097] bridge_slave_1: entered promiscuous mode [ 1339.860484][T28097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.875785][T28097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.899768][T28097] team0: Port device team_slave_0 added [ 1339.906688][T28097] team0: Port device team_slave_1 added [ 1339.957405][T28097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.990693][T28097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.060994][T28097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.106310][T28097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.121009][T28097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1340.192539][T28097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.262329][ T28] audit: type=1400 audit(1785053758.987:3451): avc: denied { write } for pid=28219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1340.306974][T28097] hsr_slave_0: entered promiscuous mode [ 1340.336350][T28097] hsr_slave_1: entered promiscuous mode [ 1340.347392][ T28] audit: type=1400 audit(1785053759.077:3452): avc: denied { write } for pid=28243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1340.352038][T28097] debugfs: 'hsr0' already exists in 'hsr' [ 1340.409649][T28097] Cannot create hsr debugfs directory [ 1340.461039][T28238] syzkaller0: entered promiscuous mode [ 1340.489837][T28238] syzkaller0: entered allmulticast mode [ 1340.497108][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1340.575754][T28252] loop6: detected capacity change from 0 to 256 [ 1340.617425][T28252] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 1340.670231][T28255] loop6: detected capacity change from 0 to 128 [ 1340.710642][T28255] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1340.795127][T28255] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.934845][ T28] audit: type=1400 audit(1785053759.667:3453): avc: denied { write } for pid=28258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.051302][T27138] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1341.101444][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1341.150522][T28283] syzkaller1: entered promiscuous mode [ 1341.166416][T28283] syzkaller1: entered allmulticast mode [ 1341.215140][T28097] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1342.053502][T28097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1342.065309][T28097] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1342.121328][T28097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1342.179240][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1342.229796][T28097] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1342.243061][T28097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1342.267807][T28097] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1342.305400][T28097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1342.415853][T28097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.462930][T28097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.496866][T27320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.504025][T27320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.518336][T27319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.525519][T27319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.665846][T28424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6497'. [ 1342.976193][T28097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.180203][T16554] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1343.210278][T16554] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1343.517740][T28541] sctp: [Deprecated]: syz.8.6508 (pid 28541) Use of int in max_burst socket option. [ 1343.517740][T28541] Use struct sctp_assoc_value instead [ 1343.547472][T28097] veth0_vlan: entered promiscuous mode [ 1343.558807][T28097] veth1_vlan: entered promiscuous mode [ 1343.567959][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1343.568030][ T28] audit: type=1400 audit(1785053762.297:3466): avc: denied { write } for pid=28486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1343.647732][T28097] veth0_macvtap: entered promiscuous mode [ 1343.665450][T28097] veth1_macvtap: entered promiscuous mode [ 1343.689031][ T28] audit: type=1400 audit(1785053762.417:3467): avc: denied { write } for pid=28552 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1343.714326][T28097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1343.747542][T28097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.789258][T27327] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.802851][T27327] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.850411][T27327] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.874159][T27327] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.978913][ T28] audit: type=1400 audit(1785053762.697:3468): avc: denied { write } for pid=28557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1344.012628][T28561] syzkaller0: entered promiscuous mode [ 1344.018201][T28561] syzkaller0: entered allmulticast mode [ 1344.062786][ T28] audit: type=1326 audit(1785053762.767:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.8.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22da70de99 code=0x7ffc0000 [ 1344.173072][ T28] audit: type=1326 audit(1785053762.767:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.8.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22da70de99 code=0x7ffc0000 [ 1344.227597][T28589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6515'. [ 1344.246503][T28577] loop8: detected capacity change from 0 to 8192 [ 1344.250065][ T28] audit: type=1326 audit(1785053762.767:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.8.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22da70de99 code=0x7ffc0000 [ 1344.339191][ T28] audit: type=1326 audit(1785053762.767:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.8.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f22da70de99 code=0x7ffc0000 [ 1344.382070][ T28] audit: type=1326 audit(1785053762.767:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.8.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22da70de99 code=0x7ffc0000 [ 1344.409858][ T28] audit: type=1326 audit(1785053762.767:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.8.