last executing test programs: 1m41.701079097s ago: executing program 32 (id=127): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r1 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m40.824234448s ago: executing program 33 (id=141): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) shutdown(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 1m26.166859776s ago: executing program 34 (id=121): pipe(&(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000900)={@remote, @random="2bfd8b10d603", @void, {@generic={0x809b}}}, 0x0) 1m18.411872336s ago: executing program 35 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000012002103"], 0x1c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f00000077c0), 0x8000000000001ac, 0x2140, 0x0) 1m1.630680515s ago: executing program 36 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002380)=@delchain={0x2c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {0x10, 0xffff}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040004) 59.635473303s ago: executing program 37 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff1}, {0x10, 0xffff}, {0x0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x4040004) 54.902876759s ago: executing program 6 (id=475): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x62c21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbb"], 0x0) 54.395002032s ago: executing program 6 (id=483): socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, 0x0) futex(0x0, 0x6, 0x200002, 0x0, 0x0, 0x0) io_destroy(0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000089146480", @ANYRES64=r0], 0xb2) 54.152987848s ago: executing program 6 (id=495): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 53.578333762s ago: executing program 6 (id=492): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x21c, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 53.485901194s ago: executing program 6 (id=498): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x800, 0x1224, 0xffffffff, 0x8, 0xb, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x7f2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 53.280035139s ago: executing program 9 (id=501): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) pipe2(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 53.23158904s ago: executing program 6 (id=502): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) 53.23149302s ago: executing program 38 (id=502): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) 53.090322404s ago: executing program 9 (id=504): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 51.016346674s ago: executing program 9 (id=515): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x40, &(0x7f0000000100)={0xa, 0x8, 0x15, 0x20000000000006, 0x7fff, 0x97, 0x27ff, 0x50d6}, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @private0, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000880)='M', 0x1}], 0x1}}], 0x2, 0x40001) shutdown(r0, 0x1) 50.057444677s ago: executing program 9 (id=509): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x21c, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 50.015873758s ago: executing program 9 (id=510): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x822b01) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400000034000b47564cb6288200eb1406000007", 0x14}], 0x1}, 0x4000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, 0x0, 0x0) 49.673996957s ago: executing program 9 (id=521): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 49.673882197s ago: executing program 39 (id=521): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) 42.649308819s ago: executing program 5 (id=575): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x387, 0x6, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fchown(0xffffffffffffffff, 0xee00, 0xee01) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 41.263778412s ago: executing program 5 (id=580): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newqdisc={0x74, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x7}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x74}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2}, 0x14) 40.013041493s ago: executing program 5 (id=596): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 39.795029528s ago: executing program 5 (id=585): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) creat(&(0x7f0000000280)='./bus\x00', 0x122dfb579e447cba) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "0000366834c0a20000b7aac63a0100000000005cc6040700000000770060e000002021e9000000000000000040000000000000d000000000000000000000000f", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) truncate(&(0x7f0000000000)='./file1\x00', 0xd1) 39.258560761s ago: executing program 5 (id=592): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x9ca86080, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) 38.370748403s ago: executing program 5 (id=620): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 38.358805523s ago: executing program 40 (id=620): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 25.749604551s ago: executing program 4 (id=780): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 25.645053494s ago: executing program 4 (id=783): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4044040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 25.529704867s ago: executing program 4 (id=798): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000500)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}}], 0x1, 0x45833af96e4a38ff, 0x0) 25.013821569s ago: executing program 4 (id=789): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) creat(&(0x7f0000000280)='./bus\x00', 0x122dfb579e447cba) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "0000366834c0a20000b7aac63a0100000000005cc6040700000000770060e000002021e9000000000000000040000000000000d000000000000000000000000f", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) truncate(&(0x7f0000000000)='./file1\x00', 0xd1) 24.15651962s ago: executing program 4 (id=799): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) 22.90029248s ago: executing program 4 (id=812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 22.885401101s ago: executing program 41 (id=812): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 10.316384278s ago: executing program 7 (id=1044): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ffff, 0x0, @perf_bp={0x0}, 0xd8e, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) close_range(r0, r0, 0x0) 10.300854788s ago: executing program 7 (id=1045): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) r2 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x8000000e) splice(r2, 0x0, r1, 0x0, 0xe88000000, 0x0) 10.23036641s ago: executing program 7 (id=1046): openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x800c4, 0x334e53aded47c559) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000001c40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="3716b43d3bc546b51baa10736241e45d9fd2d15ce580b82dde608061793aea9a493edc47da0d2501690e1addf8c859c3aa503814836868b53f3371824e0385b0ea509888ee35b7907ae2b847d8d1c57cb5f54385a28d5914017c6d3e6a0b981d5293681577e5d56ffe0342c720a23e11075474699bee7094507de04aaf47016f0451bd2c907ac505f141463ee369aaaadcb2edfe07d617e5a7bbb7"], 0x2, 0xa1a, &(0x7f0000003d40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x0) socket(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 10.113343313s ago: executing program 7 (id=1050): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 10.047013334s ago: executing program 7 (id=1051): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 9.83210771s ago: executing program 7 (id=1057): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0xf, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) write$tun(r2, &(0x7f0000000080)=ANY=[], 0xb2) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 9.83201448s ago: executing program 42 (id=1057): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x23, 0x4, 0xf, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) write$tun(r2, &(0x7f0000000080)=ANY=[], 0xb2) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 2.46014731s ago: executing program 3 (id=1138): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.535217942s ago: executing program 2 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3e8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x40cc1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x24040040) 1.488302403s ago: executing program 3 (id=1146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffffa5}, &(0x7f0000000000)=0x24) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f0000000780)=0x40) 1.488156803s ago: executing program 2 (id=1147): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0xb) 1.452315364s ago: executing program 3 (id=1148): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x80041, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x2041}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 1.422792236s ago: executing program 3 (id=1150): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 1.416600516s ago: executing program 2 (id=1151): perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000003e40), 0x0, 0x4000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_remount}, {@nomblk_io_submit}]}, 0x4, 0x511, &(0x7f0000000640)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x0, 0xfffffffc}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x20004080) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 1.186115331s ago: executing program 3 (id=1152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.135375612s ago: executing program 0 (id=1153): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000084) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b9106e5d2, 0x6, 0xfffffffd, 0x5, 0x8, 0x20001, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./bus\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) 1.100949223s ago: executing program 2 (id=1155): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x10000000001}, 0x4, 0x0, 0xfff, 0x9, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x200000000000, 0x0) ioctl$EVIOCRMFF(r0, 0x5509, &(0x7f0000000040)=0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 825.78315ms ago: executing program 0 (id=1158): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 736.420152ms ago: executing program 1 (id=1160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 736.130292ms ago: executing program 8 (id=1161): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xe) fchdir(r1) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 642.969964ms ago: executing program 0 (id=1162): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='pcspkr', 0x6) 642.802484ms ago: executing program 2 (id=1163): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x50ab}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 642.677364ms ago: executing program 8 (id=1164): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000000c0)="66e40465937ea1b1603bd8dce761a58f252691e00f0e88d81deb0b31dbbb79ef6a7777225a1ad3e3d9a2b0951888aeb6963757227cc34f238d225fb65aea78ec63ad5c2ec5c7e98b28", 0x49, 0x20080000, 0x0, 0x0) recvfrom(r1, &(0x7f0000000000)=""/73, 0x49, 0x30102, 0x0, 0x0) 632.885114ms ago: executing program 8 (id=1165): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) 621.833085ms ago: executing program 1 (id=1166): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x22, 0x0, 0x9, 0xc, 0x0, 0x9, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0x9e, 0x1, 0x5, 0x477f, 0x9b9b, 0x8, 0x0, 0x7fff, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r0 = socket(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) personality(0x87bf5ac905ea0f7f) r1 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1, 0x12, r1, 0x8000000) 589.570376ms ago: executing program 0 (id=1167): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendfile(r1, r0, 0x0, 0x8010002b) connect$inet(r1, &(0x7f0000000480)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) 576.925886ms ago: executing program 8 (id=1168): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xb99046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 538.036947ms ago: executing program 1 (id=1169): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r2 = syz_io_uring_setup(0x1593, &(0x7f0000000a00)={0x0, 0xe5dc, 0x8, 0x24, 0x21a}, &(0x7f0000000280), &(0x7f0000002c00), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f00000005c0)=[{0x0, 0x0, 0x0}], 0x1) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) 537.897847ms ago: executing program 8 (id=1170): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2004000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x2204052, &(0x7f00000001c0), 0x21, 0x4c3, &(0x7f0000000480)="$eJzs3c9vG1kdAPDvTOLmx2Y3WdgDIGDLslBQVTtxd8Oqp3IBoaoSouLEoQ2JG0Wx4yh2ShN6SP8HJCpxggN/AAckDkg9cecGNy7lgFSgAjVIHIxm7LRpY6cpTeJV5vORnmbevKm/71tr3mufE78ACut8ROxExLmIuBUR073rSa/E1W7J7nv65N7i7pN7i0l0Ojf+keTt2bXY92cyb/VeczwifvDdiB8nB+O2trZXF+r12kavXmk31iutre1LK42F5dpyba1anZ+bn/3k8sfVY8v1/cZvHn9n5doPf/+7Lz364843f5p1a6rXtj+P49RNvfQsTmY0Iq6dRLAhGOnlc27YHeH/kkbEZyLig/z5n46R/N0EAM6yTmc6OtP76wDAWZfma2BJWo4odc/TtFzuruG9F5NpvdlqX7zd3Fxb6q6VzUQpvb1Sr8321gpnopRk9bn8/Hm9+lL9ckS8GxE/G5vI6+XFZn1pmP/wAYACe+v5/J9/FvDvse78DwCccePD7gAAcOrM/wBQPOZ/ACge8z8AFI/5HwCKx/wPAMVj/geAQvn+9etZ6ez2vv966c7W5mrzzqWlWmu13NhcLC82N9bLy83mcv6dPY1XvV692Vyf+yg271batVa70travtlobq61b+bf632zVjqVrACAw7z7/sM/JxGxc2UiL7FvLwdzNZxt6bA7AAzNyLA7AAyN3b6guPwfH+izRe8Luj8iNHGw4cHJ9Ac4eRc+b/0fisr6PxSX9X8oLuv/UFydTmLPfwAoGGv8wNE+/+/D5/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAU2FRekrTc2wt8KtK0XI54OyJmopTcXqnXZiPinYj401hpLKvPDbvTAMAbSv+W9Pb/ujD94dTLreeS/4zlx4j4yS9u/PzuQru9MZdd/2f3+rcmIh70rleH0X8AKKKR17p7b57em8f3PH1yb3GvHH8fB3v87e7molnc3V7ptozGaH4cj1JETP4r6dW7ktfOvL+d+xHxuX75J/nayExv59OX42ex3z7V+OkL8dO8rXvM/i4+ewx9gaJ5mI0/V/s9f2mcz4/9n//xfIR6c3vj3+6B8S99Nv6NDBj/zh8lwMSvIz76w/cGxr8f8YXRfvGTZ/GTAfE/PGKOf/nilz8Y1Nb5ZcSF6B9/f6xKu7FeaW1tX1ppLCzXlmtr1er83PzsJ5c/rlbyNerK3kr1QX+/cvGdw/KfHBB//BX5f+2I+f/qv7d+9JVD4n/jq/3f//cOiZ/NiV8/YvyFyd8O3L47i7/UzT+757Xe/4tHjP/or9tLR7wVADgFra3t1YV6vbYx7JO9Dn1a+uPESaFPhjsuASfv+UM/7J4AAAAAAAAAAAAAAACDnMavEw07RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6u/wUAAP//8vjSuQ==") r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 324.700182ms ago: executing program 8 (id=1171): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 324.210192ms ago: executing program 1 (id=1172): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x9, 0x1, 0xc9, 0x0, 0x2, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x1f091, 0x6, 0x4, 0x6, 0x2, 0x7fffffff, 0x3, 0x0, 0x54, 0x0, 0x8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000740)='\b%\xd07f2B\xc8y.\xa1\x06\x06\xf2\x7fN@-3\xc3-\xe1UMI\a\xf3\f:\xfd\xcc\xc1\xffo)\xd1hl\x83\x9c[G\xd5e\x98\x81\xac\x85\xf0\x94\xa3u+\xa1\xc1bL\x93th)\xd1\xfd[kz\x0f}\xdfO\xdew\xbc\"\x94\xb8\x96(\x10\x18\xe0e\xce\xb9F\x12\x7fr\x8a\xd3\x17\xf98\x8a\x006T}\xe8\xfd\xfc\xe9\x85:\xcc\xe4Tc\xc6aE\aD:\x1f\x82b\x84vE\xd3ywM\xc6\xd4\xda\xec}\x8c\xa1\xe2\xa7D\x88F\xa3\xbe\xf1y\x9a+=J\xba0\x7fs\xd8\xeal(^\x14\xca\x1ej\xc6\xe3p]\x1a\xf9Z$\x1bC\xacjc\xd4\x8e\x00\x00\x00_\x9f\xe5AW\x11s\xc9\xb1\x16\xa8|\x9ah~#\x1ab\xe0dnB\xb1.\xfd.\'\f\xf7\xceC\xb1\xadUb\x15\xa4\x05\x86\xec\a\xe5]G\x82\xc6B\f\x94\xdb\x80\xd0\x00\xb7I\xefa\x13S\x1bL\xcd\x1be6\xe2\xa5lS\xe3.