last executing test programs: 4m47.442174749s ago: executing program 3 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)="ffffffffffff0011223344554305000f32000008000000000000005500112033445500ff0000a728358b8d18314ae57704fa8dda5fdf72daffa1458f34666e347a1554", 0x43, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 4m47.270096233s ago: executing program 3 (id=147): r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x1ec5, 0x40, 0x8000003, 0x184}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, 0x0) close(0x3) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000001c0)=""/105, 0x69, 0x8001, &(0x7f0000000240)={r2, r3+60000000}) io_setup(0x1, 0x0) 4m47.118683977s ago: executing program 3 (id=152): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000002280)="2e1221b23bb601c493d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f00000022c0)="8bcceb216f624c06f5ff84087509000020006558", 0x14}, {&(0x7f0000002380)="c04b89aebba7a888c0", 0x9}], 0x3) 4m46.925966022s ago: executing program 3 (id=154): syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 4m46.835505934s ago: executing program 3 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4m46.721101316s ago: executing program 0 (id=158): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) accept(r1, 0x0, 0x0) 4m46.720631487s ago: executing program 3 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000011c0)={0x0, 0x7, 0xd04a}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 4m45.717106821s ago: executing program 0 (id=165): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000280)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 4m44.853241913s ago: executing program 0 (id=171): sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000052) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) writev(0xffffffffffffffff, &(0x7f0000001600)=[{0x0}, {0x0}], 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x2000}) mq_notify(r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000780)='..SN\xd5\xa8\xe7\x13\x9d\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` ') 4m44.695411317s ago: executing program 0 (id=173): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x19) open(&(0x7f00000000c0)='./bus\x00', 0x14927e, 0x1a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4m44.118621501s ago: executing program 0 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0xffffffff, 0x40000a, 0x6, 0x6, 0x9, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x6, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4m43.33467725s ago: executing program 0 (id=183): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) timer_create(0x4, 0x0, 0x0) tkill(r1, 0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m43.3344962s ago: executing program 32 (id=183): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) timer_create(0x4, 0x0, 0x0) tkill(r1, 0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m31.651815949s ago: executing program 33 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000011c0)={0x0, 0x7, 0xd04a}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 3m33.613387595s ago: executing program 5 (id=1056): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, 0x0, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x8240, 0x0) fcntl$setpipe(r0, 0x407, 0x10) sendmsg$nl_route(r0, 0x0, 0x4) 3m33.243032345s ago: executing program 5 (id=1059): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 3m32.126574842s ago: executing program 5 (id=1071): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x6}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x0, 0x2, 0x1, 0xc}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 3m31.465317389s ago: executing program 5 (id=1081): syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m31.183960775s ago: executing program 5 (id=1083): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="c2b0de9036dafc001200002fc7eba4112f37", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r0 = getpid() perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0xe}, 0x104002, 0xfffffffffffffffc, 0xfffffffd, 0x0, 0x6f00000001000, 0x2, 0x0, 0x0, 0xffffbffe, 0x0, 0x4}, r0, 0x4000000001, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1008, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x101, 0x4}, 0x100901, 0x1, 0x5, 0xb, 0x5, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 3m31.078701488s ago: executing program 5 (id=1085): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) 3m30.947476431s ago: executing program 34 (id=1085): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) 1m11.578641809s ago: executing program 2 (id=2616): listns(&(0x7f0000000080)={0x20, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) listen(r0, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(0xffffffffffffffff, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000340)) 1m11.434267303s ago: executing program 2 (id=2621): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff000000000000000000"], 0x38}}, 0x0) 1m11.389578984s ago: executing program 2 (id=2623): madvise(&(0x7f0000775000/0x7000)=nil, 0x7000, 0x16) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000040)=0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2e, 0x81, 0x8, 0x0, 0x0, 0x5, 0x13088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffff7}, 0x1040, 0x7, 0x101, 0x1, 0xe, 0xd3e, 0xca6, 0x0, 0x1, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x8001}, 0x8810) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x110, 0x0, 0xfffffffffffffe0f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x156, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r1, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) 1m11.14652261s ago: executing program 2 (id=2629): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000340)="00000000000010", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x1cb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = epoll_create(0x752) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x80000010}) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000002c0), 0x4) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x332b892, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m10.706608511s ago: executing program 2 (id=2632): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x2040400) r0 = getpid() r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x2004000c) r2 = syz_pidfd_open(r0, 0x0) process_madvise(r2, 0x0, 0x0, 0x12, 0x0) r3 = socket(0xa, 0x3, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0xc9, 0x9}, 0x8b3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x12, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$eJzs3U9vI2cZAPBnJvGS7aYkpRxKpZaKFu1WsPamgTbi0BYJcasEKvclSrwhihNHsdNuQoVS8QGQEIJKnDhxQeIDIKHyDapKK8EdAQIh2MIBIWDQ2OPdxBpvEjW2I/v3k8bzzuuZeZ53HI/nX2YCmFrPRcTrETETES9GxEJRnxZdHHW7fLyP7r+zlnfxQRJv/i2JpKiLTumha8Vkc91eqdbB4dZqo1HfK4Zr7e3dWuvg8Obm9upGfaO+s7y89PLKKysxd2vQLL5znnbm7Xr1a3/68Q9+/vVXf/3Ft39/+y83vpdnPV+8323Ho6UnhmbOFLe7ZCr5ssjd+3dRv3ee5C+xpFi2lXEnAgDAmTwZEZ+KiM91tv8XYiZme2/ZpAMAAIAJkb02H/9JIjIAAABgYr3WuQY2SavF9a3zkabVavca3k/HY2mj2Wp/4U5zf2e9e63sYlTSO5uN+q3ius/FqCT58FKn/HD4pb7h5Yh4IiJ+tHC1M1xdazbWx33wAwAAAKbEtb79/38udPf/AQAAgAmzOO4EAAAAgKEbtP+fjDgPAAAAYHic/wcAAICJ9o033si7rPf86/W3Dva3mm/dXK+3tqrb+2vVtebebnWj2dzo3LNv+7T5NZrN3S/Fzv7dWrveatdaB4e3t5v7O+3bm71HYAMAAACj9sRn3/9dEhFHX7na6XJX8peZARO4VgAmRnqekf84vDyA0Rv0Mw9MvtlxJwCMz1Gxvw9MrRO3+ijZKDh+8c6JYwYfDC8nAADgYl3/TPn5/3wXoDLu5IChOtf5f2CiOP8P06vs/P9vBo/+4TBzAUarYgsApt5pj/oYePOOM5//z7JT5wUAAAzVfL7tfxRRLc4FzkeaVqsRj3f+1b+S3Nls1G9FxCcj4rcLlU/kw0udKROPBwQAAAAAAAAAAAAAAAAAAAAAAACAM8qyJDIAAABgokWkf06K539dX3hhvv/4wJXkXwudfkS8/dM3f3J3td3eW8rr//6gvv1eUf/SOI5gAAAAwNSb7a/o7af39uMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CJ9dP+dtV43yrh//WpELJbFn425Tn8uKhHx2D+SmD02XRIRMxcQ/+jdiHiqLH6SpxWLRRb98dOIuDqa+M9kWZZGSfxrFxAfptn7+frn9bLvXxrPdfrl3//Zovu4Bq//0gfrv5kB67/Hzxjj6Xu/rA2M/27E07Pl659e/GRA/OfLZliyUL79rcPDQfGzn0VcL/39SU7EqrW3d2utg8Obm9urG/WN+s7y8tLLK6+sfHnlVu3OZqNevJbG+OEzv/pfX9V/s65O+2NA/MVT2v9CXqgcb0x/mCLYvbv3n+wWK32z6MS/8Xz55//UI+LnfxOfL34H8vev98pH3fJxz/7iw2dLEyvirw9o/2mf/41BM+3z4je//4czjgoAjEDr4HBrtdGo7w298F6WZaOKdWkK2eVI41IU5i5HGgqnFy7iyBYAAHDZPNzoP8dE3x1iQgAAAAAAAAAAAAAAAAAAADCFWgeRDrwN2JWLuZ1Yf8yj8TQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/h8AAP//oszk1w==") add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket$kcm(0xa, 0x5, 0x0) 1m10.506667855s ago: executing program 2 (id=2637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) unshare(0x28000600) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8, 0x0) 1m10.506483405s ago: executing program 35 (id=2637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) unshare(0x28000600) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8, 0x0) 3.422595555s ago: executing program 8 (id=3279): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f000036b000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 2.80007739s ago: executing program 4 (id=3288): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x200448c1}, 0x20040080) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port1\x00', 0x44, 0xa04f2, 0x6, 0x8000088, 0x6, 0x40003, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800000, 0xfffffffd, 0x7d, 0x8e1d9, 0x3101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x20004, 0x6, 0x9, 0x6}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r4 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x1, 0x25c, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.753192542s ago: executing program 8 (id=3289): madvise(&(0x7f0000775000/0x7000)=nil, 0x7000, 0x16) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000040)=0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x8001}, 0x8810) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x110, 0x0, 0xfffffffffffffe0f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x156, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) 2.655579244s ago: executing program 4 (id=3291): socket$rds(0x15, 0x5, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setns(0xc9, 0x0) socket(0x15, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x1) recvfrom(r3, 0x0, 0x0, 0x4100, 0x0, 0x0) 2.518544247s ago: executing program 4 (id=3293): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x30, 0xffffffffffffffff, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000240)={0x1, 0xdc43, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x8000, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xc}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x881}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44008040}, 0x40008d2) listen(r3, 0x8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.371275761s ago: executing program 4 (id=3294): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000040)=0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8810) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x156, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) 2.232732994s ago: executing program 8 (id=3295): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 1.984612411s ago: executing program 7 (id=3296): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4, 0x80000001, 0x1, 0x81a, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffea6, 0x10, 0x0, 0x0, 0x116ed, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x20, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000140)=0x7f) 1.928852822s ago: executing program 8 (id=3297): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f000036b000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.757818306s ago: executing program 7 (id=3298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x1, 'wg2\x00', {}, 0x3}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(0xffffffffffffffff, 0x200000000000000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) connect$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 1.60943455s ago: executing program 7 (id=3299): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x3830, 0x1, 0xbd6, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x2040400) r0 = getpid() r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x2004000c) r2 = syz_pidfd_open(r0, 0x0) process_madvise(r2, 0x0, 0x0, 0x12, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0xffffffffffffffff, 0xee01, 0x0, 0xc9, 0x9}, 0x8b3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x12, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$eJzs3U9vI2cZAPBnJvGS7aYkpRxKpZaKFu1WsPamgTbi0BYJcasEKvclSrwhihNHsdNuQoVS8QGQEIJKnDhxQeIDIKHyDapKK8EdAQIh2MIBIWDQ2OPdxBpvEjW2I/v3k8bzzuuZeZ53HI/nX2YCmFrPRcTrETETES9GxEJRnxZdHHW7fLyP7r+zlnfxQRJv/i2JpKiLTumha8Vkc91eqdbB4dZqo1HfK4Zr7e3dWuvg8Obm9upGfaO+s7y89PLKKysxd2vQLL5znnbm7Xr1a3/68Q9+/vVXf/3Ft39/+y83vpdnPV+8323Ho6UnhmbOFLe7ZCr5ssjd+3dRv3ee5C+xpFi2lXEnAgDAmTwZEZ+KiM91tv8XYiZme2/ZpAMAAIAJkb02H/9JIjIAAABgYr3WuQY2SavF9a3zkabVavca3k/HY2mj2Wp/4U5zf2e9e63sYlTSO5uN+q3ius/FqCT58FKn/HD4pb7h5Yh4IiJ+tHC1M1xdazbWx33wAwAAAKbEtb79/38udPf/AQAAgAmzOO4EAAAAgKEbtP+fjDgPAAAAYHic/wcAAICJ9o033si7rPf86/W3Dva3mm/dXK+3tqrb+2vVtebebnWj2dzo3LNv+7T5NZrN3S/Fzv7dWrveatdaB4e3t5v7O+3bm71HYAMAAACj9sRn3/9dEhFHX7na6XJX8peZARO4VgAmRnqekf84vDyA0Rv0Mw9MvtlxJwCMz1Gxvw9MrRO3+ijZKDh+8c6JYwYfDC8nAADgYl3/TPn5/3wXoDLu5IChOtf5f2CiOP8P06vs/P9vBo/+4TBzAUarYgsApt5pj/oYePOOM5//z7JT5wUAAAzVfL7tfxRRLc4FzkeaVqsRj3f+1b+S3Nls1G9FxCcj4rcLlU/kw0udKROPBwQAAAAAAAAAAAAAAAAAAAAAAACAM8qyJDIAAABgokWkf06K539dX3hhvv/4wJXkXwudfkS8/dM3f3J3td3eW8rr//6gvv1eUf/SOI5gAAAAwNSb7a/o7af39uMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CJ9dP+dtV43yrh//WpELJbFn425Tn8uKhHx2D+SmD02XRIRMxcQ/+jdiHiqLH6SpxWLRRb98dOIuDqa+M9kWZZGSfxrFxAfptn7+frn9bLvXxrPdfrl3//Zovu4Bq//0gfrv5kB67/Hzxjj6Xu/rA2M/27E07Pl659e/GRA/OfLZliyUL79rcPDQfGzn0VcL/39SU7EqrW3d2utg8Obm9urG/WN+s7y8tLLK6+sfHnlVu3OZqNevJbG+OEzv/pfX9V/s65O+2NA/MVT2v9CXqgcb0x/mCLYvbv3n+wWK32z6MS/8Xz55//UI+LnfxOfL34H8vev98pH3fJxz/7iw2dLEyvirw9o/2mf/41BM+3z4je//4czjgoAjEDr4HBrtdGo7w298F6WZaOKdWkK2eVI41IU5i5HGgqnFy7iyBYAAHDZPNzoP8dE3x1iQgAAAAAAAAAAAAAAAAAAADCFWgeRDrwN2JWLuZ1Yf8yj8TQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/h8AAP//oszk1w==") add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) 1.6010987s ago: executing program 6 (id=3300): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f000036b000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1.480013633s ago: executing program 7 (id=3301): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) creat(0x0, 0xd931d3864d39dcdb) timer_settime(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, 0x0, 0x40040) 1.307744377s ago: executing program 1 (id=3302): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) 1.307234787s ago: executing program 1 (id=3303): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1a2040, 0x1) fsopen(&(0x7f00000008c0)='cgroup\x00', 0x1) syz_clone(0xb100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) mmap$xdp(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x30, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000080)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}, '4\x00\x00\x00\x00\x00'}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f00), 0x0, 0x0, 0x0, 0x20008001}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.157698101s ago: executing program 7 (id=3304): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1) mount(0x0, 0x0, 0x0, 