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22da70de99 code=0x7ffc0000 [ 1344.451148][ T28] audit: type=1326 audit(1785053762.767:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28569 comm="syz.8.6511" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22da70de99 code=0x7ffc0000 [ 1344.561499][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6519'. [ 1344.593983][T28611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.623930][T28611] bridge_slave_1 (unregistering): left allmulticast mode [ 1344.631118][T28611] bridge_slave_1 (unregistering): left promiscuous mode [ 1344.642579][T28611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.827669][T28640] loop8: detected capacity change from 0 to 1024 [ 1344.862397][T28640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1344.885703][T28643] loop6: detected capacity change from 0 to 512 [ 1344.916806][T28643] EXT4-fs: Ignoring removed nobh option [ 1344.929688][T28640] loop8: detected capacity change from 1024 to 64 [ 1344.948175][T28655] syz.8.6527: attempt to access beyond end of device [ 1344.948175][T28655] loop8: rw=8390659, sector=256, nr_sectors = 32 limit=64 [ 1344.974107][T28643] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1344.995900][T28640] syz.8.6527: attempt to access beyond end of device [ 1344.995900][T28640] loop8: rw=2049, sector=288, nr_sectors = 2 limit=64 [ 1345.019052][T28655] EXT4-fs (loop8): discard request in group:0 block:8 count:16 failed with -5 [ 1345.031597][T28659] 8021q: VLANs not supported on syzkaller0 [ 1345.043999][T28643] EXT4-fs (loop6): 1 truncate cleaned up [ 1345.048919][T28659] syzkaller0: left promiscuous mode [ 1345.050347][T28640] EXT4-fs warning (device loop8): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 144) [ 1345.061200][T28659] syzkaller0: left allmulticast mode [ 1345.071523][T28643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1345.091217][T28655] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: IO failure [ 1345.125366][T28640] Buffer I/O error on device loop8, logical block 144 [ 1345.172148][T27138] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1345.239039][T25115] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1345.258471][T28648] kmmpd-loop8: attempt to access beyond end of device [ 1345.258471][T28648] loop8: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 1345.291279][T28648] buffer_io_error: 12 callbacks suppressed [ 1345.291300][T28648] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 1345.367982][T27327] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.418478][T28695] only policy match revision 0 supported [ 1345.418493][T28695] unable to load match [ 1345.448791][T27327] bond0: (slave netdevsim2): Releasing backup interface [ 1345.469149][T27327] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.496328][T28693] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1345.645983][T27327] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.672142][T28735] loop6: detected capacity change from 0 to 256 [ 1345.798724][T28737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.855625][T28737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1345.889431][T28737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1345.914466][T28737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1345.923516][T28737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1345.942250][T28737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1345.954130][T28737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1345.972926][T28737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.985549][T28737] batman_adv: batadv0: Interface activated: ipvlan0 [ 1346.017361][T27327] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.191454][T28760] macvlan2: entered promiscuous mode [ 1346.196983][T28760] bridge0: entered promiscuous mode [ 1346.210345][T28706] gre0 speed is unknown, defaulting to 1000 [ 1346.232533][T27336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1346.267784][ T5322] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1346.288769][T27336] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1346.360524][T27327] bridge_slave_1: left promiscuous mode [ 1346.387167][T27327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.407318][T27327] bridge_slave_0: left allmulticast mode [ 1346.425490][T27327] bridge_slave_0: left promiscuous mode [ 1346.441076][T27327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.812552][T27327] bond2 (unregistering): (slave geneve3): Releasing active interface [ 1346.836201][T27327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.849810][T27327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.859954][T27327] bond0 (unregistering): Released all slaves [ 1346.868121][T27327] bond1 (unregistering): (slave veth3): Releasing active interface [ 1346.878025][T27327] bond1 (unregistering): Released all slaves [ 1346.887852][T27327] bond2 (unregistering): Released all slaves [ 1346.971391][T27331] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1347.049392][T28829] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6563'. [ 1347.064981][T27327] hsr_slave_0: left promiscuous mode [ 1347.085243][T27327] hsr_slave_1: left promiscuous mode [ 1347.093589][T27327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.109102][T27327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.120075][T27327] batman_adv: batadv0: Interface deactivated: macsec2 [ 1347.126966][T27327] batman_adv: batadv0: Removing interface: macsec2 [ 1347.190563][ T5321] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1347.286487][T28829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.299412][T28829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.584276][T27327] IPVS: stop unused estimator thread 0... [ 1347.591862][T28706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.614409][T28706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.624498][T28706] bridge_slave_0: entered allmulticast mode [ 1347.649172][T28706] bridge_slave_0: entered promiscuous mode [ 