-\x80nSWs\xeb\xaf\xb8\x11\x9b\xd7\xddBa)\x18\x17\x9fB{R\xd5\x85Y\xf0\xd9\xa7\xf5\xd8-\x9a(\xdac\xd4\xcbb\x10\xef$|{\x93yq\xa06\xb7tV\xce\xe4\x1d\xbfW\xa5\xe1\x14^t\x93\xfe\x87\xca\xc9;\x88b2\xd0\xb2\x81\xca\xd7\xff\x13\xfb\xc1\xb4=\xdd\x91\xfe\x8c\xe0\xd2\xa0vz\xb0A%_\x13\xaej\xa8L\xd7G\x1f\x85i\x90\xdb\xbe\x1bwf\xdd\xaeF\xb7\"\f i\am\xdb\xbaV') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) 211.263975ms ago: executing program 1 (id=1173): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xb5, &(0x7f00000000c0)=""/181}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 210.863255ms ago: executing program 0 (id=1174): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x8000000) r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x800, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) 156.372166ms ago: executing program 1 (id=1175): select(0x0, 0x0, 0x0, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x300, 0x100, 0xdc, 0xfffffffffffffff8}, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)=';', 0x1, 0x8080, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.915359ms ago: executing program 3 (id=1176): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.64819ms ago: executing program 0 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x20001100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) unshare(0x28000600) syz_clone(0x2d088000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8040600) 0s ago: executing program 2 (id=1177): r0 = io_uring_setup(0x5501, &(0x7f0000000080)={0x0, 0x4178, 0x400, 0x0, 0x110}) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ode [ 90.981468][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.042095][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.052420][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.064206][ T179] bond0 (unregistering): Released all slaves [ 91.108200][ T179] hsr_slave_0: left promiscuous mode [ 91.114285][ T179] hsr_slave_1: left promiscuous mode [ 91.120202][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.127832][ T179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.137907][ T179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.145837][ T179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.156768][ T179] veth1_macvtap: left promiscuous mode [ 91.167807][ T179] veth0_macvtap: left promiscuous mode [ 91.178252][ T179] veth1_vlan: left promiscuous mode [ 91.183891][ T179] veth0_vlan: left promiscuous mode [ 91.218170][ T6507] loop3: detected capacity change from 0 to 8192 [ 91.227823][ T6507] ======================================================= [ 91.227823][ T6507] WARNING: The mand mount option has been deprecated and [ 91.227823][ T6507] and is ignored by this kernel. Remove the mand [ 91.227823][ T6507] option from the mount to silence this warning. [ 91.227823][ T6507] ======================================================= [ 91.313718][ T179] team0 (unregistering): Port device team_slave_1 removed [ 91.334041][ T179] team0 (unregistering): Port device team_slave_0 removed [ 91.381616][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.389411][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.396826][ T6431] bridge_slave_0: entered allmulticast mode [ 91.404324][ T6431] bridge_slave_0: entered promiscuous mode [ 91.411951][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.419153][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.426650][ T6431] bridge_slave_1: entered allmulticast mode [ 91.433584][ T6431] bridge_slave_1: entered promiscuous mode [ 91.455893][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.467013][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.488658][ T6431] team0: Port device team_slave_0 added [ 91.495625][ T6431] team0: Port device team_slave_1 added [ 91.519347][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.526563][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.553595][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.570624][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.577842][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.604784][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.632989][ T6431] hsr_slave_0: entered promiscuous mode [ 91.639583][ T6431] hsr_slave_1: entered promiscuous mode [ 91.645628][ T6431] debugfs: 'hsr0' already exists in 'hsr' [ 91.651659][ T6431] Cannot create hsr debugfs directory [ 92.238410][ T6340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.256977][ T6431] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.289160][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.311048][ T6431] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.335296][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.344095][ T6431] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.365500][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.385087][ T6431] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.404995][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.451694][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 92.495137][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.510064][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.528644][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.536054][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.550507][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.557806][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.739628][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.973906][ T6431] veth0_vlan: entered promiscuous mode [ 92.988203][ T6636] loop5: detected capacity change from 0 to 256 [ 92.996502][ T6431] veth1_vlan: entered promiscuous mode [ 92.999992][ T6636] vfat: Bad value for 'fmask' [ 93.028789][ T6431] veth0_macvtap: entered promiscuous mode [ 93.042382][ T6431] veth1_macvtap: entered promiscuous mode [ 93.072076][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.086633][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.132623][ T3615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.149951][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.538'. [ 93.160203][ T3615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.188043][ T6651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.237087][ T6651] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 93.248715][ T6657] loop3: detected capacity change from 0 to 512 [ 93.256976][ T3615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.280338][ T3615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.298130][ T6657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.314317][ T6657] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.335681][ T6651] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 93.354709][ T6651] bond1 (unregistering): Released all slaves [ 93.526690][ T6671] loop4: detected capacity change from 0 to 128 [ 93.569016][ T6671] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.637539][ T6671] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.673696][ T46] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 93.732485][ T6693] loop2: detected capacity change from 0 to 256 [ 93.744156][ T46] EXT4-fs (loop3): Remounting filesystem read-only [ 93.757472][ T6693] vfat: Bad value for 'fmask' [ 93.769760][ T5075] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.813208][ T6697] loop3: detected capacity change from 0 to 2048 [ 93.832775][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.839026][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 93.890022][ T6697] loop3: detected capacity change from 2048 to 0 [ 93.890175][ T6702] EXT4-fs error (device loop3): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.3.547: unable to read itable block [ 93.890221][ T6702] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 93.890240][ T6702] EXT4-fs (loop3): I/O error while writing superblock [ 93.890364][ T6702] EXT4-fs error (device loop3): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.3.547: unable to read itable block [ 93.890404][ T6702] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 93.890420][ T6702] EXT4-fs (loop3): I/O error while writing superblock [ 93.890435][ T6702] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: IO failure [ 93.890460][ T6702] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 93.890477][ T6702] EXT4-fs (loop3): I/O error while writing superblock [ 93.890488][ T6702] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.547: mark_inode_dirty error [ 93.890568][ T6702] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 93.890584][ T6702] EXT4-fs (loop3): I/O error while writing superblock [ 93.890599][ T6702] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 1803188595: comm syz.3.547: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 93.890656][ T6702] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 93.890673][ T6702] EXT4-fs (loop3): I/O error while writing superblock [ 93.890686][ T6702] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 93.890711][ T6702] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.890711][ T6702] [ 93.890751][ T6702] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 93.890896][ T6702] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 93.890912][ T6702] EXT4-fs (loop3): I/O error while writing superblock [ 93.891583][ C0] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 93.950917][ T5075] EXT4-fs error (device loop3): ext4_get_inode_loc:5024: inode #2: block 4: comm syz-executor: unable to read itable block [ 93.950975][ T5075] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 93.950989][ T5075] EXT4-fs (loop3): I/O error while writing superblock [ 93.951000][ T5075] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: IO failure [ 93.951051][ T5075] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 93.951067][ T5075] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 93.951218][ T5075] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 94.026395][ T12] EXT4-fs error (device loop3): ext4_get_inode_loc:5024: inode #15: block 5: comm kworker/u8:0: unable to read itable block [ 94.026481][ T12] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 94.027153][ T6473] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz.3.525: data will be lost [ 94.181791][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 94.434411][ T6431] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.608623][ T12] bridge_slave_1: left allmulticast mode [ 94.623162][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.660267][ T12] bridge_slave_0: left allmulticast mode [ 94.670894][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.727232][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 94.727246][ T28] audit: type=1400 audit(1785202975.616:551): avc: denied { write } for pid=6731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.816323][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.822100][ T28] audit: type=1400 audit(1785202975.706:552): avc: denied { write } for pid=6751 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.850465][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.860121][ T12] bond0 (unregistering): Released all slaves [ 94.906646][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 94.965067][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.987816][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.033027][ T28] audit: type=1400 audit(1785202975.926:553): avc: denied { getopt } for pid=6726 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.086526][ T12] team0 (unregistering): Port device team_slave_1 removed [ 95.099991][ T12] team0 (unregistering): Port device team_slave_0 removed [ 95.142291][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.554'. [ 95.215749][ T6705] Set syz1 is full, maxelem 65536 reached [ 95.273212][ T6772] loop2: detected capacity change from 0 to 256 [ 95.344852][ T28] audit: type=1400 audit(1785202976.236:554): avc: denied { write } for pid=6763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.379594][ T28] audit: type=1326 audit(1785202976.276:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.5.560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc7cfde99 code=0x7ffc0000 [ 95.419231][ T28] audit: type=1326 audit(1785202976.276:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.5.560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc7cfde99 code=0x7ffc0000 [ 95.467901][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.482601][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.490788][ T6733] bridge_slave_0: entered allmulticast mode [ 95.497394][ T6733] bridge_slave_0: entered promiscuous mode [ 95.499396][ T28] audit: type=1326 audit(1785202976.276:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.5.560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc7cfde99 code=0x7ffc0000 [ 95.511583][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.535858][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.545283][ T6733] bridge_slave_1: entered allmulticast mode [ 95.552117][ T6733] bridge_slave_1: entered promiscuous mode [ 95.573197][ T28] audit: type=1326 audit(1785202976.276:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.5.560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc7cfde99 code=0x7ffc0000 [ 95.585761][ T6733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.614991][ T6780] loop4: detected capacity change from 0 to 512 [ 95.637502][ T6780] EXT4-fs: Ignoring removed oldalloc option [ 95.646815][ T6733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.652088][ T28] audit: type=1326 audit(1785202976.276:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6777 comm="syz.5.560" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4dc7cfde99 code=0x7ffc0000 [ 95.690816][ T6780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.714955][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.719758][ T6780] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.558: invalid indirect mapped block 83886080 (level 1) [ 95.732070][ T28] audit: type=1400 audit(1785202976.306:560): avc: denied { write } for pid=6785 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.767856][ T6780] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 95.768492][ T6780] EXT4-fs (loop4): Remounting filesystem read-only [ 95.770880][ T6733] team0: Port device team_slave_0 added [ 95.779524][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 95.785716][ T6733] team0: Port device team_slave_1 added [ 95.790371][ C1] EXT4-fs (loop4): initial error at time 1785202976: ext4_free_branches:1023: inode 16 [ 95.806380][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.812922][ C1] EXT4-fs (loop4): last error at time 1785202976: ext4_free_branches:1023: inode 16 [ 95.819891][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.820002][ T6733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.820924][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.873513][ T6780] EXT4-fs (loop4): 1 orphan inode deleted [ 95.880993][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.881028][ T6733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.897837][ T6733] hsr_slave_0: entered promiscuous mode [ 95.916171][ T6780] EXT4-fs (loop4): 1 truncate cleaned up [ 95.920220][ T6733] hsr_slave_1: entered promiscuous mode [ 95.944544][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.955701][ T6780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.028729][ T6431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.039712][ T6816] lo: entered promiscuous mode [ 96.051371][ T6816] tunl0: entered promiscuous mode [ 96.078020][ T6816] gre0: entered promiscuous mode [ 96.092607][ T6816] gretap0: entered promiscuous mode [ 96.107365][ T6816] erspan0: entered promiscuous mode [ 96.115189][ T6816] ip_vti0: entered promiscuous mode [ 96.122017][ T6816] ip6_vti0: entered promiscuous mode [ 96.132606][ T6816] sit0: entered promiscuous mode [ 96.152860][ T6816] ip6tnl0: entered promiscuous mode [ 96.162190][ T6816] ip6gre0: entered promiscuous mode [ 96.172260][ T6816] ip6gretap0: entered promiscuous mode [ 96.182216][ T6816] team0: entered promiscuous mode [ 96.188794][ T6816] dummy0: entered promiscuous mode [ 96.195652][ T6816] nlmon0: entered promiscuous mode [ 96.205347][ T6816] vxcan0: entered promiscuous mode [ 96.211916][ T6816] vxcan1: entered promiscuous mode [ 96.226974][ T6816] veth0: entered promiscuous mode [ 96.234423][ T6816] veth1: entered promiscuous mode [ 96.241405][ T6816] wg0: entered promiscuous mode [ 96.247761][ T6816] wg1: entered promiscuous mode [ 96.254410][ T6816] wg2: entered promiscuous mode [ 96.260764][ T6816] veth0_to_bridge: entered promiscuous mode [ 96.268301][ T6816] bridge_slave_0: entered promiscuous mode [ 96.275628][ T6816] veth1_to_bridge: entered promiscuous mode [ 96.283658][ T6816] bridge_slave_1: entered promiscuous mode [ 96.290864][ T6816] veth0_to_bond: entered promiscuous mode [ 96.298104][ T6816] bond_slave_0: entered promiscuous mode [ 96.304995][ T6816] veth1_to_bond: entered promiscuous mode [ 96.312328][ T6816] bond_slave_1: entered promiscuous mode [ 96.318709][ T6816] veth0_to_team: entered promiscuous mode [ 96.326549][ T6816] team_slave_0: entered promiscuous mode [ 96.333030][ T6816] veth1_to_team: entered promiscuous mode [ 96.340397][ T6816] team_slave_1: entered promiscuous mode [ 96.346488][ T6816] veth0_to_batadv: entered promiscuous mode [ 96.354137][ T6816] batadv_slave_0: entered promiscuous mode [ 96.361759][ T6816] xfrm0: entered promiscuous mode [ 96.368358][ T6816] veth0_to_hsr: entered promiscuous mode [ 96.376571][ T6816] veth1_to_hsr: entered promiscuous mode [ 96.384893][ T6816] hsr0: entered promiscuous mode [ 96.391424][ T6816] veth1_virt_wifi: entered promiscuous mode [ 96.398611][ T6816] veth0_virt_wifi: entered promiscuous mode [ 96.408247][ T6816] vlan0: entered promiscuous mode [ 96.415384][ T6816] vlan1: entered promiscuous mode [ 96.422273][ T6816] macvlan0: entered promiscuous mode [ 96.428423][ T6816] macvlan1: entered promiscuous mode [ 96.434748][ T6816] ipvlan0: entered promiscuous mode [ 96.440204][ T6816] ipvlan1: entered promiscuous mode [ 96.447324][ T6816] macvtap0: entered promiscuous mode [ 96.453937][ T6816] macsec0: entered promiscuous mode [ 96.460392][ T6816] geneve0: entered promiscuous mode [ 96.466881][ T6816] geneve1: entered promiscuous mode [ 96.473464][ T6816] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 96.493193][ T6816] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 96.506224][ T6816] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 96.521949][ T6816] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 96.537797][ T6816] bridge0: entered promiscuous mode [ 96.544093][ T6816] hsr1: entered promiscuous mode [ 96.566939][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.592572][ T3615] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.602699][ T3615] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.626496][ T6832] loop0: detected capacity change from 0 to 512 [ 96.649430][ T3615] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.670424][ T3615] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.682800][ T6832] EXT4-fs: Ignoring removed oldalloc option [ 96.693713][ T6832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.712547][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.743152][ T6832] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.573: invalid indirect mapped block 83886080 (level 1) [ 96.773651][ T6832] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 96.776401][ T6832] EXT4-fs (loop0): Remounting filesystem read-only [ 96.785858][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 96.785886][ C0] EXT4-fs (loop0): initial error at time 1785202977: ext4_free_branches:1023: inode 16 [ 96.785956][ C0] EXT4-fs (loop0): last error at time 1785202977: ext4_free_branches:1023: inode 16 [ 96.823632][ T6832] EXT4-fs (loop0): 1 orphan inode deleted [ 96.838348][ T6832] EXT4-fs (loop0): 1 truncate cleaned up [ 96.880524][ T6832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.937237][ T6115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.972357][ T12] bridge_slave_1: left allmulticast mode [ 96.983344][ T12] bridge_slave_1: left promiscuous mode [ 96.996764][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.006747][ T12] bridge_slave_0: left allmulticast mode [ 97.014096][ T12] bridge_slave_0: left promiscuous mode [ 97.022073][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.091794][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'. [ 97.172041][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.186088][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.228724][ T12] bond0 (unregistering): Released all slaves [ 97.272878][ T6892] team0: Port device team_slave_0 removed [ 97.329157][ T12] hsr_slave_0: left promiscuous mode [ 97.345917][ T12] hsr_slave_1: left promiscuous mode [ 97.357366][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.382958][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.414986][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.424688][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.437192][ T12] veth1_macvtap: left promiscuous mode [ 97.442989][ T12] veth0_macvtap: left promiscuous mode [ 97.452623][ T12] veth1_vlan: left promiscuous mode [ 97.458080][ T12] veth0_vlan: left promiscuous mode [ 97.552765][ T12] team0 (unregistering): Port device team_slave_1 removed [ 97.563940][ T12] team0 (unregistering): Port device team_slave_0 removed [ 97.751190][ T6733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.785373][ T6733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.826145][ T6733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.848318][ T6733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.891061][ T6733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.910823][ T6733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.932671][ T6733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.949769][ T6733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.990774][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.018225][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.040116][ T6826] bridge_slave_0: entered allmulticast mode [ 98.056674][ T6826] bridge_slave_0: entered promiscuous mode [ 98.075349][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.088365][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.102588][ T6826] bridge_slave_1: entered allmulticast mode [ 98.113056][ T6826] bridge_slave_1: entered promiscuous mode [ 98.178278][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.192204][ T6908] Set syz1 is full, maxelem 65536 reached [ 98.201261][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.227104][ T6826] team0: Port device team_slave_0 added [ 98.239402][ T6826] team0: Port device team_slave_1 added [ 98.278606][ T6733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.286035][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.295196][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.322861][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.339241][ T6733] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.346723][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.353906][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.380051][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.404341][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.411436][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.427021][ T6826] hsr_slave_0: entered promiscuous mode [ 98.433177][ T6826] hsr_slave_1: entered promiscuous mode [ 98.438989][ T6826] debugfs: 'hsr0' already exists in 'hsr' [ 98.444996][ T6826] Cannot create hsr debugfs directory [ 98.458594][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.465997][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.629780][ T6733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.705035][ T6733] veth0_vlan: entered promiscuous mode [ 98.714037][ T6733] veth1_vlan: entered promiscuous mode [ 98.736338][ T6733] veth0_macvtap: entered promiscuous mode [ 98.744166][ T6733] veth1_macvtap: entered promiscuous mode [ 98.758389][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.787353][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.806321][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.815257][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.828105][ T6826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.837481][ T6826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.845316][ T6826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.855626][ T6826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.863599][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.873828][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.883671][ T6826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.893323][ T6826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.901381][ T6826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.910443][ T6826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.992683][ T7060] lo: entered promiscuous mode [ 98.998312][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.5.580'. [ 99.016596][ T7060] tunl0: entered promiscuous mode [ 99.027639][ T7060] gre0: entered promiscuous mode [ 99.040506][ T7060] gretap0: entered promiscuous mode [ 99.061260][ T7060] erspan0: entered promiscuous mode [ 99.071027][ T7060] ip_vti0: entered promiscuous mode [ 99.078366][ T7060] ip6_vti0: entered promiscuous mode [ 99.086442][ T7060] sit0: entered promiscuous mode [ 99.097284][ T7060] ip6tnl0: entered promiscuous mode [ 99.104927][ T7060] ip6gre0: entered promiscuous mode [ 99.112985][ T7060] syz_tun: entered promiscuous mode [ 99.120687][ T7060] ip6gretap0: entered promiscuous mode [ 99.138312][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.145799][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.162449][ T7060] bridge0: entered promiscuous mode [ 99.178244][ T7060] vcan0: entered promiscuous mode [ 99.191596][ T7060] bond0: entered promiscuous mode [ 99.204730][ T7060] bond_slave_0: entered promiscuous mode [ 99.216681][ T7060] bond_slave_1: entered promiscuous mode [ 99.224393][ T7060] team0: entered promiscuous mode [ 99.229640][ T7060] team_slave_1: entered promiscuous mode [ 99.237185][ T7060] dummy0: entered promiscuous mode [ 99.237901][ T7067] loop3: detected capacity change from 0 to 512 [ 99.250098][ T7060] nlmon0: entered promiscuous mode [ 99.257383][ T7067] EXT4-fs: Ignoring removed oldalloc option [ 99.261722][ T7060] batadv0: entered promiscuous mode [ 99.271132][ T7060] vxcan0: entered promiscuous mode [ 99.272717][ T7067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.277434][ T7060] vxcan1: entered promiscuous mode [ 99.294019][ T7060] veth0: entered promiscuous mode [ 99.300703][ T7060] veth1: entered promiscuous mode [ 99.307526][ T7060] wg0: entered promiscuous mode [ 99.308045][ T7067] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.577: invalid indirect mapped block 83886080 (level 1) [ 99.329236][ T7067] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.329861][ T7060] wg1: entered promiscuous mode [ 99.330113][ T7067] EXT4-fs (loop3): Remounting filesystem read-only [ 99.339188][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 99.339211][ C0] EXT4-fs (loop3): initial error at time 1785202980: ext4_free_branches:1023: inode 16 [ 99.339244][ C0] EXT4-fs (loop3): last error at time 1785202980: ext4_free_branches:1023: inode 16 [ 99.379699][ T7060] wg2: entered promiscuous mode [ 99.381289][ T7067] EXT4-fs (loop3): 1 orphan inode deleted [ 99.386012][ T7060] veth0_to_bridge: entered promiscuous mode [ 99.390736][ T7067] EXT4-fs (loop3): 1 truncate cleaned up [ 99.400741][ T7060] veth1_to_bridge: entered promiscuous mode [ 99.408870][ T7067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.411442][ T7060] veth0_to_bond: entered promiscuous mode [ 99.429718][ T7060] veth1_to_bond: entered promiscuous mode [ 99.437868][ T7060] veth1_to_team: entered promiscuous mode [ 99.446558][ T7060] veth0_to_batadv: entered promiscuous mode [ 99.454386][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.462328][ T7060] batadv_slave_0: entered promiscuous mode [ 99.470302][ T7060] veth1_to_batadv: entered promiscuous mode [ 99.477605][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.478750][ T7060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.495425][ T7060] batadv_slave_1: entered promiscuous mode [ 99.503212][ T7060] xfrm0: entered promiscuous mode [ 99.510855][ T7060] veth0_to_hsr: entered promiscuous mode [ 99.519054][ T7060] veth1_to_hsr: entered promiscuous mode [ 99.527621][ T7060] hsr0: entered promiscuous mode [ 99.534619][ T7060] veth1_virt_wifi: entered promiscuous mode [ 99.542663][ T7060] veth0_virt_wifi: entered promiscuous mode [ 99.552894][ T7060] vlan0: entered promiscuous mode [ 99.559020][ T7060] vlan1: entered promiscuous mode [ 99.569479][ T7060] macvlan0: entered promiscuous mode [ 99.575926][ T7060] macvlan1: entered promiscuous mode [ 99.582109][ T7060] ipvlan0: entered promiscuous mode [ 99.587645][ T7060] ipvlan1: entered promiscuous mode [ 99.595907][ T7060] macvtap0: entered promiscuous mode [ 99.602441][ T7060] macsec0: entered promiscuous mode [ 99.608700][ T7060] geneve0: entered promiscuous mode [ 99.615614][ T7060] geneve1: entered promiscuous mode [ 99.623372][ T7060] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 99.633514][ T7060] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 99.644290][ T7060] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 99.656225][ T7060] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 99.665280][ T7060] macvlan2: entered promiscuous mode [ 99.677379][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.775696][ T179] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.794453][ T179] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.825037][ T179] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.834283][ T179] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.848301][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.860990][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.868102][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.880305][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.887504][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.943081][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 99.943097][ T28] audit: type=1400 audit(1785202980.836:597): avc: denied { write } for pid=7097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.993284][ T28] audit: type=1400 audit(1785202980.886:598): avc: denied { write } for pid=7116 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.013884][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.090129][ T6826] veth0_vlan: entered promiscuous mode [ 100.099674][ T6826] veth1_vlan: entered promiscuous mode [ 100.116869][ T6826] veth0_macvtap: entered promiscuous mode [ 100.125225][ T6826] veth1_macvtap: entered promiscuous mode [ 100.136823][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.148611][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.160382][ T3615] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.169612][ T3615] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.180170][ T3615] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.189011][ T3615] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.253256][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 100.300809][ T7144] netlink: 2024 bytes leftover after parsing attributes in process `syz.0.594'. [ 100.312015][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.594'. [ 100.461827][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 100.476399][ T7148] bridge0: port 3(macvlan1) entered blocking state [ 100.483788][ T7147] loop5: detected capacity change from 0 to 2048 [ 100.490477][ T7148] bridge0: port 3(macvlan1) entered disabled state [ 100.501289][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 100.510992][ T7148] macvlan1: entered allmulticast mode [ 100.517249][ T7148] macvlan1: entered promiscuous mode [ 100.523304][ T7154] macvlan1: left allmulticast mode [ 100.528636][ T7154] macvlan1: left promiscuous mode [ 100.531347][ T7147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.534314][ T7154] bridge0: port 3(macvlan1) entered disabled state [ 100.552043][ T28] audit: type=1400 audit(1785202981.446:599): avc: denied { write } for pid=7145 comm="syz.5.585" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.575369][ T28] audit: type=1400 audit(1785202981.446:600): avc: denied { write } for pid=7145 comm="syz.5.585" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.597828][ T7154] bridge_slave_1: left allmulticast mode [ 100.603715][ T7154] bridge_slave_1: left promiscuous mode [ 100.609714][ T7154] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.617590][ T7154] bridge_slave_0: left allmulticast mode [ 100.623489][ T7154] bridge_slave_0: left promiscuous mode [ 100.629362][ T7147] loop5: detected