0x800040, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0x2, 0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xa0, &(0x7f0000000680)={0x0, 0xf518, 0x2, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}}, 0xf0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) 1.050674664s ago: executing program 1 (id=3305): madvise(&(0x7f0000775000/0x7000)=nil, 0x7000, 0x16) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000040)=0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x8001}, 0x8810) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x110, 0x0, 0xfffffffffffffe0f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x156, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000000500)=""/202, 0xca, 0x200000200009, 0x0) 1.039948874s ago: executing program 8 (id=3306): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x131d0ea, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000000540)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x3, 0xf, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r9, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) 866.469859ms ago: executing program 8 (id=3307): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = semget(0x1, 0x4, 0x39c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r1, &(0x7f0000000380)=[{0x2, 0x82, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9c5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x881}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8f9}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1d}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff4}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) preadv2(r3, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) write(r2, &(0x7f0000000200)="c7", 0x1) sendfile(r2, r0, 0x0, 0x3ffff) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendfile(r2, r0, 0x0, 0x7ffff000) 866.256948ms ago: executing program 4 (id=3308): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x10, 0x80002, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 702.291803ms ago: executing program 7 (id=3309): shutdown(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000003b000100000000000000000003010000000000002600010000112233445566778899aabb0800dd0000140000000145b50000010203040506070800000c00020006002000080000"], 0x68}}, 0x0) request_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix@De', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x5, 0x401, 0x1000000080001}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x81, @local, 0x200}], 0x1c) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x3) 701.142583ms ago: executing program 6 (id=3319): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0xd, 0x40, 0x3, 0x0, 0x1, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4004810) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000001c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x800000009}}, {@jqfmt_vfsold}, {@block_validity}, {@jqfmt_vfsv1}, {@bh}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x507, &(0x7f0000000540)="$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") r2 = dup(r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 614.631325ms ago: executing program 1 (id=3310): unshare(0x40600) unshare(0x100) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r5, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x24044080) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x7, 0x125000) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000180)) setns(0xc9, 0x0) r8 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x40106183, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2082404}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 613.684475ms ago: executing program 1 (id=3321): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1) mount(0x0, 0x0, 0x0, 0x800040, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x86, 0x2, 0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xa0, &(0x7f0000000680)={0x0, 0xf518, 0x2, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}}, 0xf0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) 395.64529ms ago: executing program 6 (id=3311): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(r0, &(0x7f0000000100)="ce0ee7a11ab44c6c7776ab5403c8db38e2db7f3f118f8801e9a9a483584acff05b9269b7c94f6ec71ac336a3d18d6ac47526030c55cc7cac6f5b56409d5d4f23a6566840515a96f720daf02183e6e99d1bcb1058465e080730464a9fe3a1ea2f7cf77df6", 0x64, 0x3) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x101000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x0, 0x7f, 0xdf, 0x0, 0x1, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x48801}, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x74, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x3e, 0x3a, 0x1, @private1, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x6, 0x6, "8896ef", 0x2, 0x2b, 0xff, @private2, @local, [@fragment={0x2f, 0x0, 0x1, 0x1, 0x0, 0xf, 0x67}], "800065581100"}}}}}}}, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000008c0)={0x1, 0x1, 0x6, 0x17, 0x159, 0x0}) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x3922, 0x1, 0x7, 0xffffffff, 0x9}, 0x18, 0x1000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 393.86681ms ago: executing program 1 (id=3323): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f000036b000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 381.91528ms ago: executing program 4 (id=3312): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000761000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f000036b000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 260.825463ms ago: executing program 6 (id=3313): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a1804, &(0x7f0000000bc0)=ANY=[@ANYRES64=r0, @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYRES64=r0, @ANYRESDEC=r0], 0xfe, 0x2c1, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000240)={0x80, 0x1}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x2400c000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x8800) getsockopt$TIPC_NODE_RECVQ_DEPTH(r5, 0x10f, 0x83, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x45000824) 176.005215ms ago: executing program 6 (id=3314): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x0, 0x0, 0xc080}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) creat(0x0, 0xd931d3864d39dcdb) timer_settime(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, 0x0, 0x40040) 0s ago: executing program 6 (id=3315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r3, 0x4) listen(r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x2, 0x0, 0x0, 0xa, 0x8, 0x30, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x9, &(0x7f0000000340)=""/9, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): dir permissive=1 [ 209.685440][ T29] audit: type=1400 audit(2000000023.209:3691): avc: denied { write } for pid=10599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.770975][T10618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 210.604291][T10660] loop2: detected capacity change from 0 to 128 [ 210.624134][T10660] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.637519][T10660] ext4 filesystem being mounted at /406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.670544][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2034'. [ 210.690452][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.700524][ T363] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.700568][ T363] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.700682][ T363] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.700716][ T363] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.742512][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2034'. [ 210.906244][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.816961][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 212.816986][ T29] audit: type=1400 audit(2000000026.091:3704): avc: denied { ioctl } for pid=10711 comm="syz.2.2053" path="pid:[4026532376]" dev="nsfs" ino=4026532376 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 212.851825][T10712] netlink: 'syz.2.2053': attribute type 5 has an invalid length. [ 212.913058][T10712] loop2: detected capacity change from 0 to 512 [ 212.925181][T10712] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 212.937871][T10712] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 212.938357][T10712] EXT4-fs (loop2): orphan cleanup on readonly fs [ 212.939039][T10712] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:521: comm syz.2.2053: Block bitmap for bg 0 marked uninitialized [ 212.968603][T10712] loop2: lost filesystem error report for type 5 error -117 [ 212.970278][T10712] EXT4-fs (loop2): Remounting filesystem read-only [ 212.970874][T10712] EXT4-fs (loop2): 1 orphan inode deleted [ 212.998666][T10712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.013886][T10712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.075392][T10712] loop2: detected capacity change from 0 to 512 [ 213.085324][T10712] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.098195][T10712] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: fsck is running on the filesystem [ 213.098269][T10712] EXT4-fs warning (device loop2): ext4_multi_mount_protect:313: MMP failure info: last update time: 72057595707060727, last update node: , last update device: loop14 [ 213.276884][T10724] loop2: detected capacity change from 0 to 512 [ 213.394096][ T9878] net_ratelimit: 75 callbacks suppressed [ 213.394128][ T9878] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.394153][ T9878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.398119][T10710] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2054'. [ 213.505109][ T9882] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.505140][ T9882] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.626109][ T9878] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.626137][ T9878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.743252][ T9882] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.743284][ T9882] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 213.781117][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 213.818179][T10743] hsr_slave_1 (unregistering): left promiscuous mode [ 213.863610][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 213.883609][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 214.126971][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2070'. [ 214.186395][T10769] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 214.216534][ T29] audit: type=1400 audit(2000000027.375:3705): avc: denied { ioctl } for pid=10763 comm="syz.2.2071" path="socket:[29762]" dev="sockfs" ino=29762 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.358885][ T29] audit: type=1400 audit(2000000027.513:3706): avc: denied { write } for pid=10771 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.383095][ T29] audit: type=1400 audit(2000000027.541:3707): avc: denied { write } for pid=10789 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.623659][ T29] audit: type=1400 audit(2000000027.763:3708): avc: denied { write } for pid=10796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.669777][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2077'. [ 214.736379][ T29] audit: type=1400 audit(2000000027.864:3709): avc: denied { write } for pid=10815 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.760095][T10809] hsr_slave_1 (unregistering): left promiscuous mode [ 214.903425][ T29] audit: type=1400 audit(2000000028.021:3710): avc: denied { write } for pid=10820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.956566][ T29] audit: type=1400 audit(2000000028.067:3711): avc: denied { write } for pid=10837 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.093418][ T29] audit: type=1400 audit(2000000028.197:3712): avc: denied { write } for pid=10841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.134861][ T29] audit: type=1400 audit(2000000028.234:3713): avc: denied { write } for pid=10855 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.314459][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2090'. [ 216.997910][T10902] veth0: Caught tx_queue_len zero misconfig [ 217.012829][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 217.030822][T10903] hsr_slave_1 (unregistering): left promiscuous mode [ 217.341801][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2116'. [ 217.730069][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2118'. [ 217.762858][T10924] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2109'. [ 218.622324][T10958] veth0: Caught tx_queue_len zero misconfig [ 218.920208][ T12] net_ratelimit: 76 callbacks suppressed [ 218.920231][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.942354][ T363] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 218.942381][ T363] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 219.060137][ T9882] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.060200][ T9882] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 219.122360][T10996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2128'. [ 219.180022][ T9878] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.180050][ T9878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 219.299145][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 219.299177][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 219.580036][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.763350][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.592515][T11040] ip6gre1: entered promiscuous mode [ 220.592551][T11040] ip6gre1: entered allmulticast mode [ 220.597427][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.597479][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.601922][T11040] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.620866][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.720822][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.779595][T11051] Cannot find del_set index 0 as target [ 221.632466][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.882342][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 221.882441][ T29] audit: type=1400 audit(2000000034.466:3717): avc: denied { ioctl } for pid=11067 comm="syz.6.2157" path="socket:[29557]" dev="sockfs" ino=29557 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 222.190759][T11092] loop2: detected capacity change from 0 to 256 [ 222.450164][T11120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2180'. [ 223.175171][ T29] audit: type=1401 audit(2000000035.620:3718): op=setxattr invalid_context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netlink: 4 bytes leftover after parsing attributes in process `syz.7.2193'. [ 224.047717][T11181] loop2: detected capacity change from 0 to 512 [ 224.068133][T11181] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.081114][T11181] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 224.082236][T11181] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2203: inode #15: comm syz.2.2203: iget: illegal inode # [ 224.082323][T11181] loop2: lost filesystem error report for type 5 error -117 [ 224.082656][T11181] EXT4-fs (loop2): Remounting filesystem read-only [ 224.086806][T11181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.159082][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.379551][ T29] audit: type=1400 audit(2000000036.774:3719): avc: denied { bind } for pid=11199 comm="syz.2.