1347.729288][T28706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.737274][T28706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.745314][T28706] bridge_slave_1: entered allmulticast mode [ 1347.755776][T28706] bridge_slave_1: entered promiscuous mode [ 1347.944495][T28706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1348.003138][T27327] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1348.012270][T27327] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1348.057503][T28706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.243165][T28706] team0: Port device team_slave_0 added [ 1348.335253][T28706] team0: Port device team_slave_1 added [ 1348.389926][ T5331] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1348.403896][T28706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.425560][T28706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.510640][T28706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.626728][T28706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.633722][T28706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.643219][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 1348.643281][ T28] audit: type=1400 audit(1785053767.337:3525): avc: denied { write } for pid=28885 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1348.663439][T28706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.789763][T28884] macvlan2: entered promiscuous mode [ 1348.795115][T28884] bridge0: entered promiscuous mode [ 1348.818958][T28706] hsr_slave_0: entered promiscuous mode [ 1348.825038][T28706] hsr_slave_1: entered promiscuous mode [ 1348.830890][T28706] debugfs: 'hsr0' already exists in 'hsr' [ 1348.836629][T28706] Cannot create hsr debugfs directory [ 1349.265943][T28916] loop7: detected capacity change from 0 to 164 [ 1349.319964][T28916] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1349.351778][T28916] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1349.378931][T28916] rock: directory entry would overflow storage [ 1349.388934][T28916] rock: sig=0x4f50, size=4, remaining=3 [ 1349.408295][T28916] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1349.480489][ T28] audit: type=1400 audit(1785053767.927:3526): avc: denied { write } for pid=28891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1349.505163][ T28] audit: type=1400 audit(1785053768.077:3527): avc: denied { write } for pid=28919 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1349.567187][T28932] loop7: detected capacity change from 0 to 512 [ 1349.607215][T28932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.624441][T28932] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.672705][ T28] audit: type=1404 audit(1785053768.407:3528): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 1349.704993][ T28] audit: type=1400 audit(1785053768.407:3529): avc: denied { search } for pid=28942 comm="sed" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 1349.755126][ T28] audit: type=1400 audit(1785053768.427:3530): avc: denied { search } for pid=28943 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 1349.783338][ T28] audit: type=1400 audit(1785053768.457:3531): avc: denied { recv } for pid=28911 comm="syz.2.6577" saddr=10.128.0.163 src=30036 daddr=10.128.1.169 dest=55692 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1349.810382][ T28] audit: type=1400 audit(1785053768.477:3532): avc: denied { search } for pid=28946 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 1349.835172][ T28] audit: type=1400 audit(1785053768.517:3533): avc: denied { recv } for pid=28933 comm="syz.3.6585" saddr=10.128.0.163 src=30036 daddr=10.128.1.169 dest=55692 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 1349.902145][ T28] audit: type=1400 audit(1785053768.517:3534): avc: denied { search } for pid=28930 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 1349.943750][T28097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.083981][T28971] loop7: detected capacity change from 0 to 512 [ 1350.099016][T28971] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1350.116025][T28971] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 1350.137264][T28971] EXT4-fs (loop7): 1 truncate cleaned up [ 1350.143143][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1350.143169][ C0] EXT4-fs (loop7): initial error at time 1785053768: ext4_mb_generate_buddy:1317 [ 1350.143193][ C0] EXT4-fs (loop7): last error at time 1785053768: ext4_mb_generate_buddy:1317 [ 1350.168776][T28971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.219684][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1350.272808][T28097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.297791][T28706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1350.417901][T28706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.469623][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1350.534342][T28988] netlink: 'syz.3.6594': attribute type 12 has an invalid length. [ 1350.638563][T28785] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1350.657442][T28706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1350.702588][T28706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1350.723798][T28785] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1350.792440][T28706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1350.883849][T28706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1350.985827][T28706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1351.021595][T28706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1351.300558][T28706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.340214][T28706] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.405968][T28706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1351.417919][T28706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1351.439343][T27319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.446579][T27319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.498154][T27319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.505334][T27319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.938053][T29046] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1351.974689][T28706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.979952][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1351.983438][T29046] SELinux: failed to load policy [ 1352.208452][T28706] veth0_vlan: entered promiscuous mode [ 1352.232515][T29065] xt_hashlimit: size too large, truncated to 1048576 [ 1352.250713][T28706] veth1_vlan: entered promiscuous mode [ 1352.649926][T28706] veth0_macvtap: entered promiscuous mode [ 1352.683624][T28706] veth1_macvtap: entered promiscuous mode [ 1352.738422][T28706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1352.771221][T28706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.807976][T27327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.816815][T27327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.841909][T27327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.864282][T27327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.017142][T29112] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6618'. [ 1353.366894][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1353.435027][T27327] Bluetooth: hci0: Frame reassembly failed (-84) [ 1353.649953][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 1353.649971][ T28] audit: type=1400 audit(1785053772.387:3639): avc: denied { write } for pid=29137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1353.729504][ T28] audit: type=1400 audit(1785053772.457:3640): avc: denied { write } for pid=29155 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1353.806798][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1354.052203][ T28] audit: type=1400 audit(1785053772.757:3641): avc: denied { create } for pid=29186 comm="syz.2.6634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1354.093382][ T28] audit: type=1400 audit(1785053772.757:3642): avc: denied { write } for pid=29175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1354.116686][T29187] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 1354.141252][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1354.150763][ T28] audit: type=1400 audit(1785053772.807:3643): avc: denied { ioctl } for pid=29186 comm="syz.2.6634" path="socket:[80369]" dev="sockfs" ino=80369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1354.187074][T29194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6635'. [ 1354.196824][T29194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6635'. [ 1354.200916][ T28] audit: type=1400 audit(1785053772.807:3644): avc: denied { bind } for pid=29186 comm="syz.2.6634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1354.242941][ T28] audit: type=1400 audit(1785053772.837:3645): avc: denied { write } for pid=29191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1354.266467][ T28] audit: type=1400 audit(1785053772.847:3646): avc: denied { write } for pid=29186 comm="syz.2.6634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1354.343670][ T28] audit: type=1400 audit(1785053773.077:3647): avc: denied { bind } for pid=29199 comm="syz.6.6637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1354.492954][ T28] audit: type=1400 audit(1785053773.227:3648): avc: denied { write } for pid=29200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1354.608435][T29221] IPVS: Error connecting to the multicast addr [ 1354.641209][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1355.398315][T29289] syzkaller0: entered promiscuous mode [ 1355.415157][T29289] syzkaller0: entered allmulticast mode [ 1355.420866][T18489] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1355.428851][T29130] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1356.393379][T29356] netlink: 'syz.7.6660': attribute type 12 has an invalid length. [ 1358.419287][T27336] ================================================================== [ 1358.427517][T27336] BUG: KCSAN: data-race in alloc_pid / copy_process [ 1358.434137][T27336] [ 1358.436471][T27336] read-write to 0xffffffff86c5c268 of 4 bytes by task 27342 on cpu 1: [ 1358.444631][T27336] alloc_pid+0x6bb/0x930 [ 1358.448905][T27336] copy_process+0x11aa/0x2310 [ 1358.453598][T27336] kernel_clone+0x1c0/0x5f0 [ 1358.458136][T27336] user_mode_thread+0x9c/0xd0 [ 1358.462831][T27336] call_usermodehelper_exec_work+0x7a/0x160 [ 1358.468753][T27336] process_scheduled_works+0x4d4/0x9a0 [ 1358.474231][T27336] worker_thread+0x569/0x750 [ 1358.478860][T27336] kthread+0x221/0x270 [ 1358.483026][T27336] ret_from_fork+0x146/0x330 [ 1358.487664][T27336] ret_from_fork_asm+0x1a/0x30 [ 1358.492451][T27336] [ 1358.494784][T27336] read to 0xffffffff86c5c268 of 4 bytes by task 27336 on cpu 0: [ 1358.502427][T27336] copy_process+0x1aae/0x2310 [ 1358.507126][T27336] kernel_clone+0x1c0/0x5f0 [ 1358.511657][T27336] user_mode_thread+0x9c/0xd0 [ 1358.516352][T27336] call_usermodehelper_exec_work+0x7a/0x160 [ 1358.522274][T27336] process_scheduled_works+0x4d4/0x9a0 [ 1358.527753][T27336] worker_thread+0x569/0x750 [ 1358.532370][T27336] kthread+0x221/0x270 [ 1358.536457][T27336] ret_from_fork+0x146/0x330 [ 1358.541076][T27336] ret_from_fork_asm+0x1a/0x30 [ 1358.545979][T27336] [ 1358.548313][T27336] value changed: 0x800001a9 -> 0x800001aa [ 1358.554051][T27336] [ 1358.556384][T27336] Reported by Kernel Concurrency Sanitizer on: [ 1358.562553][T27336] CPU: 0 UID: 0 PID: 27336 Comm: kworker/u8:118 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1358.573860][T27336] Tainted: [W]=WARN [ 1358.577671][T27336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1358.587742][T27336] Workqueue: events_unbound call_usermodehelper_exec_work [ 1358.594884][T27336] ================================================================== [ 1358.603187][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1359.180000][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1360.460088][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1365.012415][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 1365.012435][ T28] audit: type=1400 audit(1785053783.747:3685): avc: denied { write } for pid=29580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.052044][ T28] audit: type=1400 audit(1785053783.787:3686): avc: denied { write } for pid=29591 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1365.580470][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!