capacity change from 2048 to 0 [ 100.629376][ T7154] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.641377][ T7157] EXT4-fs error (device loop5): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.5.585: unable to read itable block [ 100.643403][ C0] I/O error, dev loop5, sector 16 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 100.656332][ T7157] buffer_io_error: 7 callbacks suppressed [ 100.656348][ T7157] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 100.680455][ T7157] EXT4-fs (loop5): I/O error while writing superblock [ 100.687473][ T7157] EXT4-fs error (device loop5): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.5.585: unable to read itable block [ 100.700380][ T7157] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 100.709065][ T7157] EXT4-fs (loop5): I/O error while writing superblock [ 100.716337][ T7157] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: IO failure [ 100.731696][ T7157] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 100.741378][ T7157] EXT4-fs (loop5): I/O error while writing superblock [ 100.751249][ T7157] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.585: mark_inode_dirty error [ 100.762793][ T7157] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 100.766146][ T28] audit: type=1400 audit(1785202981.656:601): avc: denied { create } for pid=7160 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.771480][ T7157] EXT4-fs (loop5): I/O error while writing superblock [ 100.799013][ T7157] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 1803188595: comm syz.5.585: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 100.815373][ T7157] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 100.823965][ T28] audit: type=1400 audit(1785202981.656:602): avc: denied { setopt } for pid=7160 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.824152][ T7157] EXT4-fs (loop5): I/O error while writing superblock [ 100.851342][ T7157] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 100.852157][ T28] audit: type=1400 audit(1785202981.656:603): avc: denied { bind } for pid=7160 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.863950][ T7157] EXT4-fs (loop5): This should not happen!! Data will be lost [ 100.863950][ T7157] [ 100.910925][ T7157] EXT4-fs error (device loop5) in ext4_setattr:6172: Corrupt filesystem [ 100.915629][ T28] audit: type=1400 audit(1785202981.806:604): avc: denied { map } for pid=7164 comm="syz.4.591" path="/dev/sda1" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.919686][ T7157] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 100.951639][ T7157] EXT4-fs (loop5): I/O error while writing superblock [ 100.986035][ T3852] EXT4-fs error (device loop5): ext4_get_inode_loc:5024: inode #2: block 4: comm syz-executor: unable to read itable block [ 100.999576][ T3852] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 101.008135][ T3852] EXT4-fs (loop5): I/O error while writing superblock [ 101.019995][ T3852] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: IO failure [ 101.033784][ T3852] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 101.053637][ T3852] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 101.078155][ T3852] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 101.096315][ T28] audit: type=1400 audit(1785202981.976:605): avc: denied { bind } for pid=7168 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.154590][ T28] audit: type=1400 audit(1785202981.976:606): avc: denied { connect } for pid=7168 comm="syz.2.598" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.324843][ T7184] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 101.324843][ T7184] program syz.3.604 not setting count and/or reply_len properly [ 101.356451][ T7171] loop4: detected capacity change from 0 to 512 [ 101.362718][ T7184] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 101.362718][ T7184] program syz.3.604 not setting count and/or reply_len properly [ 101.385543][ T7171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.409486][ T7184] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 101.409486][ T7184] program syz.3.604 not setting count and/or reply_len properly [ 101.436382][ T7186] netlink: 'syz.0.605': attribute type 1 has an invalid length. [ 101.453519][ T7184] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 101.453519][ T7184] program syz.3.604 not setting count and/or reply_len properly [ 101.454116][ T7171] EXT4-fs (loop4): too many log groups per flexible block group [ 101.474678][ T7190] IPv6: Can't replace route, no match found [ 101.500308][ T7171] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 101.520669][ T7171] EXT4-fs (loop4): mount failed [ 101.660511][ T3615] EXT4-fs error (device loop5): ext4_get_inode_loc:5024: inode #15: block 5: comm kworker/u8:8: unable to read itable block [ 101.690917][ T3615] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 101.691717][ T7200] netlink: 'syz.4.610': attribute type 2 has an invalid length. [ 101.717831][ T6646] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz.5.535: data will be lost [ 101.767433][ T7208] loop3: detected capacity change from 0 to 256 [ 101.800139][ T6646] bond0: (slave syz_tun): Releasing backup interface [ 101.849621][ T7218] loop4: detected capacity change from 0 to 1024 [ 101.856436][ T7218] EXT4-fs: Ignoring removed bh option [ 101.862844][ T7218] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 101.896776][ T7218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.911712][ T7218] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.962635][ T6431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.053691][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 102.332116][ T46] bond0 (unregistering): Released all slaves [ 102.373862][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 102.407715][ T7287] process 'syz.3.636' launched './file1' with NULL argv: empty string added [ 102.591087][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.598799][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.606332][ T7230] bridge_slave_0: entered allmulticast mode [ 102.613043][ T7230] bridge_slave_0: entered promiscuous mode [ 102.620404][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.628431][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.637499][ T7230] bridge_slave_1: entered allmulticast mode [ 102.646349][ T7230] bridge_slave_1: entered promiscuous mode [ 102.654035][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 102.677001][ T7319] loop0: detected capacity change from 0 to 128 [ 102.691457][ T7230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.704155][ T7230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.726460][ T7230] team0: Port device team_slave_0 added [ 102.740399][ T7230] team0: Port device team_slave_1 added [ 102.745843][ T7319] syz.0.642: attempt to access beyond end of device [ 102.745843][ T7319] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 102.793551][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.802246][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.829826][ T7230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.841741][ T7230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.848823][ T7230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.877076][ T7230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.888429][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 102.914130][ T7230] hsr_slave_0: entered promiscuous mode [ 102.920392][ T7230] hsr_slave_1: entered promiscuous mode [ 102.926756][ T7230] debugfs: 'hsr0' already exists in 'hsr' [ 102.933303][ T7230] Cannot create hsr debugfs directory [ 103.241861][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 103.318921][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 103.424594][ T7387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.655'. [ 103.527084][ T7390] loop0: detected capacity change from 0 to 512 [ 103.543477][ T7390] EXT4-fs: Ignoring removed nobh option [ 103.588058][ T7390] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.623239][ T7390] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.656: EA inode hash validation failed [ 103.642851][ T7390] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.661022][ T7390] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.656: corrupted inode contents [ 103.679576][ T7390] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.681107][ T7390] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.656: mark_inode_dirty error [ 103.691695][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 103.691770][ C1] EXT4-fs (loop0): initial error at time 1785202984: ext4_do_update_inode:5742: inode 15 [ 103.692087][ C1] EXT4-fs (loop0): last error at time 1785202984: ext4_do_update_inode:5742: inode 15 [ 103.743679][ T7390] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.750834][ T7390] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #15: comm syz.0.656: corrupted inode contents [ 103.796884][ T7390] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.800308][ T7390] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.656: mark_inode_dirty error [ 103.825921][ T7390] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.829057][ T7390] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.656: mark inode dirty (error -117) [ 103.862638][ T7390] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.865017][ T7390] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 103.898061][ T7390] EXT4-fs (loop0): 1 orphan inode deleted [ 103.927201][ T7390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 104.249069][ T7425] loop3: detected capacity change from 0 to 512 [ 104.268578][ T7425] EXT4-fs error (device loop3): __ext4_iget:5533: inode #11: block 1: comm syz.3.657: invalid block [ 104.280578][ T7425] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 104.280769][ T7425] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.657: couldn't read orphan inode 11 (err -117) [ 104.290210][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 104.290241][ C0] EXT4-fs (loop3): initial error at time 1785202985: __ext4_iget:5533: inode 11: block 1 [ 104.290274][ C0] EXT4-fs (loop3): last error at time 1785202985: __ext4_iget:5533: inode 11: block 1 [ 104.332477][ T7425] loop3: lost filesystem error report for type 5 error -117 [ 104.340024][ T7425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.441586][ T7230] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 104.480685][ T7230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.501083][ T7230] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 104.527468][ T7230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.537918][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.548211][ T7230] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 104.560363][ T7230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.586681][ T7230] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 104.604265][ T7230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.681747][ T7390] syz.0.656 (7390) used greatest stack depth: 10112 bytes left [ 104.703991][ T6115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.760136][ T7230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.788416][ T7230] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.819386][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.826822][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.836302][ T7488] netlink: 'syz.3.671': attribute type 2 has an invalid length. [ 104.863865][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.871155][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.906890][ T7492] capability: warning: `syz.2.673' uses 32-bit capabilities (legacy support in use) [ 105.012656][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 105.012671][ T28] audit: type=1400 audit(1785202985.906:656): avc: denied { write } for pid=7490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.071582][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 105.101706][ T28] audit: type=1400 audit(1785202985.996:657): avc: denied { write } for pid=7518 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.222036][ T7230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.288163][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 105.440555][ T28] audit: type=1400 audit(1785202986.326:658): avc: denied { write } for pid=7532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.505392][ T28] audit: type=1400 audit(1785202986.386:659): avc: denied { write } for pid=7565 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.556158][ T28] audit: type=1400 audit(1785202986.426:660): avc: denied { ioctl } for pid=7562 comm="syz.0.685" path="socket:[19041]" dev="sockfs" ino=19041 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.571883][ T7230] veth0_vlan: entered promiscuous mode [ 105.607935][ T28] audit: type=1400 audit(1785202986.426:661): avc: denied { write } for pid=7562 comm="syz.0.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 105.621550][ T7230] veth1_vlan: entered promiscuous mode [ 105.660289][ T28] audit: type=1400 audit(1785202986.556:662): avc: denied { write } for pid=7572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.672940][ T7577] netlink: 'syz.2.687': attribute type 2 has an invalid length. [ 105.733256][ T28] audit: type=1400 audit(1785202986.596:663): avc: denied { write } for pid=7585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.740219][ T7230] veth0_macvtap: entered promiscuous mode [ 105.777709][ T7230] veth1_macvtap: entered promiscuous mode [ 105.811103][ T7595] loop3: detected capacity change from 0 to 1024 [ 105.817986][ T7595] EXT4-fs: Ignoring removed bh option [ 105.824269][ T7595] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 105.835383][ T28] audit: type=1400 audit(1785202986.726:664): avc: denied { write } for pid=7587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.866645][ T7595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.885759][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.894148][ T7595] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.909578][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.912626][ T28] audit: type=1400 audit(1785202986.776:665): avc: denied { write } for pid=7594 comm="syz.3.689" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.940463][ T179] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.969490][ T179] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.006671][ T179] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.031076][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.049718][ T179] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.142989][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.692'. [ 106.212502][ T7638] loop7: detected capacity change from 0 to 256 [ 106.281900][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b5abc00: rx timeout, send abort [ 106.579589][ T7668] netlink: 'syz.0.699': attribute type 2 has an invalid length. [ 106.781954][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af00600: rx timeout, send abort [ 106.790838][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b5abc00: abort rx timeout. Force session deactivation [ 107.251614][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 107.290222][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811af00600: abort rx timeout. Force session deactivation [ 108.915580][ T7768] loop7: detected capacity change from 0 to 512 [ 108.935246][ T7768] EXT4-fs: Ignoring removed oldalloc option [ 109.002349][ T7781] lo speed is unknown, defaulting to 1000 [ 109.004183][ T7768] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 109.012567][ T7781] lo speed is unknown, defaulting to 1000 [ 109.037042][ T7781] lo speed is unknown, defaulting to 1000 [ 109.046769][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 109.087684][ T7768] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.729: invalid indirect mapped block 83886080 (level 1) [ 109.100557][ T7781] infiniband sz1: set active [ 109.106915][ T35] lo speed is unknown, defaulting to 1000 [ 109.112791][ T7781] infiniband