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.418046][ T29] audit: type=1400 audit(2000000036.802:3720): avc: denied { connect } for pid=11199 comm="syz.2.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.440004][ T29] audit: type=1400 audit(2000000036.802:3721): avc: denied { write } for pid=11191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.464228][ T9885] net_ratelimit: 65 callbacks suppressed [ 224.464248][ T9885] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.464314][ T9885] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 224.523329][ T29] audit: type=1400 audit(2000000036.903:3722): avc: denied { write } for pid=11210 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.555149][T11200] loop2: detected capacity change from 0 to 128 [ 224.585068][ T9878] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.585172][ T9878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 224.621780][T11200] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.622875][T11200] ext4 filesystem being mounted at /435/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.686775][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.715844][ T9885] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.715870][ T9885] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 224.716362][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2209'. [ 224.824911][ T29] audit: type=1400 audit(2000000037.171:3723): avc: denied { create } for pid=11221 comm="syz.7.2210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 224.828694][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.834411][ T9878] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.834494][ T9878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 224.883206][ T29] audit: type=1400 audit(2000000037.236:3724): avc: denied { write } for pid=11214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.943887][ T9885] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 224.943919][ T9885] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 224.948266][ T29] audit: type=1400 audit(2000000037.291:3725): avc: denied { write } for pid=11232 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.165970][ T29] audit: type=1400 audit(2000000037.494:3726): avc: denied { node_bind } for pid=11240 comm="syz.7.2213" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 225.866895][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 225.946369][T11297] loop2: detected capacity change from 0 to 256 [ 225.956636][T11297] vfat: Bad value for 'fmask' [ 226.681532][T11316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2232'. [ 226.809302][T11321] 9pnet_virtio: no channels available for device ./file0 [ 229.333658][T11374] loop2: detected capacity change from 0 to 512 [ 229.354542][T11374] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 229.354940][T11374] EXT4-fs (loop2): orphan cleanup on readonly fs [ 229.358691][T11374] __quota_error: 9 callbacks suppressed [ 229.358740][T11374] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 229.358798][T11374] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 229.358861][T11374] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.2253: Failed to acquire dquot type 1 [ 229.358893][T11374] loop2: lost filesystem error report for type 5 error -5 [ 229.359265][T11374] EXT4-fs (loop2): Remounting filesystem read-only [ 229.360150][T11374] EXT4-fs (loop2): 1 truncate cleaned up [ 229.383764][T11374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.390254][T11374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 229.390318][T11374] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=16 [ 229.397483][ T29] audit: type=1400 audit(2000000041.390:3736): avc: denied { read } for pid=11372 comm="syz.2.2253" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 229.484221][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.559893][ T3428] net_ratelimit: 59 callbacks suppressed [ 230.559921][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.559943][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 230.780359][ T9882] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.780393][ T9882] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 230.839729][ T29] audit: type=1400 audit(2000000042.738:3737): avc: denied { accept } for pid=11402 comm="syz.6.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 230.902826][ T9882] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.902856][ T9882] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 231.019004][ T9878] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.019041][ T9878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 231.138556][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 231.138584][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 231.398469][T11425] ipvlan1: Caught tx_queue_len zero misconfig [ 231.460348][T11421] team_slave_1: Caught tx_queue_len zero misconfig [ 231.470724][T11421] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2268'. [ 231.975181][ T29] audit: type=1400 audit(2000000043.781:3738): avc: denied { setcurrent } for pid=11467 comm="syz.2.2285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 231.975216][ T29] audit: type=1401 audit(2000000043.781:3739): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 232.128156][ T29] audit: type=1326 audit(2000000043.929:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.6.2289" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 232.128536][ T29] audit: type=1326 audit(2000000043.929:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.6.2289" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 232.128650][ T29] audit: type=1326 audit(2000000043.929:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.6.2289" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 232.128846][ T29] audit: type=1326 audit(2000000043.929:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.6.2289" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 232.277665][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2290'. [ 233.433812][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.202898][ T3418] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.593840][ T3418] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.938608][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'. [ 234.947870][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'. [ 235.981007][ T9646] net_ratelimit: 79 callbacks suppressed [ 235.981032][ T9646] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.981085][ T9646] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 236.100273][ T9646] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.100302][ T9646] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 236.206786][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.217971][ T9646] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.218002][ T9646] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 236.336858][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.336891][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 236.456633][ T9878] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 236.456667][ T9878] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 236.565239][T11655] loop2: detected capacity change from 0 to 512 [ 236.593605][T11655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.593670][T11655] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.607609][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 236.607622][ T29] audit: type=1400 audit(2000000048.055:3786): avc: denied { write } for pid=11654 comm="syz.2.2339" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.607646][ T29] audit: type=1400 audit(2000000048.055:3787): avc: denied { write } for pid=11654 comm="syz.2.2339" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.607671][ T29] audit: type=1400 audit(2000000048.055:3788): avc: denied { ioctl } for pid=11654 comm="syz.2.2339" path="/465/file1/file2" dev="loop2" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.746120][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.865951][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 236.866873][ T9646] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.866948][ T9646] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.867051][ T9646] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.867084][ T9646] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.868662][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 237.291149][T11680] tipc: Enabling of bearer rejected, failed to enable media [ 238.849132][T11744] loop2: detected capacity change from 0 to 512 [ 238.871637][T11744] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.895706][T11744] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 238.906924][T11744] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2367: inode #15: comm syz.2.2367: iget: illegal inode # [ 238.907101][T11744] loop2: lost filesystem error report for type 5 error -117 [ 238.919894][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 238.919933][ C1] EXT4-fs (loop2): initial error at time 2000000050: ext4_orphan_get:1403 [ 238.919957][ C1] EXT4-fs (loop2): last error at time 2000000050: ext4_orphan_get:1403 [ 238.951468][T11744] EXT4-fs (loop2): Remounting filesystem read-only [ 238.961142][T11744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.987519][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.025725][T11750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2369'. [ 239.654938][ T29] audit: type=1400 audit(2000000050.871:3789): avc: denied { getopt } for pid=11757 comm="syz.7.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.624865][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2384'. [ 240.624916][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2384'. [ 240.760722][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2383'. [ 240.841913][T11802] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2386'. [ 241.516244][ T71] net_ratelimit: 72 callbacks suppressed [ 241.516271][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.516295][ T71] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 241.645840][T11812] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.645939][T11812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 241.765225][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.765254][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 241.882965][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 241.882994][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 242.002575][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 242.002621][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 242.792932][T11851] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 242.793085][T11851] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 242.864993][T11858] syzkaller0: entered promiscuous mode [ 242.865040][T11858] syzkaller0: entered allmulticast mode [ 242.866299][T11858] tipc: Enabled bearer , priority 0 [ 242.867129][T11858] tipc: Resetting bearer [ 242.880900][T11857] tipc: Resetting bearer [ 242.891624][T11857] tipc: Disabling bearer [ 242.991417][ T29] audit: type=1400 audit(2000000053.955:3790): avc: denied { connect } for pid=11860 comm="syz.7.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.046484][ T29] audit: type=1400 audit(2000000054.001:3791): avc: denied { write } for pid=11860 comm="syz.7.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.114650][T11868] netlink: 'syz.7.2406': attribute type 8 has an invalid length. [ 243.170371][T11868] netlink: 'syz.7.2406': attribute type 21 has an invalid length. [ 243.170613][T11868] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2406'. [ 243.195605][T11869] loop2: detected capacity change from 0 to 8192 [ 243.208928][ T29] audit: type=1400 audit(2000000054.158:3792): avc: denied { remount } for pid=11862 comm="syz.2.2407" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 243.254954][T11874] veth0_macvtap: Caught tx_queue_len zero misconfig [ 243.309490][T11876] loop2: detected capacity change from 0 to 512 [ 243.317589][T11876] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 243.319866][T11876] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 243.321161][T11876] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2411: inode #15: comm syz.2.2411: iget: illegal inode # [ 243.321292][T11876] loop2: lost filesystem error report for type 5 error -117 [ 243.321621][T11876] EXT4-fs (loop2): Remounting filesystem read-only [ 243.324131][T11876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.358847][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.401769][T11880] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.661876][ T29] audit: type=1400 audit(2000000054.573:3793): avc: denied { checkpoint_restore } for pid=11891 comm="syz.4.2417" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.089816][ T29] audit: type=1326 audit(2000000054.961:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.7.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e7b6e0d9 code=0x7ffc0000 [ 244.089857][ T29] audit: type=1326 audit(2000000054.961:3795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.7.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e7b6e0d9 code=0x7ffc0000 [ 244.092108][ T29] audit: type=1326 audit(2000000054.961:3796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.7.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e7b6e0d9 code=0x7ffc0000 [ 244.092270][ T29] audit: type=1326 audit(2000000054.961:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.7.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e7b6e0d9 code=0x7ffc0000 [ 244.097309][T11914] netlink: 'syz.6.2426': attribute type 1 has an invalid length. [ 244.102773][T11914] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.117111][ T29] audit: type=1326 audit(2000000054.998:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.7.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f76e7b6e0d9 code=0x7ffc0000 [ 244.117139][ T29] audit: type=1326 audit(2000000054.998:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.7.