sz1: added lo [ 109.118255][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.127878][ T7768] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 109.129207][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 109.144801][ C1] EXT4-fs (loop7): initial error at time 1785202990: ext4_free_branches:1023: inode 16 [ 109.148390][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.154608][ C1] EXT4-fs (loop7): last error at time 1785202990: ext4_free_branches:1023: inode 16 [ 109.173438][ T7768] EXT4-fs (loop7): Remounting filesystem read-only [ 109.221503][ T7768] EXT4-fs (loop7): 1 orphan inode deleted [ 109.228321][ T7768] EXT4-fs (loop7): 1 truncate cleaned up [ 109.254464][ T7781] RDS/IB: sz1: added [ 109.266585][ T7781] smc: adding ib device sz1 with port count 1 [ 109.279409][ T7781] smc: ib device sz1 port 1 has no pnetid [ 109.299036][ T35] lo speed is unknown, defaulting to 1000 [ 109.311483][ T7781] lo speed is unknown, defaulting to 1000 [ 109.337758][ T7768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.389464][ T7781] lo speed is unknown, defaulting to 1000 [ 109.437378][ T7781] lo speed is unknown, defaulting to 1000 [ 109.455494][ T7230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.522981][ T7781] lo speed is unknown, defaulting to 1000 [ 109.576828][ T7781] lo speed is unknown, defaulting to 1000 [ 109.633426][ T7781] lo speed is unknown, defaulting to 1000 [ 109.679099][ T7787] infiniband syz1: set active [ 109.685791][ T7787] infiniband syz1: added syz_tun [ 109.707652][ T7787] RDS/IB: syz1: added [ 109.712227][ T7787] smc: adding ib device syz1 with port count 1 [ 109.719460][ T7787] smc: ib device syz1 port 1 has no pnetid [ 110.734097][ T7842] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 110.764315][ T7842] bond1: entered promiscuous mode [ 110.773961][ T7842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.802778][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 110.802857][ T28] audit: type=1400 audit(1785202991.696:688): avc: denied { write } for pid=7834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.804080][ T7842] veth3: entered promiscuous mode [ 110.831621][ T28] audit: type=1400 audit(1785202991.706:689): avc: denied { write } for pid=7850 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.851648][ T7842] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 110.957515][ T7855] loop0: detected capacity change from 0 to 2048 [ 110.983934][ T7855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.069538][ T28] audit: type=1400 audit(1785202991.946:690): avc: denied { bind } for pid=7866 comm="syz.7.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.137945][ T28] audit: type=1400 audit(1785202991.946:691): avc: denied { listen } for pid=7866 comm="syz.7.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.175981][ T28] audit: type=1400 audit(1785202991.986:692): avc: denied { write } for pid=7853 comm="syz.0.749" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.198942][ T28] audit: type=1400 audit(1785202991.986:693): avc: denied { write } for pid=7853 comm="syz.0.749" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.250284][ T7855] loop0: detected capacity change from 2048 to 0 [ 111.251753][ T7870] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.0.749: unable to read itable block [ 111.269491][ C1] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 111.306662][ T7870] buffer_io_error: 6 callbacks suppressed [ 111.306690][ T7870] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 111.322241][ T7876] loop2: detected capacity change from 0 to 512 [ 111.335920][ T7876] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.350080][ T7870] EXT4-fs (loop0): I/O error while writing superblock [ 111.363989][ T7881] loop4: detected capacity change from 0 to 512 [ 111.370662][ T7870] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.0.749: unable to read itable block [ 111.401404][ T7876] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.759: invalid indirect mapped block 32768 (level 2) [ 111.401942][ T7870] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 111.423987][ T7870] EXT4-fs (loop0): I/O error while writing superblock [ 111.426815][ T7881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.431183][ T7870] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: IO failure [ 111.455368][ T7870] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 111.464117][ T7870] EXT4-fs (loop0): I/O error while writing superblock [ 111.480898][ T7876] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 111.481106][ T7876] EXT4-fs (loop2): Remounting filesystem read-only [ 111.490279][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 111.490322][ C1] EXT4-fs (loop2): initial error at time 1785202992: ext4_free_branches:1023: inode 16 [ 111.490358][ C1] EXT4-fs (loop2): last error at time 1785202992: ext4_free_branches:1023: inode 16 [ 111.523650][ T7881] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.534445][ T7870] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #15: comm syz.0.749: mark_inode_dirty error [ 111.546471][ T7876] EXT4-fs (loop2): 1 orphan inode deleted [ 111.555226][ T7876] EXT4-fs (loop2): 1 truncate cleaned up [ 111.563460][ T7870] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 111.572960][ T7876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.585891][ T28] audit: type=1400 audit(1785202992.466:694): avc: denied { write } for pid=7880 comm="syz.4.761" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.607929][ T7870] EXT4-fs (loop0): I/O error while writing superblock [ 111.620587][ T7870] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 1803188595: comm syz.0.749: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 111.642510][ T28] audit: type=1400 audit(1785202992.476:695): avc: denied { write } for pid=7877 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.668055][ T6826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.689716][ T7870] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 111.704507][ T28] audit: type=1400 audit(1785202992.536:696): avc: denied { write } for pid=7898 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.729339][ T7870] EXT4-fs (loop0): I/O error while writing superblock [ 111.747142][ T7870] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 111.755623][ T7904] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 111.783618][ T7870] EXT4-fs (loop0): This should not happen!! Data will be lost [ 111.783618][ T7870] [ 111.794828][ T46] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 111.823505][ T46] EXT4-fs (loop4): Remounting filesystem read-only [ 111.836500][ T7904] bond1: entered promiscuous mode [ 111.843104][ T7870] EXT4-fs error (device loop0) in ext4_setattr:6172: Corrupt filesystem [ 111.861466][ T6431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.861744][ T7904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.879656][ T7870] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 111.888768][ T7870] EXT4-fs (loop0): I/O error while writing superblock [ 111.906198][ T6115] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #2: block 4: comm syz-executor: unable to read itable block [ 111.929555][ T6115] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 111.937982][ T6115] EXT4-fs (loop0): I/O error while writing superblock [ 111.943224][ T28] audit: type=1400 audit(1785202992.826:697): avc: denied { write } for pid=7902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.945269][ T6115] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: IO failure [ 111.988202][ T6115] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 112.011953][ T6115] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 112.040625][ T6115] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 112.061509][ T7904] veth3: entered promiscuous mode [ 112.071238][ T7904] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 112.088074][ T12] EXT4-fs error (device loop0): ext4_get_inode_loc:5024: inode #15: block 5: comm kworker/u8:0: unable to read itable block [ 112.102195][ T12] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 112.112505][ T6115] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 112.141562][ T7921] loop4: detected capacity change from 0 to 512 [ 112.169114][ T7921] EXT4-fs: Ignoring removed nobh option [ 112.233956][ T7921] EXT4-fs (loop4): orphan cleanup on readonly fs [ 112.285643][ T7921] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.775: EA inode hash validation failed [ 112.328003][ T7921] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.378472][ T7921] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.775: corrupted inode contents [ 112.430018][ T7921] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.434449][ T7921] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.775: mark_inode_dirty error [ 112.444811][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 112.444960][ C0] EXT4-fs (loop4): initial error at time 1785202993: ext4_do_update_inode:5742: inode 15 [ 112.445312][ C0] EXT4-fs (loop4): last error at time 1785202993: ext4_do_update_inode:5742: inode 15 [ 112.492330][ T7921] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.497083][ T7921] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.775: corrupted inode contents [ 112.531009][ T7921] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.539422][ T7921] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.775: mark_inode_dirty error [ 112.569035][ T7921] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.575472][ T7921] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.775: mark inode dirty (error -117) [ 112.602151][ T7921] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.605046][ T7921] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 112.637232][ T7921] EXT4-fs (loop4): 1 orphan inode deleted [ 112.673335][ T7921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.718382][ T7909] Set syz1 is full, maxelem 65536 reached [ 112.952578][ T7965] lo speed is unknown, defaulting to 1000 [ 113.174027][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.181304][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.188520][ T7965] bridge_slave_0: entered allmulticast mode [ 113.195391][ T7965] bridge_slave_0: entered promiscuous mode [ 113.202399][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.209898][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.217428][ T7965] bridge_slave_1: entered allmulticast mode [ 113.224129][ T7965] bridge_slave_1: entered promiscuous mode [ 113.244090][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.254618][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.276186][ T7965] team0: Port device team_slave_0 added [ 113.283234][ T7965] team0: Port device team_slave_1 added [ 113.299618][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.307000][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.333686][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.345075][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.352184][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.383885][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.395839][ T6431] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.404541][ T8002] lo speed is unknown, defaulting to 1000 [ 113.474449][ T7965] hsr_slave_0: entered promiscuous mode [ 113.494470][ T7965] hsr_slave_1: entered promiscuous mode [ 113.508227][ T7965] debugfs: 'hsr0' already exists in 'hsr' [ 113.522708][ T7965] Cannot create hsr debugfs directory [ 113.844038][ T7965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.852982][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.861000][ T7965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.869511][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.877306][ T7965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.886007][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.894063][ T7965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.902866][ T7965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.939614][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.953418][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.963326][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.970465][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.982478][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.989673][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.092647][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.154733][ T7965] veth0_vlan: entered promiscuous mode [ 114.164279][ T7965] veth1_vlan: entered promiscuous mode [ 114.182680][ T7965] veth0_macvtap: entered promiscuous mode [ 114.190866][ T7965] veth1_macvtap: entered promiscuous mode [ 114.203971][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.213408][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.229411][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.238426][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.252026][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.261166][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.391984][ T8043] syzkaller0: entered promiscuous mode [ 114.404981][ T8043] syzkaller0: entered allmulticast mode [ 114.557753][ T8063] 9pnet_fd: Insufficient options for proto=fd [ 114.584835][ T8065] loop2: detected capacity change from 0 to 512 [ 114.584851][ T8063] loop0: detected capacity change from 0 to 256 [ 114.594692][ T8065] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.646001][ T8065] netlink: 32 bytes leftover after parsing attributes in process `syz.2.782'. [ 114.662159][ T8068] lo speed is unknown, defaulting to 1000 [ 114.837192][ T8076] loop2: detected capacity change from 0 to 512 [ 114.894022][ T8076] EXT4-fs: Ignoring removed nobh option [ 114.918892][ T8076] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.949506][ T8076] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.785: EA inode hash validation failed [ 114.973193][ T8076] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.785: corrupted inode contents [ 114.986758][ T8076] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.989179][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 115.000001][ T8076] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.785: mark_inode_dirty error [ 115.004919][ C1] EXT4-fs (loop2): initial error at time 1785202995: ext4_do_update_inode:5742: inode 15 [ 115.004969][ C1] EXT4-fs (loop2): last error at time 1785202995: ext4_do_update_inode:5742: inode 15 [ 115.083656][ T8076] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.085114][ T8076] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.785: corrupted inode contents [ 115.125009][ T8076] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.126651][ T8076] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #15: comm syz.2.785: mark_inode_dirty error [ 115.151690][ T8076] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.154838][ T8076] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #15: comm syz.2.785: mark inode dirty (error -117) [ 115.179326][ T8076] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.182060][ T8076] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 115.222940][ T8076] EXT4-fs (loop2): 1 orphan inode deleted [ 115.235614][ T8084] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 115.255731][ T8076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 115.328193][ T8088] loop4: detected capacity change from 0 to 2048 [ 115.415836][ T8088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.533983][ T8088] loop4: detected capacity change from 2048 to 0 [ 115.571521][ T8095] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.4.789: unable to read itable block [ 115.623929][ T8095] EXT4-fs (loop4): I/O error while writing superblock [ 115.643485][ T8095] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #15: block 5: comm syz.4.789: unable to read itable block [ 115.671604][ T8095] EXT4-fs (loop4): I/O error while writing superblock [ 115.688137][ T8095] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: IO failure [ 115.718214][ T8095] EXT4-fs (loop4): I/O error while writing superblock [ 115.737725][ T8095] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #15: comm syz.4.789: mark_inode_dirty error [ 115.739463][ T8101] EXT4-fs: Ignoring removed bh option [ 115.766851][ T8095] EXT4-fs (loop4): I/O error while writing superblock [ 115.778145][ T8095] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 1803188595: comm syz.4.789: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 115.787906][ T8101] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.814220][ T8095] EXT4-fs (loop4): I/O error while writing superblock [ 115.835748][ T8101] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.795: corrupted in-inode xattr: e_value size too large [ 115.850887][ T8095] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 115.859713][ T8101] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.872266][ T8101] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.795: couldn't read orphan inode 15 (err -117) [ 115.878865][ T8058] Set syz1 is full, maxelem 65536 reached [ 115.881798][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 115.898372][ T8095] EXT4-fs (loop4): This should not happen!! Data will be lost [ 115.898372][ T8095] [ 115.899462][ C0] EXT4-fs (loop7): initial error at time 1785202996: ext4_iget_extra_inode:5180: inode 15 [ 115.915992][ T8095] EXT4-fs error (device loop4) in ext4_setattr:6172: Corrupt filesystem [ 115.925878][ C0] EXT4-fs (loop7): last error at time 1785202996: ext4_iget_extra_inode:5180: inode 15 [ 115.926164][ T8101] loop7: lost filesystem error report for type 5 error -117 [ 115.947025][ T8101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.951719][ T8104] syzkaller0: entered promiscuous mode [ 115.975221][ T8095] EXT4-fs (loop4): I/O error while writing superblock [ 115.977974][ T8092] EXT4-fs error (device loop4): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 116.005076][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 116.005099][ T28] audit: type=1400 audit(1785202996.896:713): avc: denied { write } for pid=8100 comm="syz.7.795" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.025476][ T8092] EXT4-fs (loop4): I/O error while writing superblock [ 116.042327][ T28] audit: type=1400 audit(1785202996.896:714): avc: denied { create } for pid=8100 comm="syz.7.795" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 116.043662][ T6431] EXT4-fs error (device loop4): ext4_get_inode_loc:5024: inode #2: block 4: comm syz-executor: unable to read itable block [ 116.087104][ T28] audit: type=1400 audit(1785202996.936:715): avc: denied { write } for pid=8100 comm="syz.7.795" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.101295][ T8104] syzkaller0: entered allmulticast mode [ 116.120953][ T28] audit: type=1400 audit(1785202996.986:716): avc: denied { write } for pid=8100 comm="syz.7.795" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.140272][ T8092] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm ext4lazyinit: Error while async write back metadata [ 116.148688][ T8101] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.795: Unrecognised inode hash code 4 [ 116.172451][ T8101] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.795: Corrupt directory, running e2fsck is recommended [ 116.187355][ T8101] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.795: Unrecognised inode hash code 4 [ 116.199072][ T8101] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.795: Corrupt directory, running e2fsck is recommended [ 116.209779][ T6431] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: IO failure [ 116.239968][ T6826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.256720][ T28] audit: type=1400 audit(1785202997.016:717): avc: denied { write } for pid=8100 comm="syz.7.795" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.279475][ T28] audit: type=1400 audit(1785202997.046:718): avc: denied { write } for pid=8100 comm="syz.7.795" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.304755][ T7230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.314557][ T6431] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 116.343666][ T6431] buffer_io_error: 23 callbacks suppressed [ 116.343682][ T6431] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 116.378295][ T28] audit: type=1326 audit(1785202997.266:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8113 comm="syz.2.800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e59a5de99 code=0x0 [ 116.404629][ T8090] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 116.420510][ T46] smc: removing ib device syz1 [ 116.428261][ T3382] syz1: Port: 1 Link DOWN [ 116.484692][ T28] audit: type=1400 audit(1785202997.376:720): avc: denied { read } for pid=8113 comm="iou-wrk-8120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 116.628398][ T28] audit: type=1400 audit(1785202997.516:721): avc: denied { write } for pid=8119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.700019][ T28] audit: type=1400 audit(1785202997.586:722): avc: denied { write } for pid=8138 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.284943][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.292340][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.392001][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.403427][ T8151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.481140][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.501921][ T179] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.518107][ T179] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.543128][ T179] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.565213][ T179] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.589085][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.647672][ T3420] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 117.659516][ T3420] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.673972][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.746404][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.774396][ T8198] fido_id[8198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.813593][ T8173] lo speed is unknown, defaulting to 1000 [ 117.893312][ T68] bridge_slave_1: left allmulticast mode [ 117.906465][ T68] bridge_slave_1: left promiscuous mode [ 117.919474][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.933493][ T68] bridge_slave_0: left allmulticast mode [ 117.944948][ T68] bridge_slave_0: left promiscuous mode [ 117.951196][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.041702][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.052867][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.063982][ T68] bond0 (unregistering): Released all slaves [ 118.219362][ T68] hsr_slave_0: left promiscuous mode [ 118.226720][ T68] hsr_slave_1: left promiscuous mode [ 118.235710][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.252303][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.256307][ T8231] set_capacity_and_notify: 1 callbacks suppressed [ 118.256324][ T8231] loop7: detected capacity change from 0 to 1024 [ 118.274618][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.274695][ T8231] EXT4-fs: Ignoring removed bh option [ 118.290025][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.304357][ T8231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.317022][ T68] veth1_macvtap: left promiscuous mode [ 118.324645][ T68] veth0_macvtap: left promiscuous mode [ 118.337258][ T68] veth1_vlan: left promiscuous mode [ 118.351449][ T68] veth0_vlan: left promiscuous mode [ 118.408869][ T7230] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.479248][ T68] team0 (unregistering): Port device team_slave_1 removed [ 118.500774][ T68] team0 (unregistering): Port device team_slave_0 removed [ 118.537652][ T8239] netlink: 154788 bytes leftover after parsing attributes in process `syz.7.831'. [ 118.544869][ T3459] smc: removing ib device sz1 [ 118.547987][ T8239] openvswitch: netlink: Message has 48126 unknown bytes. [ 118.570005][ T9] lo speed is unknown, defaulting to 1000 [ 118.576367][ T9] sz1: Port: 1 Link DOWN [ 118.795315][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.801990][ T8265] loop7: detected capacity change from 0 to 128 [ 118.802708][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.814006][ T8265] EXT4-fs: Ignoring removed nobh option [ 118.822753][ T8173] bridge_slave_0: entered allmulticast mode [ 118.833694][ T8173] bridge_slave_0: entered promiscuous mode [ 118.841595][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 118.849208][ T8265] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.861996][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.869568][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.875216][ T8265] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.876971][ T8173] bridge_slave_1: entered allmulticast mode [ 118.908646][ T8173] bridge_slave_1: entered promiscuous mode [ 118.970742][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.008938][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.079127][ T8273] loop3: detected capacity change from 0 to 8192 [ 119.100095][ T8173] team0: Port device team_slave_0 added [ 119.117617][ T8173] team0: Port device team_slave_1 added [ 119.134324][ T7230] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.150061][ T8273] loop3: p1 p2 p4 < > [ 119.154330][ T8273] loop3: partition table partially beyond EOD, truncated [ 119.170450][ T8273] loop3: p1 start 100663296 is beyond EOD, truncated [ 119.179023][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.187992][ T8273] loop3: p2 size 590592 extends beyond EOD, truncated [ 119.203166][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.240373][ T8173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.251566][ T8273] loop3: p4 start 117440516 is beyond EOD, truncated [ 119.297286][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.309549][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.336980][ T8173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.349884][ T8288] loop2: detected capacity change from 0 to 32768 [ 119.377727][ T8173] hsr_slave_0: entered promiscuous mode [ 119.388521][ T8173] hsr_slave_1: entered promiscuous mode [ 119.395552][ T8173] debugfs: 'hsr0' already exists in 'hsr' [ 119.405546][ T8173] Cannot create hsr debugfs directory [ 119.412148][ T8288] loop2: p1 p3 < > [ 119.558726][ T8314] loop2: detected capacity change from 0 to 128 [ 119.602599][ T5420] udevd[5420]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 119.614725][ T5438] udevd[5438]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 119.764536][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 119.918639][ T8353] netlink: 7 bytes leftover after parsing attributes in process `syz.0.853'. [ 119.955223][ T8357] cdns-usb3 pcspkr: error -ENXIO: IRQ host not found [ 120.263643][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 120.312299][ T3420] IPVS: starting estimator thread 0... [ 120.350294][ T8371] loop7: detected capacity change from 0 to 256 [ 120.363799][ T8371] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.438055][ T8366] IPVS: using max 2400 ests per chain, 120000 per kthread [ 120.449205][ T8173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.468613][ T8173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.479735][ T8173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.502821][ T8173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.526886][ T8173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.543925][ T8173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.571580][ T8173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.583166][ T8173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.602277][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 120.669074][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.684715][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.695114][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.702487][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.717578][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.726050][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.017060][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.032336][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 121.032350][ T28] audit: type=1400 audit(1785203001.926:798): avc: denied { write } for pid=8457 comm="syz.2.873" name="usb_gadget" dev="configfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.102204][ T28] audit: type=1400 audit(1785203001.926:799): avc: denied { add_name } for pid=8457 comm="syz.2.873" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.131742][ T28] audit: type=1400 audit(1785203001.926:800): avc: denied { create } for pid=8457 comm="syz.2.873" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 121.159699][ T8472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8472 comm=syz.7.875 [ 121.164738][ T28] audit: type=1400 audit(1785203001.956:801): avc: denied { write } for pid=8457 comm="syz.2.873" name="configs" dev="configfs" ino=22327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.205309][ T28] audit: type=1400 audit(1785203001.966:802): avc: denied { write } for pid=8457 comm="syz.2.873" name="functions" dev="configfs" ino=22326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.231092][ T28] audit: type=1400 audit(1785203001.966:803): avc: denied { write } for pid=8457 comm="syz.2.873" name="midi1_num_groups" dev="configfs" ino=22334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 121.284943][ T28] audit: type=1400 audit(1785203001.966:804): avc: denied { open } for pid=8457 comm="syz.2.873" path="/58/my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups" dev="configfs" ino=22334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 121.303449][ T8173] veth0_vlan: entered promiscuous mode [ 121.354315][ T28] audit: type=1400 audit(1785203001.966:805): avc: denied { write } for pid=8457 comm="syz.2.873" name="c.1" dev="configfs" ino=21363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.356786][ T8490] loop2: detected capacity change from 0 to 128 [ 121.385403][ T8173] veth1_vlan: entered promiscuous mode [ 121.417013][ T8173] veth0_macvtap: entered promiscuous mode [ 121.420950][ T28] audit: type=1400 audit(1785203001.966:806): avc: denied { create } for pid=8457 comm="syz.2.873" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 121.447413][ T8490] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.463122][ T8173] veth1_macvtap: entered promiscuous mode [ 121.469691][ T8490] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.502403][ T28] audit: type=1400 audit(1785203001.966:807): avc: denied { write } for pid=8457 comm="syz.2.873" name="c.1" dev="configfs" ino=21363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.514038][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.555642][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.557049][ T6826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.578273][ T179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.588214][ T179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.599577][ T179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.624302][ T179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.920124][ T8536] loop3: detected capacity change from 0 to 1024 [ 121.958694][ T8536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.015785][ T8552] netlink: 68 bytes leftover after parsing attributes in process `syz.7.889'. [ 122.094804][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.163207][ T8588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.893'. [ 122.635715][ T8639] loop3: detected capacity change from 0 to 512 [ 122.660727][ T8639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.692665][ T8639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.705694][ T8639] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.065250][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.089698][ T8693] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.907'. [ 123.314020][ T8727] serio: Serial port ptm1 [ 123.466703][ T8727] serio: Serial port ptm1 [ 