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e7b6e0d9 code=0x7ffc0000 [ 244.181956][T11914] 8021q: adding VLAN 0 to HW filter on device bond9 [ 244.182400][T11914] bond9: (slave gre2): The slave device specified does not support setting the MAC address [ 244.185141][T11914] bond9: (slave gre2): Error -95 calling set_mac_address [ 244.268334][T11920] gretap1: entered promiscuous mode [ 244.296130][T11920] bond9: (slave gretap1): making interface the new active one [ 244.296365][T11920] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 244.317815][T11923] 8021q: adding VLAN 0 to HW filter on device bond10 [ 244.326264][T11923] bond9: (slave bond10): Enslaving as an active interface with a down link [ 244.345508][T11926] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2427'. [ 244.380982][T11914] bond9 (unregistering): (slave gretap1): Releasing active interface [ 244.402654][T11914] bond9 (unregistering): (slave bond10): Releasing active interface [ 244.418841][T11914] bond9 (unregistering): Released all slaves [ 244.444861][T11934] syzkaller0: entered promiscuous mode [ 244.444884][T11934] syzkaller0: entered allmulticast mode [ 244.587201][T11937] loop2: detected capacity change from 0 to 4096 [ 244.616332][T11937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.633808][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2430'. [ 244.633981][T11936] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2430'. [ 244.634155][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2430'. [ 244.794257][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.887391][T11951] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2435'. [ 245.059970][T11957] loop2: detected capacity change from 0 to 512 [ 245.069620][T11960] netlink: 'syz.6.2438': attribute type 5 has an invalid length. [ 245.077533][T11960] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2438'. [ 245.095941][T11957] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.106836][T11957] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 245.119795][T11957] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2437: inode #15: comm syz.2.2437: iget: illegal inode # [ 245.119882][T11957] loop2: lost filesystem error report for type 5 error -117 [ 245.132833][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 245.132850][ C0] EXT4-fs (loop2): initial error at time 2000000055: ext4_orphan_get:1403 [ 245.132873][ C0] EXT4-fs (loop2): last error at time 2000000055: ext4_orphan_get:1403 [ 245.164851][T11957] EXT4-fs (loop2): Remounting filesystem read-only [ 245.175227][T11957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.230094][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.266411][T11980] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 245.358181][T11988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2446'. [ 245.367846][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'. [ 246.291070][T12051] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 246.297162][T12051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.304751][T12051] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 246.568604][T12069] loop2: detected capacity change from 0 to 1024 [ 246.569007][T12069] EXT4-fs: Ignoring removed nobh option [ 246.574437][T12069] EXT4-fs: Ignoring removed bh option [ 246.574477][T12069] EXT4-fs: Ignoring removed nobh option [ 246.574814][T12069] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 246.584824][T12069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.656415][T12075] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 247.039808][ T71] net_ratelimit: 89 callbacks suppressed [ 247.039834][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.039877][ T71] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 247.170140][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.170177][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 247.290845][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.290890][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 247.406921][T11812] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.406958][T11812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 247.478452][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.538124][T11812] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 247.538204][T11812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 247.698839][T12108] 9p: Bad value for 'rfdno' [ 248.527124][T12147] loop2: detected capacity change from 0 to 512 [ 248.535651][T12147] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 248.548078][T12147] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 248.561213][T12147] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.2501: inode #15: comm syz.2.2501: iget: illegal inode # [ 248.561344][T12147] loop2: lost filesystem error report for type 5 error -117 [ 248.567017][T12147] EXT4-fs (loop2): Remounting filesystem read-only [ 248.569399][T12147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.603337][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.303461][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 249.303481][ T29] audit: type=1400 audit(2000000059.780:3809): avc: denied { write } for pid=12181 comm="syz.7.2512" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 250.764837][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.811703][T12258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2536'. [ 252.500299][T11812] net_ratelimit: 78 callbacks suppressed [ 252.500327][T11812] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.500351][T11812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.617265][T11812] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.617295][T11812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.737999][ T12] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.738030][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.867434][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.867596][ T71] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 252.940491][T12299] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2550'. [ 252.940589][T12299] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2550'. [ 252.988143][ T71] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 252.988174][ T71] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 253.243902][ T29] audit: type=1400 audit(2000000063.418:3810): avc: denied { read write } for pid=12321 comm="syz.7.2558" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 253.243937][ T29] audit: type=1400 audit(2000000063.418:3811): avc: denied { open } for pid=12321 comm="syz.7.2558" path="/295/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 253.245542][ T29] audit: type=1400 audit(2000000063.418:3812): avc: denied { ioctl } for pid=12321 comm="syz.7.2558" path="/295/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 253.822715][ T29] audit: type=1400 audit(2000000063.953:3813): avc: denied { read } for pid=12344 comm="syz.7.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 254.050308][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2571'. [ 254.347185][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2579'. [ 254.500045][T12391] geneve3: entered promiscuous mode [ 254.893436][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 255.048606][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 255.608748][ T29] audit: type=1400 audit(2000000065.606:3814): avc: denied { write } for pid=12428 comm="syz.4.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 256.001592][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2595'. [ 256.731176][T12465] loop2: detected capacity change from 0 to 128 [ 256.739063][T12465] msdos: Bad value for 'gid' [ 256.744670][T12465] msdos: Bad value for 'gid' [ 257.002248][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2607'. [ 257.588843][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 257.612890][T12498] loop2: detected capacity change from 0 to 128 [ 257.802555][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 257.926121][T11812] net_ratelimit: 76 callbacks suppressed [ 257.926148][T11812] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 257.926169][T11812] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 258.035248][T12530] loop2: detected capacity change from 0 to 512 [ 258.106149][T12533] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2627'. [ 258.122105][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.130006][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 258.162712][T12530] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.2629: Invalid inode bitmap blk 4 in block_group 0 [ 258.162743][T12530] loop2: lost filesystem error report for type 5 error -117 [ 258.177924][T12530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.249668][ T29] audit: type=1400 audit(2000000068.024:3815): avc: denied { mounton } for pid=12529 comm="syz.2.2629" path="/514/file0/file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.274734][ T363] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.274762][ T363] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 258.390768][ T3428] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.390835][ T3428] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 258.442975][ T3305] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 258.456821][ T3305] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 258.510263][ T363] bond2: (slave ip6gretap1): link status up, enabling it in 0 ms [ 258.510290][ T363] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 258.539134][T12542] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 258.539546][ T29] audit: type=1400 audit(2000000068.301:3816): avc: denied { relabelto } for pid=12541 comm="syz.1.2633" name="561" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 258.539616][ T29] audit: type=1400 audit(2000000068.301:3817): avc: denied { associate } for pid=12541 comm="syz.1.2633" name="561" dev="tmpfs" ino=2975 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 258.576288][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2634'. [ 258.609352][T12536] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 258.630906][ T9047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.640542][ T363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.640578][ T363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.640606][ T363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 258.707165][ T29] audit: type=1400 audit(2000000068.467:3818): avc: denied { write } for pid=3298 comm="syz-executor" name="561" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 258.707256][ T29] audit: type=1400 audit(2000000068.467:3819): avc: denied { remove_name } for pid=3298 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 258.707292][ T29] audit: type=1400 audit(2000000068.467:3820): avc: denied { write } for pid=3298 comm="syz-executor" name="561" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 258.707318][ T29] audit: type=1400 audit(2000000068.467:3821): avc: denied { write } for pid=3298 comm="syz-executor" name="561" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 258.707366][ T29] audit: type=1400 audit(2000000068.467:3822): avc: denied { write } for pid=3298 comm="syz-executor" name="561" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 258.707396][ T29] audit: type=1400 audit(2000000068.467:3823): avc: denied { rmdir } for pid=3298 comm="syz-executor" name="561" dev="tmpfs" ino=2975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 258.878104][ T363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.878161][ T363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.878226][ T363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 259.178975][ T363] bridge_slave_1: left allmulticast mode [ 259.179002][ T363] bridge_slave_1: left promiscuous mode [ 259.179155][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.179861][ T363] bridge_slave_0: left allmulticast mode [ 259.179884][ T363] bridge_slave_0: left promiscuous mode [ 259.180068][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.230688][ T363] team0: left allmulticast mode [ 259.230711][ T363] team_slave_0: left allmulticast mode [ 259.230727][ T363] team_slave_1: left allmulticast mode [ 259.230786][ T363] vlan2: left allmulticast mode [ 259.230799][ T363] ªªªªª»: left allmulticast mode [ 259.230976][ T363] team0: left promiscuous mode [ 259.230990][ T363] team_slave_0: left promiscuous mode [ 259.231115][ T363] team_slave_1: left promiscuous mode [ 259.231184][ T363] vlan2: left promiscuous mode [ 259.231197][ T363] ªªªªª»: left promiscuous mode [ 259.231502][ T363] ¥: port 1(team0) entered disabled state [ 259.462950][ T363] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 259.505365][ T363] gretap0 (unregistering): left promiscuous mode [ 259.563291][ T363] bond6 (unregistering): (slave bridge1): Releasing backup interface [ 259.563332][ T363] bond6 (unregistering): (slave bridge1): the permanent HWaddr of slave - 16:06:89:7a:88:e3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 259.563370][ T363] bond6 (unregistering): (slave bridge2): making interface the new active one [ 259.563480][ T363] bond6 (unregistering): (slave bridge2): Error 16 setting MAC of new active slave [ 259.610931][ T363] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 259.622561][ T363] bond0 (unregistering): left promiscuous mode [ 259.622591][ T363] bond_slave_0: left promiscuous mode [ 259.622743][ T363] bond_slave_1: left promiscuous mode [ 259.643677][ T363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.645244][ T363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.656314][ T363] bond0 (unregistering): Released all slaves [ 259.658081][ T363] bond1 (unregistering): Released all slaves [ 259.666149][ T363] bond2 (unregistering): Released all slaves [ 259.685396][ T363] bond3 (unregistering): (slave veth5): Releasing active interface [ 259.695354][ T363] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 259.700255][ T363] bond3 (unregistering): Released all slaves [ 259.716436][ T363] bond4 (unregistering): Released all slaves [ 259.731099][ T363] bond5 (unregistering): (slave veth9): Releasing active interface [ 259.743559][ T363] bond5 (unregistering): (slave veth11): Releasing active interface [ 259.755522][ T363] bond5 (unregistering): Released all slaves [ 259.758633][ T363] bond6 (unregistering): Released all slaves [ 259.761037][ T363] bond7 (unregistering): Released all slaves [ 259.790550][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 259.815212][ T363] tipc: Disabling bearer [ 259.822446][ T363] tipc: Left network mode [ 259.841630][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.841650][ T363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.854138][ T363] veth0_to_team: left promiscuous mode [ 259.854176][ T363] veth1_macvtap: left promiscuous mode [ 259.854195][ T363] veth0_macvtap: left promiscuous mode [ 259.948725][ T363] team0 (unregistering): Port device vlan2 removed [ 259.989409][ T363] team0 (unregistering): Port device team_slave_1 removed [ 259.999466][ T363] team0 (unregistering): Port device team_slave_0 removed [ 260.147361][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.147397][T12552] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.147451][T12552] bridge_slave_0: entered allmulticast mode [ 260.147984][T12552] bridge_slave_0: entered promiscuous mode [ 260.168706][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.168738][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.168795][T12552] bridge_slave_1: entered allmulticast mode [ 260.169352][T12552] bridge_slave_1: entered promiscuous mode [ 260.182023][T12552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.183136][T12552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.198127][T12552] team0: Port device team_slave_0 added [ 260.199061][T12552] team0: Port device team_slave_1 added [ 260.232504][T12552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.232517][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.232547][T12552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.233181][T12552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.233192][T12552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.233299][T12552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.285046][T12552] hsr_slave_0: entered promiscuous mode [ 260.285588][T12552] hsr_slave_1: entered promiscuous mode [ 260.285826][T12552] debugfs: 'hsr0' already exists in 'hsr' [ 260.285857][T12552] Cannot create hsr debugfs directory [ 260.460951][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 260.475378][T12552] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 260.486165][T12552] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.486789][T12552] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 260.495750][T12552] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.500248][T12552] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 260.508585][T12552] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.509351][T12552] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 260.523358][T12552] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 260.549185][T12552] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.549228][T12552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.549329][T12552] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.549361][T12552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.570224][T12552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.586246][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.594177][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.612760][T12552] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.622808][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.622845][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.631226][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.631253][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.717230][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 260.780380][T12552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.838779][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 260.898173][T12552] veth0_vlan: entered promiscuous mode [ 260.900232][T12552] veth1_vlan: entered promiscuous mode [ 260.909198][T12552] veth0_macvtap: entered promiscuous mode [ 260.910595][T12552] veth1_macvtap: entered promiscuous mode [ 260.915523][T12552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.918969][T12552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.921934][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.921975][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.922091][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.922125][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.101001][ T363] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 261.101286][ T363] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 261.101349][ T363] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 261.101460][ T363] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 261.179122][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 261.215773][T12701] loop8: detected capacity change from 0 to 128 [ 261.226473][T12701] msdos: Bad value for 'gid' [ 261.226517][T12701] msdos: Bad value for 'gid' [ 261.286636][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 261.286664][ T29] audit: type=1400 audit(2000000070.840:3836): avc: denied { map_create } for pid=12708 comm="syz.1.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 261.377826][T12712] loop8: detected capacity change from 0 to 512 [ 261.391501][T12712] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.408389][T12712] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 261.509855][T12712] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2647: inode #15: comm syz.8.2647: iget: illegal inode # [ 261.509984][T12712] loop8: lost filesystem error report for type 5 error -117 [ 261.537137][T12712] EXT4-fs (loop8): Remounting filesystem read-only [ 261.555720][T12712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.596564][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.183198][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2661'. [ 262.293761][T12745] random: crng reseeded on system resumption [ 262.304510][ T29] audit: type=1400 audit(2000000071.782:3837): avc: denied { ioctl } for pid=12744 comm="syz.8.2663" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.591471][T12752] loop8: detected capacity change from 0 to 512 [ 262.618995][T12752] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.638139][T12752] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 262.639361][T12752] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2665: inode #15: comm syz.8.2665: iget: illegal inode # [ 262.639447][T12752] loop8: lost filesystem error report for type 5 error -117 [ 262.639809][T12752] EXT4-fs (loop8): Remounting filesystem read-only [ 262.645712][T12752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.711511][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.119740][ T29] audit: type=1400 audit(2000000072.539:3838): avc: denied { write } for pid=12765 comm="syz.7.2669" name="strings" dev="configfs" ino=6381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.185535][ T29] audit: type=1400 audit(2000000072.594:3839): avc: denied { unmount } for pid=7366 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 263.187595][ T29] audit: type=1400 audit(2000000072.594:3840): avc: denied { read write } for pid=7366 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.187686][ T29] audit: type=1400 audit(2000000072.594:3841): avc: denied { open } for pid=7366 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.222398][ T29] audit: type=1400 audit(2000000072.622:3842): avc: denied { create } for pid=12771 comm="syz.7.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 263.223089][ T29] audit: type=1400 audit(2000000072.622:3843): avc: denied { getopt } for pid=12771 comm="syz.7.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 263.309039][ T29] audit: type=1400 audit(2000000072.714:3844): avc: denied { open } for pid=12774 comm="syz.1.2672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 263.310832][ T29] audit: type=1400 audit(2000000072.714:3845): avc: denied { perfmon } for pid=12774 comm="syz.1.2672" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 263.541724][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2674'. [ 264.075414][T12801] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 264.342396][T12807] loop8: detected capacity change from 0 to 512 [ 264.384443][T12807] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 264.400848][T12807] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 264.420393][T12807] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2681: inode #15: comm syz.8.2681: iget: illegal inode # [ 264.420518][T12807] loop8: lost filesystem error report for type 5 error -117 [ 264.434220][T12807] EXT4-fs (loop8): Remounting filesystem read-only [ 264.434622][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 264.434641][ C0] EXT4-fs (loop8): initial error at time 2000000073: ext4_orphan_get:1403 [ 264.434710][ C0] EXT4-fs (loop8): last error at time 2000000073: ext4_orphan_get:1403 [ 264.477193][T12807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.525507][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2682'. [ 264.525545][T12810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2682'. [ 264.544649][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.557908][T12810] netlink: 'syz.7.2682': attribute type 28 has an invalid length. [ 264.558026][T12810] netlink: 'syz.7.2682': attribute type 3 has an invalid length. [ 264.558081][T12810] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2682'. [ 264.922776][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 264.923548][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 265.076153][T12827] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 265.434738][T12844] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 266.101978][T12862] syzkaller0: left promiscuous mode [ 266.102046][T12862] syzkaller0: left allmulticast mode [ 266.127799][T12862] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2701'. [ 266.703537][T12881] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 267.013554][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 267.013576][ T29] audit: type=1400 audit(2000000076.102:3892): avc: denied { read } for pid=12888 comm="syz.8.2708" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 267.013648][ T29] audit: type=1400 audit(2000000076.102:3893): avc: denied { open } for pid=12888 comm="syz.8.2708" path="net:[4026532883]" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 267.013773][ T29] audit: type=1400 audit(2000000076.112:3894): avc: denied { create } for pid=12888 comm="syz.8.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 267.302269][ T29] audit: type=1400 audit(2000000076.398:3895): avc: denied { create } for pid=12896 comm="syz.6.2710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 267.413584][ T29] audit: type=1400 audit(2000000076.481:3896): avc: denied { create } for pid=12891 comm="syz.8.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.413617][ T29] audit: type=1400 audit(2000000076.481:3897): avc: denied { setopt } for pid=12891 comm="syz.8.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.413644][ T29] audit: type=1400 audit(2000000076.481:3898): avc: denied { write } for pid=12891 comm="syz.8.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.413730][ T29] audit: type=1400 audit(2000000076.481:3899): avc: denied { nlmsg_write } for pid=12891 comm="syz.8.2709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.810803][ T29] audit: type=1400 audit(2000000076.869:3900): avc: denied { mmap_zero } for pid=12906 comm="syz.7.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 268.004635][ T29] audit: type=1400 audit(2000000077.044:3901): avc: denied { create } for pid=12915 comm="syz.7.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 268.540708][T12930] loop8: detected capacity change from 0 to 1764 [ 270.026088][T12943] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 270.755783][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2732'. [ 270.769703][T12961] loop8: detected capacity change from 0 to 8192 [ 270.770890][T12961] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 270.868821][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.892545][T12969] 9pnet_virtio: no channels available for device ./file0 [ 271.119420][T12971] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2736'. [ 271.163527][T12982] 8021q: VLANs not supported on wg0 [ 271.224318][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2740'. [ 272.465732][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 272.465767][ T29] audit: type=1400 audit(2000000081.161:3932): avc: denied { read } for pid=13025 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.465793][ T29] audit: type=1400 audit(2000000081.161:3933): avc: denied { open } for pid=13025 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.600678][ T29] audit: type=1400 audit(2000000081.281:3934): avc: denied { write } for pid=13022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.600719][ T29] audit: type=1400 audit(2000000081.281:3935): avc: denied { add_name } for pid=13022 comm="dhcpcd-run-hook" name="resolv.conf.eth13.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.600781][ T29] audit: type=1400 audit(2000000081.281:3936): avc: denied { create } for pid=13022 comm="dhcpcd-run-hook" name="resolv.conf.eth13.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.600817][ T29] audit: type=1400 audit(2000000081.281:3937): avc: denied { write } for pid=13022 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth13.ipv4ll" dev="tmpfs" ino=7964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.600843][ T29] audit: type=1400 audit(2000000081.281:3938): avc: denied { append } for pid=13022 comm="dhcpcd-run-hook" name="resolv.conf.eth13.ipv4ll" dev="tmpfs" ino=7964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.682218][ T29] audit: type=1400 audit(2000000081.365:3939): avc: denied { write } for pid=13037 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.682260][ T29] audit: type=1400 audit(2000000081.365:3940): avc: denied { remove_name } for pid=13037 comm="rm" name="resolv.conf.eth13.ipv4ll" dev="tmpfs" ino=7964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.682313][ T29] audit: type=1400 audit(2000000081.365:3941): avc: denied { unlink } for pid=13037 comm="rm" name="resolv.conf.eth13.ipv4ll" dev="tmpfs" ino=7964 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 272.728570][T13021] loop8: detected capacity change from 0 to 512 [ 272.810258][T13021] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.825115][T13021] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 272.837904][T13021] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2754: inode #15: comm syz.8.2754: iget: illegal inode # [ 272.838046][T13021] loop8: lost filesystem error report for type 5 error -117 [ 272.838421][T13021] EXT4-fs (loop8): Remounting filesystem read-only [ 272.843211][T13021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.892236][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.982632][T13019] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2751'. [ 273.123169][T13072] netlink: 'syz.4.2763': attribute type 7 has an invalid length. [ 273.123287][T13072] netlink: 'syz.4.2763': attribute type 8 has an invalid length. [ 273.214461][T13070] loop8: detected capacity change from 0 to 512 [ 273.234137][T13070] EXT4-fs: Ignoring removed i_version option [ 273.244034][T13070] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 273.256670][T13070] EXT4-fs (loop8): orphan cleanup on readonly fs [ 273.265865][T13070] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 273.280472][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 273.280494][ C1] EXT4-fs (loop8): initial error at time 2000000081: ext4_mb_generate_buddy:1317 [ 273.280518][ C1] EXT4-fs (loop8): last error at time 2000000081: ext4_mb_generate_buddy:1317 [ 273.307318][T13070] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.2762: Failed to acquire dquot type 1 [ 273.307413][T13070] loop8: lost filesystem error report for type 5 error -28 [ 273.323949][T13070] EXT4-fs (loop8): 1 truncate cleaned up [ 273.342552][T13070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.382111][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.402907][T13085] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 273.833809][T13113] hub 8-0:1.0: USB hub found [ 273.833926][T13113] hub 8-0:1.0: 8 ports detected [ 275.094370][T13120] loop8: detected capacity change from 0 to 1764 [ 275.209942][T13120] ISOFS: Unable to identify CD-ROM format. [ 275.453246][T13120] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2772'. [ 275.454388][T13159] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 275.628830][T13175] loop8: detected capacity change from 0 to 512 [ 275.644279][T13175] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.646329][T13175] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 275.667921][T13175] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2788: inode #15: comm syz.8.2788: iget: illegal inode # [ 275.668007][T13175] loop8: lost filesystem error report for type 5 error -117 [ 275.668441][T13175] EXT4-fs (loop8): Remounting filesystem read-only [ 275.673968][T13175] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.737452][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.845504][T13181] loop8: detected capacity change from 0 to 512 [ 275.879435][T13181] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 275.881591][T13181] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 275.882090][T13181] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2789: inode #15: comm syz.8.2789: iget: illegal inode # [ 275.882232][T13181] loop8: lost filesystem error report for type 5 error -117 [ 275.882589][T13181] EXT4-fs (loop8): Remounting filesystem read-only [ 275.885269][T13181] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.918351][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.904050][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 277.904076][ T29] audit: type=1400 audit(2000000086.184:3971): avc: denied { accept } for pid=13247 comm="syz.8.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 277.997331][T13248] serio: Serial port ttyS3 [ 278.068880][ T29] audit: type=1400 audit(2000000086.331:3972): avc: denied { create } for pid=13253 comm="syz.8.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 278.294806][ T29] audit: type=1400 audit(2000000086.544:3973): avc: denied { create } for pid=13255 comm="syz.8.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.357696][ T29] audit: type=1400 audit(2000000086.608:3974): avc: denied { connect } for pid=13257 comm="syz.7.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.384637][ T29] audit: type=1400 audit(2000000086.627:3975): avc: denied { write } for pid=13257 comm="syz.7.2815" path="socket:[40184]" dev="sockfs" ino=40184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.422105][ T29] audit: type=1400 audit(2000000086.664:3976): avc: denied { execute } for pid=13257 comm="syz.7.2815" path="/file1" dev="ramfs" ino=40188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 278.809686][ T29] audit: type=1400 audit(2000000087.024:3977): avc: denied { create } for pid=13268 comm="syz.6.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.356151][ T29] audit: type=1400 audit(2000000087.522:3978): avc: denied { ioctl } for pid=13288 comm="syz.7.2825" path="socket:[40224]" dev="sockfs" ino=40224 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.413892][ T29] audit: type=1400 audit(2000000087.578:3979): avc: denied { map } for pid=13288 comm="syz.7.2825" path="socket:[38607]" dev="sockfs" ino=38607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 279.413958][ T29] audit: type=1400 audit(2000000087.578:3980): avc: denied { read } for pid=13288 comm="syz.7.2825" path="socket:[38607]" dev="sockfs" ino=38607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 280.815049][T13318] loop8: detected capacity change from 0 to 8192 [ 280.819037][T13318] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 280.819056][T13318] FAT-fs (loop8): Filesystem has been set read-only [ 280.836043][ T71] IPVS: starting estimator thread 0... [ 280.965547][T13320] IPVS: using max 2640 ests per chain, 132000 per kthread [ 281.114339][T13324] loop8: detected capacity change from 0 to 1024 [ 281.137041][T13324] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 281.137128][T13324] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 281.141389][T13324] EXT4-fs error (device loop8): ext4_get_journal_inode:5927: comm syz.8.2834: inode #1: comm syz.8.2834: iget: illegal inode # [ 281.141474][T13324] loop8: lost filesystem error report for type 5 error -117 [ 281.141823][T13324] EXT4-fs (loop8): no journal found [ 281.141864][T13324] EXT4-fs (loop8): can't get journal size [ 281.148230][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 281.148250][ C0] EXT4-fs (loop8): initial error at time 2000000089: ext4_get_journal_inode:5927 [ 281.148272][ C0] EXT4-fs (loop8): last error at time 2000000089: ext4_get_journal_inode:5927 [ 281.258441][T13324] EXT4-fs (loop8): failed to initialize system zone (-22) [ 281.258580][T13324] EXT4-fs (loop8): mount failed [ 281.627284][T13338] loop8: detected capacity change from 0 to 512 [ 281.655863][T13338] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.670472][T13338] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 281.689599][T13338] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2839: inode #15: comm syz.8.2839: iget: illegal inode # [ 281.689769][T13338] loop8: lost filesystem error report for type 5 error -117 [ 281.704463][T13338] EXT4-fs (loop8): Remounting filesystem read-only [ 281.728658][T13338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.760045][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.880331][T13349] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2845'. [ 283.035289][T13371] netlink: 'syz.4.2852': attribute type 5 has an invalid length. [ 283.283828][T13372] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.284100][T13372] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.380208][T13372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.394257][T13372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.540361][T13367] batadv_slave_0: Caught tx_queue_len zero misconfig [ 283.557838][ T71] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.557872][ T71] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 283.557955][ T71] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.557985][ T71] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 283.558102][ T71] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.558131][ T71] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 283.558213][ T71] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.558242][ T71] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 283.731218][T13378] loop8: detected capacity change from 0 to 512 [ 283.765596][T13378] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.782637][T13378] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 283.795034][T13378] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2854: inode #15: comm syz.8.2854: iget: illegal inode # [ 283.795112][T13378] loop8: lost filesystem error report for type 5 error -117 [ 283.808090][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 283.808110][ C1] EXT4-fs (loop8): initial error at time 2000000091: ext4_orphan_get:1403 [ 283.808132][ C1] EXT4-fs (loop8): last error at time 2000000091: ext4_orphan_get:1403 [ 283.841857][T13378] EXT4-fs (loop8): Remounting filesystem read-only [ 283.859709][T13378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.898088][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.464427][T13414] loop8: detected capacity change from 0 to 512 [ 284.472344][T13414] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.475594][T13414] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 284.476733][T13414] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2867: inode #15: comm syz.8.2867: iget: illegal inode # [ 284.476895][T13414] loop8: lost filesystem error report for type 5 error -117 [ 284.477292][T13414] EXT4-fs (loop8): Remounting filesystem read-only [ 284.479843][T13414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.062830][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.075133][ T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.075188][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 285.075264][ T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.075368][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 285.075500][ T9882] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.075532][ T9882] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 285.075600][ T9882] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.075633][ T9882] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 285.202040][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 285.202075][ T29] audit: type=1400 audit(2000000092.923:3988): avc: denied { read } for pid=13420 comm="syz.8.2868" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.202105][ T29] audit: type=1400 audit(2000000092.923:3989): avc: denied { open } for pid=13420 comm="syz.8.2868" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.217391][ T29] audit: type=1400 audit(2000000092.923:3990): avc: denied { ioctl } for pid=13420 comm="syz.8.2868" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 285.291543][ T29] audit: type=1400 audit(2000000093.006:3991): avc: denied { write } for pid=13419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.373386][ T29] audit: type=1400 audit(2000000093.080:3992): avc: denied { write } for pid=13440 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.523315][ T29] audit: type=1400 audit(2000000093.218:3993): avc: denied { write } for pid=13444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.556673][T13451] netlink: 'syz.6.2873': attribute type 5 has an invalid length. [ 285.568951][ T29] audit: type=1400 audit(2000000093.265:3994): avc: denied { write } for pid=13458 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.740459][ T29] audit: type=1400 audit(2000000093.412:3995): avc: denied { write } for pid=13460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.795177][ T29] audit: type=1400 audit(2000000093.468:3996): avc: denied { write } for pid=13481 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.452157][T13503] loop8: detected capacity change from 0 to 512 [ 286.587842][T13503] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 286.708373][T13503] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 286.730438][T13503] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2884: inode #15: comm syz.8.2884: iget: illegal inode # [ 286.730564][T13503] loop8: lost filesystem error report for type 5 error -117 [ 286.731536][T13503] EXT4-fs (loop8): Remounting filesystem read-only [ 286.764044][T13503] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.871369][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.077736][ T29] audit: type=1400 audit(2000000094.659:3997): avc: denied { bind } for pid=13512 comm="syz.4.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.225187][T13507] bond_slave_0: left promiscuous mode [ 287.225222][T13507] bond_slave_1: left promiscuous mode [ 287.238362][T13515] loop8: detected capacity change from 0 to 1024 [ 287.241155][T13515] ext4: Unknown parameter 'smackfsfloor' [ 287.560957][T13507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.598338][T13507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.707923][T13531] loop8: detected capacity change from 0 to 512 [ 287.708720][T13531] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 287.716209][T13531] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 287.716574][T13531] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2890: inode #15: comm syz.8.2890: iget: illegal inode # [ 287.716603][T13531] loop8: lost filesystem error report for type 5 error -117 [ 287.716728][T13531] EXT4-fs (loop8): Remounting filesystem read-only [ 287.717193][T13531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.189087][ T3428] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.189131][ T3428] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.189186][ T3428] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 288.190816][ T3428] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.190844][ T3428] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.190870][ T3428] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 288.190962][ T3428] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.190991][ T3428] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.191022][ T3428] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 288.191117][ T3428] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.191187][ T3428] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.191218][ T3428] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 288.603375][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.971663][T13610] 8021q: VLANs not supported on wg0 [ 290.153491][T13620] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2921'. [ 290.906386][T13637] loop8: detected capacity change from 0 to 512 [ 290.931800][T13637] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.942924][T13637] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 290.943943][T13637] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2927: inode #15: comm syz.8.2927: iget: illegal inode # [ 290.944050][T13637] loop8: lost filesystem error report for type 5 error -117 [ 290.944339][T13637] EXT4-fs (loop8): Remounting filesystem read-only [ 290.946409][T13637] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.459950][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.586024][T13661] 8021q: VLANs not supported on wg0 [ 291.637557][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 291.637582][ T29] audit: type=1400 audit(2000000098.868:4010): avc: denied { write } for pid=13666 comm="syz.8.2936" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 292.043252][T13678] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2938'. [ 292.128884][ T29] audit: type=1400 audit(2000000099.312:4011): avc: denied { unmount } for pid=12552 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 292.219558][T13685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2941'. [ 292.294116][T13686] loop8: detected capacity change from 0 to 512 [ 292.313070][T13686] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 292.328385][T13686] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 292.338628][ T29] audit: type=1400 audit(2000000099.505:4012): avc: denied { connect } for pid=13688 comm="syz.1.