123.810680][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 123.958770][ T8810] loop3: detected capacity change from 0 to 512 [ 123.980286][ T8810] EXT4-fs: Ignoring removed bh option [ 124.014040][ T8810] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.922: corrupted in-inode xattr: e_value size too large [ 124.031086][ T8810] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.039182][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 124.055086][ C0] EXT4-fs (loop3): initial error at time 1785203004: ext4_iget_extra_inode:5180: inode 15 [ 124.059532][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.7.923'. [ 124.065055][ C0] EXT4-fs (loop3): last error at time 1785203004: ext4_iget_extra_inode:5180: inode 15 [ 124.092329][ T8810] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.922: couldn't read orphan inode 15 (err -117) [ 124.104430][ T8810] loop3: lost filesystem error report for type 5 error -117 [ 124.113226][ T8810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.169291][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.234227][ T8845] loop3: detected capacity change from 0 to 512 [ 124.265873][ T8845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.285160][ T8845] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.354364][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.440856][ T8868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8868 comm=syz.7.929 [ 124.511042][ T8877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.934'. [ 124.781327][ T8886] netlink: zone id is out of range [ 124.787220][ T8886] netlink: zone id is out of range [ 124.793702][ T8886] netlink: zone id is out of range [ 124.799791][ T8886] netlink: zone id is out of range [ 124.805724][ T8886] netlink: zone id is out of range [ 124.814292][ T8886] netlink: zone id is out of range [ 124.821887][ T8886] netlink: zone id is out of range [ 124.828477][ T8886] netlink: zone id is out of range [ 124.835302][ T8886] netlink: zone id is out of range [ 124.855544][ T8886] netlink: zone id is out of range [ 125.019063][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.943'. [ 125.251012][ T8914] usb3503 pcspkr: unknown mode is requested [ 125.257083][ T8914] usb3503 pcspkr: usb3503_probe: probed in standby mode [ 126.118467][ T8987] tmpfs: Bad value for 'mpol' [ 126.164131][ T6900] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 126.173299][ T6900] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 126.337217][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 126.337234][ T28] audit: type=1400 audit(1785203007.226:855): avc: denied { checkpoint_restore } for pid=9004 comm="syz.0.968" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.418009][ T28] audit: type=1400 audit(1785203007.306:856): avc: denied { recv } for pid=2980 comm="udevd" saddr=10.128.0.163 src=30036 daddr=10.128.0.143 dest=32936 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 126.453358][ T28] audit: type=1400 audit(1785203007.326:857): avc: denied { write } for pid=9015 comm="syz.0.970" name="functions" dev="configfs" ino=22326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.496492][ T28] audit: type=1400 audit(1785203007.326:858): avc: denied { create } for pid=9015 comm="syz.0.970" name="Loopback.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 126.519125][ T28] audit: type=1400 audit(1785203007.326:859): avc: denied { write } for pid=9015 comm="syz.0.970" name="c.1" dev="configfs" ino=21363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.560317][ T28] audit: type=1400 audit(1785203007.326:860): avc: denied { write } for pid=9015 comm="syz.0.970" name="c.1" dev="configfs" ino=21363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.599628][ T28] audit: type=1400 audit(1785203007.366:861): avc: denied { write } for pid=8991 comm="syz.7.966" name="hidraw0" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 126.708351][ T9041] serio: Serial port ptm0 [ 126.853353][ T9041] serio: Serial port ptm0 [ 126.947391][ T9069] syzkaller1: entered promiscuous mode [ 126.955730][ T9069] syzkaller1: entered allmulticast mode [ 126.974828][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.7.986'. [ 127.295809][ T28] audit: type=1400 audit(1785203008.186:862): avc: denied { read append } for pid=9102 comm="syz.1.995" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.322644][ T28] audit: type=1400 audit(1785203008.186:863): avc: denied { open } for pid=9102 comm="syz.1.995" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.498359][ T28] audit: type=1400 audit(1785203008.386:864): avc: denied { bind } for pid=9116 comm="syz.7.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.685415][ T9128] usb3503 pcspkr: unknown mode is requested [ 127.694607][ T9128] usb3503 pcspkr: usb3503_probe: probed in standby mode [ 127.837339][ T9139] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.1003'. [ 127.893776][ T9144] netlink: 'syz.0.1005': attribute type 1 has an invalid length. [ 127.911206][ T9144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.931235][ T9144] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 127.943674][ T9144] netlink: 'syz.0.1005': attribute type 10 has an invalid length. [ 127.952770][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1005'. [ 127.964302][ T9144] dummy0: entered promiscuous mode [ 128.070413][ T9144] bond1: (slave dummy0): Removing an active aggregator [ 128.078034][ T9144] bond1: (slave dummy0): Releasing backup interface [ 128.256156][ T9224] loop2: detected capacity change from 0 to 512 [ 128.276367][ T9224] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.295914][ T9224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.310336][ T9224] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.429045][ T9242] netlink: 'syz.0.1016': attribute type 26 has an invalid length. [ 128.479713][ T68] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 128.518723][ T6826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.574069][ T9266] SELinux: policydb version 0 does not match my version range 15-35 [ 128.585854][ T9266] SELinux: failed to load policy [ 128.702993][ T9285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1030'. [ 128.733572][ T9285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1030'. [ 128.743850][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 128.743893][ T9299] loop7: detected capacity change from 0 to 512 [ 128.770813][ T9299] EXT4-fs (loop7): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 128.850642][ T9315] bridge0: port 3(team0) entered blocking state [ 128.857255][ T9315] bridge0: port 3(team0) entered disabled state [ 128.863849][ T9315] team0: entered allmulticast mode [ 128.869981][ T9315] team_slave_0: entered allmulticast mode [ 128.876329][ T9315] team_slave_1: entered allmulticast mode [ 128.884915][ T9315] team0: entered promiscuous mode [ 128.890521][ T9315] team_slave_0: entered promiscuous mode [ 128.896612][ T9315] team_slave_1: entered promiscuous mode [ 128.902867][ T9315] bridge0: port 3(team0) entered blocking state [ 128.909603][ T9315] bridge0: port 3(team0) entered forwarding state [ 130.031509][ T9354] loop7: detected capacity change from 0 to 1764 [ 130.106692][ T9354] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 130.176996][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 130.191911][ T9377] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1052'. [ 130.428968][ T9389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=9389 comm=syz.0.1056 [ 130.653037][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.661335][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.668641][ T9390] bridge_slave_0: entered allmulticast mode [ 130.675905][ T9390] bridge_slave_0: entered promiscuous mode [ 130.683212][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.690592][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.698771][ T9390] bridge_slave_1: entered allmulticast mode [ 130.705729][ T9390] bridge_slave_1: entered promiscuous mode [ 130.727901][ T9390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.739411][ T9390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.763295][ T9390] team0: Port device team_slave_0 added [ 130.770162][ T9390] team0: Port device team_slave_1 added [ 130.792787][ T9390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.799972][ T9390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.826489][ T9390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.838359][ T9390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.845872][ T9390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.872701][ T9390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.905706][ T9390] hsr_slave_0: entered promiscuous mode [ 130.912866][ T9390] hsr_slave_1: entered promiscuous mode [ 130.919323][ T9390] debugfs: 'hsr0' already exists in 'hsr' [ 130.925301][ T9390] Cannot create hsr debugfs directory [ 131.401397][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 131.401488][ T28] audit: type=1400 audit(1785203012.296:888): avc: denied { write } for pid=9722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.430997][ T9246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.442411][ T9390] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 131.470953][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 131.497108][ T9390] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 131.515854][ T28] audit: type=1400 audit(1785203012.406:889): avc: denied { write } for pid=9757 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.552953][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 131.571209][ T9390] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 131.593140][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 131.689062][ T9390] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 131.725501][ T9390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 131.855584][ T9807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.887307][ T28] audit: type=1400 audit(1785203012.776:890): avc: denied { write } for pid=9782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.894407][ T9390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.929740][ T9807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.965979][ T9390] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.983499][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.991087][ T9828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.049832][ T28] audit: type=1400 audit(1785203012.946:891): avc: denied { write } for pid=9847 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.098869][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.106186][ T9828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.141983][ T28] audit: type=1400 audit(1785203013.036:892): avc: denied { setopt } for pid=9856 comm="syz.2.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.205332][ T28] audit: type=1400 audit(1785203013.056:893): avc: denied { write } for pid=9856 comm="syz.2.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.229826][ T9390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.341139][ T28] audit: type=1400 audit(1785203013.236:894): avc: denied { write } for pid=9859 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.420888][ T28] audit: type=1400 audit(1785203013.266:895): avc: denied { write } for pid=9889 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.522398][ T9390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.631873][ T28] audit: type=1400 audit(1785203013.526:896): avc: denied { write } for pid=9897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.695822][ T28] audit: type=1400 audit(1785203013.586:897): avc: denied { write } for pid=9920 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.812001][ T9390] veth0_vlan: entered promiscuous mode [ 132.835176][ T9390] veth1_vlan: entered promiscuous mode [ 132.885659][ T9390] veth0_macvtap: entered promiscuous mode [ 132.906270][ T9390] veth1_macvtap: entered promiscuous mode [ 132.935427][ T9390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.962090][ T9390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.993357][ T9823] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.013757][ T9823] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.040344][ T9823] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.055112][ T9823] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.330057][ T9962] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.337277][ T9962] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.400093][ T9962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.411455][ T9962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.476686][ T9823] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.494671][ T9823] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.523538][ T9823] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.550984][ T9823] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.687608][T10007] netlink: 'syz.1.1081': attribute type 26 has an invalid length. [ 133.820397][T10023] SELinux: policydb version 0 does not match my version range 15-35 [ 133.843486][T10023] SELinux: failed to load policy [ 135.072117][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 135.099390][T10155] netlink: 'syz.3.1094': attribute type 26 has an invalid length. [ 135.180821][T10159] SELinux: policydb version 0 does not match my version range 15-35 [ 135.222338][T10159] SELinux: failed to load policy [ 135.619029][T10177] loop3: detected capacity change from 0 to 512 [ 135.634020][T10177] EXT4-fs: Ignoring removed nobh option [ 135.650051][T10177] EXT4-fs (loop3): failed to initialize system zone (-117) [ 135.659260][T10177] EXT4-fs (loop3): mount failed [ 136.117409][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1109'. [ 136.379387][T10247] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 136.475930][T10256] netlink: 'syz.1.1116': attribute type 4 has an invalid length. [ 136.493465][T10256] netlink: 'syz.1.1116': attribute type 4 has an invalid length. [ 136.506957][T10255] loop8: detected capacity change from 0 to 1764 [ 136.594715][T10255] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 136.694014][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 136.694031][ T28] audit: type=1400 audit(1785203017.586:923): avc: denied { watch watch_reads } for pid=10286 comm="syz.0.1124" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 136.719404][T10285] loop8: detected capacity change from 0 to 8192 [ 137.044982][T10302] netlink: 'syz.8.1128': attribute type 7 has an invalid length. [ 137.078582][T10302] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1128'. [ 137.171201][T10313] loop3: detected capacity change from 0 to 512 [ 137.204983][T10313] EXT4-fs: Ignoring removed nobh option [ 137.215872][T10313] ------------[ cut here ]------------ [ 137.221572][T10313] EA inode 11 i_nlink=1026 [ 137.221616][T10313] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.3.1133/10313 [ 137.237500][T10313] Modules linked in: [ 137.241462][T10313] CPU: 0 UID: 0 PID: 10313 Comm: syz.3.1133 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.251468][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 137.261689][T10313] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 137.269327][T10313] Code: 86 ba 96 ff 49 8d 7e 40 4c 8d 2d fb 98 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 01 02 da 03 90 90 90 90 90 90 90 [ 137.290522][T10313] RSP: 0018:ffffc90000e63648 EFLAGS: 00010246 [ 137.297044][T10313] RAX: ffff88810469bef0 RBX: ffff888105b60180 RCX: ffffffff81c29d46 [ 137.305299][T10313] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3630 [ 137.313838][T10313] RBP: 000000000000000b R08: 0001888105b60133 R09: 0000000000000000 [ 137.321993][T10313] R10: ffffc90000e63578 R11: 0001c90000e63578 R12: ffff888105b60130 [ 137.330031][T10313] R13: ffffffff871d3630 R14: ffff888105b600e8 R15: 0000000000000001 [ 137.338336][T10313] FS: 00007fefe71e76c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 137.347615][T10313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.354437][T10313] CR2: 00007fefe883cc6b CR3: 000000011c66c000 CR4: 00000000003506f0 [ 137.362645][T10313] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 137.370888][T10313] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 137.378981][T10313] Call Trace: [ 137.382393][T10313] [ 137.385380][T10313] ext4_xattr_set_entry+0x78a/0x1050 [ 137.390825][T10313] ext4_xattr_ibody_set+0x156/0x390 [ 137.396234][T10313] ext4_expand_extra_isize_ea+0xc04/0x1120 [ 137.402173][T10313] __ext4_expand_extra_isize+0x246/0x280 [ 137.407842][T10313] __ext4_mark_inode_dirty+0x290/0x3d0 [ 137.413394][T10313] ext4_evict_inode+0x8b6/0xdf0 [ 137.418358][T10313] ? __pfx_ext4_evict_inode+0x10/0x10 [ 137.423848][T10313] evict+0x2a5/0x510 [ 137.427763][T10313] iput+0x430/0x5a0 [ 137.431661][T10313] ext4_process_orphan+0x1a4/0x1c0 [ 137.436813][T10313] ext4_orphan_cleanup+0x6a6/0xa10 [ 137.441995][T10313] ? ext4_register_li_request+0x403/0x440 [ 137.448144][T10313] ext4_fill_super+0x33ab/0x3760 [ 137.453759][T10313] ? set_blocksize+0x14c/0x270 [ 137.459299][T10313] ? __pfx_ext4_fill_super+0x10/0x10 [ 137.464678][T10313] get_tree_bdev_flags+0x291/0x300 [ 137.469979][T10313] ? __pfx_ext4_fill_super+0x10/0x10 [ 137.475462][T10313] get_tree_bdev+0x1f/0x30 [ 137.481000][T10313] ext4_get_tree+0x1c/0x30 [ 137.486121][T10313] vfs_get_tree+0x57/0x1d0 [ 137.490920][T10313] do_new_mount+0x288/0x8d0 [ 137.495536][T10313] path_mount+0x4ad/0xb90 [ 137.500348][T10313] __se_sys_mount+0x28c/0x2e0 [ 137.505171][T10313] __x64_sys_mount+0x67/0x80 [ 137.509839][T10313] x64_sys_call+0x2d61/0x3020 [ 137.514685][T10313] do_syscall_64+0x136/0x3c0 [ 137.519399][T10313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.525644][T10313] RIP: 0033:0x7fefe878f10a [ 137.530326][T10313] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.550618][T10313] RSP: 002b:00007fefe71e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.560359][T10313] RAX: ffffffffffffffda RBX: 00007fefe71e6ee0 RCX: 00007fefe878f10a [ 137.568993][T10313] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fefe71e6ea0 [ 137.577689][T10313] RBP: 0000200000000180 R08: 00007fefe71e6ee0 R09: 0000000000800718 [ 137.585773][T10313] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 137.593892][T10313] R13: 00007fefe71e6ea0 R14: 00000000000004a7 R15: 00002000000003c0 [ 137.602061][T10313] [ 137.605183][T10313] ---[ end trace 0000000000000000 ]--- [ 137.616486][T10313] EXT4-fs (loop3): 1 orphan inode deleted [ 137.640924][T10313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.711441][ T28] audit: type=1400 audit(1785203018.606:924): avc: denied { write } for pid=10312 comm="syz.3.1133" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.756478][ T28] audit: type=1400 audit(1785203018.626:925): avc: denied { write } for pid=10312 comm="syz.3.1133" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.785132][ T6733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.832689][ T28] audit: type=1400 audit(1785203018.636:926): avc: denied { write } for pid=10312 comm="syz.3.1133" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.891278][ T28] audit: type=1400 audit(1785203018.636:927): avc: denied { write } for pid=10312 comm="syz.3.1133" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.936239][ T28] audit: type=1400 audit(1785203018.636:928): avc: denied { write } for pid=10312 comm="syz.3.1133" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.987511][ T28] audit: type=1400 audit(1785203018.636:929): avc: denied { remove_name } for pid=10312 comm="syz.3.1133" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.100613][ T28] audit: type=1400 audit(1785203018.636:930): avc: denied { rename } for pid=10312 comm="syz.3.1133" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 138.776254][ T28] audit: type=1400 audit(1785203019.666:931): avc: denied { map } for pid=10369 comm="syz.3.1146" path="socket:[27013]" dev="sockfs" ino=27013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 138.904549][T10383] loop2: detected capacity change from 0 to 512 [ 138.913274][T10382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.915701][T10382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.945722][T10383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.966618][T10383] EXT4-fs (loop2): too many log groups per flexible block group [ 138.979463][ T9828] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.983902][T10383] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 138.998996][ T9828] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.999139][ T9828] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.999218][ T9828] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.054466][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 139.067629][T10383] EXT4-fs (loop2): mount failed [ 139.225211][T10410] loop2: detected capacity change from 0 to 8192 [ 139.533450][ T28] audit: type=1400 audit(1785203020.426:932): avc: denied { mount } for pid=10434 comm="syz.8.1161" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 139.727914][T10464] loop8: detected capacity change from 0 to 512 [ 139.764229][T10464] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.789667][T10464] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.803545][T10464] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1170: corrupted xattr block 33: overlapping e_value [ 139.817947][T10464] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 139.827687][T10464] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1170: corrupted xattr block 33: overlapping e_value [ 139.842174][T10464] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 139.852596][T10464] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.1170: corrupted xattr block 33: overlapping e_value [ 139.869024][T10464] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 139.895515][ T9390] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.314912][ T7965] ================================================================== [ 140.323060][ T7965] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 140.330626][ T7965] [ 140.332960][ T7965] read-write to 0xffff88811b6431f8 of 8 bytes by task 10490 on cpu 1: [ 140.341124][ T7965] inode_add_bytes+0x47/0xe0 [ 140.346085][ T7965] __dquot_alloc_space+0x17d/0x890 [ 140.351834][ T7965] shmem_inode_acct_blocks+0x125/0x230 [ 140.357574][ T7965] shmem_get_folio_gfp+0x5d3/0xd90 [ 140.362797][ T7965] shmem_write_begin+0xfc/0x1f0 [ 140.367774][ T7965] generic_perform_write+0x186/0x490 [ 140.373085][ T7965] shmem_file_write_iter+0xc5/0xf0 [ 140.378225][ T7965] __kernel_write_iter+0x30f/0x590 [ 140.383357][ T7965] dump_user_range+0xa73/0xd00 [ 140.388232][ T7965] elf_core_dump+0x21c0/0x2340 [ 140.393205][ T7965] coredump_write+0xaf9/0xdd0 [ 140.398033][ T7965] vfs_coredump+0x2770/0x3290 [ 140.402830][ T7965] get_signal+0xd33/0xf10 [ 140.407271][ T7965] arch_do_signal_or_restart+0x96/0x480 [ 140.413234][ T7965] irqentry_exit+0x14d/0x610 [ 140.418108][ T7965] asm_exc_page_fault+0x26/0x30 [ 140.423150][ T7965] [ 140.425474][ T7965] read to 0xffff88811b6431f8 of 8 bytes by task 7965 on cpu 0: [ 140.433017][ T7965] generic_fillattr+0x283/0x340 [ 140.437888][ T7965] shmem_getattr+0x181/0x200 [ 140.442499][ T7965] vfs_getattr_nosec+0x146/0x1e0 [ 140.447471][ T7965] vfs_getattr+0x48/0x60 [ 140.452011][ T7965] vfs_statx_path+0x28/0x140 [ 140.456719][ T7965] vfs_statx+0xc4/0x170 [ 140.461254][ T7965] vfs_fstatat+0x118/0x170 [ 140.465869][ T7965] __se_sys_newfstatat+0x55/0x3e0 [ 140.472166][ T7965] __x64_sys_newfstatat+0x55/0x70 [ 140.477502][ T7965] x64_sys_call+0x2c64/0x3020 [ 140.482496][ T7965] do_syscall_64+0x136/0x3c0 [ 140.487202][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.493134][ T7965] [ 140.495639][ T7965] value changed: 0x0000000000005328 -> 0x0000000000005330 [ 140.503011][ T7965] [ 140.505340][ T7965] Reported by Kernel Concurrency Sanitizer on: [ 140.511496][ T7965] CPU: 0 UID: 0 PID: 7965 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 140.522557][ T7965] Tainted: [W]=WARN [ 140.526388][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 140.537259][ T7965] ================================================================== SYZFAIL: failed to send rpc fd=3 want=48 sent=0 n=-1 (errno 32: Broken pipe) [ 141.641992][ T9828] bridge_slave_1: left allmulticast mode [ 141.647681][ T9828] bridge_slave_1: left promiscuous mode [ 141.653591][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.661340][ T9828] bridge_slave_0: left allmulticast mode [ 141.667271][ T9828] bridge_slave_0: left promiscuous mode [ 141.673050][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.695533][ T9828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.705623][ T9828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.715167][ T9828] bond0 (unregistering): Released all slaves [ 141.764557][ T9828] hsr_slave_0: left promiscuous mode [ 141.774976][ T9828] hsr_slave_1: left promiscuous mode [ 141.781344][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.788897][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.796299][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 141.796315][ T28] audit: type=1400 audit(1785203022.676:943): avc: denied { write } for pid=10522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.826668][ T28] audit: type=1400 audit(1785203022.696:944): avc: denied { write } for pid=10533 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.874620][ T9828] team0 (unregistering): Port device team_slave_1 removed [ 141.884304][ T9828] team0 (unregistering): Port device team_slave_0 removed [ 141.915504][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 141.988193][ T28] audit: type=1400 audit(1785203022.876:945): avc: denied { write } for pid=10536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.012942][ T28] audit: type=1400 audit(1785203022.896:946): avc: denied { write } for pid=10547 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.022771][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 142.107265][ T28] audit: type=1400 audit(1785203022.996:947): avc: denied { write } for pid=10550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.131099][ T28] audit: type=1400 audit(1785203023.016:948): avc: denied { write } for pid=10561 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.141666][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 142.227712][ T28] audit: type=1400 audit(1785203023.116:949): avc: denied { write } for pid=10564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.252588][ T28] audit: type=1400 audit(1785203023.116:950): avc: denied { write } for pid=10576 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.263348][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 142.286828][ T9828] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.313927][ T9828] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.362189][ T9828] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.422185][ T9828] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.511611][ T9828] bridge_slave_1: left allmulticast mode [ 142.519051][ T9828] bridge_slave_1: left promiscuous mode [ 142.525095][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.532925][ T9828] bridge_slave_0: left allmulticast mode [ 142.540303][ T9828] bridge_slave_0: left promiscuous mode [ 142.546756][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.616212][ T9828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.626846][ T9828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.637738][ T9828] bond0 (unregistering): Released all slaves [ 142.646900][ T9828] bond1 (unregistering): (slave veth3): Releasing backup interface [ 142.655709][ T9828] veth3: left promiscuous mode [ 142.661344][ T9828] bond1 (unregistering): Released all slaves [ 142.703932][ T9828] hsr_slave_0: left promiscuous mode [ 142.710558][ T9828] hsr_slave_1: left promiscuous mode [ 142.716278][ T9828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.726499][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.735497][ T9828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.743980][ T9828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.744401][ T28] audit: type=1400 audit(1785203023.636:951): avc: denied { write } for pid=10595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.778496][ T9828] veth1_macvtap: left promiscuous mode [ 142.784129][ T9828] veth0_macvtap: left promiscuous mode [ 142.789867][ T9828] veth1_vlan: left promiscuous mode [ 142.795269][ T9828] veth0_vlan: left promiscuous mode [ 142.800648][ T28] audit: type=1400 audit(1785203023.686:952): avc: denied { write } for pid=10606 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.877078][ T9828] team0 (unregistering): Port device team_slave_1 removed [ 142.887510][ T9828] team0 (unregistering): Port device team_slave_0 removed [ 142.918444][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 143.015943][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 143.111153][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 143.207700][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 147.622822][ T9831] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.672016][ T9831] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.731770][ T9831] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.801977][ T9831] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.877941][ T9831] bridge_slave_1: left allmulticast mode [ 147.883911][ T9831] bridge_slave_1: left promiscuous mode [ 147.889881][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.897594][ T9831] bridge_slave_0: left allmulticast mode [ 147.903301][ T9831] bridge_slave_0: left promiscuous mode [ 147.909080][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.955112][ T9831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.965582][ T9831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.975384][ T9831] bond0 (unregistering): Released all slaves [ 148.034745][ T9831] hsr_slave_0: left promiscuous mode [ 148.040891][ T9831] hsr_slave_1: left promiscuous mode [ 148.047053][ T9831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.055546][ T9831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.063355][ T9831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.067003][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 148.067018][ T28] audit: type=1400 audit(1785203028.956:959): avc: denied { write } for pid=10679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.071663][ T9831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.095510][ T28] audit: type=1400 audit(1785203028.966:960): avc: denied { write } for pid=10690 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.133753][ T9831] veth1_macvtap: left promiscuous mode [ 148.139342][ T9831] veth0_macvtap: left promiscuous mode [ 148.144864][ T9831] veth1_vlan: left promiscuous mode [ 148.150395][ T9831] veth0_vlan: left promiscuous mode [ 148.205206][ T9831] team0 (unregistering): Port device team_slave_1 removed [ 148.217794][ T9831] team0 (unregistering): Port device team_slave_0 removed [ 148.248741][ T3019] 8021q: adding VLAN 0 to HW filter on device eth25 [ 148.327641][ T28] audit: type=1400 audit(1785203029.216:961): avc: denied { write } for pid=10695 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.351109][ T28] audit: type=1400 audit(1785203029.236:962): avc: denied { write } for pid=10706 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.364899][ T3019] 8021q: adding VLAN 0 to HW filter on device eth26 [ 148.450942][ T28] audit: type=1400 audit(1785203029.346:963): avc: denied { write } for pid=10711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.475097][ T28] audit: type=1400 audit(1785203029.366:964): avc: denied { write } for pid=10722 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.486408][ T3019] 8021q: adding VLAN 0 to HW filter on device eth27 [ 148.568960][ T28] audit: type=1400 audit(1785203029.456:965): avc: denied { write } for pid=10726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.593369][ T28] audit: type=1400 audit(1785203029.476:966): avc: denied { write } for pid=10737 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.602810][ T3019] 8021q: adding VLAN 0 to HW filter on device eth28