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 292.367351][T13686] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2940: inode #15: comm syz.8.2940: iget: illegal inode # [ 292.367405][T13686] loop8: lost filesystem error report for type 5 error -117 [ 292.380388][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 292.380430][ C0] EXT4-fs (loop8): initial error at time 2000000099: ext4_orphan_get:1403 [ 292.380454][ C0] EXT4-fs (loop8): last error at time 2000000099: ext4_orphan_get:1403 [ 292.412586][T13686] EXT4-fs (loop8): Remounting filesystem read-only [ 292.421708][T13686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.480725][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.778451][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 292.888256][ T29] audit: type=1400 audit(2000000100.013:4013): avc: denied { write } for pid=13710 comm="syz.1.2951" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.889294][ T29] audit: type=1400 audit(2000000100.013:4014): avc: denied { relabelto } for pid=13710 comm="syz.1.2951" name="cgroup" dev="tmpfs" ino=3331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 292.889325][ T29] audit: type=1400 audit(2000000100.013:4015): avc: denied { associate } for pid=13710 comm="syz.1.2951" name="cgroup" dev="tmpfs" ino=3331 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:v4l_device_t:s0" [ 292.911175][ T29] audit: type=1400 audit(2000000100.032:4016): avc: denied { map } for pid=13710 comm="syz.1.2951" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 292.911248][ T29] audit: type=1400 audit(2000000100.032:4017): avc: denied { read write } for pid=13710 comm="syz.1.2951" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40667 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 293.005058][T13709] loop8: detected capacity change from 0 to 8192 [ 293.005379][T13709] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 293.359985][T13699] syz.8.2948 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 293.360162][T13699] CPU: 0 UID: 0 PID: 13699 Comm: syz.8.2948 Not tainted syzkaller #0 PREEMPT(lazy) [ 293.360192][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.360210][T13699] Call Trace: [ 293.360219][T13699] [ 293.360227][T13699] __dump_stack+0x1d/0x30 [ 293.360280][T13699] dump_stack_lvl+0x95/0xd0 [ 293.360387][T13699] dump_stack+0x15/0x1b [ 293.360411][T13699] dump_header+0x80/0x240 [ 293.360435][T13699] oom_kill_process+0x294/0x420 [ 293.360466][T13699] out_of_memory+0x981/0xbc0 [ 293.360506][T13699] try_charge_memcg+0x624/0xa10 [ 293.360594][T13699] charge_memcg+0x16f/0x220 [ 293.360684][T13699] __mem_cgroup_charge+0x28/0xb0 [ 293.360711][T13699] handle_mm_fault+0x1371/0x3ae0 [ 293.360738][T13699] ? pte_offset_map_lock+0x1d9/0x240 [ 293.360827][T13699] __get_user_pages+0x12b8/0x1e70 [ 293.360877][T13699] __mm_populate+0x242/0x390 [ 293.360915][T13699] __se_sys_mlockall+0x35e/0x3c0 [ 293.361007][T13699] __x64_sys_mlockall+0x1f/0x30 [ 293.361093][T13699] x64_sys_call+0x2253/0x2550 [ 293.361177][T13699] do_syscall_64+0x112/0x360 [ 293.361278][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.361308][T13699] RIP: 0033:0x7fde85f9e0d9 [ 293.361327][T13699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.361400][T13699] RSP: 002b:00007fde849f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 293.361442][T13699] RAX: ffffffffffffffda RBX: 00007fde86225fa0 RCX: 00007fde85f9e0d9 [ 293.361460][T13699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 293.361492][T13699] RBP: 00007fde86035024 R08: 0000000000000000 R09: 0000000000000000 [ 293.361505][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.361518][T13699] R13: 00007fde86226038 R14: 00007fde86225fa0 R15: 00007fff34f215f8 [ 293.361537][T13699] [ 293.562326][T13699] memory: usage 307200kB, limit 307200kB, failcnt 306 [ 293.562364][T13699] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 293.562402][T13699] kmem: usage 295644kB, limit 9007199254740988kB, failcnt 0 [ 293.562426][T13699] Memory cgroup stats for /syz8: [ 293.562936][T13699] cache 0 [ 293.562945][T13699] rss 11833344 [ 293.562963][T13699] shmem 0 [ 293.562970][T13699] mapped_file 0 [ 293.562988][T13699] dirty 0 [ 293.562995][T13699] writeback 0 [ 293.563013][T13699] workingset_refault_anon 7166 [ 293.563065][T13699] workingset_refault_file 0 [ 293.563073][T13699] swap 188416 [ 293.563091][T13699] swapcached 29544448 [ 293.563099][T13699] pgpgin 69408 [ 293.563117][T13699] pgpgout 66519 [ 293.563124][T13699] pgfault 74158 [ 293.563172][T13699] pgmajfault 566 [ 293.563202][T13699] inactive_anon 0 [ 293.563220][T13699] active_anon 0 [ 293.563227][T13699] inactive_file 0 [ 293.563321][T13699] active_file 0 [ 293.563329][T13699] unevictable 11833344 [ 293.563347][T13699] hierarchical_memory_limit 314572800 [ 293.563357][T13699] hierarchical_memsw_limit 9223372036854771712 [ 293.563377][T13699] total_cache 0 [ 293.563385][T13699] total_rss 11833344 [ 293.563420][T13699] total_shmem 0 [ 293.563428][T13699] total_mapped_file 0 [ 293.563453][T13699] total_dirty 0 [ 293.563461][T13699] total_writeback 0 [ 293.563479][T13699] total_workingset_refault_anon 7166 [ 293.563505][T13699] total_workingset_refault_file 0 [ 293.563514][T13699] total_swap 188416 [ 293.563532][T13699] total_swapcached 29544448 [ 293.563540][T13699] total_pgpgin 69408 [ 293.563559][T13699] total_pgpgout 66519 [ 293.563577][T13699] total_pgfault 74158 [ 293.563655][T13699] total_pgmajfault 566 [ 293.563663][T13699] total_inactive_anon 0 [ 293.563681][T13699] total_active_anon 0 [ 293.563764][T13699] total_inactive_file 0 [ 293.563772][T13699] total_active_file 0 [ 293.563877][T13699] total_unevictable 11833344 [ 293.563896][T13699] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2948,pid=13698,uid=0 [ 293.564095][T13699] Memory cgroup out of memory: Killed process 13698 (syz.8.2948) total-vm:96368kB, anon-rss:12796kB, file-rss:64664kB, shmem-rss:0kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 293.962714][ T29] audit: type=1400 audit(2000000101.001:4018): avc: denied { unlink } for pid=3298 comm="syz-executor" name="cgroup" dev="tmpfs" ino=3331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 294.094142][T13725] netlink: 'syz.1.2965': attribute type 8 has an invalid length. [ 294.140107][T13725] netlink: 'syz.1.2965': attribute type 21 has an invalid length. [ 294.140373][T13725] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2965'. [ 294.287658][T13735] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2959'. [ 294.614114][T13746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2961'. [ 294.836291][ T29] audit: type=1400 audit(2000000101.721:4019): avc: denied { bind } for pid=13749 comm="syz.6.2962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.288215][T13760] loop8: detected capacity change from 0 to 512 [ 295.288699][T13760] EXT4-fs: Invalid want_extra_isize 7 [ 296.451519][T13778] netlink: 'syz.6.2972': attribute type 8 has an invalid length. [ 296.488274][T13778] netlink: 'syz.6.2972': attribute type 21 has an invalid length. [ 296.488469][T13778] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2972'. [ 297.556720][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 297.556755][ T29] audit: type=1400 audit(2000000104.325:4023): avc: denied { name_bind } for pid=13809 comm="syz.6.2984" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 297.869980][ T29] audit: type=1400 audit(2000000104.611:4024): avc: denied { create } for pid=13815 comm="syz.1.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 298.062221][ T29] audit: type=1400 audit(2000000104.768:4025): avc: denied { mount } for pid=13811 comm="syz.4.2985" name="/" dev="autofs" ino=40838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 298.960169][T13855] loop8: detected capacity change from 0 to 512 [ 298.975145][T13855] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 298.988657][T13855] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 299.009072][T13855] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2998: inode #15: comm syz.8.2998: iget: illegal inode # [ 299.009245][T13855] loop8: lost filesystem error report for type 5 error -117 [ 299.022495][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 299.022515][ C0] EXT4-fs (loop8): initial error at time 2000000105: ext4_orphan_get:1403 [ 299.022541][ C0] EXT4-fs (loop8): last error at time 2000000105: ext4_orphan_get:1403 [ 299.026817][T13864] net_ratelimit: 16 callbacks suppressed [ 299.026857][T13864] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 299.042165][T13864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2999'. [ 299.080845][T13855] EXT4-fs (loop8): Remounting filesystem read-only [ 299.089852][T13855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.118016][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.160042][ T29] audit: type=1400 audit(2000000105.802:4026): avc: denied { create } for pid=13867 comm="syz.8.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 299.194134][ T29] audit: type=1400 audit(2000000105.839:4027): avc: denied { setopt } for pid=13867 comm="syz.8.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 299.206167][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3001'. [ 299.347845][ T29] audit: type=1400 audit(2000000105.977:4028): avc: denied { block_suspend } for pid=13881 comm="syz.6.3008" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.348409][ T29] audit: type=1400 audit(2000000105.986:4029): avc: denied { getopt } for pid=13883 comm="syz.1.3009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.628855][ T29] audit: type=1400 audit(2000000106.236:4030): avc: denied { connect } for pid=13892 comm="syz.7.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.760925][T13894] netlink: 'syz.7.3011': attribute type 10 has an invalid length. [ 299.767353][T13894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.768526][T13894] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 299.971123][ T29] audit: type=1326 audit(2000000106.559:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.4.3013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa33de0d9 code=0x7ffc0000 [ 299.971543][ T29] audit: type=1326 audit(2000000106.559:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13898 comm="syz.4.3013" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa33de0d9 code=0x7ffc0000 [ 300.281120][T13904] loop8: detected capacity change from 0 to 8192 [ 300.397577][T13910] tipc: Enabling of bearer rejected, already enabled [ 300.488450][T13921] netlink: 'syz.7.3030': attribute type 1 has an invalid length. [ 300.489523][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3018'. [ 300.489616][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3018'. [ 300.496461][T13921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.517811][T13921] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.518350][T13921] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 300.523952][T13921] bond5: (slave gre1): Error -95 calling set_mac_address [ 300.565685][T13927] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3020'. [ 300.577164][T13928] gretap1: entered promiscuous mode [ 300.582450][T13928] bond5: (slave gretap1): making interface the new active one [ 300.582765][T13928] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 300.583118][T13927] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3020'. [ 300.649420][T13921] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.660463][T13921] bond5: (slave bond6): Enslaving as an active interface with a down link [ 300.689398][T13921] bond5 (unregistering): (slave gretap1): Releasing active interface [ 300.699953][T13921] bond5 (unregistering): (slave bond6): Releasing active interface [ 300.710062][T13921] bond5 (unregistering): Released all slaves [ 301.767859][T13978] netlink: 'syz.4.3038': attribute type 5 has an invalid length. [ 301.768936][T13978] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3038'. [ 302.664478][T14009] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3048'. [ 302.797451][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3050'. [ 304.364246][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 304.364270][ T29] audit: type=1326 audit(2000000110.612:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 304.375479][T14060] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3064'. [ 304.410678][ T29] audit: type=1400 audit(2000000110.612:4076): avc: denied { sqpoll } for pid=14063 comm="syz.7.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 304.418489][ T29] audit: type=1326 audit(2000000110.667:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 304.429233][ T29] audit: type=1326 audit(2000000110.676:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 304.431288][ T29] audit: type=1326 audit(2000000110.676:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 304.431338][ T29] audit: type=1326 audit(2000000110.676:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 304.432358][ T29] audit: type=1326 audit(2000000110.676:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329065e0d9 code=0x7ffc0000 [ 304.477245][T14067] syzkaller0: entered promiscuous mode [ 304.477283][T14067] syzkaller0: entered allmulticast mode [ 304.487434][ T29] audit: type=1326 audit(2000000110.722:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f329061e90e code=0x7ffc0000 [ 304.489954][ T29] audit: type=1326 audit(2000000110.722:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f329061e90e code=0x7ffc0000 [ 304.491634][ T29] audit: type=1326 audit(2000000110.732:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14051 comm="syz.6.3063" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f329061e90e code=0x7ffc0000 [ 305.311047][T14082] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3070'. [ 305.346702][ T9882] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.346758][ T9882] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 305.346864][ T9882] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.346977][ T9882] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 305.347014][ T9882] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.347151][ T9882] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 305.347187][ T9882] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.347219][ T9882] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 305.740343][T14100] serio: Serial port ttyS3 [ 306.072271][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3081'. [ 306.072358][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3081'. [ 306.231029][T14120] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3082'. [ 306.276423][T14122] loop8: detected capacity change from 0 to 512 [ 306.308849][T14122] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.309153][T14122] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.389390][T14122] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3084'. [ 306.412902][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.540194][T14141] tipc: Resetting bearer [ 306.620660][ T71] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.621960][ T71] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.622193][ T71] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.622424][ T71] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.942265][T14170] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3100'. [ 308.610510][T14204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3111'. [ 309.227337][T14222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3115'. [ 310.370429][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 310.370450][ T29] audit: type=1326 audit(2000000116.151:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89b0ae0d9 code=0x7ffc0000 [ 310.403442][ T29] audit: type=1326 audit(2000000116.188:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89b0ae0d9 code=0x7ffc0000 [ 310.403524][ T29] audit: type=1326 audit(2000000116.188:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89b0ae0d9 code=0x7ffc0000 [ 310.457596][ T29] audit: type=1326 audit(2000000116.243:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd89b0ae0d9 code=0x7ffc0000 [ 310.484080][ T29] audit: type=1326 audit(2000000116.271:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd89b06e90e code=0x7ffc0000 [ 310.509957][ T29] audit: type=1326 audit(2000000116.289:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd89b06e90e code=0x7ffc0000 [ 310.535894][ T29] audit: type=1326 audit(2000000116.317:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd89b06e90e code=0x7ffc0000 [ 310.563596][ T29] audit: type=1326 audit(2000000116.335:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd89b06e90e code=0x7ffc0000 [ 310.589847][ T29] audit: type=1326 audit(2000000116.363:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd89b06e90e code=0x7ffc0000 [ 310.617413][ T29] audit: type=1326 audit(2000000116.391:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3119" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd89b06e90e code=0x7ffc0000 [ 311.172657][T14259] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3127'. [ 311.187977][T14259] loop8: detected capacity change from 0 to 512 [ 311.188537][T14259] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 311.207481][T14259] EXT4-fs (loop8): 1 truncate cleaned up [ 311.207947][T14259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.237750][T14259] EXT4-fs error (device loop8): xattr_find_entry:333: inode #15: comm syz.8.3127: corrupted xattr entries [ 311.237985][T14259] EXT4-fs (loop8): Remounting filesystem read-only [ 311.598390][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.909988][T14279] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3133'. [ 312.612069][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3142'. [ 312.612105][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3142'. [ 312.639849][T14303] netlink: 'syz.8.3142': attribute type 28 has an invalid length. [ 312.639874][T14303] netlink: 'syz.8.3142': attribute type 3 has an invalid length. [ 312.639894][T14303] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3142'. [ 312.678848][T14305] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3144'. [ 315.354686][T14374] loop8: detected capacity change from 0 to 4096 [ 315.400027][T14374] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.428211][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.470264][T14386] loop8: detected capacity change from 0 to 512 [ 315.818412][T14400] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3171'. [ 316.115934][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 316.115957][ T29] audit: type=1400 audit(2000000121.468:4192): avc: denied { write } for pid=14404 comm="syz.8.3175" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 316.116186][ T29] audit: type=1400 audit(2000000121.468:4193): avc: denied { open } for pid=14404 comm="syz.8.3175" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 316.163627][T14406] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3175'. [ 316.234225][T11812] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.235601][T11812] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.235637][T11812] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.235696][T11812] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.552934][T14418] loop8: detected capacity change from 0 to 4096 [ 316.581469][T14418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.611635][ T29] audit: type=1400 audit(2000000121.911:4194): avc: denied { write } for pid=14412 comm="syz.8.3178" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.711723][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.584708][T14439] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3186'. [ 317.712479][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3190'. [ 317.793204][ T3428] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.793246][ T3428] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.793347][ T3428] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.793454][ T3428] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.884035][T14489] dummy0: left promiscuous mode [ 318.887317][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.914752][T14489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.918371][T14489] veth1_vlan: left promiscuous mode [ 318.919442][T14489] veth0_vlan: left promiscuous mode [ 318.922744][T14489] veth0_vlan: entered promiscuous mode [ 318.925254][T14489] veth1_vlan: entered promiscuous mode [ 318.929808][T14489] veth1_macvtap: left promiscuous mode [ 318.930465][T14489] veth0_macvtap: left promiscuous mode [ 318.931189][T14489] veth0_macvtap: entered promiscuous mode [ 318.932162][T14489] veth1_macvtap: entered promiscuous mode [ 318.937618][T14489] 8021q: adding VLAN 0 to HW filter on device  [ 318.945443][T14489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.950648][T14489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.953765][T14489] veth5: left allmulticast mode [ 318.957851][T14489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.966018][T14489] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 318.969815][T14489] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.973451][T14489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.976342][T14489] bridge1: left promiscuous mode [ 318.978969][T14489] 8021q: adding VLAN 0 to HW filter on device bond5 [ 318.983067][T14489] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.989383][T14489] 8021q: adding VLAN 0 to HW filter on device eth0 [ 318.993353][T14489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 318.997499][T14489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 319.001484][T14489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 319.004729][T14489] geneve3: left promiscuous mode [ 319.276627][ T3428] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.276665][ T3428] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.276901][ T3428] : (slave veth3): link status definitely up, 10000 Mbps full duplex [ 319.276972][ T3428] : (slave veth3): making interface the new active one [ 319.277545][ T3428] : active interface up! [ 319.323320][ T3428] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.323392][ T3428] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.341952][ T3428] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.342010][ T3428] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.359835][ T3428] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.359966][ T3428] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 319.690401][ T9882] ip6_tunnel: p xmit: Local address not yet configured! [ 319.690514][ T9882] ip6_tunnel: p xmit: Local address not yet configured! [ 319.727599][ T3407] ip6_tunnel: p xmit: Local address not yet configured! [ 319.807319][ T3407] ip6_tunnel: p xmit: Local address not yet configured! [ 320.012693][T14517] loop8: detected capacity change from 0 to 512 [ 320.012993][T14517] EXT4-fs: Ignoring removed nobh option [ 320.019056][ T29] audit: type=1400 audit(2000000124.977:4195): avc: denied { read write } for pid=14513 comm="syz.8.3212" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 320.019085][ T29] audit: type=1400 audit(2000000125.069:4196): avc: denied { open } for pid=14513 comm="syz.8.3212" path="/109/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 320.102774][T14517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.102870][T14517] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.165090][T14527] sit0: Caught tx_queue_len zero misconfig [ 320.175714][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3212'. [ 320.192199][T14525] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3213'. [ 320.192225][T14525] tc_dump_action: action bad kind [ 320.214403][T14525] sd 0:0:1:0: PR command failed: 1026 [ 320.214502][T14525] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 320.215555][T14525] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 320.284499][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.324769][ T29] audit: type=1400 audit(2000000125.346:4197): avc: denied { write } for pid=14534 comm="syz.8.3217" name="dynamic_events" dev="tracefs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 320.383536][ T29] audit: type=1400 audit(2000000125.401:4198): avc: denied { accept } for pid=14534 comm="syz.8.3217" lport=35384 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 320.435679][ T3409] ip6_tunnel: p xmit: Local address not yet configured! [ 321.403618][T14587] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3230'. [ 321.962204][ T29] audit: type=1400 audit(2000000126.841:4199): avc: denied { setopt } for pid=14592 comm="syz.8.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 321.964413][ T29] audit: type=1400 audit(2000000126.860:4200): avc: denied { ioctl } for pid=14582 comm="syz.6.3232" path="socket:[49999]" dev="sockfs" ino=49999 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 322.050773][ T29] audit: type=1400 audit(2000000126.943:4201): avc: denied { create } for pid=14596 comm="syz.4.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 322.256758][ T29] audit: type=1400 audit(2000000127.128:4202): avc: denied { execute } for pid=14596 comm="syz.4.3237" path="/644/file1" dev="tmpfs" ino=3411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.450568][ T29] audit: type=1400 audit(2000000127.220:4203): avc: denied { ioctl } for pid=14599 comm="syz.7.3238" path="/423/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 323.081341][T14621] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3242'. [ 323.143282][T14623] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.194767][ T29] audit: type=1400 audit(2000000127.995:4204): avc: denied { unmount } for pid=7366 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 323.380193][ T29] audit: type=1400 audit(2000000128.162:4205): avc: denied { ioctl } for pid=14639 comm="syz.7.3250" path="socket:[50102]" dev="sockfs" ino=50102 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 323.598237][T14646] loop8: detected capacity change from 0 to 512 [ 323.633852][T14646] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 323.646946][T14646] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 323.659094][T14646] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.3252: inode #15: comm syz.8.3252: iget: illegal inode # [ 323.659247][T14646] loop8: lost filesystem error report for type 5 error -117 [ 323.661139][T14646] EXT4-fs (loop8): Remounting filesystem read-only [ 323.667197][T14646] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.757664][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.988397][ C0] ip6_tunnel: p xmit: Local address not yet configured! [ 324.557552][ T29] audit: type=1400 audit(2000000129.251:4206): avc: denied { ioctl } for pid=14682 comm="syz.4.3265" path="socket:[51227]" dev="sockfs" ino=51227 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 325.138968][T14708] loop8: detected capacity change from 0 to 512 [ 325.160734][T14708] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 325.173599][T14708] EXT4-fs (loop8): warning: maximal mount count reached, running e2fsck is recommended [ 325.176755][T14708] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.3273: inode #15: comm syz.8.3273: iget: illegal inode # [ 325.176822][T14708] loop8: lost filesystem error report for type 5 error -117 [ 325.177571][T14708] EXT4-fs (loop8): Remounting filesystem read-only [ 325.188381][T14708] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.237691][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.251631][ T29] audit: type=1400 audit(2000000130.811:4207): avc: denied { view } for pid=14735 comm="syz.7.3285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 326.286794][T14742] cgroup: No subsys list or none specified [ 326.422478][T14748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3288'. [ 326.422603][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3288'. [ 326.471931][T14748] netlink: 'syz.4.3288': attribute type 28 has an invalid length. [ 326.471956][T14748] netlink: 'syz.4.3288': attribute type 3 has an invalid length. [ 326.471972][T14748] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3288'. [ 327.227038][ T29] audit: type=1400 audit(2000000131.716:4208): avc: denied { read } for pid=14771 comm="syz.7.3296" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 327.451551][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 327.451630][ T29] audit: type=1400 audit(2000000131.928:4211): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 327.723068][ T29] audit: type=1400 audit(2000000132.177:4212): avc: denied { write } for pid=14782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 327.776545][ T29] audit: type=1400 audit(2000000132.224:4213): avc: denied { write } for pid=14798 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.020567][ T29] audit: type=1400 audit(2000000132.454:4214): avc: denied { write } for pid=14810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.070894][ T29] audit: type=1400 audit(2000000132.491:4215): avc: denied { write } for pid=14826 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.175758][T14835] loop8: detected capacity change from 0 to 256 [ 328.204706][T14835] syzkaller0: entered promiscuous mode [ 328.204732][T14835] syzkaller0: entered allmulticast mode [ 328.386690][T14838] loop8: detected capacity change from 0 to 4096 [ 328.405937][T14838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.422983][ T29] audit: type=1400 audit(2000000132.824:4216): avc: denied { write } for pid=14837 comm="syz.8.3307" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.423017][ T29] audit: type=1400 audit(2000000132.824:4217): avc: denied { read open } for pid=14837 comm="syz.8.3307" path=2F3133312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 328.532151][T14843] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3309'. [ 328.599891][ T29] audit: type=1400 audit(2000000132.981:4218): avc: denied { write } for pid=14837 comm="syz.8.3307" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 328.869463][T14859] sit0: Caught tx_queue_len zero misconfig [ 329.230581][T14852] ================================================================== [ 329.230612][T14852] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 329.230644][T14852] [ 329.230651][T14852] write to 0xffff888100b94160 of 8 bytes by task 14838 on cpu 1: [ 329.230670][T14852] filemap_splice_read+0x52a/0x790 [ 329.230695][T14852] ext4_file_splice_read+0x8f/0xb0 [ 329.230718][T14852] splice_direct_to_actor+0x261/0x680 [ 329.230754][T14852] do_splice_direct+0x119/0x1a0 [ 329.230783][T14852] do_sendfile+0x37d/0x640 [ 329.230810][T14852] __x64_sys_sendfile64+0x105/0x150 [ 329.230839][T14852] x64_sys_call+0x1015/0x2550 [ 329.230864][T14852] do_syscall_64+0x112/0x360 [ 329.230888][T14852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.230912][T14852] [ 329.230919][T14852] write to 0xffff888100b94160 of 8 bytes by task 14852 on cpu 0: [ 329.230937][T14852] filemap_splice_read+0x52a/0x790 [ 329.230961][T14852] ext4_file_splice_read+0x8f/0xb0 [ 329.230981][T14852] splice_direct_to_actor+0x261/0x680 [ 329.231012][T14852] do_splice_direct+0x119/0x1a0 [ 329.231044][T14852] do_sendfile+0x37d/0x640 [ 329.231076][T14852] __x64_sys_sendfile64+0x105/0x150 [ 329.231108][T14852] x64_sys_call+0x1015/0x2550 [ 329.231135][T14852] do_syscall_64+0x112/0x360 [ 329.231155][T14852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.231178][T14852] [ 329.231183][T14852] value changed: 0x000000000000063e -> 0x000000000000063f [ 329.231196][T14852] [ 329.231201][T14852] Reported by Kernel Concurrency Sanitizer on: [ 329.231239][T14852] CPU: 0 UID: 0 PID: 14852 Comm: syz.8.3307 Not tainted syzkaller #0 PREEMPT(lazy) [ 329.231268][T14852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.231282][T14852] ================================================================== [ 329.336025][ T29] audit: type=1400 audit(2000000133.655:4219): avc: denied { listen } for pid=14871 comm="syz.6.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 330.004625][T12552] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.260867][ C0] ip6_tunnel: p xmit: Local address not yet configured!